From dd9dd3b4c2b5a109edd2e045b5444622ee935965 Mon Sep 17 00:00:00 2001
From: Madhuri Upadhye <mupadhye@redhat.com>
Date: Fri, 20 Sep 2024 16:42:29 +0530
Subject: [PATCH] Test: Passkey test cases with diffferent auth_methods

Added following test cases
1. Check authentication of user with IPA server when
no pin set for the Passkey.
2. Check authentication of user with updated prompting
options
3. Check password authentication of user with IPA server
when sssd fall back to password authentication

Signed-off-by: Madhuri Upadhye <mupadhye@redhat.com>
---
 .../passkey-mapping.ipa                       |   1 +
 .../umockdev.script.ipa                       |  30 ++++
 .../passkey-mapping.ipa                       |   1 +
 .../umockdev.script.ipa                       |  29 ++++
 .../passkey-mapping.ipa                       |   1 +
 .../umockdev.script.ipa                       |  18 +++
 src/tests/system/tests/test_passkey.py        | 147 ++++++++++++++++++
 7 files changed, 227 insertions(+)
 create mode 100644 src/tests/system/data/test_passkey/test_passkey__prompt_options/passkey-mapping.ipa
 create mode 100644 src/tests/system/data/test_passkey/test_passkey__prompt_options/umockdev.script.ipa
 create mode 100644 src/tests/system/data/test_passkey/test_passkey__su_fallback_to_password/passkey-mapping.ipa
 create mode 100644 src/tests/system/data/test_passkey/test_passkey__su_fallback_to_password/umockdev.script.ipa
 create mode 100644 src/tests/system/data/test_passkey/test_passkey__su_no_pin_set/passkey-mapping.ipa
 create mode 100644 src/tests/system/data/test_passkey/test_passkey__su_no_pin_set/umockdev.script.ipa

diff --git a/src/tests/system/data/test_passkey/test_passkey__prompt_options/passkey-mapping.ipa b/src/tests/system/data/test_passkey/test_passkey__prompt_options/passkey-mapping.ipa
new file mode 100644
index 00000000000..a89bee8a504
--- /dev/null
+++ b/src/tests/system/data/test_passkey/test_passkey__prompt_options/passkey-mapping.ipa
@@ -0,0 +1 @@
+passkey:bjxRHsB/AXOOfZSeofVLuJZymEVMlNIica/jDaBQ2Ku+tFgaRnmk1q6c0t8OeX4ykiWs0J39SjySi142Kuw8tA==,MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE2dKjseUv7dBMVB1+kGrkuFkMM9pblYf6wyo5V4Ue2HN49oRD9/mDx8WDZP4nl8yRuKVEJMoMRwCy2GPEcW+YjQ==
diff --git a/src/tests/system/data/test_passkey/test_passkey__prompt_options/umockdev.script.ipa b/src/tests/system/data/test_passkey/test_passkey__prompt_options/umockdev.script.ipa
new file mode 100644
index 00000000000..0e88c0f935e
--- /dev/null
+++ b/src/tests/system/data/test_passkey/test_passkey__prompt_options/umockdev.script.ipa
@@ -0,0 +1,30 @@
+d 0 /dev/hidraw1
+
+w 2 ^@�����^@^H^A^A^A^A^A^A^A^A^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 3 �����^@^Q^A^A^A^A^A^A^A^A�ˏ-^B^E^D^C^E^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+w 1 ^@�ˏ-�^@^A^D^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 2 �ˏ-�^@�^@�^A�fU2F_V2hFIDO_2_0lFIDO_2_1_PRE^B�kcredProtectkhmac-secr�ˏ-^@et^CP/�W��^SG�^V�Z�� *^D�brk�bup�dplat�iclientPin�ucredentialM�ˏ-^AgmtPreview�^E^Y^D�^F�^B^A^G^H^H^X�^I�cnfccusb^J��calg&dtypejpublic-key��ˏ-^Bcalg'dtypejpublic-key^M^D^N^Z^@^E^D^C^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+w 