mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
63 lines
3.2 KiB
TypeScript
63 lines
3.2 KiB
TypeScript
import SeleniumWebDriver from 'selenium-webdriver';
|
|
|
|
import VisitPage from '../../../helpers/VisitPage';
|
|
import ClickOnLink from '../../../helpers/ClickOnLink';
|
|
import ClickOn from '../../../helpers/ClickOn';
|
|
import WaitRedirected from '../../../helpers/WaitRedirected';
|
|
import FillField from "../../../helpers/FillField";
|
|
import {GetLinkFromEmail} from "../../../helpers/GetIdentityLink";
|
|
import FillLoginPageAndClick from "../../../helpers/FillLoginPageAndClick";
|
|
import IsSecondFactorStage from "../../../helpers/IsSecondFactorStage";
|
|
import SeeNotification from '../../../helpers/SeeNotification';
|
|
|
|
export default function() {
|
|
it("should reset password for john", async function() {
|
|
await VisitPage(this.driver, "https://login.example.com:8080/");
|
|
await ClickOnLink(this.driver, "Forgot password\?");
|
|
await WaitRedirected(this.driver, "https://login.example.com:8080/forgot-password");
|
|
await FillField(this.driver, "username", "john");
|
|
await ClickOn(this.driver, SeleniumWebDriver.By.id('next-button'));
|
|
await WaitRedirected(this.driver, 'https://login.example.com:8080/confirmation-sent');
|
|
|
|
await this.driver.sleep(500); // Simulate the time it takes to receive the e-mail.
|
|
const link = await GetLinkFromEmail();
|
|
await VisitPage(this.driver, link);
|
|
await FillField(this.driver, "password1", "newpass");
|
|
await FillField(this.driver, "password2", "newpass");
|
|
await ClickOn(this.driver, SeleniumWebDriver.By.id('reset-button'));
|
|
await WaitRedirected(this.driver, "https://login.example.com:8080/");
|
|
await FillLoginPageAndClick(this.driver, "john", "newpass");
|
|
|
|
// The user reaches the second factor page using the new password.
|
|
await IsSecondFactorStage(this.driver);
|
|
});
|
|
|
|
it("should persuade reset password is initiated for unknown user", async function() {
|
|
await VisitPage(this.driver, "https://login.example.com:8080/");
|
|
await ClickOnLink(this.driver, "Forgot password\?");
|
|
await WaitRedirected(this.driver, "https://login.example.com:8080/forgot-password");
|
|
await FillField(this.driver, "username", "unknown");
|
|
await ClickOn(this.driver, SeleniumWebDriver.By.id('next-button'));
|
|
|
|
// The malicious user thinks the confirmation has been sent.
|
|
await WaitRedirected(this.driver, 'https://login.example.com:8080/confirmation-sent');
|
|
});
|
|
|
|
it("should notify passwords are different in reset form", async function() {
|
|
await VisitPage(this.driver, "https://login.example.com:8080/");
|
|
await ClickOnLink(this.driver, "Forgot password\?");
|
|
await WaitRedirected(this.driver, "https://login.example.com:8080/forgot-password");
|
|
await FillField(this.driver, "username", "john");
|
|
await ClickOn(this.driver, SeleniumWebDriver.By.id('next-button'));
|
|
await WaitRedirected(this.driver, 'https://login.example.com:8080/confirmation-sent');
|
|
|
|
await this.driver.sleep(500); // Simulate the time it takes to receive the e-mail.
|
|
const link = await GetLinkFromEmail();
|
|
await VisitPage(this.driver, link);
|
|
await FillField(this.driver, "password1", "newpass");
|
|
await FillField(this.driver, "password2", "badpass");
|
|
await ClickOn(this.driver, SeleniumWebDriver.By.id('reset-button'));
|
|
await SeeNotification(this.driver, "error", "The passwords are different.");
|
|
});
|
|
}
|