ident

58.8 KB

1. // tests/browser.mjs — THE GATE of ident.worldapi.org (piece 1 of 6, ticket #24: account,
2. // identities, time zone). Starts its OWN servers on their own storage (never touches the
3. // dev server on :8351 or its data):
4. // ident :8356 (IDENT_STORAGE .scratch/gate-store/main, mail sink main-mail.txt)
5. // ident short :8357 (OTP TTL 3 s — the expiry case)
6. // and TWO real headless Chromes (debug ports 8640-8649 / 8650-8659, --disable-gpu, killed
7. // by PID at the end). Every login is typed and clicked in the browser; the one-time code
8. // is read from the mail sink file like a person reads their mail. Each browser runs in an
9. // emulated time zone (A: Pacific/Auckland, B: Asia/Tokyo) so "the browser's
10. // time zone at first use" is observable.
11. //
12. // node tests/browser.mjs
13. // IDENT_GATE_PORT=8732 IDENT_GATE_SHORT_PORT=8733 IDENT_GATE_CHROME=8734-8739 node tests/browser.mjs
14. // (other ports: the two servers, and the Chromes' debug ports split in two halves A/B)
15. //
16. // Screenshots at 390px and 1280px land in .scratch/gate-*.png — LOOK at them. Server
17. // logs: .scratch/gate-{main,short}.log. The face negatives go over the framework's REST
18. // carrier (POST /__hl/emit, the same frame the page sends) with and without a cookie.
19. import { spawn } from 'node:child_process';
20. import { rmSync, mkdirSync, writeFileSync, existsSync, readFileSync } from 'node:fs';
21. import { dirname, join, resolve } from 'node:path';
22. import { fileURLToPath } from 'node:url';
23. import { deflateSync } from 'node:zlib';
24. import { launchBrowser } from './cdp.mjs';
26. if (!process.env.HL_CHROME && existsSync('/opt/google/chrome/chrome')) process.env.HL_CHROME = '/opt/google/chrome/chrome';
27. const HERE = dirname(fileURLToPath(import.meta.url));
28. const APP = resolve(HERE, '..');
29. const BIN = join(APP, 'bin/hybriel');
30. const SCRATCH = join(APP, '.scratch');
31. const STORE = join(SCRATCH, 'gate-store');
32. rmSync(STORE, { recursive: true, force: true });
33. mkdirSync(STORE, { recursive: true });
35. const P_MAIN = Number(process.env.IDENT_GATE_PORT || 8356), P_SHORT = Number(process.env.IDENT_GATE_SHORT_PORT || 8357);
36. const CHROME = (process.env.IDENT_GATE_CHROME || '8640-8659').split('-').map(Number);
37. const CHROME_MID = Math.floor((CHROME[0] + CHROME[1]) / 2);
38. const IDENT = `http://127.0.0.1:${P_MAIN}`;
39. const SHORT = `http://localhost:${P_SHORT}`;
40. const SINK_MAIN = join(STORE, 'main-mail.txt');
41. const SINK_SHORT = join(STORE, 'short-mail.txt');
42. const TZ_A = 'Pacific/Auckland', TZ_B = 'Asia/Tokyo';
44. let failures = 0, passes = 0;
45. function check(label, ok, detail = '') {
46. console.log(`${ok ? 'ok ' : 'FAIL'} ${label}${ok ? '' : ' — ' + detail}`);
47. if (ok) passes++; else failures++;
48. }
49. const sleep = (ms) => new Promise(r => setTimeout(r, ms));
50. const J = JSON.stringify;
52. // ---- the servers ------------------------------------------------------------------------
53. const procs = [];
54. function start(name, env) {
55. let log = '';
56. const p = spawn(BIN, ['project.hl'], { cwd: APP, env: { ...process.env, ...env }, stdio: ['ignore', 'pipe', 'pipe'] });
57. p.stdout.on('data', d => log += d); p.stderr.on('data', d => log += d);
58. p.on('exit', () => writeFileSync(join(SCRATCH, `gate-${name}.log`), log));
59. procs.push({ name, p, log: () => log });
60. return p;
61. }
62. start('main', { IDENT_PORT: String(P_MAIN), IDENT_STORAGE: join(STORE, 'main'), IDENT_SESSIONS: join(STORE, 'main-sessions'), IDENT_MAIL_SINK: SINK_MAIN, IDENT_IP_LIMIT: '1000', IDENT_IP_DAY_LIMIT: '1000' });
63. start('short', { IDENT_PORT: String(P_SHORT), IDENT_STORAGE: join(STORE, 'short'), IDENT_SESSIONS: join(STORE, 'short-sessions'), IDENT_MAIL_SINK: SINK_SHORT, IDENT_OTP_TTL_MS: '3000', IDENT_IP_LIMIT: '1000', IDENT_IP_DAY_LIMIT: '1000' });
65. // the latest code the sink holds for an address (one "<address> <code>" line per mail)
66. function mails(sink, email) {
67. if (!existsSync(sink)) return [];
68. return readFileSync(sink, 'utf8').split('\n').filter(l => l.startsWith(email + ' ')).map(l => l.split(' ')[1]);
69. }
70. const lastCode = (sink, email) => mails(sink, email).at(-1);
72. const req = async (method, url, { raw, headers = {} } = {}) => {
73. const r = await fetch(url, { method, redirect: 'manual', headers, body: raw });
74. const text = await r.text();
75. let json = null; try { json = JSON.parse(text); } catch {}
76. return { status: r.status, json, text, location: r.headers.get('location') };
77. };
78. // A FACE CALL over the framework's REST carrier: the frame the page itself sends
79. let frameNo = 0;
80. // hybriel#16 (mission 036): hl:web itself refuses an emit with one argument too many — the ack is
81. // ok:false "… the `session` parameter is filled by the server, never by the peer"; the face never runs.