2 ^@�ˏ-�^@�^B�^Ahipa.test^BX ^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^C��bidX@n<^@�ˏ-^@Q^^�^As�}����K��r�EL��"q��^M�Pث��X^ZFy�֮���^Ny~2�%�Н�J<��^`6*^@�ˏ-^A�<�dtypejpublic-key^E�bup�^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 83 �ˏ-�^@�^@�^A�bidX@n<Q^^�^As�}����K��r�EL��"q��^M�Pث��X^ZFy�֮���^Ny~2�ˏ-^@�%�Н�J<��^`6*�<�dtypejpublic-key^BX%�^@�|���Dږ^Qx??�d^Q/N�4�/o�ˏ-^AC���}.�[^@^@^@^@^J^CXG0E^B ^_��8H�i�h�^T�^^^U^Uٜ=^N׊^E�^S�u�^^��^B!^@�����ˏ-^B:�H��^`�e^O�������(�!��ja��H^T^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+w 3 ^@�ˏ-�^@^F^F�^A^B^B^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 3 �ˏ-�^@Q^@�^A�^A^B^C8^X ^A!X ���^E�����h^Ql�e$��^\��^E^H�4'I�?O��"X ^` �^C1�^I^L�ˏ-^@l��L��1�i��5�I��cRk^J�Z�s^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+w 3 ^@�ˏ-�^@x^F�^A^B^B^E^C�^A^B^C8^X ^A!X 3�B�1�ˠ^S�^\^Ev�,�^P<Rij��,Q�\���b"X [�^M^J^@�ˏ-^@�G8��������5��Q\^\^U��^E�Q!^FX ^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A��(�:^L�n*‹^@�ˏ-^A�ƈ�^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 79 �ˏ-�^@5^@�^BX0U5�^H*��\�c�OY��K�H�j��hv����դ\��z���T>F^A'0��΂^@^@^@^@
+w 1 ^@�ˏ-�^@�^B�^Ahipa.test^BX ^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^C��bidX@n<^@�ˏ-^@Q^^�^As�}����K��r�EL��"q��^M�Pث��X^ZFy�֮���^Ny~2�%�Н�J<��^`6*^@�ˏ-^A�<�dtypejpublic-key^E�bup�^FX �d�S�m^O��6�^_��^I��{g{^Qc�Г@M�^G^@�ˏ-^B^H^G^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 227 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 �ˏ-�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 198 �ˏ-�^@�^@�^A�bidX@n<Q^^�^As�}����K��r�EL��"q��^M�Pث��X^ZFy�֮���^Ny~2�ˏ-^@�%�Н�J<��^`6*�<�dtypejpublic-key^BX%�^@�|���Dږ^Qx??�d^Q/N�4�/o�ˏ-^AC���}.�[^E^@^@^@^N^CXH0F^B!^@�Z�^@�^`��O�� �e�^M��Ż�D^K�ڽ�^Vy��*^B!^@�^E.�ˏ-^Bp��^O-�އ4����Pڵ@RuڒS^U�9\���^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
\ No newline at end of file
diff --git a/src/tests/system/data/test_passkey/test_passkey__su_fallback_to_password/passkey-mapping.ipa b/src/tests/system/data/test_passkey/test_passkey__su_fallback_to_password/passkey-mapping.ipa
new file mode 100644
index 00000000000..0c0a4ff341e
--- /dev/null
+++ b/src/tests/system/data/test_passkey/test_passkey__su_fallback_to_password/passkey-mapping.ipa
@@ -0,0 +1 @@
+passkey:SSgOUcGCN5WWyIfxAKkFN2HJ+Ko98UVT+O+P0cFgP0YYAKY2zhbFnjT5ZYOwh6Z1h4/7gZIPVEjF4TY6vmPbHg==,MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEHoY7OmDGaK3Q5EVB2LdtP1Gyko6Fz5j5KhLSKy0jKJ47QngRYc6nfzfhnQ2LQpCxbbQcnxnhkNDZugkx9VC1gQ==
diff --git a/src/tests/system/data/test_passkey/test_passkey__su_fallback_to_password/umockdev.script.ipa b/src/tests/system/data/test_passkey/test_passkey__su_fallback_to_password/umockdev.script.ipa
new file mode 100644
index 00000000000..c8e82d860e1
--- /dev/null
+++ b/src/tests/system/data/test_passkey/test_passkey__su_fallback_to_password/umockdev.script.ipa
@@ -0,0 +1,29 @@
+d 0 /dev/hidraw1
+
