authelia/test/suites/minimal/scenarii/ResetPassword.ts

import SeleniumWebDriver from 'selenium-webdriver';

import ClickOnLink from '../../../helpers/ClickOnLink';
import ClickOn from '../../../helpers/ClickOn';
import WaitRedirected from '../../../helpers/WaitRedirected';
import FillField from "../../../helpers/FillField";
import {GetLinkFromEmail} from "../../../helpers/GetIdentityLink";
import FillLoginPageAndClick from "../../../helpers/FillLoginPageAndClick";
import IsSecondFactorStage from "../../../helpers/assertions/VerifyIsSecondFactorStage";
import SeeNotification from '../../../helpers/SeeNotification';
import VisitPageAndWaitUrlIs from '../../../helpers/behaviors/VisitPageAndWaitUrlIs';

export default function() {
  it("should reset password for john", async function() {
    await VisitPageAndWaitUrlIs(this.driver, "https://login.example.com:8080/");
    await ClickOnLink(this.driver, "Forgot password\?");
    await WaitRedirected(this.driver, "https://login.example.com:8080/forgot-password");
    await FillField(this.driver, "username", "john");
    await ClickOn(this.driver, SeleniumWebDriver.By.id('next-button'));
    await WaitRedirected(this.driver, 'https://login.example.com:8080/confirmation-sent');

    await this.driver.sleep(500); // Simulate the time it takes to receive the e-mail.
    const link = await GetLinkFromEmail();
    await VisitPageAndWaitUrlIs(this.driver, link);
    await FillField(this.driver, "password1", "newpass");
    await FillField(this.driver, "password2", "newpass");
    await ClickOn(this.driver, SeleniumWebDriver.By.id('reset-button'));
    await WaitRedirected(this.driver, "https://login.example.com:8080/");
    await FillLoginPageAndClick(this.driver, "john", "newpass");

    // The user reaches the second factor page using the new password.
    await IsSecondFactorStage(this.driver);
  });

  it("should persuade reset password is initiated for unknown user", async function() {
    await VisitPageAndWaitUrlIs(this.driver, "https://login.example.com:8080/");
    await ClickOnLink(this.driver, "Forgot password\?");
    await WaitRedirected(this.driver, "https://login.example.com:8080/forgot-password");
    await FillField(this.driver, "username", "unknown");
    await ClickOn(this.driver, SeleniumWebDriver.By.id('next-button'));

    // The malicious user thinks the confirmation has been sent.
    await WaitRedirected(this.driver, 'https://login.example.com:8080/confirmation-sent');
  });

  it("should notify passwords are different in reset form", async function() {
    await VisitPageAndWaitUrlIs(this.driver, "https://login.example.com:8080/");
    await ClickOnLink(this.driver, "Forgot password\?");
    await WaitRedirected(this.driver, "https://login.example.com:8080/forgot-password");
    await FillField(this.driver, "username", "john");
    await ClickOn(this.driver, SeleniumWebDriver.By.id('next-button'));
    await WaitRedirected(this.driver, 'https://login.example.com:8080/confirmation-sent');

    await this.driver.sleep(500); // Simulate the time it takes to receive the e-mail.
    const link = await GetLinkFromEmail();
    await VisitPageAndWaitUrlIs(this.driver, link);
    await FillField(this.driver, "password1", "newpass");
    await FillField(this.driver, "password2", "badpass");
    await ClickOn(this.driver, SeleniumWebDriver.By.id('reset-button'));
    await SeeNotification(this.driver, "error", "The passwords are different.");
  });
}