Merge pull request #7623 from jenshenny/fix-webauthn-poller

Rename credential email to identifier in WebAuthn poller

(cherry picked from commit 53c6223)

Author: deivid-rodriguez

lib/rubygems/gemcutter_utilities/webauthn_poller.rb

@@ -69,8 +69,10 @@ def webauthn_verification_poll_response(webauthn_url, credentials)
       rubygems_api_request(:get, "api/v1/webauthn_verification/#{webauthn_token}/status.json") do |request|
         if credentials.empty?
           request.add_field "Authorization", api_key
+        elsif credentials[:identifier] && credentials[:password]
+          request.basic_auth credentials[:identifier], credentials[:password]
         else
-          request.basic_auth credentials[:email], credentials[:password]
+          raise Gem::WebauthnVerificationError, "Provided missing credentials"
         end
       end
     end

test/rubygems/test_webauthn_poller.rb

@@ -13,7 +13,7 @@ def setup
     @fetcher = Gem::FakeFetcher.new
     Gem::RemoteFetcher.fetcher = @fetcher
     @credentials = {
-      email: "[email protected]",
+      identifier: "[email protected]",
       password: "password",
     }
   end
@@ -121,4 +121,14 @@ def test_poll_for_otp_invalid_status
     assert_equal error.message,
       "Security device verification failed: The token in the link you used has either expired or been used already."
   end
+
+  def test_poll_for_otp_missing_credentials
+    @credentials = { password: "password" }
+
+    error = assert_raise Gem::WebauthnVerificationError do
+      Gem::GemcutterUtilities::WebauthnPoller.new({}, @host).poll_for_otp(@webauthn_url, @credentials)
+    end
+
+    assert_equal error.message, "Security device verification failed: Provided missing credentials"
+  end
 end