Version 1.3.5 Consolidation

cypress/test99-login.spec.js

@@ -0,0 +1,87 @@
+describe('Typemill Login', function() 
+{
+    it('redirects if visits dashboard without login', function () 
+    {
+        cy.visit('/tm/content')
+        cy.url().should('include', '/tm/login')
+    })
+
+    it('submits a valid form and logout', function () 
+    {
+        // visits login page and adds valid input
+        cy.visit('/tm/login')
+        cy.url().should('include','/tm/login')
+
+        cy.get('input[name="username"]')
+          .type('trendschau')
+          .should('have.value', 'trendschau')
+          .and('have.attr', 'required')
+
+        cy.get('input[name="password"]')
+          .type('password')
+          .should('have.value', 'password')
+          .and('have.attr', 'required')
+
+        // can login
+        cy.get('form').submit()
+        cy.url().should('include','/tm/content')
+        cy.getCookie('typemill-session').should('exist')
+
+        Cypress.Cookies.preserveOnce('typemill-session')
+    })
+
+    it('redirects if visits login form when logged in', function () 
+    {
+        cy.visit('/tm/login')
+        cy.url().should('include', '/tm/content')
+
+        Cypress.Cookies.preserveOnce('typemill-session')
+    })
+
+    it('logs out', function () 
+    {
+        cy.contains('Logout').click()
+        cy.url().should('include', '/tm/login')
+    })
+
+    it('fails without CSRF-token', function ()
+    {
+      cy.request({
+        method: 'POST',
+        url: '/tm/login', // baseUrl is prepended to url
+        form: true, // indicates the body should be form urlencoded and sets Content-Type: application/x-www-form-urlencoded headers
+        failOnStatusCode: false,
+        body: {
+          username: 'trendschau', 
+          password: 'password'
+        }
+      })
+        .its('body')
+        .should('include', 'Failed CSRF check')
+    })
+ 
+    it('blocks after 3 fails', function ()
+    {
+        cy.visit('/tm/login')
+
+        // validation fails first
+        cy.get('input[name="username"]').clear().type('wrong')
+        cy.get('input[name="password"]').clear().type('pass')
+        cy.get('form').submit()
+        cy.get('#flash-message').should('contain', 'wrong password or username')
+        cy.get('input[name="username"]').should('have.value', 'wrong')
+        cy.get('input[name="password"]').should('have.value', '')
+
+        // validation fails second
+        cy.get('input[name="password"]').clear().type('pass')
+        cy.get('form').submit()
+        cy.get('#flash-message').should('contain', 'wrong password or username')
+
+         // validation fails third and login is blocked
+         cy.get('input[name="password"]').clear().type('pass')
+         cy.get('form').submit()
+         cy.get('#flash-message').should('contain', 'Too many bad logins')
+         cy.contains('wait')        
+         cy.contains('Forgot password')
+    })
+})