Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adjustment for new CIAM partition #564

Merged
merged 1 commit into from
May 24, 2023
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 7 additions & 1 deletion tests/test_e2e.py
Original file line number Diff line number Diff line change
Expand Up @@ -925,10 +925,16 @@ def test_ciam_acquire_token_for_client(self):
client_secret=self.get_lab_user_secret(
self.app_config["clientSecret"].split("=")[-1]),
authority=self.app_config["authority"],
scope=["{}/.default".format(self.app_config["appId"])], # App permission
#scope=["{}/.default".format(self.app_config["appId"])], # AADSTS500207: The account type can't be used for the resource you're trying to access.
#scope=["api://{}/.default".format(self.app_config["appId"])], # AADSTS500011: The resource principal named api://ced781e7-bdb0-4c99-855c-d3bacddea88a was not found in the tenant named MSIDLABCIAM2. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You might have sent your authentication request to the wrong tenant.
scope=self.app_config["scopes"], # It shall ends with "/.default"
)

def test_ciam_acquire_token_by_ropc(self):
"""CIAM does not officially support ROPC, especially not for external emails.
We keep this test case for now, because the test data will use a local email.
"""
# Somehow, this would only work after creating a secret for the test app
# and enabling "Allow public client flows".
# Otherwise it would hit AADSTS7000218.
Expand Down