1
0
mirror of https://github.com/typemill/typemill.git synced 2025-10-15 14:54:34 +02:00
Files
php-typemill/cypress/test99-login.spec.js
2020-04-21 08:01:28 +02:00

87 lines
2.8 KiB
JavaScript

describe('Typemill Login', function()
{
it('redirects if visits dashboard without login', function ()
{
cy.visit('/tm/content')
cy.url().should('include', '/tm/login')
})
it('submits a valid form and logout', function ()
{
// visits login page and adds valid input
cy.visit('/tm/login')
cy.url().should('include','/tm/login')
cy.get('input[name="username"]')
.type('trendschau')
.should('have.value', 'trendschau')
.and('have.attr', 'required')
cy.get('input[name="password"]')
.type('password')
.should('have.value', 'password')
.and('have.attr', 'required')
// can login
cy.get('form').submit()
cy.url().should('include','/tm/content')
cy.getCookie('typemill-session').should('exist')
Cypress.Cookies.preserveOnce('typemill-session')
})
it('redirects if visits login form when logged in', function ()
{
cy.visit('/tm/login')
cy.url().should('include', '/tm/content')
Cypress.Cookies.preserveOnce('typemill-session')
})
it('logs out', function ()
{
cy.contains('Logout').click()
cy.url().should('include', '/tm/login')
})
it('fails without CSRF-token', function ()
{
cy.request({
method: 'POST',
url: '/tm/login', // baseUrl is prepended to url
form: true, // indicates the body should be form urlencoded and sets Content-Type: application/x-www-form-urlencoded headers
failOnStatusCode: false,
body: {
username: 'trendschau',
password: 'password'
}
})
.its('body')
.should('include', 'Failed CSRF check')
})
it('blocks after 3 fails', function ()
{
cy.visit('/tm/login')
// validation fails first
cy.get('input[name="username"]').clear().type('wrong')
cy.get('input[name="password"]').clear().type('pass')
cy.get('form').submit()
cy.get('#flash-message').should('contain', 'wrong password or username')
cy.get('input[name="username"]').should('have.value', 'wrong')
cy.get('input[name="password"]').should('have.value', '')
// validation fails second
cy.get('input[name="password"]').clear().type('pass')
cy.get('form').submit()
cy.get('#flash-message').should('contain', 'wrong password or username')
// validation fails third and login is blocked
cy.get('input[name="password"]').clear().type('pass')
cy.get('form').submit()
cy.get('#flash-message').should('contain', 'Too many bad logins')
cy.contains('wait')
cy.contains('Forgot password')
})
})