From 6b66606dfd64d398a6a634f7a08fae7b8e8f5996 Mon Sep 17 00:00:00 2001 From: bearsyankees Date: Fri, 28 Aug 2026 09:34:13 -0400 Subject: [PATCH] Clarify cloud test user MFA options --- strix/interface/cloud/spec.py | 4 ++-- tests/test_cloud_cli.py | 6 ++++++ 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/strix/interface/cloud/spec.py b/strix/interface/cloud/spec.py index 1ec85c36..ab2235a1 100644 --- a/strix/interface/cloud/spec.py +++ b/strix/interface/cloud/spec.py @@ -91,7 +91,7 @@ _TEST_USER_ADD_BODY = ( P("password", help="Sign-in password."), P("notes", help="Free-form notes for the agents."), P("login_url", help="URL of the sign-in page."), - P("mfa_method", help="MFA method, for example totp or email."), + P("mfa_method", help="MFA method: none, totp, email_otp, or magic_link."), P("totp_secret", help="TOTP secret for MFA sign-in."), P("mfa_email", help="Email address that receives MFA codes."), P("scope_domain_ids", "list", help="Domain IDs where this user applies."), @@ -103,7 +103,7 @@ _TEST_USER_BODY = ( P("password", help="Sign-in password."), P("notes", help="Free-form notes for the agents."), P("login_url", help="URL of the sign-in page."), - P("mfa_method", help="MFA method, for example totp or email."), + P("mfa_method", help="MFA method: none, totp, email_otp, or magic_link."), P("totp_secret", help="TOTP secret for MFA sign-in."), P("mfa_email", help="Email address that receives MFA codes."), P("scope_domain_ids", "list", help="Domain IDs where this user applies."), diff --git a/tests/test_cloud_cli.py b/tests/test_cloud_cli.py index 43184bf5..5877ff1d 100644 --- a/tests/test_cloud_cli.py +++ b/tests/test_cloud_cli.py @@ -1258,6 +1258,12 @@ def test_corrected_help_distinguishes_inboxes_reports_and_self_hosted_commands() inbox = SPEC["domains"]["test-users provision-inbox"] assert "does not create a test user" in inbox.help + for command_name in ("test-users add", "test-users update"): + parameters = {param.name: param.help for param in SPEC["domains"][command_name].body} + assert "email_otp" in parameters["mfa_method"] + assert "magic_link" in parameters["mfa_method"] + assert " or email." not in parameters["mfa_method"] + report = {param.name: param.help for param in SPEC["scans"]["report"].query} assert "Report content" in report["format"] assert "file type" in report["type"]