c60cc7ca75
Some checks failed
CI / Run tests and lints (push) Failing after 29s
CI / Build CLI docs (push) Has been skipped
CI / Run Playwright end-to-end tests (mysql) (push) Failing after 3s
CI / Run Playwright end-to-end tests (postgres) (push) Failing after 2s
CI / Run Playwright end-to-end tests (sqlite) (push) Failing after 3s
CodeQL / Analyze (go) (push) Failing after 4s
CodeQL / Analyze (javascript) (push) Failing after 3s
Docker Image Scanners / scanners (push) Failing after 4s
Synchronize Issue Labels / Synchronize Issue Labels (push) Has been skipped
CI / Run end-to-end tests (postgres) (push) Failing after 19s
CI / Run end-to-end tests (sqlite) (push) Failing after 2s
CI / Run Playwright end-to-end tests (cockroach) (push) Failing after 2s
CI / Draft newsletter (push) Has been skipped
CI / Generate release (push) Has been skipped
CI / Pending approval Slack notification (push) Has been skipped
CI / Send newsletter (push) Has been skipped
92 lines
2.8 KiB
TypeScript
92 lines
2.8 KiB
TypeScript
// Copyright © 2023 Ory Corp
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
import { gen, MOBILE_URL, website } from "../../../../helpers"
|
|
import { TOTP } from "otpauth"
|
|
|
|
context("Mobile Profile", () => {
|
|
describe("TOTP 2FA Flow", () => {
|
|
before(() => {
|
|
cy.useConfigProfile("mobile")
|
|
})
|
|
|
|
describe("password", () => {
|
|
let email = gen.email()
|
|
let password = gen.password()
|
|
|
|
before(() => {
|
|
cy.clearAllCookies()
|
|
})
|
|
|
|
beforeEach(() => {
|
|
email = gen.email()
|
|
password = gen.password()
|
|
|
|
cy.registerApi({
|
|
email,
|
|
password,
|
|
fields: { "traits.website": website },
|
|
})
|
|
cy.loginMobile({ email, password })
|
|
cy.visit(MOBILE_URL + "/Settings")
|
|
})
|
|
|
|
it("should be able to use both TOTP and lookup", () => {
|
|
// set up totp
|
|
let totpSecret
|
|
cy.get('*[data-testid="field/totp_secret_key/text"]').then(($e) => {
|
|
totpSecret = $e.text().trim()
|
|
})
|
|
cy.get('*[data-testid="field/totp_code"]').then(($e) => {
|
|
cy.wrap($e).type(
|
|
new TOTP({
|
|
secret: totpSecret,
|
|
}).generate(),
|
|
)
|
|
})
|
|
cy.get('*[data-testid="field/method/totp"]').click()
|
|
cy.expectSettingsSaved()
|
|
|
|
// Set up backup code
|
|
cy.get('*[data-testid="field/lookup_secret_regenerate/true"]').click()
|
|
let recoveryCodes
|
|
cy.get('*[data-testid="field/lookup_secret_codes/text"]').then(($e) => {
|
|
recoveryCodes = $e.text().trim().split(", ")
|
|
})
|
|
cy.get('*[data-testid="field/lookup_secret_confirm/true"]').click()
|
|
cy.expectSettingsSaved()
|
|
|
|
// Lets sign in with TOTP
|
|
cy.visit(MOBILE_URL + "/Login?aal=aal2&refresh=true")
|
|
cy.get('*[data-testid="field/totp_code"]').then(($e) => {
|
|
cy.wrap($e).type(
|
|
new TOTP({
|
|
secret: totpSecret,
|
|
}).generate(),
|
|
)
|
|
})
|
|
cy.get('*[data-testid="field/method/totp"]').click()
|
|
|
|
// We have AAL now
|
|
cy.get('[data-testid="session-content"]').should("contain", "aal2")
|
|
cy.get('[data-testid="session-content"]').should("contain", "totp")
|
|
|
|
// Lets sign in with lookup secret
|
|
cy.visit(MOBILE_URL + "/Login?aal=aal2&refresh=true")
|
|
cy.get('*[data-testid="field/lookup_secret"]').then(($e) => {
|
|
cy.wrap($e).type(recoveryCodes[0])
|
|
})
|
|
cy.get('*[data-testid="field/method/lookup_secret"]').click()
|
|
|
|
// We have AAL now
|
|
cy.get('[data-testid="session-content"]').should("contain", "aal2")
|
|
cy.get('[data-testid="session-content"]').should("contain", "totp")
|
|
cy.get('[data-testid="session-content"]').should(
|
|
"contain",
|
|
"lookup_secret",
|
|
)
|
|
})
|
|
})
|
|
})
|
|
})
|