82. const framework_refused = (raw) => { try { const j = JSON.parse(raw); return j.ok === false && /the `session` parameter is filled by the server/.test(j.error || ''); } catch { return false; } };
83. async function face(event, payload, cookie) {
84. const r = await req('POST', IDENT + '/__hl/emit', { raw: J({ t: 'emit', i: ++frameNo, event, payload }), headers: { 'content-type': 'application/json', ...(cookie ? { cookie } : {}) } });
85. return r.json && r.json.ok ? r.json.value : { transport: r.status, text: r.text.slice(0, 300), refused: framework_refused(r.text) };
86. }
88. const connected = (page, label) => page.waitFor('!!window.__hl && window.__hl.socket && window.__hl.socket.readyState === 1', { label });
89. async function viewport(page, width, height) {
90. await page.send('Emulation.setDeviceMetricsOverride', { width, height, deviceScaleFactor: 1, mobile: width < 600 });
91. await sleep(250);
92. }
93. async function shot(page, name) {
94. const { data } = await page.send('Page.captureScreenshot', { format: 'png', captureBeyondViewport: true });
95. writeFileSync(join(SCRATCH, `gate-${name}.png`), Buffer.from(data, 'base64'));
96. }
97. const noOverflow = (page) => page.evaluate('document.documentElement.scrollWidth <= window.innerWidth');
98. async function bothWidths(page, name) {
99. await viewport(page, 390, 844); await shot(page, 'phone-' + name);
100. check(`layout: 390px ${name} has no horizontal overflow`, await noOverflow(page));
101. await viewport(page, 1280, 900); await shot(page, 'desktop-' + name);
102. check(`layout: 1280px ${name} has no horizontal overflow`, await noOverflow(page));
103. }
104. const msg = (page) => page.text('#message');
105. const waitMsg = (page, re, label) => page.waitFor(`/${re}/.test((document.querySelector('#message') || {}).textContent || '')`, { label });
106. const waitNotice = (page, re, label) => page.waitFor(`/${re}/.test((document.querySelector('#notice') || {}).textContent || '')`, { label });
107. // the identity list as the page shows it: [{ label, details, isDefault, edit, del }]
108. const listed = (page) => page.evaluate(`[...document.querySelectorAll('#identities li')].map(li => ({ label: li.querySelector('identity-label').textContent, details: li.querySelector('identity-details').textContent, isDefault: !!li.querySelector('default-badge'), edit: !!li.querySelector('button.edit'), del: !!li.querySelector('button.delete') }))`);
109. const labels = async (page) => (await listed(page)).map(r => r.label);
110. // click a row's button by the row's label
111. async function rowButton(page, label, cls) {
112. const sel = await page.evaluate(`(() => { const li = [...document.querySelectorAll('#identities li')].find(li => li.querySelector('identity-label').textContent === ${J(label)}); if (!li) return null; const b = li.querySelector('button.${cls}'); if (!b) return null; b.id = 'gate-target'; return '#gate-target'; })()`);
113. if (!sel) throw new Error(`no ${cls} button for ${label}`);
114. await page.click(sel);
115. await page.evaluate(`document.querySelector('#gate-target') && document.querySelector('#gate-target').removeAttribute('id')`);
116. }
117. // window.confirm: answer the NEXT dialog of this page with `accept`
118. function dialogs(page) {
119. page.dialogAnswer = true;
120. page.dialogTexts = [];
121. page.conn.onEvent(m => {
122. if (m.method === 'Page.javascriptDialogOpening' && m.sessionId === page.sessionId) {
123. page.dialogTexts.push(m.params.message);
124. page.send('Page.handleJavaScriptDialog', { accept: page.dialogAnswer }).catch(() => {});
125. }
126. });
127. }
129. // THE LOGIN AS A PERSON DOES IT: type the address, click, read the mail, type the code
130. async function askCode(page, email) {
131. await page.waitForSelector('#email');
132. await connected(page, 'socket before asking');
133. await page.type('#email', email, { clear: true });
134. await page.evaluate('document.querySelector("#message").textContent = ""');
135. await page.click('#sendcode');
136. // ident#20: a sent code NAVIGATES to the code page (/code); a refusal stays with a message
137. await page.waitFor('(/\\/code$/.test(location.pathname) && !!document.querySelector("#code")) || /\\S/.test(document.querySelector("#message").textContent)', { label: 'code page or message after ' + email });
138. if (await page.evaluate('/\\/code$/.test(location.pathname)')) await connected(page, 'code page hydrated');
139. }
140. // A REAL RELOAD (Page.reload, like a phone reloading the tab), then the hydrated socket
141. async function reload(page) {
142. page._loaded = false;
143. await page.send('Page.reload', { ignoreCache: false });
144. const deadline = Date.now() + 15000;
145. while (!page._loaded && Date.now() < deadline) await sleep(25);
146. if (!page._loaded) throw new Error('reload: load event never fired');
147. await connected(page, 'socket after reload');
148. }
149. // what the page shows: '<path> code:<address>' | '<path> email' | '<path> signedin' | '<path> ?'
150. const step = (page) => page.evaluate(`location.pathname + ' ' + (document.querySelector('#codeform') && !document.querySelector('#emailform') ? 'code:' + document.querySelector('#sentto strong').textContent : (document.querySelector('#emailform') && !document.querySelector('#codeform') ? 'email' : (document.querySelector('#meemail') ? 'signedin' : '?')))`);
151. // what the SERVER answers a plain GET with this cookie (no JS, no redirect following):
152. // '302 <location>' or '200 code:<address>' / '200 email' / '200 signedin'
153. async function ssr(path, cookie, base = IDENT) {
154. const r = await fetch(base + path, { redirect: 'manual', headers: cookie ? { cookie } : {} });
155. if (r.status >= 300 && r.status < 400) return r.status + ' ' + r.headers.get('location');
156. const t = await r.text();
157. const m = /id="sentto"[^>]*>.*?<strong[^>]*>([^<]*)</s.exec(t);
158. return r.status + ' ' + (t.includes('id="codeform"') && m ? 'code:' + m[1] : (t.includes('id="emailform"') ? 'email' : (t.includes('id="meemail"') ? 'signedin' : '?')));
159. }
160. const cookieOf = async (page, url) => (await page.cookies([url])).filter(c => c.name === 'identsid').map(c => `identsid=${c.value}`)[0];
161. async function enterCode(page, code) {
162. await page.evaluate('document.querySelector("#message").textContent = ""');
163. await page.type('#code', code, { clear: true });
164. await page.click('#verify');
165. }
166. async function fill(page, values) {
167. for (const [id, v] of Object.entries(values)) await page.type('#' + id, v, { clear: true });
168. }
169. // a PNG 300×200 (left half red, right half blue) and a text file, for the avatar upload
170. function makePng() {
171. const W = 300, H = 200, raw = Buffer.alloc((W * 3 + 1) * H);
172. for (let y = 0; y < H; y++) for (let x = 0; x < W; x++) { const o = y * (W * 3 + 1); raw[o] = 0; raw[o + 1 + x * 3] = x < W / 2 ? 255 : 0; raw[o + 2 + x * 3] = 0; raw[o + 3 + x * 3] = x < W / 2 ? 0 : 255; }
173. const crcT = []; for (let n = 0; n < 256; n++) { let c = n; for (let k = 0; k < 8; k++) c = c & 1 ? 0xedb88320 ^ (c >>> 1) : c >>> 1; crcT[n] = c >>> 0; }
174. const crc = (b) => { let c = 0xffffffff; for (const x of b) c = crcT[(c ^ x) & 255] ^ (c >>> 8); return (c ^ 0xffffffff) >>> 0; };
175. const chunk = (t, d) => { const len = Buffer.alloc(4); len.writeUInt32BE(d.length); const td = Buffer.concat([Buffer.from(t), d]); const c = Buffer.alloc(4); c.writeUInt32BE(crc(td)); return Buffer.concat([len, td, c]); };
176. const ihdr = Buffer.alloc(13); ihdr.writeUInt32BE(W, 0); ihdr.writeUInt32BE(H, 4); ihdr[8] = 8; ihdr[9] = 2;
177. return Buffer.concat([Buffer.from([137, 80, 78, 71, 13, 10, 26, 10]), chunk('IHDR', ihdr), chunk('IDAT', deflateSync(raw)), chunk('IEND', Buffer.alloc(0))]);
178. }
179. const PNG_FILE = join(STORE, 'avatar.png'), TXT_FILE = join(STORE, 'avatar.txt');
180. writeFileSync(PNG_FILE, makePng()); writeFileSync(TXT_FILE, 'not a picture');
181. // pick a file in an <input type=file> like a person does (the browser's own file chooser result)
182. async function upload(page, selector, file) {
183. const { root } = await page.send('DOM.getDocument');
