2017-05-29 21:50:03 +03:00
|
|
|
import destroyApp from '../helpers/destroy-app';
|
2015-11-04 18:20:11 +03:00
|
|
|
import startApp from '../helpers/start-app';
|
2016-05-24 15:06:59 +03:00
|
|
|
import windowProxy from 'ghost-admin/utils/window-proxy';
|
2017-05-29 21:50:03 +03:00
|
|
|
import {Response} from 'ember-cli-mirage';
|
|
|
|
import {afterEach, beforeEach, describe, it} from 'mocha';
|
|
|
|
import {authenticateSession, invalidateSession} from 'ghost-admin/tests/helpers/ember-simple-auth';
|
|
|
|
import {expect} from 'chai';
|
2017-08-22 10:53:26 +03:00
|
|
|
import {run} from '@ember/runloop';
|
2016-01-25 14:11:29 +03:00
|
|
|
|
2015-11-04 18:20:11 +03:00
|
|
|
describe('Acceptance: Authentication', function () {
|
|
|
|
let application,
|
|
|
|
originalReplaceLocation;
|
|
|
|
|
|
|
|
beforeEach(function () {
|
|
|
|
application = startApp();
|
|
|
|
});
|
|
|
|
|
|
|
|
afterEach(function () {
|
2015-11-30 20:21:39 +03:00
|
|
|
destroyApp(application);
|
2015-11-04 18:20:11 +03:00
|
|
|
});
|
|
|
|
|
2017-03-14 19:04:46 +03:00
|
|
|
describe('setup redirect', function () {
|
|
|
|
beforeEach(function () {
|
2017-10-13 12:39:49 +03:00
|
|
|
// ensure the /users/me route doesn't error
|
|
|
|
server.create('user');
|
2017-03-14 19:04:46 +03:00
|
|
|
server.get('authentication/setup', function () {
|
|
|
|
return {setup: [{status: false}]};
|
|
|
|
});
|
|
|
|
});
|
2017-04-24 15:29:48 +03:00
|
|
|
it('redirects to setup when setup isn\'t complete', async function () {
|
|
|
|
await visit('settings/labs');
|
|
|
|
expect(currentURL()).to.equal('/setup/one');
|
2017-03-14 19:04:46 +03:00
|
|
|
});
|
|
|
|
});
|
|
|
|
|
2015-11-04 18:20:11 +03:00
|
|
|
describe('general page', function () {
|
2017-04-24 15:29:48 +03:00
|
|
|
let newLocation;
|
|
|
|
|
2015-11-04 18:20:11 +03:00
|
|
|
beforeEach(function () {
|
|
|
|
originalReplaceLocation = windowProxy.replaceLocation;
|
|
|
|
windowProxy.replaceLocation = function (url) {
|
2017-01-25 23:05:28 +03:00
|
|
|
url = url.replace(/^\/ghost\//, '/');
|
2017-04-24 15:29:48 +03:00
|
|
|
newLocation = url;
|
2015-11-04 18:20:11 +03:00
|
|
|
};
|
2017-04-24 15:29:48 +03:00
|
|
|
newLocation = undefined;
|
2015-11-04 18:20:11 +03:00
|
|
|
|
2015-10-28 14:36:45 +03:00
|
|
|
let role = server.create('role', {name: 'Administrator'});
|
2016-11-14 16:16:51 +03:00
|
|
|
server.create('user', {roles: [role], slug: 'test-user'});
|
2015-11-04 18:20:11 +03:00
|
|
|
});
|
|
|
|
|
|
|
|
afterEach(function () {
|
|
|
|
windowProxy.replaceLocation = originalReplaceLocation;
|
|
|
|
});
|
|
|
|
|
2017-04-24 15:29:48 +03:00
|
|
|
it('invalidates session on 401 API response', async function () {
|
2016-05-14 04:02:55 +03:00
|
|
|
// return a 401 when attempting to retrieve users
|
2018-01-05 18:38:23 +03:00
|
|
|
server.get('/users/', () => new Response(401, {}, {
|
|
|
|
errors: [
|
|
|
|
{message: 'Access denied.', errorType: 'UnauthorizedError'}
|
|
|
|
]
|
|
|
|
}));
|
2015-11-04 18:20:11 +03:00
|
|
|
|
2017-04-24 15:29:48 +03:00
|
|
|
await authenticateSession(application);
|
|
|
|
await visit('/team');
|
2015-11-04 18:20:11 +03:00
|
|
|
|
2017-04-24 15:29:48 +03:00
|
|
|
// running `visit(url)` inside windowProxy.replaceLocation breaks
|
|
|
|
// the async behaviour so we need to run `visit` here to simulate
|
|
|
|
// the browser visiting the new page
|
|
|
|
if (newLocation) {
|
|
|
|
await visit(newLocation);
|
|
|
|
}
|
2017-03-14 19:04:46 +03:00
|
|
|
|
2017-04-24 15:29:48 +03:00
|
|
|
expect(currentURL(), 'url after 401').to.equal('/signin');
|
2015-11-04 18:20:11 +03:00
|
|
|
});
|
2016-05-14 04:02:55 +03:00
|
|
|
|
2017-04-24 15:29:48 +03:00
|
|
|
it('doesn\'t show navigation menu on invalid url when not authenticated', async function () {
|
2016-05-14 04:02:55 +03:00
|
|
|
invalidateSession(application);
|
|
|
|
|
2017-04-24 15:29:48 +03:00
|
|
|
await visit('/');
|
2016-05-14 04:02:55 +03:00
|
|
|
|
2017-04-24 15:29:48 +03:00
|
|
|
expect(currentURL(), 'current url').to.equal('/signin');
|
|
|
|
expect(find('nav.gh-nav').length, 'nav menu presence').to.equal(0);
