@W-18685522 Password Reset and Passwordless Integration Test #2669
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,107 @@ | ||
| /* | ||
| * Copyright (c) 2025, Salesforce, Inc. | ||
| * All rights reserved. | ||
| * SPDX-License-Identifier: BSD-3-Clause | ||
| * For full license text, see the LICENSE file in the repo root or https://opensource.org/licenses/BSD-3-Clause | ||
| */ | ||
|
|
||
| const {test, expect} = require('@playwright/test') | ||
| const config = require('../../config') | ||
| const {generateUserCredentials} = require('../../scripts/utils.js') | ||
| const {answerConsentTrackingForm} = require('../../scripts/pageHelpers.js') | ||
|
|
||
| const GUEST_USER_CREDENTIALS = generateUserCredentials() | ||
| /** | ||
| * Test that a user can login with passwordless login on mobile. There is no programmatic way to check the email, | ||
| * so we will check that the necessary API call is being made and expected UI is shown | ||
| */ | ||
| test('Verify passwordless login request', async ({page}) => { | ||
| let interceptedRequest = null | ||
|
|
||
| await page.route('**/mobify/slas/private/shopper/auth/v1/organizations/*/oauth2/passwordless/login', (route) => { | ||
| interceptedRequest = route.request() | ||
| route.continue() | ||
| }) | ||
|
|
||
| await page.goto(config.MORE_LOGIN_OPTIONS_RETAIL_APP_HOME + '/login') | ||
| await answerConsentTrackingForm(page) | ||
|
|
||
| await page.locator('#email').scrollIntoViewIfNeeded() | ||
| await page.fill('#email', config.PWA_E2E_USER_EMAIL) | ||
|
|
||
| await page.getByRole('button', {name: 'Continue Securely'}).click() | ||
|
|
||
| await page.waitForResponse('**/mobify/slas/private/shopper/auth/v1/organizations/*/oauth2/passwordless/login') | ||
|
|
||
| expect(interceptedRequest).toBeTruthy() | ||
| expect(interceptedRequest.method()).toBe('POST') | ||
|
|
||
| const postData = interceptedRequest.postData() | ||
| expect(postData).toBeTruthy() | ||
|
|
||
| const params = new URLSearchParams(postData) | ||
|
|
||
| expect(params.get('user_id')).toBe(config.PWA_E2E_USER_EMAIL) | ||
| expect(params.get('mode')).toBe('callback') | ||
| expect(params.get('channel_id')).toBe('RefArchGlobal') | ||
|
||
| expect(params.get('callback_uri')).toMatch(/.*\/passwordless-login-callback$/) | ||
| }) | ||
|
|
||
| test('Verify password reset callback request', async ({page}) => { | ||
| let interceptedRequest = null | ||
|
|
||
| await page.route('**/mobify/slas/private/shopper/auth/v1/organizations/*/oauth2/password/reset', (route) => { | ||
| interceptedRequest = route.request() | ||
| route.continue() | ||
| }) | ||
|
|
||
| await page.goto(config.MORE_LOGIN_OPTIONS_RETAIL_APP_HOME + '/login') | ||
| await answerConsentTrackingForm(page) | ||
|
|
||
| await page.locator('#email').scrollIntoViewIfNeeded() | ||
| await page.fill('#email', config.PWA_E2E_USER_EMAIL) | ||
|
|
||
| await page.getByRole('button', {name: 'Password'}).click() | ||
| await page.getByRole('button', {name: 'Forgot password?'}).click() | ||
|
|
||
| await page.fill('#email', config.PWA_E2E_USER_EMAIL) | ||
| await page.getByRole('button', {name: 'Reset Password'}).click() | ||
|
|
||
| await page.waitForResponse('**/mobify/slas/private/shopper/auth/v1/organizations/*/oauth2/password/reset') | ||
|
|
||
| expect(interceptedRequest).toBeTruthy() | ||
| expect(interceptedRequest.method()).toBe('POST') | ||
|
|
||
| const postData = interceptedRequest.postData() | ||
| expect(postData).toBeTruthy() | ||
|
|
||
| const params = new URLSearchParams(postData) | ||
|
|
||
| expect(params.get('user_id')).toBe(config.PWA_E2E_USER_EMAIL) | ||
| expect(params.get('mode')).toBe('callback') | ||
| expect(params.get('channel_id')).toBe('RefArchGlobal') | ||
| expect(params.get('callback_uri')).toMatch(/.*\/reset-password-callback$/) | ||
| expect(params.get('hint')).toBe('cross_device') | ||
| }) | ||
|
|
||
| test('Verify password reset request', async ({page}) => { | ||
| let interceptedRequest = null | ||
| await page.route('**/mobify/slas/private/shopper/auth/v1/organizations/*/oauth2/password/action', (route) => { | ||
| interceptedRequest = route.request() | ||
| route.continue() | ||
| }) | ||
|
|
||
| await page.goto(config.MORE_LOGIN_OPTIONS_RETAIL_APP_HOME + `/reset-password-landing?token=1234567&email=${GUEST_USER_CREDENTIALS.email}`) | ||
| await answerConsentTrackingForm(page) | ||
|
|
||
| await page.fill('#password', GUEST_USER_CREDENTIALS.password) | ||
| await page.fill('#confirmPassword', GUEST_USER_CREDENTIALS.password) | ||
|
|
||
