booth 0.0.1

data/lib/booth/test/support/assert_partial.rb

@@ -0,0 +1,29 @@
+module Booth
+  module Test
+    module Support
+      class AssertPartial
+        include ::Booth::MethodObject
+
+        cattr_accessor :asserted_partials, instance_accessor: false, default: Set.new
+
+        option :page
+        option :namespace
+        option :controller
+        option :step
+
+        def call
+          ::Capybara::Lockstep.synchronize
+
+          page.find "[data-booth='#{partial}']", visible: :all
+
+          self.class.asserted_partials << partial
+          nil
+        end
+
+        def partial
+          "#{namespace}/#{controller}/#{step}"
+        end
+      end
+    end
+  end
+end

data/lib/booth/test/support/force_login.rb

@@ -0,0 +1,26 @@
+module Booth
+  module Test
+    module Support
+      class ForceLogin
+        include ::Booth::MethodObject
+
+        option :credential_id
+        option :request, ::Booth::Request
+
+        def call
+          ::Booth::Sessions::CreateAndLogin.call(credential:, request:)
+        end
+
+        delegate :scope, to: :credential
+
+        private
+
+        def credential
+          return @credential if defined?(@credential)
+
+          @credential = ::Booth::Models::Credential.find_by(id: credential_id)
+        end
+      end
+    end
+  end
+end

data/lib/booth/test/support/get_session_value.rb

@@ -0,0 +1,35 @@
+module Booth
+  module Test
+    module Support
+      class GetSessionValue
+        include ::Booth::MethodObject
+        include ::Booth::Logging
+
+        option :page
+        option :key
+
+        def call
+          ::Capybara::Lockstep.synchronize
+
+          result = nil
+          in_new_window do
+            result = page.get_rack_session[key]
+          end
+
+          debug { "session[#{key.inspect}] is: #{result.inspect}" }
+
+          ::Capybara::Lockstep.synchronize
+          result
+        end
+
+        private
+
+        def in_new_window(&)
+          window = page.open_new_window
+          page.within_window(window, &)
+          window.close
+        end
+      end
+    end
+  end
+end

data/lib/booth/test/support/otp_code_from_session.rb

@@ -0,0 +1,30 @@
+module Booth
+  module Test
+    module Support
+      class OtpCodeFromSession
+        include ::Booth::MethodObject
+
+        option :page
+        option :scope
+
+        def call
+          secret_key = load_secret_key
+          raise 'No OTP secret key found in session' if secret_key.blank?
+
+          dummy = ::Booth::Models::Credential.new otp_secret_key: secret_key
+          dummy.otp_code
+        end
+
+        private
+
+        def load_secret_key
+          ::Booth::Test::Support::GetSessionValue.call(page:, key:)
+        end
+
+        def key
+          "booth.#{scope}.otp.secret_key"
+        end
+      end
+    end
+  end
+end

data/lib/booth/test/support/soft_reset_session.rb

@@ -0,0 +1,22 @@
+module Booth
+  module Test
+    module Support
+      # Essentially resets the session cookie, but without removing
+      # Chrome's Virtual Authenticator Enviroment.
+      class SoftResetSession
+        include ::Booth::MethodObject
+
+        option :page
+
+        def call
+          ::Capybara::Lockstep.synchronize
+
+          keys = page.get_rack_session.keys
+          nilified_keys = keys.index_with { nil }
+
+          page.set_rack_session(**nilified_keys)
+        end
+      end
+    end
+  end
+end

