Timshel
2 months ago
15 changed files with 294 additions and 162 deletions
@ -0,0 +1,92 @@ |
|||
import { expect, type Page, Test } from '@playwright/test'; |
|||
import { type MailBuffer } from 'maildev'; |
|||
import * as OTPAuth from "otpauth"; |
|||
|
|||
import * as utils from '../../global-utils'; |
|||
|
|||
export async function activateTOTP(test: Test, page: Page, user: { name: string, password: string }): OTPAuth.TOTP { |
|||
return await test.step('Activate TOTP 2FA', async () => { |
|||
await page.getByRole('button', { name: user.name }).click(); |
|||
await page.getByRole('menuitem', { name: 'Account settings' }).click(); |
|||
await page.getByRole('link', { name: 'Security' }).click(); |
|||
await page.getByRole('link', { name: 'Two-step login' }).click(); |
|||
await page.locator('bit-item').filter({ hasText: /Authenticator app/ }).getByRole('button').click(); |
|||
await page.getByLabel('Master password (required)').fill(user.password); |
|||
await page.getByRole('button', { name: 'Continue' }).click(); |
|||
|
|||
const secret = await page.getByLabel('Key').innerText(); |
|||
let totp = new OTPAuth.TOTP({ secret, period: 30 }); |
|||
|
|||
await page.getByLabel(/Verification code/).fill(totp.generate()); |
|||
await page.getByRole('button', { name: 'Turn on' }).click(); |
|||
await page.getByRole('heading', { name: 'Turned on', exact: true }); |
|||
await page.getByLabel('Close').click(); |
|||
|
|||
return totp; |
|||
}) |
|||
} |
|||
|
|||
export async function disableTOTP(test: Test, page: Page, user: { password: string }) { |
|||
await test.step('Disable TOTP 2FA', async () => { |
|||
await page.getByRole('button', { name: 'Test' }).click(); |
|||
await page.getByRole('menuitem', { name: 'Account settings' }).click(); |
|||
await page.getByRole('link', { name: 'Security' }).click(); |
|||
await page.getByRole('link', { name: 'Two-step login' }).click(); |
|||
await page.locator('bit-item').filter({ hasText: /Authenticator app/ }).getByRole('button').click(); |
|||
await page.getByLabel('Master password (required)').click(); |
|||
await page.getByLabel('Master password (required)').fill(user.password); |
|||
await page.getByRole('button', { name: 'Continue' }).click(); |
|||
await page.getByRole('button', { name: 'Turn off' }).click(); |
|||
await page.getByRole('button', { name: 'Yes' }).click(); |
|||
await utils.checkNotification(page, 'Two-step login provider turned off'); |
|||
}); |
|||
} |
|||
|
|||
export async function activateEmail(test: Test, page: Page, user: { name: string, password: string }, mailBuffer: MailBuffer) { |
|||
await test.step('Activate Email 2FA', async () => { |
|||
await page.getByRole('button', { name: user.name }).click(); |
|||
await page.getByRole('menuitem', { name: 'Account settings' }).click(); |
|||
await page.getByRole('link', { name: 'Security' }).click(); |
|||
await page.getByRole('link', { name: 'Two-step login' }).click(); |
|||
await page.locator('bit-item').filter({ hasText: 'Email Email Enter a code sent' }).getByRole('button').click(); |
|||
await page.getByLabel('Master password (required)').fill(user.password); |
|||
await page.getByRole('button', { name: 'Continue' }).click(); |
|||
await page.getByRole('button', { name: 'Send email' }).click(); |
|||
}); |
|||
|
|||
let code = await retrieveEmailCode(test, page, mailBuffer); |
|||
|
|||
await test.step('input code', async () => { |
