mirror of
https://github.com/TryGhost/Ghost.git
synced 2025-03-11 02:12:21 -05:00
closes #3128 (now really) - added express variable disableLoginLimiter - added disableLoginLimiter to all tests that use Ghost as module and do authentication - fixed isSetup not working for status other than active - removed ‚Ensure a User is Registered‘ test as this is covered by the new setup test
181 lines
6.7 KiB
JavaScript
181 lines
6.7 KiB
JavaScript
// # Signin Test
|
|
// Test that signin works, including testing our spam prevention mechanisms
|
|
|
|
/*globals CasperTest, casper, url, newUser, user, falseUser */
|
|
|
|
CasperTest.begin('Ghost admin will load login page', 3, function suite(test) {
|
|
CasperTest.Routines.signout.run(test);
|
|
casper.thenOpenAndWaitForPageLoad('signin', function testTitleAndUrl() {
|
|
test.assertTitle('Ghost Admin', 'Ghost admin has no title');
|
|
test.assertUrlMatch(/ghost\/signin\/$/, 'We should be presented with the signin page.');
|
|
|
|
casper.then(function testLink() {
|
|
var link = this.evaluate(function (selector) {
|
|
return document.querySelector(selector).getAttribute('href');
|
|
}, '.forgotten-password');
|
|
|
|
casper.echoConcise('LINK' + link);
|
|
test.assert(link === '/ghost/forgotten/', 'Has correct forgotten password link');
|
|
});
|
|
});
|
|
});
|
|
|
|
// Note, this test applies to a global redirect, which sends us to the standard admin.
|
|
// Once Ember becomes the standard admin, this test should still pass.
|
|
CasperTest.begin('Redirects login to signin', 2, function suite(test) {
|
|
CasperTest.Routines.signout.run(test);
|
|
casper.start(url + 'ghost/login/', function testRedirect(response) {
|
|
test.assertEqual(response.status, 200, 'Response status should be 200.');
|
|
test.assertUrlMatch(/ghost\/signin\//, 'Should be redirected to /signin/.');
|
|
});
|
|
});
|
|
|
|
|
|
CasperTest.begin('Can\'t spam it', 4, function suite(test) {
|
|
CasperTest.Routines.signout.run(test);
|
|
|
|
casper.thenOpenAndWaitForPageLoad('signin', function testTitle() {
|
|
test.assertTitle('Ghost Admin', 'Ghost admin has no title');
|
|
test.assertUrlMatch(/ghost\/signin\/$/, 'Landed on the correct URL');
|
|
});
|
|
|
|
casper.waitForOpaque('.login-box',
|
|
function then() {
|
|
this.fillAndSave('#login', falseUser);
|
|
},
|
|
function onTimeout() {
|
|
test.fail('Sign in form didn\'t fade in.');
|
|
});
|
|
|
|
|
|
casper.captureScreenshot('login_spam_test.png');
|
|
|
|
casper.waitForText('attempts remaining!', function then() {
|
|
this.fillAndSave('#login', falseUser);
|
|
});
|
|
|
|
casper.captureScreenshot('login_spam_test2.png');
|
|
|
|
casper.waitForText('Slow down, there are way too many login attempts!', function onSuccess() {
|
|
test.assert(true, 'Spamming the login did result in an error notification');
|
|
test.assertSelectorDoesntHaveText('.notification-error', '[object Object]');
|
|
}, function onTimeout() {
|
|
test.assert(false, 'Spamming the login did not result in an error notification');
|
|
});
|
|
|
|
// This test causes the spam notification
|
|
// add a wait to ensure future tests don't get tripped up by this.
|
|
casper.wait(2000);
|
|
});
|
|
|
|
CasperTest.begin('Login limit is in place', 4, function suite(test) {
|
|
CasperTest.Routines.signout.run(test);
|
|
|
|
casper.thenOpenAndWaitForPageLoad('signin', function testTitleAndUrl() {
|
|
test.assertTitle('Ghost Admin', 'Ghost admin has no title');
|
|
test.assertUrlMatch(/ghost\/signin\/$/, 'Landed on the correct URL');
|
|
});
|
|
|
|
casper.waitForOpaque('.login-box',
|
|
function then() {
|
|
this.fillAndSave('#login', falseUser);
|
|
},
|
|
function onTimeout() {
|
|
test.fail('Sign in form didn\'t fade in.');
|
|
});
|
|
|
|
casper.wait(2100, function doneWait() {
|
|
this.fillAndSave('#login', falseUser);
|
|
});
|
|
|
|
casper.waitForText('remaining', function onSuccess() {
|
|
test.assert(true, 'The login limit is in place.');
|
|
test.assertSelectorDoesntHaveText('.notification-error', '[object Object]');
|
|
}, function onTimeout() {
|
|
test.assert(false, 'We did not trip the login limit.');
|
|
});
|
|
// This test used login, add a wait to
|
|
// ensure future tests don't get tripped up by this.