184. const { nodeId } = await page.send('DOM.querySelector', { nodeId: root.nodeId, selector });
185. await page.send('DOM.setFileInputFiles', { files: [file], nodeId });
186. }
187. // a PASTE (one input event with the whole value), unlike page.type()'s per-character keys —
188. // used for the avatar URL so a live `src`-bound preview does not fetch every half-typed prefix
189. async function paste(page, selector, text) {
190. await page.evaluate(`(() => { const el = document.querySelector(${J(selector)}); el.value = ${J(text)}; el.dispatchEvent(new Event('input', { bubbles: true })); })()`);
191. }
193. let A, B, a, b;
194. try {
195. for (const [name, url] of [['main', IDENT + '/'], ['short', `http://127.0.0.1:${P_SHORT}/`]]) {
196. let up = false;
197. for (let i = 0; i < 80; i++) { try { const r = await fetch(url); if (r.ok) { up = true; break; } } catch {} await sleep(250); }
198. if (!up) throw new Error(`${name} server did not come up\n` + procs.find(p => p.name === name).log());
199. }
201. // ---- the mission-003 app flow is gone; piece 2 rebuilt /login and /api/exchange ------------
202. // (ticket #37: these two checks asserted 404s from before piece 2; they now check that the
203. // mission-003 shapes are refused by the piece-2 routes. The full piece-2 rules: tests/apps.mjs)
204. let r = await req('POST', IDENT + '/api/exchange', { raw: '{"code":"x"}', headers: { 'content-type': 'application/json' } });
205. check('old exchange shape (code only): 400 naming the missing key, no identity', r.status === 400 && r.json && r.json.error === 'missing field: key' && r.json.identity === undefined, J(r));
206. r = await req('GET', IDENT + '/login?app=testclient&return=http://127.0.0.1:8358/callback');
207. check('old /login?app=… (no key): 400 error page, no redirect', r.status === 400 && r.location === null && /the key parameter/.test(r.text), `${r.status} ${r.location}`);
208. r = await req('GET', IDENT + '/continue/abc');
209. check('removed: GET /continue/<rid> is 404', r.status === 404, String(r.status));
211. // ---- faces without a session ----------------------------------------------------------------
212. let v = await face('addIdentity', [{ identityName: 'X' }]);
213. check('face: addIdentity without a session → not signed in', v.error === 'you are not signed in', J(v));
214. v = await face('changeTimeZone', ['Europe/Vienna']);
215. check('face: changeTimeZone without a session → not signed in', v.error === 'you are not signed in', J(v));
217. A = await launchBrowser({ debugPortRange: [CHROME[0], CHROME_MID] });
218. B = await launchBrowser({ debugPortRange: [CHROME_MID + 1, CHROME[1]] });
219. a = await A.newPage();
220. b = await B.newPage();
221. dialogs(a); dialogs(b);
222. await a.send('Emulation.setTimezoneOverride', { timezoneId: TZ_A });
223. await b.send('Emulation.setTimezoneOverride', { timezoneId: TZ_B });
225. // ---- browser A: the first login creates the account --------------------------------------------
226. await a.goto(IDENT + '/');
227. await a.waitForSelector('#emailform');
228. await connected(a, 'A connected');
229. check('home: signed out shows the login (SSR), no identities', await a.evaluate('!!document.querySelector("#emailform") && !document.querySelector("#identities") && document.title === "ident | sign in"'), await a.evaluate('document.title'));
230. check('home: the page says there is no sign-up', /no sign-up/.test(await a.text('ident-card')), await a.text('ident-card'));
231. check('home: palette — accent orange #ce9178, danger #f44747, dark background', await a.evaluate(`(() => { const cs = getComputedStyle(document.documentElement); const s = document.createElement('span'); s.style.color = 'var(--color-danger)'; document.body.append(s); const d = getComputedStyle(s).color; s.remove(); return cs.getPropertyValue('--color-accent').trim() === '#ce9178' && getComputedStyle(document.querySelector('.brand')).color === 'rgb(206, 145, 120)' && getComputedStyle(document.querySelector('#sendcode')).backgroundColor === 'rgb(206, 145, 120)' && d === 'rgb(244, 71, 71)' && getComputedStyle(document.body).backgroundColor === 'rgb(25, 30, 35)'; })()`));
232. await bothWidths(a, 'signin');
234. await askCode(a, 'foo@bar');
235. check('login: an address without a dotted domain is refused', (await msg(a)) === 'that is not an email address', await msg(a));
236. await askCode(a, ' [email protected] ');
237. check('login: code form shows the LOWERCASED address', (await a.text('#sentto strong')) === '[email protected]', await a.text('#sentto'));
238. check('ident#20: "Send me a code" lands on the code page /code', (await step(a)) === '/code code:[email protected]', await step(a));
239. const aliceCode1 = lastCode(SINK_MAIN, '[email protected]');
240. check('mail: the sink got one 6-digit code for alice', mails(SINK_MAIN, '[email protected]').length === 1 && /^\d{6}$/.test(aliceCode1), readFileSync(SINK_MAIN, 'utf8'));
241. await bothWidths(a, 'code');
242. await enterCode(a, aliceCode1 === '000000' ? '111111' : '000000');
243. await waitMsg(a, 'wrong code', 'wrong code message');
244. check('login: a wrong code says so and counts down', (await msg(a)) === 'wrong code (4 tries left)', await msg(a));
245. await enterCode(a, aliceCode1);
246. await a.waitForSelector('#identityform');
247. check('first login: the account exists at once — the default identity is listed', J(await listed(a)) === J([{ label: 'Default', details: 'no names', isDefault: true, edit: true, del: false }]), J(await listed(a)));
248. check('first login: the name fields are shown and say they are OPTIONAL', /optional/i.test(await a.text('#welcome')) && (await a.evaluate('["#fidentityname","#fnickname","#ffirstname","#flastname"].every(s => !!document.querySelector(s) && !document.querySelector(s).required)')) && (await a.evaluate('!!document.querySelector("#skip")')), await a.text('#identityform'));
249. check('first login: the fields are the default identity\'s (identity name "Default", names empty)', J(await a.evaluate('["#fidentityname","#fnickname","#ffirstname","#flastname"].map(s => document.querySelector(s).value)')) === J(['Default', '', '', '']));
250. check('time zone: the browser\'s (emulated ' + TZ_A + ') was stored at first use', (await a.text('#timezone')) === TZ_A, await a.text('#timezone'));
251. await bothWidths(a, 'welcome');
253. // SKIPPED: the form closes, the default identity stays as it is
254. await a.click('#skip');
255. await a.waitFor('!document.querySelector("#identityform")', { label: 'welcome closed' });
256. check('skip: the form closes, the default identity stays unnamed', J(await listed(a)) === J([{ label: 'Default', details: 'no names', isDefault: true, edit: true, del: false }]), J(await listed(a)));
257. await a.goto(IDENT + '/');
258. await a.waitForSelector('#identities');
259. check('reload: still signed in (SSR), identities and time zone read back, no welcome again', (await a.text('#meemail')) === '[email protected]' && J(await labels(a)) === J(['Default']) && (await a.text('#timezone')) === TZ_A && !(await a.evaluate('!!document.querySelector("#identityform")')), await a.text('ident-card'));
260. check('title: signed in', (await a.evaluate('document.title')) === 'ident | your identities', await a.evaluate('document.title'));
261. check('cookie: ident uses its own cookie name (identsid), httpOnly', await a.cookies([IDENT]).then(cs => cs.some(c => c.name === 'identsid' && c.httpOnly) && !cs.some(c => c.name === 'hlsid')), J(await a.cookies([IDENT])));
262. const aliceCookie = (await a.cookies([IDENT])).filter(c => c.name === 'identsid').map(c => `identsid=${c.value}`)[0];
264. // EDIT the default identity: all four fields
265. await connected(a, 'A before edit');
266. await rowButton(a, 'Default', 'edit');
267. await a.waitForSelector('#identityform');
268. check('edit: the form is headed with the identity and has Cancel, not Skip', (await a.text('#formheading')) === 'Edit Default' && (await a.evaluate('!!document.querySelector("#cancel") && !document.querySelector("#skip") && !document.querySelector("#welcome")')), await a.text('#identityform'));