| expect(await page.inputValue('#password')).toBe(GUEST_USER_CREDENTIALS.password) | ||
| expect(await page.inputValue('#confirmPassword')).toBe(GUEST_USER_CREDENTIALS.password) | ||
| await page.getByRole('button', {name: 'Reset Password'}).click() | ||
|
|
||
| await page.waitForResponse('**/mobify/slas/private/shopper/auth/v1/organizations/*/oauth2/password/action') | ||
|
|
||
| expect(interceptedRequest).toBeTruthy() | ||
| }) | ||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,120 @@ | ||
| /* | ||
| * Copyright (c) 2025, Salesforce, Inc. | ||
| * All rights reserved. | ||
| * SPDX-License-Identifier: BSD-3-Clause | ||
| * For full license text, see the LICENSE file in the repo root or https://opensource.org/licenses/BSD-3-Clause | ||
| */ | ||
|
|
||
| const {test, expect} = require('@playwright/test') | ||
| const config = require('../../config') | ||
| const {generateUserCredentials} = require('../../scripts/utils.js') | ||
| const {answerConsentTrackingForm} = require('../../scripts/pageHelpers.js') | ||
|
|
||
| const GUEST_USER_CREDENTIALS = generateUserCredentials() | ||
|
|
||
| /** | ||
| * Test that a user can login with passwordless login on mobile. There is no programmatic way to check the email, | ||
| * so we will check that the necessary API call is being made and expected UI is shown | ||
| */ | ||
| test('Verify passwordless login request on mobile', async ({page}) => { | ||
| let interceptedRequest = null | ||
|
|
||
| await page.route('**/mobify/slas/private/shopper/auth/v1/organizations/*/oauth2/passwordless/login', (route) => { | ||
| interceptedRequest = route.request() | ||
| route.continue() | ||
| }) | ||
|
|
||
| await page.goto(config.MORE_LOGIN_OPTIONS_RETAIL_APP_HOME + '/login') | ||
| await answerConsentTrackingForm(page) | ||
|
|
||
| await page.locator('#email').scrollIntoViewIfNeeded() | ||
| await page.fill('#email', config.PWA_E2E_USER_EMAIL) | ||
|
|
||
| await page.getByRole('button', {name: 'Continue Securely'}).scrollIntoViewIfNeeded() | ||
| await page.getByRole('button', {name: 'Continue Securely'}).click() | ||
|
|
||
| await page.waitForResponse('**/mobify/slas/private/shopper/auth/v1/organizations/*/oauth2/passwordless/login') | ||
|
|
||
| expect(interceptedRequest).toBeTruthy() | ||
| expect(interceptedRequest.method()).toBe('POST') | ||
|
|
||
| const postData = interceptedRequest.postData() | ||
| expect(postData).toBeTruthy() | ||
|
|
||
| const params = new URLSearchParams(postData) | ||
|
|
||
| expect(params.get('user_id')).toBe(config.PWA_E2E_USER_EMAIL) | ||
| expect(params.get('mode')).toBe('callback') | ||
| expect(params.get('channel_id')).toBe('RefArchGlobal') | ||
| expect(params.get('callback_uri')).toMatch(/.*\/passwordless-login-callback$/) | ||
| }) | ||
|
|
||
| test('Verify password reset callback request on mobile', async ({page}) => { | ||
| let interceptedRequest = null | ||
|
|
||
| await page.route('**/mobify/slas/private/shopper/auth/v1/organizations/*/oauth2/password/reset', (route) => { | ||
| interceptedRequest = route.request() | ||
| route.continue() | ||
| }) | ||
|
|
||
| await page.goto(config.MORE_LOGIN_OPTIONS_RETAIL_APP_HOME + '/login') | ||
| await answerConsentTrackingForm(page) | ||
|
|
||
| await page.locator('#email').scrollIntoViewIfNeeded() | ||
| await page.fill('#email', config.PWA_E2E_USER_EMAIL) | ||
|
|
||
| await page.getByRole('button', {name: 'Password'}).scrollIntoViewIfNeeded() | ||
| await page.getByRole('button', {name: 'Password'}).click() | ||
|
|
||
| await page.getByRole('button', {name: 'Forgot password?'}).scrollIntoViewIfNeeded() | ||
| await page.getByRole('button', {name: 'Forgot password?'}).click() | ||
|
|
||
| await page.locator('#email').scrollIntoViewIfNeeded() | ||
| await page.fill('#email', config.PWA_E2E_USER_EMAIL) | ||
|
|
||
| await page.getByRole('button', {name: 'Reset Password'}).scrollIntoViewIfNeeded() | ||
| await page.getByRole('button', {name: 'Reset Password'}).click() | ||
|
|
||
| await page.waitForResponse('**/mobify/slas/private/shopper/auth/v1/organizations/*/oauth2/password/reset') | ||
|
|
||
| expect(interceptedRequest).toBeTruthy() | ||
| expect(interceptedRequest.method()).toBe('POST') | ||
|
|
||
| const postData = interceptedRequest.postData() | ||
| expect(postData).toBeTruthy() | ||
|
|
||
| const params = new URLSearchParams(postData) | ||
|
|
||
| expect(params.get('user_id')).toBe(config.PWA_E2E_USER_EMAIL) | ||
| expect(params.get('mode')).toBe('callback') | ||
| expect(params.get('channel_id')).toBe('RefArchGlobal') | ||