|
|
casper.wait(2000);
|
|
});
|
|
|
|
CasperTest.begin('Can login to Ghost', 5, function suite(test) {
|
|
CasperTest.Routines.signout.run(test);
|
|
|
|
casper.thenOpenAndWaitForPageLoad('signin', function testTitleAndUrl() {
|
|
test.assertTitle('Ghost Admin', 'Ghost admin has no title');
|
|
test.assertUrlMatch(/ghost\/signin\/$/, 'Landed on the correct URL');
|
|
});
|
|
|
|
casper.waitForOpaque('.login-box', function then() {
|
|
this.fillAndSave('#login', user);
|
|
});
|
|
|
|
casper.wait(2000);
|
|
|
|
casper.waitForResource(/posts/, function testForDashboard() {
|
|
test.assertUrlMatch(/ghost\/\d+\/$/, 'Landed on the correct URL');
|
|
test.assertExists('#global-header', 'Global admin header is present');
|
|
test.assertExists('.manage', 'We\'re now on content');
|
|
}, function onTimeOut() {
|
|
test.fail('Failed to signin');
|
|
});
|
|
});
|
|
|
|
CasperTest.begin('Authenticated user is redirected', 8, function suite(test) {
|
|
CasperTest.Routines.signout.run(test);
|
|
|
|
casper.thenOpenAndWaitForPageLoad('signin', function testTitleAndUrl() {
|
|
test.assertTitle('Ghost Admin', 'Ghost admin has no title');
|
|
test.assertUrlMatch(/ghost\/signin\/$/, 'Landed on the correct URL');
|
|
});
|
|
|
|
casper.waitForOpaque('.login-box', function then() {
|
|
this.fillAndSave('#login', user);
|
|
});
|
|
|
|
casper.wait(2000);
|
|
|
|
casper.waitForResource(/posts/, function testForDashboard() {
|
|
test.assertUrlMatch(/ghost\/\d+\/$/, 'Landed on the correct URL');
|
|
test.assertExists('#global-header', 'Global admin header is present');
|
|
test.assertExists('.manage', 'We\'re now on content');
|
|
}, function onTimeOut() {
|
|
test.fail('Failed to signin');
|
|
});
|
|
|
|
casper.thenOpenAndWaitForPageLoad('signin-authenticated', function testTitleAndUrl() {
|
|
test.assertUrlMatch(/ghost\/\d+\/$/, 'Landed on the correct URL');
|
|
test.assertExists('#global-header', 'Global admin header is present');
|
|
test.assertExists('.manage', 'We\'re now on content');
|
|
}, function onTimeOut() {
|
|
test.fail('Failed to redirect');
|
|
});
|
|
});
|
|
|
|
|
|
CasperTest.begin('Ensure email field form validation', 3, function suite(test) {
|
|
CasperTest.Routines.signout.run(test);
|
|
|
|
casper.thenOpenAndWaitForPageLoad('signin', function testTitleAndUrl() {
|
|
test.assertTitle('Ghost Admin', 'Ghost admin has no title');
|
|
test.assertUrlMatch(/ghost\/signin\/$/, 'Landed on the correct URL');
|
|
});
|
|
|
|
casper.waitForOpaque('.js-login-box',
|
|
function then() {
|
|
this.fillAndSave('form.login-form', {
|
|
'identification': 'notanemail'
|
|
});
|
|
},
|
|
function onTimeout() {
|
|
test.fail('Login form didn\'t fade in.');
|
|
});
|
|
|
|
casper.waitForSelectorTextChange('.notification-error', function onSuccess() {
|
|
test.assertSelectorHasText('.notification-error', 'Invalid Email');
|
|
}, function onTimeout() {
|
|
test.fail('Email validation error did not appear');
|
|
}, 2000);
|
|
|
|
});
|