+w 3 ^@�����^@^H^A^A^A^A^A^A^A^A^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 2 �����^@^Q^A^A^A^A^A^A^A^ArE�^B^E^D^C^E^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+w 1 ^@rE�^@^A^D^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 3 rE�^@�^@�^A�fU2F_V2hFIDO_2_0lFIDO_2_1_PRE^B�kcredProtectkhmac-secrrE�^@et^CP/�W��^SG�^V�Z�� *^D�brk�bup�dplat�iclientPin�ucredentialMrE�^AgmtPreview�^E^Y^D�^F�^B^A^G^H^H^X�^I�cnfccusb^J��calg&dtypejpublic-key�rE�^Bcalg'dtypejpublic-key^M^D^N^Z^@^E^D^C^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+w 1 ^@rE�^@�^B�^Ahipa.test^BX ^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^C��bidX@I(^@rE�^@^NQ��7��ȇ�^@�^E7a���=�ES����`?F^X^@�6�^VŞ4�e����u�����^OTH��6:�^@rE�^Ac�^^dtypejpublic-key^E�bup�^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 83 rE�^@�^@�^A�bidX@I(^NQ��7��ȇ�^@�^E7a���=�ES����`?F^X^@�6�^VŞ4�e����urE�^@�����^OTH��6:�c�^^dtypejpublic-key^BX%�^@�|���Dږ^Qx??�d^Q/N�4�/orE�^AC���}.�[^@^@^@^@^I^CXF0D^B hm�i�e^UЯ�Z^Hb^\Mu�&����^N��6���ν�^B ,r�^SOrE�^B�-0G]���^W��ִ����"u!��^DU�]�^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+w 4 ^@rE�^@^F^F�^A^B^B^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 2 rE�^@Q^@�^A�^A^B^C8^X ^A!X d^O�^HPûw��7^H-}_��h���X��W8�R^U�h0"X W�Z�1^Z�RrE�^@w8^R.#�=m[4�v�^U<�l�m�9�ġ^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+w 5 ^@rE�^@x^F�^A^B^B^E^C�^A^B^C8^X ^A!X 3�B�1�ˠ^S�^\^Ev�,�^P<Rij��,Q�\���b"X [�^M^J^@rE�^@�G8��������5��Q\^\^U��^E�Q!^FX ^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A��m(�_"v^XE��^@rE�^A^^�o�^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 79 rE�^@5^@�^BX0-s�P�^Q43^Rp�Q�����q�E�m�^Db��[S�k�^M�^K�݌�s�^]��N^@^@^@^@
+w 1 ^@rE�^@�^B�^Ahipa.test^BX ^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^C��bidX@I(^@rE�^@^NQ��7��ȇ�^@�^E7a���=�ES����`?F^X^@�6�^VŞ4�e����u�����^OTH��6:�^@rE�^Ac�^^dtypejpublic-key^E�bup�^FX ^Z1bĪ��y��|^^\T��o�4�^M$�*X^Z?_�g�^@rE�^B�^G^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 213 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 rE�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 126 rE�^@�^@�^A�bidX@I(^NQ��7��ȇ�^@�^E7a���=�ES����`?F^X^@�6�^VŞ4�e����urE�^@�����^OTH��6:�c�^^dtypejpublic-key^BX%�^@�|���Dږ^Qx??�d^Q/N�4�/orE�^AC���}.�[^E^@^@^@^J^CXH0F^B!^@�L^Z�K�^F^T�8G�1��[^JF�LF�������"^R��^B!^@�frE�^B���p^C��^J��AP���vP�5�/��^E�yv�^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
\ No newline at end of file
diff --git a/src/tests/system/data/test_passkey/test_passkey__su_no_pin_set/passkey-mapping.ipa b/src/tests/system/data/test_passkey/test_passkey__su_no_pin_set/passkey-mapping.ipa
new file mode 100644
index 00000000000..a1cce5344d3
--- /dev/null
+++ b/src/tests/system/data/test_passkey/test_passkey__su_no_pin_set/passkey-mapping.ipa
@@ -0,0 +1 @@
+passkey:us0eBiX3rqdGTYS3vKoYcazLJFX5raek9hYSTGmVBq2fkUkjElUiITXtJQofnIPwYAc4D4w5+Sn27EuD/bejoA==,MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAENx1bON3YvOlfpOp4UrObEwl4VoKqqahDIM033nBHkm9c7759s3ZbbxlOBRHicrzhIey5Z3THT6jtlMb9mv+Kyg==
diff --git a/src/tests/system/data/test_passkey/test_passkey__su_no_pin_set/umockdev.script.ipa b/src/tests/system/data/test_passkey/test_passkey__su_no_pin_set/umockdev.script.ipa