| expect(params.get('callback_uri')).toMatch(/.*\/reset-password-callback$/) | ||
| expect(params.get('hint')).toBe('cross_device') | ||
| }) | ||
|
|
||
| test('Verify password reset request on mobile', async ({page}) => { | ||
| let interceptedRequest = null | ||
| await page.route('**/mobify/slas/private/shopper/auth/v1/organizations/*/oauth2/password/action', (route) => { | ||
| interceptedRequest = route.request() | ||
| route.continue() | ||
| }) | ||
|
|
||
| await page.goto(config.MORE_LOGIN_OPTIONS_RETAIL_APP_HOME + `/reset-password-landing?token=1234567&email=${GUEST_USER_CREDENTIALS.email}`) | ||
| await answerConsentTrackingForm(page) | ||
|
|
||
| await page.locator('#password').scrollIntoViewIfNeeded() | ||
| await page.fill('#password', GUEST_USER_CREDENTIALS.password) | ||
|
|
||
| await page.locator('#confirmPassword').scrollIntoViewIfNeeded() | ||
| await page.fill('#confirmPassword', GUEST_USER_CREDENTIALS.password) | ||
|
|
||
| expect(await page.inputValue('#password')).toBe(GUEST_USER_CREDENTIALS.password) | ||
| expect(await page.inputValue('#confirmPassword')).toBe(GUEST_USER_CREDENTIALS.password) | ||
|
|
||
| await page.getByRole('button', {name: 'Reset Password'}).scrollIntoViewIfNeeded() | ||
| await page.getByRole('button', {name: 'Reset Password'}).click() | ||
|
|
||
| await page.waitForResponse('**/mobify/slas/private/shopper/auth/v1/organizations/*/oauth2/password/action') | ||
|
|
||
| expect(interceptedRequest).toBeTruthy() | ||
| }) |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
would we want to use an environment deployed in a pwa kit owned environment to make sure it doesnt get lost or deleted? I see in CI it uses this one:
pwa-kit/.github/workflows/e2e.yml
Line 374 in 8417719
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Also would we consider using a more generic name for the constant like
RETAIL_REACT_APP_HOME_PRIVATE_CLIENTso it can be used for other private client E2E tests in the future?There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The
RETAIL_APP_HOMEdoesn't have social and passwordless enabled, so consolidating on one site will lose us an E2E test "branch" of the PWA kit site configured without the social and passwordless changes, which has an impact on the UI. Right now we have two sites: one with the additional login features and one not, and I thought that was a good variety of sites.I can make the deployment on the pwa-kit environment instead to make it more visible
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Oh sorry I meant, it looks like there are 2 PWA Kit sites:
Was wondering if we should reuse https://scaffold-pwa-e2e-pwa-kit-private.mobify-storefront.com instead of creating a new one in the PWA Kit project
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If we want to keep the tests for the old login paths then we should create a new site. https://scaffold-pwa-e2e-pwa-kit-private.mobify-storefront.com/ is the one that the e2e tests get executed on. The current e2e tests for shopper login assumes the UI for these new login features are turned off.
The new tests in this PR work on a UI where the passwordless login is enabled, so it has to go on a separate site. If we reuse a site, then we will lose the e2e test "coverage" on the old configuration without the features enabled.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ah I think Jinsu is suggesting using the
scaffold-pwaproject because that is internal use only - so external non-PWA folks cannot alter or delete the environmentsThere was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Updated the environment to be in
scaffold-pwaand change the variable name to include other features that are defaulted to be off.There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@jeremy-jung1 I know you already created the env, but is there potentially a better name that describes the configuration of the env?
I had originally thought the difference with this env vs the original e2e env is that it’s configured with a SLAS private client
Uh oh!
There was an error while loading. Please reload this page.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The new environment is called
EXTRA_FEATURES_E2E_RETAIL_APP_HOME. Instead of just features that has to be configured with SLAS Private Client, I thought a more encompassing name for features that are off by default would be good. Some features in the future might be dependent on other conditions. Social login is default to disabled too, but that isn't dependent on SLAS Private Client.