c60cc7ca75
Some checks failed
CI / Run tests and lints (push) Failing after 29s
CI / Build CLI docs (push) Has been skipped
CI / Run Playwright end-to-end tests (mysql) (push) Failing after 3s
CI / Run Playwright end-to-end tests (postgres) (push) Failing after 2s
CI / Run Playwright end-to-end tests (sqlite) (push) Failing after 3s
CodeQL / Analyze (go) (push) Failing after 4s
CodeQL / Analyze (javascript) (push) Failing after 3s
Docker Image Scanners / scanners (push) Failing after 4s
Synchronize Issue Labels / Synchronize Issue Labels (push) Has been skipped
CI / Run end-to-end tests (postgres) (push) Failing after 19s
CI / Run end-to-end tests (sqlite) (push) Failing after 2s
CI / Run Playwright end-to-end tests (cockroach) (push) Failing after 2s
CI / Draft newsletter (push) Has been skipped
CI / Generate release (push) Has been skipped
CI / Pending approval Slack notification (push) Has been skipped
CI / Send newsletter (push) Has been skipped
419 lines
14 KiB
TypeScript
419 lines
14 KiB
TypeScript
// Copyright © 2023 Ory Corp
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
import { Session } from "@ory/kratos-client"
|
|
import { gen, MOBILE_URL } from "../../../../helpers"
|
|
import { routes as express } from "../../../../helpers/express"
|
|
import { routes as react } from "../../../../helpers/react"
|
|
|
|
const Selectors = {
|
|
mobile: {
|
|
identifier: "[data-testid='field/identifier']",
|
|
recoveryEmail: "[data-testid='field/email']",
|
|
email: "[data-testid='traits.email']",
|
|
email2: "[data-testid='traits.email2']",
|
|
tos: "[data-testid='traits.tos']",
|
|
username: "[data-testid='traits.username']",
|
|
code: "[data-testid='field/code'] input",
|
|
recoveryCode: "[data-testid='code']",
|
|
submitCode: "[data-testid='field/method/code']",
|
|
resendCode: "[data-testid='field/resend/code']",
|
|
submitRecovery: "[data-testid='field/method/code']",
|
|
codeHiddenMethod: "[data-testid='field/method/code']",
|
|
},
|
|
express: {
|
|
identifier: "[data-testid='login-flow-code'] input[name='identifier']",
|
|
recoveryEmail: "input[name=email]",
|
|
email: "[data-testid='registration-flow-code'] input[name='traits.email']",
|
|
email2:
|
|
"[data-testid='registration-flow-code'] input[name='traits.email2']",
|
|
tos: "[data-testid='registration-flow-code'] [name='traits.tos'] + label",
|
|
username:
|
|
"[data-testid='registration-flow-code'] input[name='traits.username']",
|
|
code: "input[name='code']",
|
|
recoveryCode: "input[name=code]",
|
|
submitRecovery: "button[name=method][value=code]",
|
|
submitCode: "button[name='method'][value='code']",
|
|
resendCode: "button[name='resend'][value='code']",
|
|
codeHiddenMethod: "input[name='method'][value='code'][type='hidden']",
|
|
},
|
|
react: {
|
|
identifier: "input[name='identifier']",
|
|
recoveryEmail: "input[name=email]",
|
|
email: "input[name='traits.email']",
|
|
email2: "input[name='traits.email2']",
|
|
tos: "[name='traits.tos'] + label",
|
|
username: "input[name='traits.username']",
|
|
code: "input[name='code']",
|
|
recoveryCode: "input[name=code]",
|
|
submitRecovery: "button[name=method][value=code]",
|
|
submitCode: "button[name='method'][value='code']",
|
|
resendCode: "button[name='resend'][value='code']",
|
|
codeHiddenMethod: "input[name='method'][value='code'][type='hidden']",
|
|
},
|
|
}
|
|
|
|
context("Registration success with code method", () => {
|
|
;[
|
|
{
|
|
route: express.registration,
|
|
login: express.login,
|
|
recovery: express.recovery,
|
|
app: "express" as "express",
|
|
profile: "code",
|
|
},
|
|
{
|
|
route: react.registration,