data/lib/booth/test/userland/logins/missing_authenticators.rb

@@ -0,0 +1,72 @@
+module Booth
+  module Test
+    module Userland
+      module Logins
+        class MissingAuthenticators
+          include ::Booth::MethodObject
+          include ::Booth::Test::Helpers
+
+          option :page
+          option :scope
+          option :show_onboarding_path
+          option :new_login_path
+
+          def call
+            credential = ::Booth::Models::Credential.create!(
+              username: 'alice',
+              password: 'qwrasfyxv',
+              scope:,
+              mode: :username_and_webauth,
+              allowed_modes: [:username_and_webauth]
+            )
+
+            onboarding = ::Booth::Models::Onboarding.create!(
+              credential_id: credential.id,
+              mode: :username_and_webauth
+            )
+
+            page.visit show_onboarding_path.sub('ID', onboarding.secret_key)
+
+            create_virtual_authenticator
+
+            assert_userland_partial controller: :onboarding, step: :register_webauth
+
+            page.click_on :register
+
+            assert_userland_partial controller: :onboarding, step: :choose_webauth_nickname
+
+            page.fill_in :nickname, with: 'Yubikey'
+            page.click_on :submit
+
+            assert_userland_partial controller: :onboarding, step: :confirm_webauth
+
+            page.click_on :authenticate
+
+            assert_userland_partial controller: :onboarding, step: :completed
+            assert_logged_in credential: credential
+
+            soft_reset_session
+            assert_logged_out
+
+            credential.authenticators.delete_all
+
+            # Login
+
+            page.visit new_login_path
+
+            assert_userland_partial controller: :login, step: :enter_username
+
+            page.fill_in :username, with: 'alice'
+            page.click_on :submit
+
+            assert_userland_partial controller: :login, step: :remote_session_available
+
+            page.click_on :skip
+
+            assert_userland_partial controller: :login, step: :no_authenticators
+          end
+        end
+      end
+    end
+  end
+end

data/lib/booth/test/userland/logins/missing_onboarding.rb

@@ -0,0 +1,35 @@
+module Booth
+  module Test
+    module Userland
+      module Logins
+        class MissingOnboarding
+          include ::Booth::MethodObject
+          include ::Booth::Test::Helpers
+
+          option :page
+          option :scope
+          option :new_login_path
+
+          def call
+            ::Booth::Models::Credential.create!(
+              username: 'alice',
+              password: 'qwrasfyxv',
+              scope:,
+              mode: :first_time,
+              allowed_modes: [:username_and_password]
+            )
+
+            page.visit new_login_path
+
+            assert_userland_partial controller: :login, step: :enter_username
+
+            page.fill_in :username, with: 'alice'
+            page.click_on :submit
+
+            assert_userland_partial controller: :login, step: :needs_onboarding
+          end
+        end
+      end
+    end
+  end
+end

data/lib/booth/test/userland/logins/username_and_password.rb

@@ -0,0 +1,40 @@
+module Booth
+  module Test
+    module Userland
+      module Logins
+        class UsernameAndPassword
+          include ::Booth::MethodObject
+          include ::Booth::Test::Helpers
+
+          option :page
+          option :scope
+          option :new_login_path
+
+          def call
+            credential = ::Booth::Models::Credential.create!(
+              username: 'alice',
+              password: 'qwrasfyxv',
+              scope:,
+              mode: :username_and_password,
+              allowed_modes: [:username_and_password]
+            )
+
+            page.visit new_login_path
+
+            assert_userland_partial controller: :login, step: :enter_username
+
+            page.fill_in :username, with: 'alice'
+            page.click_on :submit
+
+            assert_userland_partial controller: :login, step: :enter_password
+
+            page.fill_in :password, with: 'qwrasfyxv'
+            page.click_on :submit
+
+            assert_logged_in credential:
+          end
+        end
+      end
+    end
+  end
+end

data/lib/booth/test/userland/logins/username_and_webauth.rb

@@ -0,0 +1,75 @@
+module Booth
+  module Test
+    module Userland
+      module Logins
+        class UsernameAndWebauth
+          include ::Booth::MethodObject
+          include ::Booth::Test::Helpers
+
+          option :page
+          option :scope
+          option :show_onboarding_path
+          option :new_login_path
+          option :after_credential, default: -> {}
+
+          def call
+            credential = ::Booth::Models::Credential.create!(
+              username: 'alice',
+              password: 'qwrasfyxv',
+              scope:,
+              mode: :username_and_webauth,
+              allowed_modes: [:username_and_webauth]
+            )
+            after_credential&.call(credential.id)
+
+            onboarding = ::Booth::Models::Onboarding.create!(
+              credential_id: credential.id,
+              mode: :username_and_webauth
+            )
+
+            page.visit show_onboarding_path.sub('ID', onboarding.secret_key)
+            create_virtual_authenticator
+
+            assert_userland_partial controller: :onboarding, step: :register_webauth
+
+            page.click_on :register
+
+            assert_userland_partial controller: :onboarding, step: :choose_webauth_nickname
+
+            page.fill_in :nickname, with: 'Yubikey'
+            page.click_on :submit
+
+            assert_userland_partial controller: :onboarding, step: :confirm_webauth
+
+            page.click_on :authenticate
+
+            assert_userland_partial controller: :onboarding, step: :completed
+            assert_logged_in credential: credential
+
+            soft_reset_session
+            assert_logged_out
+
+            # Login
+
+            page.visit new_login_path
+
+            assert_userland_partial controller: :login, step: :enter_username
+
+            page.fill_in :username, with: 'alice'
+            page.click_on :submit
+
+            assert_userland_partial controller: :login, step: :remote_session_available
+
+            page.click_on :skip
+
+            assert_userland_partial controller: :login, step: :enter_webauth
+
+            page.click_on :authenticate
+
+            assert_logged_in credential:
+          end
+        end
+      end
+    end
+  end
+end