269. await fill(a, { fidentityname: 'Private', fnickname: 'Ali', ffirstname: 'Alice', flastname: 'Example' });
270. await upload(a, '#favatarfile', TXT_FILE);
271. await a.waitFor(`document.querySelector('#avatarnote').textContent.length > 0`, { label: 'avatar: text file refused' });
272. check('avatar: a text file is refused with a message, nothing is set', (await a.text('#avatarnote')).startsWith('That is not a picture') && (await a.evaluate(`document.querySelector('#favatar').value`)) === '', await a.text('#avatarnote'));
273. await upload(a, '#favatarfile', PNG_FILE);
274. await a.waitFor(`document.querySelector('#favatar').value.startsWith('data:image/')`, { label: 'avatar: picture scaled' });
275. check('avatar: an uploaded picture is scaled to 128×128 and previewed before saving', await a.evaluate(`(async () => { const p = document.querySelector('#avatarpreview'); await new Promise(r => p.complete ? r() : (p.onload = r)); return p.naturalWidth === 128 && p.naturalHeight === 128 && p.src === document.querySelector('#favatar').value && !p.classList.contains('hidden') && document.querySelector('#favatar').value.length < 60000; })()`), await a.evaluate(`document.querySelector('#favatar').value.slice(0, 40)`));
276. check('avatar: the centre-cropped, scaled picture keeps its colours (red left, blue right)', await a.evaluate(`(async () => { const p = document.querySelector('#avatarpreview'); const c = document.createElement('canvas'); c.width = c.height = 128; const x = c.getContext('2d', { willReadFrequently: true }); x.drawImage(p, 0, 0); const l = x.getImageData(10, 64, 1, 1).data, r = x.getImageData(118, 64, 1, 1).data; return l[0] > 200 && l[2] < 60 && r[2] > 200 && r[0] < 60; })()`));
277. await bothWidths(a, 'edit');
278. await a.click('#saveidentity');
279. await waitNotice(a, 'Identity saved', 'saved notice');
280. check('edit: saved — label and names shown', J(await listed(a)) === J([{ label: 'Private', details: '“Ali” · Alice Example', isDefault: true, edit: true, del: false }]), J(await listed(a)));
281. check('avatar: the identity list shows a round avatar image with the saved picture', await a.evaluate(`(() => { const img = document.querySelector('#identities li img.avatar'); return !!img && img.src.startsWith('data:image/') && img.naturalWidth === 128; })()`), await a.evaluate(`document.querySelector('#identities').innerHTML`));
282. // reopening the edit form shows the saved avatar again, and typing focus survives (ticket #15
283. // regression: an `if` next to the text inputs in the SAME view made hl:webex recreate the
284. // form on every keystroke, losing focus after one character — hybriel #32)
285. await rowButton(a, 'Private', 'edit');
286. await a.waitForSelector('#identityform');
287. check('avatar: reopening edit shows the saved picture and preview', (await a.evaluate(`document.querySelector('#favatar').value`)).startsWith('data:image/') && await a.evaluate(`!document.querySelector('#avatarpreview').classList.contains('hidden')`));
288. await a.focus('#fnickname');
289. await a.send('Input.dispatchKeyEvent', { type: 'keyDown', text: 'z', unmodifiedText: 'z', key: 'z' });
290. await a.send('Input.dispatchKeyEvent', { type: 'keyDown', text: 'z', unmodifiedText: 'z', key: 'z' });
291. check('avatar: typing two characters in a row keeps focus (no per-keystroke re-render)', (await a.evaluate(`document.querySelector('#fnickname').value`)) === 'Alizz' && (await a.evaluate('document.activeElement && document.activeElement.id')) === 'fnickname');
292. await a.click('#avatarremove');
293. check('avatar: "Remove picture" hides the preview again', await a.evaluate(`document.querySelector('#avatarpreview').classList.contains('hidden')`));
294. await a.click('#cancel');
295. await a.waitFor('!document.querySelector("#identityform")', { label: 'avatar-check cancel closes' });
297. // A SECOND identity, then a third with NO fields at all
298. await a.click('#newidentity');
299. await a.waitForSelector('#identityform');
300. check('new: an empty form headed "New identity"', (await a.text('#formheading')) === 'New identity' && J(await a.evaluate('["#fidentityname","#fnickname","#ffirstname","#flastname"].map(s => document.querySelector(s).value)')) === J(['', '', '', '']));
301. await fill(a, { fidentityname: 'Work', ffirstname: 'Alice', flastname: 'Example-Work' });
302. await a.click('#saveidentity');
303. await waitNotice(a, 'Identity created', 'created notice');
304. check('new: the second identity is listed; now both can be deleted, the first stays default', J(await listed(a)) === J([
305. { label: 'Private', details: '“Ali” · Alice Example', isDefault: true, edit: true, del: true },
306. { label: 'Work', details: 'Alice Example-Work', isDefault: false, edit: true, del: true }]), J(await listed(a)));
307. // hybriel#121 (mission 048): a face taking the session syncs the session-derived list back — a row added on top would show twice
308. check('new: the created identity is listed ONCE (no session-sync double row)', (await labels(a)).filter(l => l === 'Work').length === 1 && (await a.evaluate('document.querySelectorAll("#identities li").length')) === 2, J(await labels(a)));
309. await a.click('#newidentity');
310. await a.waitForSelector('#identityform');
311. await a.click('#saveidentity');
312. await waitNotice(a, 'Identity created', 'created notice 3');
313. check('new: an identity with no fields at all is fine (shown as "Identity 3")', J(await labels(a)) === J(['Private', 'Work', 'Identity 3']), J(await labels(a)));
314. // cancel does not save
315. await rowButton(a, 'Work', 'edit');
316. await a.waitForSelector('#identityform');
317. await fill(a, { fnickname: 'SHOULD-NOT-SAVE' });
318. await a.click('#cancel');
319. await a.waitFor('!document.querySelector("#identityform")', { label: 'cancel closes' });
320. // edit the second one
321. await rowButton(a, 'Work', 'edit');
322. await a.waitForSelector('#identityform');
323. check('edit: the form holds the stored values (the cancelled change is gone)', J(await a.evaluate('["#fidentityname","#fnickname","#ffirstname","#flastname"].map(s => document.querySelector(s).value)')) === J(['Work', '', 'Alice', 'Example-Work']), J(await a.evaluate('["#fidentityname","#fnickname","#ffirstname","#flastname"].map(s => document.querySelector(s).value)')));
324. await fill(a, { fnickname: 'AE' });
325. await a.click('#saveidentity');
326. await waitNotice(a, 'Identity saved', 'saved notice 2');
327. await a.goto(IDENT + '/');
328. await a.waitForSelector('#identities');
329. check('reload: three identities as saved', J(await listed(a)) === J([
330. { label: 'Private', details: '“Ali” · Alice Example', isDefault: true, edit: true, del: true },
331. { label: 'Work', details: '“AE” · Alice Example-Work', isDefault: false, edit: true, del: true },
332. { label: 'Identity 3', details: 'no names', isDefault: false, edit: true, del: true }]), J(await listed(a)));
333. await bothWidths(a, 'identities');
335. // DELETE: a dismissed confirm keeps it; accepted removes it; the last one cannot go
336. await connected(a, 'A before delete');
337. a.dialogAnswer = false;
338. await rowButton(a, 'Identity 3', 'delete');
339. await sleep(500);
340. check('delete: a dismissed confirm keeps the identity', a.dialogTexts.at(-1) === 'Delete the identity “Identity 3”?' && J(await labels(a)) === J(['Private', 'Work', 'Identity 3']), J(a.dialogTexts) + J(await labels(a)));
341. a.dialogAnswer = true;
342. await rowButton(a, 'Identity 3', 'delete');
343. await waitNotice(a, 'Identity deleted', 'deleted notice');
344. check('delete: accepted → gone', J(await labels(a)) === J(['Private', 'Work']), J(await labels(a)));
345. await rowButton(a, 'Private', 'delete');
346. await a.waitFor(`document.querySelectorAll('#identities li').length === 1`, { label: 'default deleted' });
347. check('delete: the default one may go while another exists; the remaining one becomes default and has no Delete', J(await listed(a)) === J([{ label: 'Work', details: '“AE” · Alice Example-Work', isDefault: true, edit: true, del: false }]), J(await listed(a)));
348. // ids are mpackdb UUIDs (mission 009): read Alice's remaining identity's id off its Edit button