|
|
login: react.login,
|
|
recovery: react.recovery,
|
|
app: "react" as "react",
|
|
profile: "code",
|
|
},
|
|
{
|
|
route: MOBILE_URL + "/Registration",
|
|
login: MOBILE_URL + "/Login",
|
|
recovery: MOBILE_URL + "/Recovery",
|
|
app: "mobile" as "mobile",
|
|
profile: "code",
|
|
},
|
|
].forEach(({ route, login, recovery, profile, app }) => {
|
|
describe(`for app ${app}`, () => {
|
|
before(() => {
|
|
cy.useConfigProfile(profile)
|
|
if (app !== "mobile") {
|
|
cy.proxy(app)
|
|
}
|
|
})
|
|
|
|
beforeEach(() => {
|
|
cy.deleteMail()
|
|
cy.clearAllCookies()
|
|
cy.visit(route)
|
|
})
|
|
|
|
// playwright:migrated
|
|
it("should be able to resend the registration code", () => {
|
|
const email = gen.email()
|
|
|
|
cy.get(Selectors[app]["email"]).type(email)
|
|
cy.get(Selectors[app]["tos"]).click()
|
|
|
|
cy.submitCodeForm(app)
|
|
cy.get('[data-testid="ui/message/1040005"]').should("be.visible")
|
|
|
|
cy.getRegistrationCodeFromEmail(email).then((code) =>
|
|
cy.wrap(code).as("code1"),
|
|
)
|
|
|
|
cy.get(Selectors[app]["codeHiddenMethod"]).should("exist")
|
|
cy.get(Selectors[app]["resendCode"]).click()
|
|
|
|
cy.getRegistrationCodeFromEmail(email).then((code) => {
|
|
cy.wrap(code).as("code2")
|
|
})
|
|
|
|
cy.get("@code1").then((code1) => {
|
|
// previous code should not work
|
|
cy.get(Selectors[app]["code"]).clear().type(code1.toString())
|
|
|
|
cy.submitCodeForm(app)
|
|
cy.get('[data-testid="ui/message/4040003"]').should(
|
|
"contain.text",
|
|
"The registration code is invalid or has already been used. Please try again.",
|
|
)
|
|
})
|
|
|
|
cy.get("@code2").then((code2) => {
|
|
cy.get(Selectors[app]["code"]).clear().type(code2.toString())
|
|
cy.submitCodeForm(app)
|
|
})
|
|
|
|
if (app === "mobile") {
|
|
cy.get('[data-testid="session-token"]').then((token) => {
|
|
cy.getSession({
|
|
expectAal: "aal1",
|
|
expectMethods: ["code"],
|
|
token: token.text(),
|
|
}).then((session) => {
|
|
cy.wrap(session).as("session")
|
|
})
|
|
})
|
|
|
|
cy.get('[data-testid="session-content"]').should("contain", email)
|
|
cy.get('[data-testid="session-token"]').should("not.be.empty")
|
|
} else {
|
|
// Wait for the post-registration UI to settle before querying
|
|
// /sessions/whoami. cy.request does not retry the HTTP call on a
|
|
// non-2xx status, so without this sync getSession races the
|
|
// browser's session-cookie persistence and intermittently 401s.
|
|
if (app === "express") {
|
|
cy.url().should("match", /\/welcome/)
|
|
} else {
|
|
cy.get('[data-testid="session-content"]').should("contain", email)
|
|
}
|
|
cy.getSession({ expectAal: "aal1", expectMethods: ["code"] }).then(
|
|
(session) => {
|
|
cy.wrap(session).as("session")
|
|
},
|
|
)
|
|
}
|
|
|
|
cy.get<Session>("@session").then(({ identity }) => {
|
|
expect(identity.id).to.not.be.empty
|
|
expect(identity.verifiable_addresses).to.have.length(1)
|
|
expect(identity.verifiable_addresses[0].status).to.equal("completed")
|
|
expect(identity.traits.email).to.equal(email)
|
|
})
|
|
})
|
|
|
|
// playwright:migrated
|
|
it("should sign up and be logged in with session hook", () => {
|
|
const email = gen.email()
|
|
|
|
cy.get(Selectors[app]["email"]).type(email)
|
|
cy.get(Selectors[app]["tos"]).click()
|
|
|
|
cy.submitCodeForm(app)
|
|
cy.get('[data-testid="ui/message/1040005"]').should("be.visible")
|
|
|
|
cy.getRegistrationCodeFromEmail(email).then((code) => {
|
|
cy.get(Selectors[app]["code"]).type(code)
|
|
cy.get(Selectors[app]["submitCode"]).click()
|
|
})
|
|
|
|
if (app === "express") {
|
|
cy.url().should("match", /\/welcome/)
