c60cc7ca75
Some checks failed
CI / Run tests and lints (push) Failing after 29s
CI / Build CLI docs (push) Has been skipped
CI / Run Playwright end-to-end tests (mysql) (push) Failing after 3s
CI / Run Playwright end-to-end tests (postgres) (push) Failing after 2s
CI / Run Playwright end-to-end tests (sqlite) (push) Failing after 3s
CodeQL / Analyze (go) (push) Failing after 4s
CodeQL / Analyze (javascript) (push) Failing after 3s
Docker Image Scanners / scanners (push) Failing after 4s
Synchronize Issue Labels / Synchronize Issue Labels (push) Has been skipped
CI / Run end-to-end tests (postgres) (push) Failing after 19s
CI / Run end-to-end tests (sqlite) (push) Failing after 2s
CI / Run Playwright end-to-end tests (cockroach) (push) Failing after 2s
CI / Draft newsletter (push) Has been skipped
CI / Generate release (push) Has been skipped
CI / Pending approval Slack notification (push) Has been skipped
CI / Send newsletter (push) Has been skipped
104 lines
3.3 KiB
TypeScript
104 lines
3.3 KiB
TypeScript
// Copyright © 2023 Ory Corp
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
import { gen, MOBILE_URL, website } from "../../../../helpers"
|
|
import { TOTP } from "otpauth"
|
|
|
|
context("Mobile Profile", () => {
|
|
describe("TOTP 2FA Flow", () => {
|
|
before(() => {
|
|
cy.useConfigProfile("mobile")
|
|
})
|
|
|
|
describe("password", () => {
|
|
let email = gen.email()
|
|
let password = gen.password()
|
|
|
|
before(() => {
|
|
cy.clearAllCookies()
|
|
})
|
|
|
|
beforeEach(() => {
|
|
email = gen.email()
|
|
password = gen.password()
|
|
|
|
cy.registerApi({
|
|
email,
|
|
password,
|
|
fields: { "traits.website": website },
|
|
})
|
|
cy.loginMobile({ email, password })
|
|
cy.visit(MOBILE_URL + "/Settings")
|
|
})
|
|
|
|
it("should be able to lifecycle through TOTP flows", () => {
|
|
cy.get('*[data-testid="field/totp_qr"]').should("exist")
|
|
cy.get('*[data-testid="field/totp_code"]').should("exist")
|
|
|
|
// Set up TOTP with invalid key
|
|
cy.get('*[data-testid="field/totp_code"]').type("111111")
|
|
cy.get('*[data-testid="field/method/totp"]').click()
|
|
cy.get('*[data-testid="field/totp_code"]').should(
|
|
"contain.text",
|
|
"The provided authentication code is invalid, please try again.",
|
|
)
|
|
|
|
// Set up TOTP with valid key
|
|
let secret
|
|
cy.get('*[data-testid="field/totp_secret_key/text"]').then(($e) => {
|
|
secret = $e.text().trim()
|
|
})
|
|
cy.get('*[data-testid="field/totp_code"]').then(($e) => {
|
|
cy.wrap($e).type(
|
|
new TOTP({
|
|
secret,
|
|
}).generate(),
|
|
)
|
|
})
|
|
cy.get('*[data-testid="field/method/totp"]').click()
|
|
cy.expectSettingsSaved()
|
|
|
|
// Form should look different now
|
|
cy.get('*[data-testid="field/totp_secret_key/text"]').should(
|
|
"not.exist",
|
|
)
|
|
cy.get('*[data-testid="field/totp_code"]').should("not.exist")
|
|
cy.get('*[data-testid="field/totp_qr"]').should("not.exist")
|
|
cy.get('*[data-testid="field/totp_unlink/true"]').should("exist")
|
|
|
|
// Lets sign in
|
|
cy.visit(MOBILE_URL + "/Login?aal=aal2&refresh=true")
|
|
|
|
// First use a wrong code
|
|
cy.get('*[data-testid="field/totp_code"]').type("111111")
|
|
cy.get('*[data-testid="field/method/totp"]').click()
|
|
cy.get('*[data-testid="form-messages"]').should(
|
|
"contain.text",
|
|
"The provided authentication code is invalid, please try again.",
|
|
)
|
|
|
|
// Use the correct code
|
|
cy.get('*[data-testid="field/totp_code"]').then(($e) => {
|
|
cy.wrap($e).type(
|
|
new TOTP({
|
|
secret,
|
|
}).generate(),
|
|
)
|
|
})
|
|
cy.get('*[data-testid="field/method/totp"]').click()
|
|
|
|
// We have AAL now
|
|
cy.get('[data-testid="session-content"]').should("contain", "aal2")
|
|
cy.get('[data-testid="session-content"]').should("contain", "totp")
|
|
|
|
// Go back to settings and unlink
|
|
cy.visit(MOBILE_URL + "/Settings")
|
|
cy.get('*[data-testid="field/totp_unlink/true"]').click()
|
|
cy.get('*[data-testid="field/totp_unlink/true"]').should("not.exist")
|
|
cy.get('*[data-testid="field/totp_qr"]').should("exist")
|
|
cy.get('*[data-testid="field/totp_code"]').should("exist")
|
|
})
|
|
})
|
|
})
|
|
})
|