349. const aliceWorkId = await a.evaluate('document.querySelector("#identities li .edit").value');
350. check('ids: an identity id is a 12-char mpackdb UUID (not a number)', /^[0-9a-z]{12}$/.test(aliceWorkId), J(aliceWorkId));
351. v = await face('dropIdentity', [aliceWorkId], aliceCookie);
352. check('face: deleting the LAST identity is refused', v.error === 'this is your only identity — an account always keeps one', J(v));
353. await a.goto(IDENT + '/');
354. await a.waitForSelector('#identities');
355. check('reload: the last identity is still there', J(await labels(a)) === J(['Work']), J(await labels(a)));
357. // TIME ZONE: change, browser button, unknown name refused in the page
358. await connected(a, 'A before tz');
359. await a.type('#tzinput', 'Mars/Olympus_Mons', { clear: true });
360. await a.click('#savetz');
361. await waitMsg(a, 'does not know', 'unknown zone');
362. check('time zone: a name the browser does not know is refused, nothing saved', (await msg(a)) === 'this browser does not know the time zone “Mars/Olympus_Mons”' && (await a.text('#timezone')) === TZ_A, await msg(a));
363. await a.type('#tzinput', 'Europe/Vienna', { clear: true });
364. await a.click('#savetz');
365. await waitNotice(a, 'Time zone saved', 'tz saved');
366. check('time zone: changed to Europe/Vienna', (await a.text('#timezone')) === 'Europe/Vienna', await a.text('#timezone'));
367. await a.click('#browsertz');
368. await a.waitFor(`document.querySelector('#tzinput').value === ${J(TZ_A)}`, { label: 'browser tz button' });
369. check('time zone: "Use this browser\'s" fills in the browser\'s zone (not saved yet)', (await a.text('#timezone')) === 'Europe/Vienna');
370. await a.goto(IDENT + '/');
371. await a.waitForSelector('#timezone');
372. check('reload: the time zone reads back Europe/Vienna', (await a.text('#timezone')) === 'Europe/Vienna' && (await a.evaluate('document.querySelector("#tzinput").value')) === 'Europe/Vienna');
374. // SIGN OUT, then a known address signs in: no welcome, the time zone is NOT reset
375. await connected(a, 'A before sign out');
376. await a.click('#signout');
377. await a.waitForSelector('#emailform');
378. await a.goto(IDENT + '/');
379. await a.waitForSelector('#emailform');
380. check('sign out: the reload is signed out', !(await a.evaluate('!!document.querySelector("#identities")')));
381. v = await face('addIdentity', [{ identityName: 'after sign out' }], aliceCookie);
382. check('face: the signed-out cookie cannot add an identity', v.error === 'you are not signed in', J(v));
383. await askCode(a, '[email protected]');
384. await enterCode(a, lastCode(SINK_MAIN, '[email protected]'));
385. await a.waitForSelector('#identities');
386. await sleep(300);
387. check('login again: no welcome form, same identity, time zone kept (not the browser\'s)', !(await a.evaluate('!!document.querySelector("#identityform")')) && J(await labels(a)) === J(['Work']) && (await a.text('#timezone')) === 'Europe/Vienna', await a.text('ident-card'));
388. await enterCode(a, lastCode(SINK_MAIN, '[email protected]')).catch(() => {});
389. const aliceCookie2 = (await a.cookies([IDENT])).filter(c => c.name === 'identsid').map(c => `identsid=${c.value}`)[0];
391. // ---- browser B: first login, names FILLED at the welcome; wrong codes; rate limit ----------------
392. await b.goto(IDENT + '/');
393. await askCode(b, '[email protected]');
394. await enterCode(b, lastCode(SINK_MAIN, '[email protected]'));
395. await b.waitForSelector('#identityform');
396. check('B first login: time zone ' + TZ_B + ' from this browser', (await b.text('#timezone')) === TZ_B, await b.text('#timezone'));
397. await fill(b, { fidentityname: 'Bob', fnickname: 'Bobby', ffirstname: 'Bob', flastname: 'Builder' });
398. await b.click('#saveidentity');
399. await waitNotice(b, 'Identity saved', 'B saved');
400. check('B welcome FILLED: the default identity carries the names', J(await listed(b)) === J([{ label: 'Bob', details: '“Bobby” · Bob Builder', isDefault: true, edit: true, del: false }]), J(await listed(b)));
401. const bobCookie = (await b.cookies([IDENT])).filter(c => c.name === 'identsid').map(c => `identsid=${c.value}`)[0];
403. // FACE NEGATIVES (Bob's cookie): strict fields, other accounts' identities, time zone shapes
404. const neg = [
405. ['unknown field', ['addIdentity', [{ identityName: 'x', email: '[email protected]' }]], { error: 'unknown field: email', field: 'email' }],
406. ['wrong type', ['addIdentity', [{ nickname: 5 }]], { error: 'field nickname must be a string', field: 'nickname' }],
407. ['null value', ['addIdentity', [{ nickname: null }]], { error: 'field nickname must be a string', field: 'nickname' }],
408. ['fields a list', ['addIdentity', [['x']]], { error: 'the identity fields must be an object', field: '' }],
409. ['fields a string', ['addIdentity', ['x']], { error: 'the identity fields must be an object', field: '' }],
410. ['61 characters', ['addIdentity', [{ lastname: 'x'.repeat(61) }]], { error: 'field lastname is longer than 60 characters', field: 'lastname' }],
411. ['control character', ['addIdentity', [{ firstname: 'a\u0007b' }]], { error: 'field firstname contains a control character', field: 'firstname' }],
412. ['avatar: a link is not a picture', ['addIdentity', [{ avatar: 'https://example.org/pic.png' }]], { error: 'field avatar must be an uploaded PNG, JPEG or WebP picture', field: 'avatar' }],
413. ['avatar: svg refused', ['addIdentity', [{ avatar: 'data:image/svg+xml;base64,PHN2Zz4=' }]], { error: 'field avatar must be an uploaded PNG, JPEG or WebP picture', field: 'avatar' }],
414. ['avatar: wrong bytes for the type', ['addIdentity', [{ avatar: 'data:image/png;base64,AAAAAAAAAAAA' }]], { error: 'field avatar is not a valid picture', field: 'avatar' }],
415. ['avatar: not base64', ['addIdentity', [{ avatar: 'data:image/png;base64,iVBORw0KGgo<script>' }]], { error: 'field avatar is not valid base64', field: 'avatar' }],
416. ['avatar: too long', ['addIdentity', [{ avatar: 'data:image/png;base64,iVBORw0KGgo' + 'A'.repeat(60000) }]], { error: 'field avatar is longer than 60000 characters', field: 'avatar' }],
417. ['avatar: wrong type', ['addIdentity', [{ avatar: 5 }]], { error: 'field avatar must be a string', field: 'avatar' }],
418. ['edit: another account\'s identity', ['editIdentity', [aliceWorkId, { nickname: 'hacked' }]], { error: 'no such identity', field: 'id' }],
419. ['edit: id as a number (the old numeric ids)', ['editIdentity', [2, { nickname: 'x' }]], { error: 'no such identity', field: 'id' }],
420. ['edit: unknown id', ['editIdentity', ['0zzzzzzzzzzz', {}]], { error: 'no such identity', field: 'id' }],
421. ['delete: another account\'s identity', ['dropIdentity', [aliceWorkId]], { error: 'no such identity' }],
422. ['delete: an old numeric id', ['dropIdentity', [2]], { error: 'no such identity' }],
423. ['delete: own last identity', ['dropIdentity', ['(Bob\'s)']], { error: 'this is your only identity — an account always keeps one' }],
424. ['time zone: bad characters', ['changeTimeZone', ['Europe/Vienna; x']], { error: 'that is not a time zone name (like Europe/Vienna)' }],
425. ['time zone: a number', ['changeTimeZone', [5]], { error: 'the time zone must be a string' }],
426. ['time zone: empty', ['changeTimeZone', [' ']], { error: 'the time zone is empty' }],
427. ];
428. const bobIds = await face('addIdentity', [{}], bobCookie); // a 2nd identity: learn Bob's ids
429. const bobRows = bobIds.identities || [];
430. check('face: Bob can add an identity with an empty object', bobRows.length === 2, J(bobIds));
431. await face('dropIdentity', [bobRows[1] && bobRows[1].id], bobCookie);
432. for (const [label, [ev, payload], want] of neg) {
433. // `own last identity` must name Bob's id
434. const p = label === 'delete: own last identity' ? [bobRows[0].id] : payload;
435. v = await face(ev, p, bobCookie);
436. check(`face negative: ${label}`, J(v) === J(want), J(v));
437. }
438. // IMPERSONATION: a hand-made frame with one argument too many puts ITS object where the
439. // session goes (hybriel: positional trailing session); ident only takes a real session