|
|
} else {
|
|
cy.get('[data-testid="session-content"]').should("contain", email)
|
|
}
|
|
if (app === "mobile") {
|
|
cy.get('[data-testid="session-token"]').should("not.be.empty")
|
|
cy.get('[data-testid="session-token"]').then((token) => {
|
|
cy.getSession({
|
|
expectAal: "aal1",
|
|
expectMethods: ["code"],
|
|
token: token.text(),
|
|
}).then((session) => {
|
|
cy.wrap(session).as("session")
|
|
})
|
|
})
|
|
} else {
|
|
cy.getSession({ expectAal: "aal1", expectMethods: ["code"] }).then(
|
|
(session) => {
|
|
cy.wrap(session).as("session")
|
|
},
|
|
)
|
|
}
|
|
|
|
cy.get<Session>("@session").then(({ identity }) => {
|
|
expect(identity.id).to.not.be.empty
|
|
expect(identity.verifiable_addresses).to.have.length(1)
|
|
expect(identity.verifiable_addresses[0].status).to.equal("completed")
|
|
expect(identity.traits.email).to.equal(email)
|
|
})
|
|
})
|
|
|
|
// playwright:migrated
|
|
it("should be able to sign up without session hook", () => {
|
|
cy.setPostCodeRegistrationHooks([])
|
|
const email = gen.email()
|
|
|
|
cy.get(Selectors[app]["email"]).type(email)
|
|
cy.get(Selectors[app]["tos"]).click()
|
|
|
|
cy.submitCodeForm(app)
|
|
cy.get('[data-testid="ui/message/1040005"]').should("be.visible")
|
|
|
|
cy.getRegistrationCodeFromEmail(email).then((code) => {
|
|
cy.get(Selectors[app]["code"]).type(code)
|
|
cy.get(Selectors[app]["submitCode"]).click()
|
|
})
|
|
|
|
cy.visit(login)
|
|
cy.get(Selectors[app]["identifier"]).type(email)
|
|
cy.get(Selectors[app]["submitCode"]).click()
|
|
|
|
cy.getLoginCodeFromEmail(email).then((code) => {
|
|
cy.get(Selectors[app]["code"]).type(code)
|
|
cy.get(Selectors[app]["submitCode"]).click()
|
|
})
|
|
|
|
if (app === "express") {
|
|
cy.url().should("match", /\/welcome/)
|
|
} else {
|
|
cy.get('[data-testid="session-content"]').should("contain", email)
|
|
}
|
|
|
|
if (app === "mobile") {
|
|
cy.get('[data-testid="session-token"]').should("not.be.empty")
|
|
cy.get('[data-testid="session-token"]').then((token) => {
|
|
cy.getSession({
|
|
expectAal: "aal1",
|
|
expectMethods: ["code"],
|
|
token: token.text(),
|
|
}).then((session) => {
|
|
cy.wrap(session).as("session")
|
|
})
|
|
})
|
|
} else {
|
|
cy.getSession({ expectAal: "aal1", expectMethods: ["code"] }).then(
|
|
(session) => {
|
|
cy.wrap(session).as("session")
|
|
},
|
|
)
|
|
}
|
|
|
|
cy.get<Session>("@session").then(({ identity }) => {
|
|
expect(identity.id).to.not.be.empty
|
|
expect(identity.verifiable_addresses).to.have.length(1)
|
|
expect(identity.verifiable_addresses[0].status).to.equal("completed")
|
|
expect(identity.traits.email).to.equal(email)
|
|
})
|
|
})
|
|
|
|
it("should be able to recover account when registered with code", () => {
|
|
if (app === "mobile") {
|
|
cy.log("WARNING: skipping test for mobile app")
|
|
return
|
|
}
|
|
if (app === "react") {
|
|
// This test is flaky on React, so we skip it for now.
|
|
return
|
|
}
|
|
const email = gen.email()
|
|
cy.registerWithCode({ email, traits: { "traits.tos": 1 } })
|
|
|
|
cy.clearAllCookies()
|
|
cy.visit(recovery)
|
|
|
|
cy.get(Selectors[app]["recoveryEmail"]).type(email)
|
|
cy.get(Selectors[app]["submitRecovery"]).click()
|
|
|
|
cy.recoveryEmailWithCode({ expect: { email, enterCode: false } }).then(
|
|
() => {
|
|
cy.get<string>("@recoveryCode").then((code) => {
|
|
cy.get(Selectors[app]["recoveryCode"]).type(code)
|
|
})
|
|
},
|
|
)
|
|
|
|
cy.get(Selectors[app]["submitRecovery"]).click()
|
|
|
|
// Wait for the post-recovery settings page to render so the session
|
|
// cookie is in Cypress's jar before we hit /sessions/whoami.