new file mode 100644
index 00000000000..a76e7072e1b
--- /dev/null
+++ b/src/tests/system/data/test_passkey/test_passkey__su_no_pin_set/umockdev.script.ipa
@@ -0,0 +1,18 @@
+d 0 /dev/hidraw1
+
+w 3 ^@�����^@^H^A^A^A^A^A^A^A^A^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 3 �����^@^Q^A^A^A^A^A^A^A^A���c^B^E^D^C^E^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+w 1 ^@���c�^@^A^D^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 3 ���c�^@�^@�^A�fU2F_V2hFIDO_2_0lFIDO_2_1_PRE^B�kcredProtectkhmac-secr���c^@et^CP/�W��^SG�^V�Z�� *^D�brk�bup�dplat�iclientPin�ucredentialM���c^AgmtPreview�^E^Y^D�^F�^B^A^G^H^H^X�^I�cnfccusb^J��calg&dtypejpublic-key����c^Bcalg'dtypejpublic-key^M^D^N^Z^@^E^D^C^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+w 1 ^@���c�^@�^B�^Ahipa.test^BX ^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^C��bidX@��^@���c^@^^^F%���FM����^Xq��$U�����^V^RLi�^F���I#^RU"!5�%^J^_���`^G8^O�9�)��K��^@���c^A���dtypejpublic-key^E�bup�^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 83 ���c�^@�^@�^A�bidX@��^^^F%���FM����^Xq��$U�����^V^RLi�^F���I#^RU"!5�%^J^_����c^@`^G8^O�9�)��K�����dtypejpublic-key^BX%�^@�|���Dږ^Qx??�d^Q/N�4�/o���c^AC���}.�[^@^@^@^@^K^CXG0E^B!^@�€���^O?\�� ��^M�f�L���@^VP@M^C���B^B 0��Ɣ��c^B0^O�H\^CQ�"^E--�*��e��^P^T��!3^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+w 1 ^@���c�^@�^B�^Ahipa.test^BX ^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^C��bidX@��^@���c^@^^^F%���FM����^Xq��$U�����^V^RLi�^F���I#^RU"!5�%^J^_���`^G8^O�9�)��K��^@���c^A���dtypejpublic-key^E�bup�^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 261 ���c�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 ���c�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 ���c�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 287 ���c�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 290 ���c�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 ���c�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 291 ���c�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 288 ���c�^@^A^B^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
+r 221 ���c�^@�^@�^A�bidX@��^^^F%���FM����^Xq��$U�����^V^RLi�^F���I#^RU"!5�%^J^_����c^@`^G8^O�9�)��K�����dtypejpublic-key^BX%�^@�|���Dږ^Qx??�d^Q/N�4�/o���c^AC���}.�[^A^@^@^@^M^CXF0D^B e�_�r^Y���b�#V�4�j-RF�㬑�^YLܱ}��^B Ag��^R���c^Bh�Q^J��c7�^^^V[xg�0^`������^Hӆ^D^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
\ No newline at end of file
diff --git a/src/tests/system/tests/test_passkey.py b/src/tests/system/tests/test_passkey.py
index cacaf89db48..996cb121c6e 100644
--- a/src/tests/system/tests/test_passkey.py
+++ b/src/tests/system/tests/test_passkey.py
@@ -72,6 +72,7 @@
 import pytest
 from pytest_mh import mh_fixture
 from sssd_test_framework.roles.client import Client
+from sssd_test_framework.utils.authentication import PasskeyAuthenticationUseCases
 from sssd_test_framework.roles.generic import GenericProvider
 from sssd_test_framework.roles.ipa import IPA
 from sssd_test_framework.topology import KnownTopology, KnownTopologyGroup
