forum/app/assets/javascripts/discourse/tests/acceptance/user-preferences-second-factor-test.js

import {
  click,
  currentRouteName,
  fillIn,
  triggerKeyEvent,
  visit,
} from "@ember/test-helpers";
import { test } from "qunit";
import {
  acceptance,
  updateCurrentUser,
} from "discourse/tests/helpers/qunit-helpers";

acceptance("User Preferences - Second Factor", function (needs) {
  needs.user();

  needs.pretender((server, helper) => {
    server.post("/u/second_factors.json", () => {
      return helper.response({
        success: "OK",
        totps: [{ id: 1, name: "one of them" }],
        security_keys: [{ id: 2, name: "key" }],
      });
    });

    server.post("/u/create_second_factor_security_key.json", () => {
      return helper.response({
        challenge:
          "a6d393d12654c130b2273e68ca25ca232d1d7f4c2464c2610fb8710a89d4",
        rp_id: "localhost",
        rp_name: "Discourse",
        supported_algorithms: [-7, -257],
      });
    });

    server.post("/u/enable_second_factor_totp.json", () => {
      return helper.response({ error: "invalid token" });
    });

    server.post("/u/create_second_factor_totp.json", () => {
      return helper.response({
        key: "rcyryaqage3jexfj",
        qr: "data:image/gif;base64,R0lGODlhAQABAAD/ACwAAAAAAQABAAACADs=",
      });
    });

    server.put("/u/security_key.json", () => {
      return helper.response({
        success: "OK",
      });
    });

    server.put("/u/second_factors_backup.json", () => {
      return helper.response({
        backup_codes: ["dsffdsd", "fdfdfdsf", "fddsds"],
      });
    });

    server.get("/u/trusted-session.json", () => {
      return helper.response({ success: "OK" });
    });
  });

  test("second factor totp", async function (assert) {
    await visit("/u/eviltrout/preferences/second-factor");

    await click(".new-totp");
    assert.dom(".qr-code img").exists("shows qr code image");

    await click(".modal a.show-second-factor-key");
    assert
      .dom(".modal .second-factor-key")
      .exists("displays second factor key");

    await click(".add-totp");
    assert
      .dom(".alert-error")
      .includesHtml(
        "provide a name and the code",
        "shows name/token missing error message"
      );
  });

  test("second factor security keys", async function (assert) {
    await visit("/u/eviltrout/preferences/second-factor");

    await click(".new-security-key");
    assert.dom("#security-key-name").exists("shows security key name input");

    await fillIn("#security-key-name", "");

    // The following tests can only run when Webauthn is enabled. This is not
    // always the case, for example on a browser running on a non-standard port
    if (typeof PublicKeyCredential !== "undefined") {
      await click(".add-security-key");

      assert
        .dom(".alert-error")
        .includesHtml("provide a name", "shows name missing error message");
    }
  });

  test("delete second factor security method", async function (assert) {
    updateCurrentUser({ moderator: false, admin: false, trust_level: 1 });
    await visit("/u/eviltrout/preferences/second-factor");

    await click(".token-based-auth-dropdown .select-kit-header");
    await click("li[data-name='Disable']");

    assert.dom("#dialog-title").hasText("Deleting an authenticator");
    await click(".dialog-close");

    assert
      .dom(".security-key .second-factor-item")
      .exists("User has a physical security key");

    await click(".security-key-dropdown .select-kit-header");
    await click("li[data-name='Disable']");

    assert.dom("#dialog-title").hasText("Deleting an authenticator");
    await click(".dialog-footer .btn-danger");
    assert
      .dom(".security-key .second-factor-item")
      .doesNotExist("security key row is removed after a successful delete");

    await click(".pref-second-factor-disable-all .btn-danger");
    assert
      .dom("#dialog-title")
      .hasText("Are you sure you want to disable two-factor authentication?");
  });

  test("rename second factor security method", async function (assert) {
    updateCurrentUser({ moderator: false, admin: false, trust_level: 1 });
    await visit("/u/eviltrout/preferences/second-factor");

    assert
      .dom(".security-key .second-factor-item")
      .exists("User has a physical security key");

    await click(".security-key-dropdown .select-kit-header");
    await click(".security-key-dropdown li[data-name='Edit']");

    await fillIn("input[name='security-key-name']", "keyname changed");
    await triggerKeyEvent(".d-modal .btn-primary", "keydown", "Enter");

    assert
      .dom(".d-modal__container")
      .doesNotExist("modal is closed when form is submitted via keyboard");
  });
});

acceptance(
  "User Preferences - Second Factor - Unconfirmed Session",
  function (needs) {
    needs.user();

    needs.pretender((server, helper) => {
      server.post("/u/second_factors.json", () => {
        return helper.response({
          success: "OK",
          unconfirmed_session: "true",
        });
      });
    });

    test("redirects to security preferences", async function (assert) {
      await visit("/u/eviltrout/preferences/second-factor");

      assert.strictEqual(
        currentRouteName(),
        "preferences.security",
        "it transitions to security preferences"
      );
    });
  }
);