|
|
cy.location("pathname").should("contain", "settings")
|
|
|
|
cy.getSession({ expectAal: "aal1" }).then((session) => {
|
|
cy.wrap(session).as("session")
|
|
})
|
|
|
|
cy.get<Session>("@session").then(({ identity }) => {
|
|
expect(identity.id).to.not.be.empty
|
|
expect(identity.traits.email).to.equal(email)
|
|
})
|
|
})
|
|
|
|
// Try keep this test as the last one, as it updates the identity schema.
|
|
it("should be able to use multiple identifiers to signup with and sign in to", () => {
|
|
cy.setPostCodeRegistrationHooks([
|
|
{
|
|
hook: "session",
|
|
},
|
|
{
|
|
hook: "show_verification_ui",
|
|
},
|
|
])
|
|
|
|
// Setup complex schema
|
|
cy.setIdentitySchema(
|
|
"file://test/e2e/profiles/code/identity.complex.traits.schema.json",
|
|
)
|
|
|
|
cy.visit(route)
|
|
|
|
cy.get(Selectors[app]["username"]).type(Math.random().toString(36))
|
|
|
|
const email = gen.email()
|
|
cy.get(Selectors[app]["email"]).type(email)
|
|
|
|
const email2 = gen.email()
|
|
cy.get(Selectors[app]["email2"]).type(email2)
|
|
|
|
cy.submitCodeForm(app)
|
|
cy.get('[data-testid="ui/message/1040005"]').should("be.visible")
|
|
|
|
// intentionally use email 1 to sign up for the account
|
|
cy.getRegistrationCodeFromEmail(email, { expectedCount: 1 }).then(
|
|
(code) => {
|
|
cy.get(Selectors[app]["code"]).type(code)
|
|
cy.get(Selectors[app]["submitCode"]).click()
|
|
},
|
|
)
|
|
cy.get('[data-testid="ui/message/1080003"]').should("be.visible")
|
|
|
|
if (app === "mobile") {
|
|
cy.visit(MOBILE_URL + "/Home")
|
|
cy.get('*[data-testid="logout"]').click()
|
|
} else {
|
|
cy.logout()
|
|
}
|
|
|
|
// There are verification emails from the registration process in the inbox that we need to deleted
|
|
// for the assertions below to pass.
|
|
cy.deleteMail({ atLeast: 1 })
|
|
|
|
// Attempt to sign in with email 2 (should fail)
|
|
cy.visit(login)
|
|
cy.get(Selectors[app]["identifier"]).type(email2)
|
|
|
|
cy.get(Selectors[app]["submitCode"]).click()
|
|
|
|
cy.getLoginCodeFromEmail(email2, {
|
|
expectedCount: 1,
|
|
}).then((code) => {
|
|
cy.get(Selectors[app]["code"]).type(code)
|
|
cy.get(Selectors[app]["submitCode"]).click()
|
|
})
|
|
if (app === "express") {
|
|
cy.url().should("match", /\/welcome/)
|
|
} else {
|
|
cy.get('[data-testid="session-content"]').should("contain", email)
|
|
}
|
|
|
|
if (app === "mobile") {
|
|
cy.get('[data-testid="session-token"]').should("not.be.empty")
|
|
cy.get('[data-testid="session-token"]').then((token) => {
|
|
cy.getSession({
|
|
expectAal: "aal1",
|
|
expectMethods: ["code"],
|
|
token: token.text(),
|
|
}).then((session) => {
|
|
cy.wrap(session).as("session")
|
|
})
|
|
})
|
|
} else {
|
|
cy.getSession({ expectAal: "aal1", expectMethods: ["code"] }).then(
|
|
(session) => {
|
|
cy.wrap(session).as("session")
|
|
},
|
|
)
|
|
}
|
|
|
|
cy.get<Session>("@session").then(({ identity }) => {
|
|
expect(identity.id).to.not.be.empty
|
|
expect(identity.verifiable_addresses).to.have.length(2)
|
|
expect(
|
|
identity.verifiable_addresses.filter((v) => v.value === email)[0]
|
|
.status,
|
|
).to.equal("completed")
|
|
expect(
|
|
identity.verifiable_addresses.filter((v) => v.value === email2)[0]
|
|
.status,
|
|
).to.equal("completed")
|
|
expect(identity.traits.email).to.equal(email)
|
|
})
|
|
})
|
|
})
|
|
})
|
|
})
|