@@ -740,3 +741,149 @@ def test_passkey__su_with_12_mappings(
         )
         in output
     ), "Get the console message about TGT"
+
+
+@pytest.mark.importance("critical")
+@pytest.mark.topology(KnownTopology.IPA)
+@pytest.mark.builtwith(client="passkey", ipa="passkey")
+@pytest.mark.ticket(gh=6931)
+def test_passkey__su_no_pin_set(
+    client: Client, ipa: IPA, moduledatadir: str, testdatadir: str, umockdev_ipaotpd_update
+):
+    """
+    :title: Check authentication of user with IPA server when no pin set for the Passkey
+    :setup:
+        1. Add a user with --user-auth-type=passkey in the IPA server
+        2. Modify Passkey configuration to set require user verification during authentication to false
+        3. Setup SSSD client with FIDO and umockdev, start SSSD service
+    :steps:
+         1. Check authentication of the user when no pin set for the Passkey
+         2. Check the TGT of user
+    :expectedresults:
+        1. User authenticates successfully
+        2. Get TGT after authentication of user
+    :customerscenario: False
+    """
+    with open(f"{testdatadir}/passkey-mapping.ipa") as f:
+        ipa.user("user1").add(user_auth_type="passkey").passkey_add(f.read().strip())
+
+    ipa.host.conn.run("ipa passkeyconfig-mod --require-user-verification=False", raise_on_error=False)
+    client.sssd.start(service_user="root")
+
+    rc, _, output, _ = client.auth.su.passkey_with_output(
+        username="user1",
+        device=f"{moduledatadir}/umockdev.device",
+        ioctl=f"{moduledatadir}/umockdev.ioctl",
+        script=f"{testdatadir}/umockdev.script.ipa",
+        command="klist",
+        auth_method=PasskeyAuthenticationUseCases.PASSKEY_NO_PIN_NO_PROMPTS,
+    )
+
+    assert rc == 0, "Authentication failed"
+    assert "Ticket cache" in output, "Failed to get the TGT"
+    assert not (
+        (
+            "No Kerberos TGT granted as the server does not support this method. "
+            "Your single-sign on(SSO) experience will be affected"
+        )
+        in output
+    ), "Got the console message about No Kerberos TGT granted"
+
+
+@pytest.mark.importance("medium")
+@pytest.mark.topology(KnownTopology.IPA)
+@pytest.mark.builtwith(client="passkey", ipa="passkey")
+@pytest.mark.ticket(gh=6931)
+def test_passkey__prompt_options(
+    client: Client, ipa: IPA, moduledatadir: str, testdatadir: str, umockdev_ipaotpd_update
+):
+    """
+    :title: Check authentication of user with updated prompting options
+    :setup:
+        1. Add a user in the server with passkey mappings
+        2. Add the prompting options to sssd.conf file
+        3. Setup SSSD client with FIDO and umockdev, start SSSD service
+    :steps:
+        1. Check authentication of the user
+        2. Check the updated prompt options
+    :expectedresults:
+        1. User authenticates successfully
+        2. Got the updated prompt options
+    :customerscenario: False
+    """
+    with open(f"{testdatadir}/passkey-mapping.ipa") as f:
+        ipa.user("user1").add(user_auth_type="passkey").passkey_add(f.read().strip())
+