|
2016-05-14 04:02:55 +03:00
|
|
|
|
2017-04-24 15:29:48 +03:00
|
|
|
await visit('/signin/invalidurl/');
|
2016-05-14 04:02:55 +03:00
|
|
|
|
2017-04-24 15:29:48 +03:00
|
|
|
expect(currentURL(), 'url after invalid url').to.equal('/signin/invalidurl/');
|
|
|
|
expect(currentPath(), 'path after invalid url').to.equal('error404');
|
|
|
|
expect(find('nav.gh-nav').length, 'nav menu presence').to.equal(0);
|
2016-05-14 04:02:55 +03:00
|
|
|
});
|
|
|
|
|
2017-04-24 15:29:48 +03:00
|
|
|
it('shows nav menu on invalid url when authenticated', async function () {
|
|
|
|
await authenticateSession(application);
|
|
|
|
await visit('/signin/invalidurl/');
|
2016-05-14 04:02:55 +03:00
|
|
|
|
2017-04-24 15:29:48 +03:00
|
|
|
expect(currentURL(), 'url after invalid url').to.equal('/signin/invalidurl/');
|
|
|
|
expect(currentPath(), 'path after invalid url').to.equal('error404');
|
|
|
|
expect(find('nav.gh-nav').length, 'nav menu presence').to.equal(1);
|
2016-05-14 04:02:55 +03:00
|
|
|
});
|
2015-11-04 18:20:11 +03:00
|
|
|
});
|
|
|
|
|
2017-01-02 21:50:36 +03:00
|
|
|
// TODO: re-enable once modal reappears correctly
|
2016-09-26 16:04:20 +03:00
|
|
|
describe.skip('editor', function () {
|
2016-06-11 19:52:36 +03:00
|
|
|
let origDebounce = run.debounce;
|
|
|
|
let origThrottle = run.throttle;
|
2015-11-04 18:20:11 +03:00
|
|
|
|
|
|
|
// we don't want the autosave interfering in this test
|
|
|
|
beforeEach(function () {
|
2016-06-11 19:52:36 +03:00
|
|
|
run.debounce = function () { };
|
|
|
|
run.throttle = function () { };
|
2015-11-04 18:20:11 +03:00
|
|
|
});
|
|
|
|
|
2017-04-24 15:29:48 +03:00
|
|
|
it('displays re-auth modal attempting to save with invalid session', async function () {
|
2015-10-28 14:36:45 +03:00
|
|
|
let role = server.create('role', {name: 'Administrator'});
|
2016-11-14 16:16:51 +03:00
|
|
|
server.create('user', {roles: [role]});
|
2015-11-04 18:20:11 +03:00
|
|
|
|
|
|
|
// simulate an invalid session when saving the edited post
|
2017-01-02 21:50:36 +03:00
|
|
|
server.put('/posts/:id/', function ({posts}, {params}) {
|
|
|
|
let post = posts.find(params.id);
|
|
|
|
let attrs = this.normalizedRequestAttrs();
|
2015-11-04 18:20:11 +03:00
|
|
|
|
2017-05-30 16:36:42 +03:00
|
|
|
if (attrs.mobiledoc.cards[0][1].markdown === 'Edited post body') {
|
2017-01-02 21:50:36 +03:00
|
|
|
return new Response(401, {}, {
|
2015-11-04 18:20:11 +03:00
|
|
|
errors: [
|
|
|
|
{message: 'Access denied.', errorType: 'UnauthorizedError'}
|
|
|
|
]
|
|
|
|
});
|
|
|
|
} else {
|
2017-01-02 21:50:36 +03:00
|
|
|
return post.update(attrs);
|
2015-11-04 18:20:11 +03:00
|
|
|
}
|
|
|
|
});
|
|
|
|
|
2017-04-24 15:29:48 +03:00
|
|
|
await authenticateSession(application);
|
2015-11-04 18:20:11 +03:00
|
|
|
|
2017-04-24 15:29:48 +03:00
|
|
|
await visit('/editor');
|
2015-11-04 18:20:11 +03:00
|
|
|
|
|
|
|
// create the post
|
2017-04-24 15:29:48 +03:00
|
|
|
await fillIn('#entry-title', 'Test Post');
|
|
|
|
await fillIn('.__mobiledoc-editor', 'Test post body');
|
|
|
|
await click('.js-publish-button');
|
|
|
|
|
|
|
|
// we shouldn't have a modal at this point
|
|
|
|
expect(find('.modal-container #login').length, 'modal exists').to.equal(0);
|
|
|
|
// we also shouldn't have any alerts
|
|
|
|
expect(find('.gh-alert').length, 'no of alerts').to.equal(0);
|
2015-11-04 18:20:11 +03:00
|
|
|
|
|
|
|
// update the post
|
2017-04-24 15:29:48 +03:00
|
|
|
await fillIn('.__mobiledoc-editor', 'Edited post body');
|
|
|
|
await click('.js-publish-button');
|
2015-11-04 18:20:11 +03:00
|
|
|
|
2017-04-24 15:29:48 +03:00
|
|
|
// we should see a re-auth modal
|
|
|
|
expect(find('.fullscreen-modal #login').length, 'modal exists').to.equal(1);
|
2015-11-04 18:20:11 +03:00
|
|
|
});
|
|
|
|
|
|
|
|
// don't clobber debounce/throttle for future tests
|
|
|
|
afterEach(function () {
|
2016-06-11 19:52:36 +03:00
|
|
|
run.debounce = origDebounce;
|
|
|
|
run.throttle = origThrottle;
|
2015-11-04 18:20:11 +03:00
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|