From 45432cba9f524c99015c90b6b6aa381fe2b04984 Mon Sep 17 00:00:00 2001 From: erdgeist Date: Sat, 1 Aug 2026 18:38:42 +0200 Subject: Require a second factor for elevation, not for holding admin --- test/controllers/users_controller_test.rb | 12 ++++++++++++ 1 file changed, 12 insertions(+) (limited to 'test/controllers/users_controller_test.rb') diff --git a/test/controllers/users_controller_test.rb b/test/controllers/users_controller_test.rb index 2dd0759a..0c517647 100644 --- a/test/controllers/users_controller_test.rb +++ b/test/controllers/users_controller_test.rb @@ -273,4 +273,16 @@ class UsersControllerTest < ActionController::TestCase assert_not user.reload.is_admin? end + + test "clearing the factor closes an open elevation window" do + login_as :aaron + elevate_session! + get :new, params: { :locale => "de" } + assert_response :success + + users(:aaron).update_column(:otp_secret, nil) + + get :new, params: { :locale => "de" } + assert_redirected_to new_elevation_path + end end -- cgit v1.3