440. v = await face('addIdentity', [{ identityName: 'forged' }, { user: { id: 1 }, data: {} }]);
441. check('face: a forged session object (extra argument, no cookie) is refused', v.refused === true || v.error === 'you are not signed in', J(v));
442. v = await face('dropIdentity', [aliceWorkId, { user: { id: 1 }, data: {} }], bobCookie);
443. check('face: a forged session with Bob\'s cookie cannot delete Alice\'s identity', v.refused === true || v.error === 'you are not signed in' || v.error === 'no such identity', J(v));
444. await a.goto(IDENT + '/');
445. await a.waitForSelector('#identities');
446. check('Alice\'s identities are untouched by all of the above', J(await listed(a)) === J([{ label: 'Work', details: '“AE” · Alice Example-Work', isDefault: true, edit: true, del: false }]), J(await listed(a)));
447. v = await face('changeTimeZone', ['UTC'], aliceCookie2);
448. check('face: UTC is a valid zone', v.timeZone === 'UTC', J(v));
450. // OTP RULES (kept from mission 003): 5 wrong codes, rate limit
451. await b.click('#signout');
452. await b.waitForSelector('#emailform');
453. await askCode(b, '[email protected]');
454. const carolCode = lastCode(SINK_MAIN, '[email protected]');
455. const wrong = carolCode === '123456' ? '654321' : '123456';
456. const seen = [];
457. for (let i = 0; i < 5; i++) {
458. await enterCode(b, wrong);
459. await b.waitFor('/\\S/.test(document.querySelector("#message").textContent)', { label: 'wrong try ' + (i + 1) });
460. seen.push(await msg(b));
461. }
462. check('otp: five wrong codes count down and then kill the code', J(seen) === J(['wrong code (4 tries left)', 'wrong code (3 tries left)', 'wrong code (2 tries left)', 'wrong code (1 tries left)', 'too many wrong codes — ask for a new one']), J(seen));
463. await enterCode(b, carolCode);
464. await b.waitFor('/\\S/.test(document.querySelector("#message").textContent)', { label: 'right code after kill' });
465. check('otp: after 5 wrong tries even the RIGHT code is refused, and no account exists', (await msg(b)) === 'no code is waiting for this address — ask for a new one' && !(await b.evaluate('!!document.querySelector("#identities")')), await msg(b));
466. await b.click('#back');
467. await askCode(b, '[email protected]');
468. const carolOld = lastCode(SINK_MAIN, '[email protected]');
469. await b.click('#back');
470. await askCode(b, '[email protected]');
471. check('rate limit: the 3rd code in 10 minutes is still sent', mails(SINK_MAIN, '[email protected]').length === 3, J(mails(SINK_MAIN, '[email protected]')));
472. await enterCode(b, carolOld === lastCode(SINK_MAIN, '[email protected]') ? '000001' : carolOld);
473. await waitMsg(b, 'wrong code', 'old code refused');
474. check('otp: a replaced (older) code no longer works', /^wrong code/.test(await msg(b)), await msg(b));
475. await b.click('#back');
476. await askCode(b, '[email protected]');
477. check('rate limit: the 4th is refused and not mailed', /too many codes were sent/.test(await msg(b)) && mails(SINK_MAIN, '[email protected]').length === 3, await msg(b));
478. v = await face('verifyCode', ['[email protected]', lastCode(SINK_MAIN, '[email protected]'), 'UTC', { user: { id: 1 }, data: {} }]);
479. check('face: verifyCode with a forged trailing session is refused (no sign-in, code not spent)', v.refused === true || v.error === 'no session — reload the page', J(v));
480. v = await face('verifyCode', ['[email protected]', 123456, 'UTC']);
481. check('face: verifyCode with a numeric code → refused', v.error === 'email and code must be strings', J(v));
483. // single use: the code that signed Bob in does not work twice (fresh session, REST)
484. const bobFirst = mails(SINK_MAIN, '[email protected]')[0];
485. const fr = await fetch(IDENT + '/__hl/emit', { method: 'POST', headers: { 'content-type': 'application/json' }, body: J({ t: 'emit', i: 901, event: 'signOut', payload: [] }) });
486. const freshCookie = fr.headers.get('set-cookie').split(';')[0];
487. v = await face('verifyCode', ['[email protected]', bobFirst, 'UTC'], freshCookie);
488. check('otp: a code that was used once is refused the second time', v.error === 'no code is waiting for this address — ask for a new one', J(v));
490. // ---- ident#20 (mission 032): THE CODE PAGE /code SURVIVES A RELOAD --------------------------
491. // "Send me a code" records the address in the session (face rememberPending) and goes to
492. // /code; /code shows the code form while that code is waiting, else 302 back to the form.
493. await b.goto(IDENT + '/');
494. await connected(b, 'B before ident#20');
495. const bCookie = await cookieOf(b, IDENT);
496. check('ident#20: after "Other address" the browser is on the email form', (await step(b)) === '/ email', await step(b));
497. check('ident#20: GET /code with nothing pending → 302 to /', (await ssr('/code', bCookie)) === '302 /', await ssr('/code', bCookie));
498. check('ident#20: GET /code without any cookie → 302 to /', (await ssr('/code')) === '302 /', await ssr('/code'));
499. await askCode(b, '[email protected]');
500. check('ident#20: "Send me a code" → /code shows the code form for dave', (await step(b)) === '/code code:[email protected]', await step(b));
501. check('ident#20: the server renders /code for this session (SSR, plain GET: 200 + code form + address)', (await ssr('/code', bCookie)) === '200 code:[email protected]', await ssr('/code', bCookie));
502. await reload(b);
503. check('ident#20: RELOAD of /code → still the code form, code field there, address named, no email form', (await step(b)) === '/code code:[email protected]' && await b.evaluate('!!document.querySelector("#code") && !document.querySelector("#email") && document.title === "ident | sign in"'), await step(b));
504. await bothWidths(b, 'code-reloaded');
505. const b2 = await B.newPage();
506. await b2.goto(IDENT + '/code');
507. await b2.waitForSelector('ident-card');
508. check('ident#20: a SECOND TAB of the same browser opens /code with the code form too', (await step(b2)) === '/code code:[email protected]', await step(b2));
509. await b2.close();
510. const daveCode = lastCode(SINK_MAIN, '[email protected]');
511. await enterCode(b, daveCode === '000000' ? '111111' : '000000');
512. await waitMsg(b, 'wrong code', 'dave wrong code');
513. await reload(b);
514. check('ident#20: a WRONG code keeps it (reload → code form)', (await step(b)) === '/code code:[email protected]', await step(b));
515. check('ident#20: one mail for dave — the reloads re-sent nothing', mails(SINK_MAIN, '[email protected]').length === 1, J(mails(SINK_MAIN, '[email protected]')));
516. await enterCode(b, daveCode);
517. await b.waitForSelector('#identityform');
518. check('ident#20: the code entered after the reloads signs in (first login: welcome form), address bar back on /', (await b.text('#meemail')) === '[email protected]' && /optional/i.test(await b.text('#welcome')) && (await b.evaluate('location.pathname')) === '/', (await b.evaluate('location.pathname')) + ' ' + await b.text('ident-card'));
519. await b.click('#skip');
520. await b.waitFor('!document.querySelector("#identityform")', { label: 'dave skip' });
521. await reload(b);
522. check('ident#20: signed in → reload shows the account', (await step(b)) === '/ signedin' && (await b.text('#meemail')) === '[email protected]', await step(b));
523. check('ident#20: signed in → GET /code is 302 to / (the sign-in cleared it)', (await ssr('/code', bCookie)) === '302 /', await ssr('/code', bCookie));
524. await b.click('#signout');
525. await b.waitForSelector('#emailform');
526. await b.goto(IDENT + '/code');
527. await b.waitForSelector('#emailform');
528. check('ident#20: signed out again → /code in the browser lands on the email form at /', (await step(b)) === '/ email', await step(b));
529. // "Other address" forgets it
530. await connected(b, 'B before frank');
531. await askCode(b, '[email protected]');
532. check('ident#20: frank on /code', (await step(b)) === '/code code:[email protected]', await step(b));
533. await b.click('#back');
534. await b.waitFor('location.pathname === "/" && !!document.querySelector("#emailform")', { label: 'back to /' });
