snapshot of https://github.com/ory/kratos.git (master, 2026-09-15; blobs > 131072B omitted)

test/e2e/cypress/integration/profiles/verification/settings/error.spec.ts

@@ -0,0 +1,96 @@
+// Copyright © 2023 Ory Corp
+// SPDX-License-Identifier: Apache-2.0
+
+import {
+  appPrefix,
+  assertVerifiableAddress,
+  gen,
+  parseHtml,
+  verifyHrefPattern,
+} from "../../../../helpers"
+
+import { routes as express } from "../../../../helpers/express"
+import { routes as react } from "../../../../helpers/react"
+
+context("Account Verification Settings Error", () => {
+  ;[
+    {
+      settings: react.settings,
+      base: react.base,
+      app: "react" as "react",
+      profile: "verification",
+    },
+    {
+      settings: express.settings,
+      base: express.base,
+      app: "express" as "express",
+      profile: "verification",
+    },
+  ].forEach(({ profile, settings, app, base }) => {
+    describe(`for app ${app}`, () => {
+      before(() => {
+        cy.deleteMail()
+        cy.useConfigProfile(profile)
+        cy.proxy(app)
+      })
+
+      describe("error flow", () => {
+        let identity
+        before(() => {
+          cy.deleteMail()
+        })
+
+        beforeEach(() => {
+          cy.useConfig((builder) => builder.longCodeLifespan())
+          identity = gen.identityWithWebsite()
+          cy.clearAllCookies()
+          cy.registerApi(identity)
+          cy.deleteMail({ atLeast: 1 }) // clean up registration email
+
+          cy.login({ ...identity, cookieUrl: base })
+          cy.visit(settings)
+        })
+
+        it("is unable to verify the email address if the code is no longer valid", () => {
+          cy.shortCodeLifespan()
+          cy.visit(settings)
+
+          const email = `not-${identity.email}`
+          cy.get(appPrefix(app) + 'input[name="traits.email"]')
+            .clear()
+            .type(email)
+          cy.get('button[value="profile"]').click()
+
+          cy.verifyEmailButExpired({
+            expect: { email },
+          })
+        })
+
+        it("is unable to verify the email address if the code is incorrect", () => {
+          const email = `not-${identity.email}`
+          cy.get('input[name="traits.email"]').clear().type(email)
+          cy.get('button[value="profile"]').click()
+
+          cy.getMail({
+            body: "Verify your account",
+            email,
+          }).then((mail) => {
+            const link = parseHtml(mail.body).querySelector("a")
+
+            expect(verifyHrefPattern.test(link.href)).to.be.true
+
+            cy.visit(link.href + "-not") // add random stuff to the confirm challenge
+            cy.log(link.href)
+            cy.getSession().then(
+              assertVerifiableAddress({ isVerified: false, email }),
+            )
+          })
+        })
+
+        xit("should not update the traits until the email has been verified and the old email has accepted the change", () => {
+          // FIXME https://github.com/ory/kratos/issues/292
+        })
+      })
+    })
+  })
+})

test/e2e/cypress/integration/profiles/verification/settings/success.spec.ts

@@ -0,0 +1,69 @@
+// Copyright © 2023 Ory Corp
+// SPDX-License-Identifier: Apache-2.0
+
+import {
+  APP_URL,
+  appPrefix,
+  assertVerifiableAddress,
+  gen,
+} from "../../../../helpers"
+import { routes as react } from "../../../../helpers/react"
+import { routes as express } from "../../../../helpers/express"
+
+context("Account Verification Settings Success", () => {
+  ;[
+    {
+      settings: react.settings,
+      app: "react" as "react",
+      profile: "verification",
+    },
+    {
+      settings: express.settings,
+      app: "express" as "express",
+      profile: "verification",
+    },
+  ].forEach(({ profile, settings, app }) => {
+    describe(`for app ${app}`, () => {
+      before(() => {
+        cy.deleteMail()
+        cy.useConfigProfile(profile)
+        cy.proxy(app)
+      })
+      let identity
+
+      before(() => {
+        cy.deleteMail()
+      })
+
+      beforeEach(() => {
+        identity = gen.identity()
+        cy.register(identity)
+        cy.deleteMail({ atLeast: 1 }) // clean up registration email
+
+        cy.login(identity)
+        cy.visit(settings)
+      })
+
+      it("should update the verify address and request a verification email", () => {
+        const email = `not-${identity.email}`
+        cy.get(appPrefix(app) + 'input[name="traits.email"]')
+          .clear()
+          .type(email)
+        cy.get('[value="profile"]').click()
+
+        if (app == "express") {
+          cy.expectSettingsSaved()
+          cy.get('input[name="traits.email"]').should("contain.value", email)
+          cy.getSession().then(
+            assertVerifiableAddress({ isVerified: false, email }),
+          )
+        }
+        cy.verifyEmail({ expect: { email } })
+      })
+
+      xit("should should be able to allow or deny (and revert?) the address change", () => {
+        // FIXME https://github.com/ory/kratos/issues/292
+      })
+    })
+  })
+})