snapshot of https://github.com/ory/kratos.git (master, 2026-09-15; blobs > 131072B omitted)

test/e2e/playwright/tests/desktop/code/sms.spec.ts

@@ -0,0 +1,116 @@
+// Copyright © 2024 Ory Corp
+// SPDX-License-Identifier: Apache-2.0
+
+import { test } from "../../../fixtures"
+import { toConfig } from "../../../lib/helper"
+import smsSchema from "../../../fixtures/schemas/sms"
+import { LoginPage } from "../../../models/elements/login"
+import { hasSession } from "../../../actions/session"
+import { createIdentityWithPhoneNumber } from "../../../actions/identity"
+import {
+  deleteDocument,
+  documentUrl,
+  fetchDocument,
+} from "../../../actions/webhook"
+import { RegistrationPage } from "../../../models/elements/registration"
+import { CountryNames, generatePhoneNumber } from "phone-number-generator-js"
+
+const documentId = "doc-" + Math.random().toString(36).substring(7)
+
+test.describe("account enumeration protection off", () => {
+  test.use({
+    configOverride: {
+      security: {
+        account_enumeration: {
+          enabled: false,
+        },
+      },
+      selfservice: {
+        flows: {
+          login: {
+            style: "unified",
+          },
+          registration: {
+            after: {
+              code: {
+                hooks: [
+                  {
+                    hook: "session",
+                  },
+                ],
+              },
+            },
+          },
+        },
+        methods: {
+          code: {
+            passwordless_enabled: true,
+          },
+          password: {
+            enabled: false,
+          },
+        },
+      },
+      courier: {
+        channels: [
+          {
+            id: "sms",
+            type: "http",
+            request_config: {
+              body: "base64://ZnVuY3Rpb24oY3R4KSB7DQpjdHg6IGN0eCwNCn0=",
+              method: "PUT",
+              url: documentUrl(documentId),
+            },
+          },
+        ],
+      },
+      identity: {
+        default_schema_id: "sms",
+        schemas: [
+          {
+            id: "sms",
+            url:
+              "base64://" +
+              Buffer.from(JSON.stringify(smsSchema), "ascii").toString(
+                "base64",
+              ),
+          },
+        ],
+      },
+    },
+  })
+
+  test.afterEach(async () => {
+    await deleteDocument(documentId)
+  })
+
+  test("login succeeds", async ({ page, config, kratosPublicURL }) => {
+    const identity = await createIdentityWithPhoneNumber(page.request)
+
+    const login = new LoginPage(page, config)
+    await login.open()
+    await login.triggerLoginWithCode(identity.phone)
+
+    const result = await fetchDocument(documentId)
+    await login.codeInput.input.fill(result.ctx.template_data.login_code)
+    await login.codeSubmit.getByText("Continue").click()
+    await hasSession(page.request, kratosPublicURL)
+  })
+
+  test("registration succeeds", async ({ page, config, kratosPublicURL }) => {
+    const phone = generatePhoneNumber({
+      countryName: CountryNames.Germany,
+      withoutCountryCode: false,
+    })
+
+    const registration = new RegistrationPage(page, config)
+    await registration.open()
+    await registration.triggerRegistrationWithCode(phone)
+
+    const result = await fetchDocument(documentId)
+    const code = result.ctx.template_data.registration_code
+    await registration.inputField("code").fill(code)
+    await registration.submitField("code").getByText("Continue").click()
+    await hasSession(page.request, kratosPublicURL)
+  })
+})