Graham McIntire
9ff9c4ddc8
Critical fixes: - Renamed controller actions to follow Phoenix conventions (verify→new, create→verify) - Added sudo mode check in GET action using last_sudo_at timestamp - Added TOTP enrollment check in GET action with redirect - Changed default return path from /orgs to /users/settings - Updated route paths from /users/sudo/verify to /users/sudo-verify (dash separator) - Added success flash message "Identity verified." Implementation details: - new/2 (GET): Checks recently_verified_sudo?/1 helper that examines last_sudo_at instead of authenticated_at to distinguish sudo verification from regular login - verify/2 (POST): Adds info flash and defaults to /users/settings - recently_verified_sudo?/1: Private helper checking last_sudo_at within 10 minutes - Updated all routes, templates, and tests to use new paths and action names Tests: - Added tests for already-in-sudo-mode redirect behavior - Added test for TOTP enrollment requirement - Updated all test assertions for new route paths and success messages - All 15 controller tests passing - Full test suite passing (4076 tests, 0 failures) |
||
|---|---|---|
| .. | ||
| api | ||
| error_html_test.exs | ||
| error_json_test.exs | ||
| health_controller_test.exs | ||
| page_controller_test.exs | ||
| page_html_test.exs | ||
| user_session_controller_test.exs | ||
| user_session_html_test.exs | ||
| user_settings_controller_test.exs | ||
| user_settings_html_test.exs | ||
| user_sudo_controller_test.exs | ||