Files
cloudron-box/src/routes/test/common.js
Girish Ramakrishnan d34b102e52 mandatory2fa: fix workflow when using external LDAP
* Always allow the mandatory 2fa setting to be saved
* Show warning for user if they have no 2fa setup and if not external 2fa
* If they get locked out anyway, they have to use CLI tool
* redirect for mandatory 2fa only if not external 2fa as well
2024-06-12 12:26:40 +02:00

143 lines
4.7 KiB
JavaScript

'use strict';
const appstore = require('../../appstore.js'),
constants = require('../../constants.js'),
database = require('../../database.js'),
expect = require('expect.js'),
fs = require('fs'),
mailer = require('../../mailer.js'),
oidc = require('../../oidc.js'),
safe = require('safetydance'),
server = require('../../server.js'),
settings = require('../../settings.js'),
support = require('../../support.js'),
superagent = require('superagent'),
tasks = require('../../tasks.js'),
timers = require('timers/promises'),
tokens = require('../../tokens.js');
exports = module.exports = {
setup,
setupServer,
cleanup,
clearMailQueue,
checkMails,
waitForTask,
owner: {
id: null,
username: 'superadmin',
password: 'Foobar?1337',
email: 'superadmin@cloudron.local',
displayName: 'Super Admin',
token: null
},
admin: {
id: null,
username: 'administrator',
password: 'Foobar?1339',
email: 'admin@cloudron.local',
token: null
},
user: {
id: null,
username: 'user',
password: 'Foobar?1338',
email: 'user@cloudron.local',
token: null
},
mockApiServerOrigin: 'http://localhost:6060',
dashboardDomain: 'test.example.com',
dashboardFqdn: 'my.test.example.com',
appstoreToken: 'toktok',
mailFqdn: 'my.test.example.com',
serverUrl: `http://localhost:${constants.PORT}`,
};
async function setupServer() {
await database.initialize();
await database._clear();
await appstore._setApiServerOrigin(exports.mockApiServerOrigin);
await oidc.stop();
await server.start();
}
async function setup() {
const owner = exports.owner, serverUrl = exports.serverUrl, user = exports.user, admin = exports.admin;
await setupServer();
await safe(fs.promises.unlink(support._sshInfo().filePath));
// setup
let response = await superagent.post(`${serverUrl}/api/v1/provision/setup`)
.send({ domainConfig: { provider: 'noop', domain: exports.dashboardDomain, config: {}, tlsConfig: { provider: 'fallback' } } });
expect(response.status).to.eql(200);
await timers.setTimeout(2000);
// create admin
response = await superagent.post(`${serverUrl}/api/v1/provision/activate`)
.query({ setupToken: 'somesetuptoken' })
.send({ username: owner.username, password: owner.password, email: owner.email });
expect(response.status).to.eql(201);
owner.token = response.body.token;
owner.id = response.body.userId;
// create an admin
response = await superagent.post(`${serverUrl}/api/v1/users`)
.query({ access_token: owner.token })
.send({ username: admin.username, email: admin.email, password: admin.password });
expect(response.status).to.equal(201);
admin.id = response.body.id;
// HACK to get a token for second user (passwords are generated and the user should have gotten a password setup link...)
const token1 = await tokens.add({ identifier: admin.id, clientId: tokens.ID_WEBADMIN, expires: Date.now() + (60 * 60 * 1000), name: 'fromtest' });
admin.token = token1.accessToken;
// create user
response = await superagent.post(`${serverUrl}/api/v1/users`)
.query({ access_token: owner.token })
.send({ username: user.username, email: user.email, password: user.password });
expect(response.status).to.equal(201);
user.id = response.body.id;
// HACK to get a token for second user (passwords are generated and the user should have gotten a password setup link...)
const token2 = await tokens.add({ identifier: user.id, clientId: tokens.ID_WEBADMIN, expires: Date.now() + (60 * 60 * 1000), name: 'fromtest' });
user.token = token2.accessToken;
await settings._set(settings.APPSTORE_API_TOKEN_KEY, exports.appstoreToken); // appstore token
}
async function cleanup() {
await database._clear();
await server.stop();
await oidc.stop();
}
function clearMailQueue() {
mailer._mailQueue = [];
}
async function checkMails(number) {
await timers.setTimeout(1000);
expect(mailer._mailQueue.length).to.equal(number);
clearMailQueue();
}
async function waitForTask(taskId) {
// eslint-disable-next-line no-constant-condition
for (let i = 0; i < 30; i++) {
const result = await tasks.get(taskId);
expect(result).to.not.be(null);
if (!result.active) {
if (result.success) return result;
throw new Error(`Task ${taskId} failed: ${result.error.message} - ${result.error.stack}`);
}
await timers.setTimeout(2000);
console.log(`Waiting for task to ${taskId} finish`);
}
throw new Error(`Task ${taskId} never finished`);
}