535. check('ident#20: "Other address" → the email form at /', (await step(b)) === '/ email', await step(b));
536. check('ident#20: "Other address" → the server forgot it (GET /code is 302 to /)', (await ssr('/code', bCookie)) === '302 /', await ssr('/code', bCookie));
537. await reload(b);
538. check('ident#20: "Other address" → RELOAD shows the email form', (await step(b)) === '/ email', await step(b));
539. // a code killed by 5 wrong tries is no longer waiting → /code sends the browser back
540. await askCode(b, '[email protected]');
541. const ginaWrong = lastCode(SINK_MAIN, '[email protected]') === '123456' ? '654321' : '123456';
542. for (let i = 0; i < 5; i++) {
543. await enterCode(b, ginaWrong);
544. await b.waitFor('/\\S/.test(document.querySelector("#message").textContent)', { label: 'gina wrong ' + (i + 1) });
545. }
546. check('ident#20: five wrong codes kill gina\'s code', (await msg(b)) === 'too many wrong codes — ask for a new one', await msg(b));
547. await reload(b);
548. check('ident#20: a killed code → reload of /code lands on the email form at /', (await step(b)) === '/ email', await step(b));
549. // THE FACE is honest: it records only an address a code is really waiting for
550. v = await face('rememberPending', ['[email protected]'], bCookie);
551. check('ident#20 face: rememberPending without a waiting code → refused', v.error === 'no code is waiting for this address', J(v));
552. check('ident#20 face: … and /code still sends this browser back (302 /)', (await ssr('/code', bCookie)) === '302 /', await ssr('/code', bCookie));
553. v = await face('rememberPending', [5], bCookie);
554. check('ident#20 face: rememberPending with a number → refused', v.error === 'field email must be a string', J(v));
555. const hq = await req('POST', IDENT + '/api/code', { raw: J({ email: '[email protected]' }), headers: { 'content-type': 'application/json' } });
556. v = await face('rememberPending', ['[email protected]', { user: null, data: {} }], bCookie);
557. check('ident#20 face: a forged trailing session is refused', hq.status === 200 && (v.refused === true || v.error === 'no session — reload the page'), J(v));
558. check('ident#20 face: … and nothing was recorded (302 /)', (await ssr('/code', bCookie)) === '302 /', await ssr('/code', bCookie));
559. v = await face('rememberPending', [' [email protected] '], bCookie);
560. check('ident#20 face: an address with a waiting code is accepted, normalised', v.email === '[email protected]', J(v));
561. check('ident#20: … /code now shows it for THIS session only (other cookie / none → 302)', (await ssr('/code', bCookie)) === '200 code:[email protected]' && (await ssr('/code')) === '302 /' && (await ssr('/code', aliceCookie2)) === '302 /', [await ssr('/code', bCookie), await ssr('/code'), await ssr('/code', aliceCookie2)].join(' | '));
562. v = await face('forgetPending', [], bCookie);
563. check('ident#20 face: forgetPending → /code is 302 to / again', v === true && (await ssr('/code', bCookie)) === '302 /', J(v) + ' ' + await ssr('/code', bCookie));
564. check('ident#20: /signin/<not a request id>/code (xyz, a CR/LF try) → 302 to / (the rid never reaches the Location header)', (await ssr('/signin/%0d%0aX:y/code', bCookie)) === '302 /' && (await ssr('/signin/xyz/code', bCookie)) === '302 /', await ssr('/signin/%0d%0aX:y/code', bCookie));
565. check('ident#20: /signin/<rid>/code with nothing pending → 302 to /signin/<rid>', (await ssr('/signin/0123456789abcdef0123456789abcdef/code', bCookie)) === '302 /signin/0123456789abcdef0123456789abcdef', await ssr('/signin/0123456789abcdef0123456789abcdef/code', bCookie));
567. // ---- expiry (the short-clock server) ---------------------------------------------------------
568. await a.goto(SHORT + '/');
569. await askCode(a, '[email protected]');
570. const erinCode = lastCode(SINK_SHORT, '[email protected]');
571. await reload(a);
572. check('ident#20: short server — reload right after asking → the code form', (await step(a)) === '/code code:[email protected]', await step(a));
573. await sleep(3500);
574. await enterCode(a, erinCode);
575. await waitMsg(a, 'expired', 'expired otp');
576. check('otp: an expired code (TTL 3 s on this server) is refused', (await msg(a)) === 'the code expired — ask for a new one', await msg(a));
577. await reload(a);
578. check('ident#20: an EXPIRED code → reload of /code lands on the email form at /', (await step(a)) === '/ email', await step(a));
579. await askCode(a, '[email protected]');
580. check('ident#20: short server — ivy on /code', (await step(a)) === '/code code:[email protected]', await step(a));
581. await sleep(3500);
582. await reload(a);
583. check('ident#20: expiry alone (no try) → reload of /code lands on the email form', (await step(a)) === '/ email', await step(a));
585. // mission 010: the code request is a fetch to /api/code; its refusals (invalid address 400,
586. // rate limit 429) make Chrome log "Failed to load resource … 400/429" — expected, shown on the page
587. const expected = /favicon|status of (400|429) .*\/api\/code$/;
588. const problems = [...a.problems(), ...b.problems()].filter(m => !expected.test(m.text));
589. check('browsers: no console errors or warnings', problems.length === 0, J(problems.slice(0, 5)));
591. // ---- mission 046: THE INSTALLABLE APP (manifest, icons, service worker) and the offline shell ------------
592. const head = await (await fetch(IDENT + '/')).text();
593. const link = (rel) => { const m = new RegExp(`<link rel="${rel}" href="([^"]+)"`).exec(head); return m ? m[1] : null; };
594. const mhref = link('manifest');
595. check('pwa: the head links the manifest, the apple-touch-icon, the favicon and the theme colour (the header colour, token darker)', mhref === '/__hl/manifest.webmanifest' && link('apple-touch-icon') === '/icons/apple-touch-icon.png' && link('icon') === '/favicon.ico' && /<meta name="theme-color" content="rgb\(15, 20, 25\)">/.test(head), J([mhref, link('apple-touch-icon'), link('icon')]));
596. const mres = await fetch(IDENT + (mhref || '/__hl/manifest.webmanifest'));
597. const man = await mres.json();
598. check('pwa: manifest served as manifest JSON: name ident, start_url /start (the data-free start page), standalone, theme = header (darker), background dark', /manifest\+json/.test(mres.headers.get('content-type') || '') && man.name === 'ident' && man.start_url === '/start' && man.display === 'standalone' && man.theme_color === 'rgb(15, 20, 25)' && man.background_color === 'rgb(25, 30, 35)', J(man));
599. const pngOk = async (src, size) => { const r = await fetch(IDENT + src); const bb = Buffer.from(await r.arrayBuffer()); return r.ok && bb.readUInt32BE(0) === 0x89504e47 && bb.readUInt32BE(16) === size && bb.readUInt32BE(20) === size; };
600. const iconOks = [];
601. for (const ic of man.icons) iconOks.push(ic.type === 'image/png' && await pngOk(ic.src, Number(ic.sizes.split('x')[0])));
602. check('pwa: every manifest icon is a real PNG of its declared size (192 + 512, any + maskable)', iconOks.length === 4 && iconOks.every(Boolean) && ['any', 'maskable'].every(pu => ['192x192', '512x512'].every(sz => man.icons.some(i => i.purpose === pu && i.sizes === sz))), J(man.icons));
603. const fav = await fetch(IDENT + '/favicon.ico'); const favB = Buffer.from(await fav.arrayBuffer());
604. check('pwa: apple-touch-icon is a 180 px PNG, /favicon.ico a real ICO', (await pngOk('/icons/apple-touch-icon.png', 180)) && fav.ok && favB.readUInt32BE(0) === 0x00000100, String(fav.status));
605. r = await req('GET', IDENT + '/api/online');
606. check('pwa: /api/online (the shell\'s network probe) answers 204, not cached', r.status === 204 && r.text === '', String(r.status));
608. // THE OFFLINE COPY HOLDS NO PERSONAL DATA (ident is the identity provider; shared devices): browser A
609. // is signed in; with the network gone neither `/` nor `/start`, nor anything in the worker's caches
610. // or hl:web's IndexedDB, may contain the account's address or an identity name
611. const w = await A.newPage();
612. await viewport(w, 390, 844);
613. await w.goto(IDENT + '/');
614. await w.waitForSelector('#meemail');
615. await connected(w, 'pwa page');
