Oleksandr Bezdieniezhnykh 5224a12589 [AZ-557] Fix MfaLoginTests AC1/AC2/AC7 seed ordering ...

UserService.ValidateUser calls RegisterSuccessfulLogin on a successful
password verify, which resets FailedLoginCount=0 even on the MFA path
(the reset happens inside ValidateUser before the MFA branch returns
the step-1 token). Seeding the counter before /login was therefore a
no-op — the threshold-1 seed was wiped before the wrong-TOTP request
got a chance to trip the lockout.

Move SetLockoutUntil to AFTER step 1 succeeds in AC1, AC2, AC7. AC7
now also genuinely exercises MfaService's own counter reset on a
correct TOTP, instead of being satisfied by the password-success reset.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-05-14 10:13:23 +03:00

..

Helpers

[AZ-534] TOTP-based 2FA at credential login

2026-05-14 06:21:28 +03:00

Tests

[AZ-557] Fix MfaLoginTests AC1/AC2/AC7 seed ordering

2026-05-14 10:13:23 +03:00

appsettings.test.json

[AZ-531] [AZ-532] Refresh-token rotation + ES256 signing with JWKS

2026-05-14 05:30:03 +03:00

Azaion.E2E.csproj

[AZ-534] TOTP-based 2FA at credential login

2026-05-14 06:21:28 +03:00

xunit.runner.json

[AZ-189] [AZ-190] [AZ-191] [AZ-192] [AZ-193] [AZ-194] [AZ-195] Add e2e blackbox test suite

2026-04-16 06:25:36 +03:00