|||
await page.getByLabel('2. Enter the resulting 6').fill(code); |
|||
await page.getByRole('button', { name: 'Turn on' }).click(); |
|||
await page.getByRole('heading', { name: 'Turned on', exact: true }); |
|||
}); |
|||
} |
|||
|
|||
export async function retrieveEmailCode(test: Test, page: Page, mailBuffer: MailBuffer): string { |
|||
return await test.step('retrieve code', async () => { |
|||
const codeMail = await mailBuffer.next((mail) => mail.subject.includes("Login Verification Code")); |
|||
const page2 = await page.context().newPage(); |
|||
await page2.setContent(codeMail.html); |
|||
const code = await page2.getByTestId("2fa").innerText(); |
|||
await page2.close(); |
|||
return code; |
|||
}); |
|||
} |
|||
|
|||
export async function disableEmail(test: Test, page: Page, user: { password: string }) { |
|||
await test.step('Disable Email 2FA', async () => { |
|||
await page.getByRole('button', { name: 'Test' }).click(); |
|||
await page.getByRole('menuitem', { name: 'Account settings' }).click(); |
|||
await page.getByRole('link', { name: 'Security' }).click(); |
|||
await page.getByRole('link', { name: 'Two-step login' }).click(); |
|||
await page.locator('bit-item').filter({ hasText: 'Email' }).getByRole('button').click(); |
|||
await page.getByLabel('Master password (required)').click(); |
|||
await page.getByLabel('Master password (required)').fill(user.password); |
|||
await page.getByRole('button', { name: 'Continue' }).click(); |
|||
await page.getByRole('button', { name: 'Turn off' }).click(); |
|||
await page.getByRole('button', { name: 'Yes' }).click(); |
|||
|
|||
await utils.checkNotification(page, 'Two-step login provider turned off'); |
|||
}); |
|||
} |
|||
@ -0,0 +1,53 @@ |
|||
import { test, expect, type TestInfo } from '@playwright/test'; |
|||
import { MailDev } from 'maildev'; |
|||
|
|||
import { logNewUser, logUser } from './setups/sso'; |
|||
import { activateEmail, disableEmail } from './setups/2fa'; |
|||
import * as utils from "../global-utils"; |
|||
|
|||
let users = utils.loadEnv(); |
|||
|
|||
let mailserver; |
|||
|
|||
test.beforeAll('Setup', async ({ browser }, testInfo: TestInfo) => { |
|||
mailserver = new MailDev({ |
|||
port: process.env.MAILDEV_SMTP_PORT, |
|||
web: { port: process.env.MAILDEV_HTTP_PORT }, |
|||
}) |
|||
|
|||
await mailserver.listen(); |
|||
|
|||
await utils.startVaultwarden(browser, testInfo, { |
|||
SSO_ENABLED: true, |
|||
SSO_ONLY: false, |
|||
SMTP_HOST: process.env.MAILDEV_HOST, |
|||
SMTP_FROM: process.env.VAULTWARDEN_SMTP_FROM, |
|||
}); |
|||
}); |
|||
|
|||
test.afterAll('Teardown', async ({}) => { |
|||
utils.stopVaultwarden(); |
|||
if( mailserver ){ |
|||
await mailserver.close(); |
|||
} |
|||
}); |
|||
|
|||
test('Create and activate 2FA', async ({ page }) => { |
|||
const mailBuffer = mailserver.buffer(users.user1.email); |
|||
|
|||
await logNewUser(test, page, users.user1, {mailBuffer: mailBuffer}); |
|||
|
|||
await activateEmail(test, page, users.user1, mailBuffer); |
|||
|
|||
mailBuffer.close(); |
|||
}); |
|||
|
|||
test('Log and disable', async ({ page }) => { |
|||
const mailBuffer = mailserver.buffer(users.user1.email); |
|||
|
|||
await logUser(test, page, users.user1, {mailBuffer: mailBuffer, mail2fa: true}); |
|||
|
|||
await disableEmail(test, page, users.user1); |
|||
|
|||
mailBuffer.close(); |
|||
}); |
|||
Loading…
Reference in new issue