+    client.sssd.section("prompting/passkey")["interactive"] = "True"
+    client.sssd.section("prompting/passkey")["interactive_prompt"] = "Please, insert the passkey and press enter"
+    client.sssd.section("prompting/passkey")["touch"] = "True"
+    client.sssd.section("prompting/passkey")["touch_prompt"] = "Can you touch the passkey"
+    client.sssd.start(service_user="root")
+
+    rc, _, output, _ = client.auth.su.passkey_with_output(
+        username="user1",
+        device=f"{moduledatadir}/umockdev.device",
+        ioctl=f"{moduledatadir}/umockdev.ioctl",
+        script=f"{testdatadir}/umockdev.script.ipa",
+        pin=123456,
+        interactive_prompt="Please, insert the passkey and press enter",
+        touch_prompt="Can you touch the passkey",
+        command="klist",
+        auth_method=PasskeyAuthenticationUseCases.PASSKEY_PIN_AND_PROMPTS,
+    )
+
+    assert rc == 0, "Authentication failed"
+    assert "Ticket cache" in output, "Failed to get the TGT"
+    assert (
+        not (
+            "No Kerberos TGT granted as the server does not support this method."
+            "Your single-sign on(SSO) experience will be affected"
+        )
+        in output
+    ), "Got the console message about No Kerberos TGT granted"
+
+
+@pytest.mark.importance("critical")
+@pytest.mark.topology(KnownTopology.IPA)
+@pytest.mark.builtwith(client="passkey", ipa="passkey")
+@pytest.mark.ticket(gh=7143)
+def test_passkey__su_fallback_to_password(
+    client: Client, ipa: IPA, moduledatadir: str, testdatadir: str, umockdev_ipaotpd_update
+):
+    """
+    :title: Check password authentication of user with IPA server when sssd fall back to password authentication
+    :setup:
+        1. Add a user with --user-auth-type=passkey, password in the IPA server
+        2. Setup SSSD client with FIDO and umockdev, start SSSD service
+    :steps:
+        1. Check authentication of the user with password
+        2. Check the TGT of user
+    :expectedresults:
+        1. User authenticates successfully
+        2. Get TGT after authentication of user
+    :customerscenario: False
+    """
+    with open(f"{testdatadir}/passkey-mapping.ipa") as f:
+        ipa.user("user1").add(user_auth_type=["passkey", "password"]).passkey_add(f.read().strip())
+
+    client.sssd.start(service_user="root")
+
+    rc, _, output, _ = client.auth.su.passkey_with_output(
+        username="user1",
+        device=f"{moduledatadir}/umockdev.device",
+        ioctl=f"{moduledatadir}/umockdev.ioctl",
+        script=f"{testdatadir}/umockdev.script.ipa",
+        pin="\\n",
+        command="klist",
+        auth_method=PasskeyAuthenticationUseCases.PASSKEY_FALLBACK_TO_PASSWORD,
+    )
+
+    assert rc == 0, "Authentication failed"
+    assert "Ticket cache" in output, "Failed to get the TGT"
+    assert (
+        not (
+            "No Kerberos TGT granted as the server does not support this method."
+            " Your single-sign on(SSO) experience will be affected"
+        )
+        in output
+    ), "Got the console message about No Kerberos TGT granted"