616. const myEmail = (await w.text('#meemail')).trim();
617. // the identity as it would leak: its details line (names) — a bare label like "Work" is also a word in the framework's code
618. const myIdentity = await w.evaluate('(document.querySelector("#identities identity-details") || {}).textContent || ""');
619. check('pwa: browser A is signed in (the data that must not be kept offline)', /@example\.org$/.test(myEmail) && myIdentity !== '', myEmail + ' ' + myIdentity);
620. await w.waitFor(`navigator.serviceWorker.getRegistration().then(r => !!(r && r.active))`, { label: 'service worker active', timeout: 15000 });
621. check('pwa: a service worker is registered for the whole app (scope /) and controls the page', await w.evaluate(`navigator.serviceWorker.getRegistration().then(r => !!r && new URL(r.scope).pathname === '/' && !!navigator.serviceWorker.controller)`));
622. const inst = await w.send('Page.getInstallabilityErrors');
623. check('pwa: Chrome reports no installability error', (inst.installabilityErrors || []).length === 0, J(inst));
624. await sleep(1500); // the probe's first ask (0.5 s after the page is up)
625. check('pwa: online, the header says nothing about offline', await w.evaluate('!document.querySelector("#offline") && !!document.querySelector("application-header")'));
626. // the installed app starts at /start: online it goes on to / by itself (the shell's probe)
627. await w.goto(IDENT + '/start');
628. await w.waitFor('location.pathname === "/" && !!document.querySelector("#meemail")', { label: '/start → /', timeout: 8000 }).catch(() => {});
629. check('pwa: online, /start (the start_url) goes on to / (signed in)', await w.evaluate('location.pathname === "/" && !!document.querySelector("#meemail")'), await w.evaluate('location.pathname'));
630. await connected(w, 'pwa / again');
631. // everything this browser keeps offline, as text: every response in the worker's caches + hl:web's IndexedDB
632. const keptText = () => w.evaluate(`(async () => {
633. let out = '';
634. for (const name of await caches.keys()) { const c = await caches.open(name); for (const rq of await c.keys()) { const r = await c.match(rq); out += '\\n' + rq.url + '\\n' + await r.clone().text(); } }
635. const db = await new Promise((res) => { const q = indexedDB.open('hl-offline'); q.onsuccess = () => res(q.result); q.onerror = () => res(null); });
636. if (db) { for (const st of db.objectStoreNames) { const all = await new Promise((res) => { const q = db.transaction(st).objectStore(st).getAll(); q.onsuccess = () => res(q.result); q.onerror = () => res([]); }); out += '\\n' + JSON.stringify(all); } db.close(); }
637. return out;
638. })()`);
639. // NO NETWORK: the tab AND the service worker (a separate CDP target — the tab's emulation alone
640. // leaves the worker's fetches online, measured) are cut off
641. const swSessions = {};
642. const swOffline = async (on) => {
643. const { targetInfos } = await A.conn.send('Target.getTargets');
644. const sws = targetInfos.filter(t => t.type === 'service_worker' && t.url.startsWith(IDENT));
645. for (const t of sws) {
646. const sid = swSessions[t.targetId] ||= (await A.conn.send('Target.attachToTarget', { targetId: t.targetId, flatten: true })).sessionId;
647. await A.conn.send('Network.enable', {}, sid);
648. await A.conn.send('Network.emulateNetworkConditions', { offline: on, latency: 0, downloadThroughput: -1, uploadThroughput: -1 }, sid);
649. }
650. return sws.length;
651. };
652. const nSw = await swOffline(true);
653. await w.setOffline(true);
654. const cutOff = await w.evaluate(`Promise.resolve(window.__hlAttempt(() => fetch('/api/online', { cache: 'no-store' }))).then(r => !r.ok)`);
655. check('pwa: offline set up (the worker and the tab cannot reach ident)', nSw === 1 && cutOff, `${nSw} ${cutOff}`);
656. // a real reload of the signed-in `/`: it is not kept, so the worker answers its data-free "Unavailable offline"
657. await w.send('Page.reload');
658. await w.waitFor('!!document.querySelector("main[data-hl-offline]") || !!document.querySelector("application-header")', { label: 'offline reload of /', timeout: 15000 }).catch(() => {});
659. let doc = await w.evaluate('document.documentElement.outerHTML');
660. check('pwa: OFFLINE reload of the signed-in / → the worker\'s "Unavailable offline" page, NO email or identity in it', /Unavailable offline/.test(doc) && !doc.includes(myEmail) && !doc.includes(myIdentity), doc.slice(0, 300));
661. // the installed app's start: the data-free shell from the cache, and it says it is offline
662. await w.goto(IDENT + '/start').catch(() => {});
663. await w.waitFor('!!document.querySelector("application-header") && !!document.querySelector("#start")', { label: 'offline /start', timeout: 15000 }).catch(() => {});
664. await w.waitFor('!!document.querySelector("#offline")', { label: 'offline note', timeout: 8000 }).catch(() => {});
665. check('pwa: OFFLINE /start (the start_url) shows the shell (header, nav, start card) from the worker', await w.evaluate('location.pathname === "/start" && !!document.querySelector("application-header nav #navapps") && !!document.querySelector("#start")'), await w.evaluate('document.body.innerText.slice(0, 200)'));
666. check('pwa: … and the header says it is offline', (await w.evaluate('(document.querySelector("#offline") || {}).textContent || ""')) === 'Offline — ident needs the network to sign in and to save', await w.evaluate('document.body.innerText.slice(0, 200)'));
667. doc = await w.evaluate('document.documentElement.outerHTML');
668. check('pwa: … and it contains NO email or identity of the signed-in user', !doc.includes(myEmail) && !doc.includes(myIdentity) && !/@example\.org/.test(doc));
669. const kept = await keptText();
670. check('pwa: NOTHING the browser keeps offline (worker caches + hl:web IndexedDB) holds the email or an identity', kept.length > 1000 && !kept.includes(myEmail) && !kept.includes(myIdentity) && !/@example\.org/.test(kept), kept.length + ' chars; hits: ' + [myEmail, myIdentity, '@example.org'].map(x => kept.indexOf(x)).join(' ') + ' ' + J(myIdentity));
671. await shot(w, 'phone-pwa-offline');
672. check('layout: 390px offline shell has no horizontal overflow', await noOverflow(w));
673. await w.goto(IDENT + '/apps').catch(() => {});
674. await w.waitFor('!!document.querySelector("main[data-hl-offline]")', { label: 'offline /apps', timeout: 8000 }).catch(() => {});
675. check('pwa: offline, a data page (/apps) needs the network: the worker\'s "Unavailable offline" page', await w.evaluate('location.pathname === "/apps" && /Unavailable offline/.test(document.body.textContent)'), await w.evaluate('document.body.innerText.slice(0, 200)'));
676. // back online, the start page opens ident by itself
677. await w.goto(IDENT + '/start').catch(() => {});
678. await w.waitForSelector('#start');
679. await swOffline(false);
680. await w.setOffline(false);
681. await w.waitFor('location.pathname === "/" && !!document.querySelector("#meemail")', { label: 'back online → /', timeout: 30000 }).catch(() => {});
682. await connected(w, 'pwa back online').catch(() => {});
683. await sleep(1000);
684. check('pwa: back online, the offline start page goes on to / by itself (signed in, no offline note)', await w.evaluate('location.pathname === "/" && !!document.querySelector("#meemail") && !document.querySelector("#offline")'), await w.evaluate('location.pathname + " " + document.body.innerText.slice(0, 120)'));
685. await shot(w, 'phone-pwa-online');
686. await w.close();
687. } catch (e) {
688. failures++;
689. console.log('FAIL (aborted) ' + (e && e.stack || e));
690. for (const [n, pg] of [['A', a], ['B', b]]) if (pg) console.log(`console ${n}: ` + J(pg.messages.slice(-8)));
691. } finally {
692. for (const br of [A, B]) { if (br) { try { await br.close(); } catch {} } }
693. for (const { p } of procs) { try { p.kill('SIGTERM'); } catch {} }
694. await sleep(500);
695. for (const { p } of procs) { if (p.exitCode === null && p.signalCode === null) { try { p.kill('SIGKILL'); } catch {} } }
696. await sleep(200);
697. console.log(`\n${passes} passed, ${failures} failed`);
698. process.exit(failures ? 1 : 0);
699. }