Skip to content

Commit eb56506

Browse files
individual-itindividual-it
authored
Merge pull request #593 from owncloud/totp-testplan
improve TOTP testplan
2 parents 107a43c + 5eaa75d commit eb56506

File tree

1 file changed

+16
-11
lines changed

1 file changed

+16
-11
lines changed

‎Server/Test_Plan_twofactor_totp.md

Lines changed: 16 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -1,20 +1,25 @@
11
## Twofactor TOTP Test Plan
22

3-
4-
53
| Test Case | Expected Result | Result | Related Comment |
64
| ---------------------------------------- | ---------------------------------------- | -------------- | --------------- |
7-
| Enable the app. | No problems found. | :construction: | |
8-
| Using a non admin user user1, enable totp in the personal settings.<br />Having the app freeotp (android or ios) scan the QR code provided and set it up.<br />Login using user1, get a new code in the freeotp app. Introduce it in the login view. Login. | User1 can login without problems. | 🚧 | |
9-
| Using a non admin user user1, enable totp in the personal settings.<br />Having the app freeotp (android or ios) scan the QR code provided and set it up.<br />Try to login with user1 using his password. When the totp input appears introduce random numbers, emojis, negative numbers and empty string. | User1 cannot login in any of this situations. | 🚧 | |
10-
| Using a LDAP user ldap_user, enable totp in the personal settings.<br />Having the app freeotp (android or ios) scan the QR code provided and set it up.<br />Login using ldap_user, get a new code in the freeotp app. Introduce it in the login view. Login. | User_ldap can login without problems. | 🚧 | |
11-
| Using a non admin user user1, enable totp in the personal settings.<br />Having the app google authenticator (android or ios) scan the QR code provided and set it up.<br />Login using user1, get a new code in the google authenticator app. Introduce it in the login view. Login. | User1 can login without problems. | 🚧 | |
5+
| Enable the app. | No problems found. | 🚧 | |
6+
| Using a non admin user user1, enable totp in the personal settings.<br />Having the app freeotp (android or ios) scan the QR code provided and set it up.<br />Login using user1, get a new code in the freeotp app. Introduce it in the login view. Login. | User1 can login without problems. | 🚧 | |
7+
| Using a non admin user user1, enable totp in the personal settings.<br />Having the app freeotp (android or ios) scan the QR code provided - enter a random verification code | code is not verified | 🚧 | |
8+
| Using a non admin user user1, enable totp in the personal settings.<br />Having the app freeotp (android or ios) scan the QR code provided and set it up.<br />Login using user1, get a new code in the freeotp app. Introduce it in the login view. Login. Logout. Login again using same code | User1 cannot login without a new code | 🚧 | |
9+
| Using users user1 & user2, enable totp and set it up in the personal settings.<br />Login using user1, get a new code in the freeotp app for user2. Introduce it in the login view. Login. | user1 cannot login | 🚧 | |
10+
| Using users user1, enable totp and set it up in the personal settings.<br />Login using user1, totp.<br />Disable TOTP in the personal settings of user1. Login again | user1 can login without TOTP token | 🚧 | |
11+
| Using users user1, enable totp and set it up in the personal settings.<br />Login using user1, totp.<br />Disable TOTP in the personal settings of user1<br/> Enable it again, set it up scanning the new QR code. | new verification code is accepted | 🚧 | |
12+
| Using users user1, enable totp and set it up in the personal settings.<br />Login using user1, totp.<br />Disable TOTP in the personal settings of user1<br/> Enable it again, do **not** scan the new QR code but use a current code from the first setup to verify | code is not accepted | 🚧 | |
13+
| Using a non admin user user1, enable totp in the personal settings.<br />Having the app freeotp (android or ios) scan the QR code provided and set it up.<br />Try to login with user1 using his password. When the totp input appears introduce random numbers, emojis, negative numbers and empty string. | User1 cannot login in any of this situations. | 🚧 | |
14+
| Using a LDAP user ldap_user, enable totp in the personal settings.<br />Having the app freeotp (android or ios) scan the QR code provided and set it up.<br />Login using ldap_user, get a new code in the freeotp app. Introduce it in the login view. Login. | User_ldap can login without problems. | 🚧 | |
15+
| Using a non admin user user1, enable totp in the personal settings.<br />Having the app **google authenticator** (android or ios) scan the QR code provided and set it up.<br />Login using user1, get a new code in the **google authenticator** app. Introduce it in the login view. Login. | User1 can login without problems. | 🚧 | |
16+
| Using a non admin user user1, enable totp in the personal settings.<br />Having the app **google authenticator** (android or ios) set up the account in the app using the key.<br />Login using user1, get a new code in the **google authenticator** app. Introduce it in the login view. Login. | User1 can login without problems. | 🚧 | |
1217
| **CLI** | | | |
13-
| Test 1/2 Having a user 'user1' with a working enabled two factor authentication, use the CLI command to disable it twofactorauth:disable | 'user1' now can login without using 2FA | 🚧 | |
14-
| Test 2/2 Use the CLI command twofactorauth:enable to enable again 2FA for 'user1' | 'user1' has to use 2FA mandatory to login | 🚧 | |
18+
| Test 1/2 Having a user 'user1' with a working enabled two factor authentication, use the CLI command to disable it twofactorauth:disable | 'user1' now can login without using 2FA | 🚧 | |
19+
| Test 2/2 Use the CLI command twofactorauth:enable to enable again 2FA for 'user1' | 'user1' has to use 2FA mandatory to login | 🚧 | |
1520
| **Browsers** | | | |
1621
| Check the login process is possible using chrome | | 🚧 | |
17-
| Check the login process is possible using firefox | | 🚧 | |
18-
| Check the login process is possible using edge | | 🚧 | <br /> |
22+
| Check the login process is possible using firefox | | 🚧 | |
23+
| Check the login process is possible using edge | | 🚧 | |
1924
| Check the login process is possible using internet explorer 11 | | 🚧 | <br /> |
2025
| Check the login process is possible using safari | | 🚧 | |

0 commit comments

Comments
 (0)