accounts-frontend/tests-e2e/cypress/integration/profile/mfa.test.ts

import { openSectionByName, getSectionByName, confirmWithPassword } from './utils';

describe('Profile — mfa', () => {
    it('should enable mfa', () => {
        const totp = 'totp123';

        cy.login({ accounts: ['default'] }).then(({ accounts: [account] }) => {
            cy.server();
            cy.route({
                method: 'POST',
                url: `/api/v1/accounts/${account.id}/two-factor-auth`,
                response: { success: false, errors: { password: 'foo' } },
            }).as('mfaSaved');

            cy.visit('/');

            getSectionByName('Two‑factor auth').should('contain', 'Disabled');
            openSectionByName('Two‑factor auth');

            cy.location('pathname').should('eq', '/profile/mfa');

            assertOs('Google Play', 'android');
            assertOs('App Store', 'ios');
            assertOs('Windows Store', 'windows');

            cy.contains('App has been installed').click();

            cy.location('pathname').should('eq', '/profile/mfa/step2');

            cy.findByTestId('secret').should('not.be.empty');

            cy.contains('Ready').click();

            cy.location('pathname').should('eq', '/profile/mfa/step3');

            cy.get('[name=totp]').type(`${totp}{enter}`);

            cy.wait('@mfaSaved')
                .its('requestBody')
                .should(
                    'eq',
                    new URLSearchParams({
                        totp,
                        password: '',
                    }).toString(),
                );

            cy.route({
                method: 'POST',
                url: `/api/v1/accounts/${account.id}/two-factor-auth`,
                response: { success: true },
            }).as('mfaSaved');
            cy.route({
                method: 'GET',
                url: `/api/v1/accounts/${account.id}`,
                response: {
                    id: 7,
                    uuid: '522e8c19-89d8-4a6d-a2ec-72ebb58c2dbe',
                    username: 'SleepWalker',
                    isOtpEnabled: true, // fake enabled mfa
                    registeredAt: 1475568334,
                    lang: 'en',
                    elyProfileLink: 'http://ely.by/u7',
                    email: 'danilenkos@auroraglobal.com',
                    isActive: true,
                    passwordChangedAt: 1476075696,
                    hasMojangUsernameCollision: true,
                    shouldAcceptRules: false,
                },
            });

            confirmWithPassword(account.password);

            cy.wait('@mfaSaved')
                .its('requestBody')
                .should(
                    'eq',
                    new URLSearchParams({
                        totp,
                        password: account.password,
                    }).toString(),
                );

            cy.location('pathname').should('eq', '/');
            getSectionByName('Two‑factor auth').should('contain', 'Enabled');
        });
    });

    it('should disable mfa', () => {
        const totp = 'totp123';

        cy.login({ accounts: ['default'] }).then(({ accounts: [account] }) => {
            cy.server();
            cy.route({
                method: 'GET',
                url: `/api/v1/accounts/${account.id}`,
                response: {
                    id: 7,
                    uuid: '522e8c19-89d8-4a6d-a2ec-72ebb58c2dbe',
                    username: 'SleepWalker',
                    isOtpEnabled: true, // fake enabled mfa
                    registeredAt: 1475568334,
                    lang: 'en',
                    elyProfileLink: 'http://ely.by/u7',
                    email: 'danilenkos@auroraglobal.com',
                    isActive: true,
                    passwordChangedAt: 1476075696,
                    hasMojangUsernameCollision: true,
                    shouldAcceptRules: false,
                },
            });
            cy.route({
                method: 'DELETE',
                url: `/api/v1/accounts/${account.id}/two-factor-auth`,
                response: { success: false, errors: { password: 'foo' } },
            }).as('mfaSaved');

            cy.visit('/');

            getSectionByName('Two‑factor auth').should('contain', 'Enabled');
            openSectionByName('Two‑factor auth');

            cy.location('pathname').should('eq', '/profile/mfa');

            cy.contains('Disable').click();

            cy.get('[name=totp]').type(`${totp}{enter}`);

            cy.wait('@mfaSaved')
                .its('requestBody')
                .should(
                    'eq',
                    new URLSearchParams({
                        totp,
                        password: '',
                    }).toString(),
                );

            cy.route({
                method: 'DELETE',
                url: `/api/v1/accounts/${account.id}/two-factor-auth`,
                response: { success: true },
            }).as('mfaSaved');
            // unmock accounts route
            cy.route({
                method: 'GET',
                url: `/api/v1/accounts/${account.id}`,
            });

            confirmWithPassword(account.password);

            cy.wait('@mfaSaved')
                .its('requestBody')
                .should(
                    'eq',
                    new URLSearchParams({
                        totp,
                        password: account.password,
                    }).toString(),
                );

            cy.location('pathname').should('eq', '/');
            getSectionByName('Two‑factor auth').should('contain', 'Disabled');
        });
    });
});

function assertOs(name: string, os: string) {
    cy.findAllByTestId('os-tile').contains(name).click();

    cy.findByTestId('os-instruction').should('have.attr', 'data-os', os);

    cy.findAllByTestId('os-tile').contains(name).click();
}