data/lib/booth/test/userland/logins/username_password_and_otp.rb

@@ -0,0 +1,45 @@
+module Booth
+  module Test
+    module Userland
+      module Logins
+        class UsernamePasswordAndOtp
+          include ::Booth::MethodObject
+          include ::Booth::Test::Helpers
+
+          option :page
+          option :scope
+          option :new_login_path
+
+          def call
+            credential = ::Booth::Models::Credential.create!(
+              username: 'alice',
+              password: 'qwrasfyxv',
+              scope:,
+              mode: :username_password_and_otp,
+              allowed_modes: [:username_password_and_otp]
+            )
+
+            page.visit new_login_path
+
+            assert_userland_partial controller: :login, step: :enter_username
+
+            page.fill_in :username, with: 'alice'
+            page.click_on :submit
+
+            assert_userland_partial controller: :login, step: :enter_password
+
+            page.fill_in :password, with: 'qwrasfyxv'
+            page.click_on :submit
+
+            assert_userland_partial controller: :login, step: :enter_otp
+
+            page.fill_in :code, with: credential.otp_code
+            page.click_on :submit
+
+            assert_logged_in credential:
+          end
+        end
+      end
+    end
+  end
+end

data/lib/booth/test/userland/logins/username_password_and_webauth.rb

@@ -0,0 +1,86 @@
+module Booth
+  module Test
+    module Userland
+      module Logins
+        class UsernamePasswordAndWebauth
+          include ::Booth::MethodObject
+          include ::Booth::Test::Helpers
+
+          option :page
+          option :scope
+          option :show_onboarding_path
+          option :new_login_path
+
+          def call
+            # Setup
+
+            credential = ::Booth::Models::Credential.create!(
+              username: 'alice',
+              password: 'qwrasfyxv',
+              scope:,
+              mode: :username_password_and_webauth,
+              allowed_modes: [:username_password_and_webauth]
+            )
+
+            onboarding = ::Booth::Models::Onboarding.create!(
+              credential_id: credential.id,
+              mode: :username_password_and_webauth
+            )
+
+            page.visit show_onboarding_path.sub('ID', onboarding.secret_key)
+            create_virtual_authenticator
+
+            assert_userland_partial controller: :onboarding, step: :choose_password
+
+            # Choose password
+
+            page.fill_in :password, with: 'qwrasfyxv'
+            page.click_on :submit
+
+            page.fill_in :password, with: 'qwrasfyxv'
+            page.click_on :submit
+
+            # Choose Webauth
+
+            page.click_on :register
+            page.fill_in :nickname, with: 'Yubikey'
+            page.click_on :submit
+
+            page.click_on :authenticate
+
+            assert_userland_partial controller: :onboarding, step: :completed
+            assert_logged_in credential: credential
+
+            soft_reset_session
+            assert_logged_out
+
+            # Login
+
+            page.visit new_login_path
+
+            assert_userland_partial controller: :login, step: :enter_username
+
+            page.fill_in :username, with: 'alice'
+            page.click_on :submit
+
+            assert_userland_partial controller: :login, step: :remote_session_available
+            # TODO: Not really needed if there were no other active session (created by onboarding)
+            page.click_on :skip
+
+            assert_userland_partial controller: :login, step: :enter_password
+
+            page.fill_in :password, with: 'qwrasfyxv'
+            page.click_on :submit
+
+            assert_userland_partial controller: :login, step: :enter_webauth
+
+            page.click_on :authenticate
+            sleep 1
+
+            assert_logged_in credential:
+          end
+        end
+      end
+    end
+  end
+end

data/lib/booth/test/userland/onboardings/already_logged_in.rb

@@ -0,0 +1,64 @@
+module Booth
+  module Test
+    module Userland
+      module Onboardings
+        class AlreadyLoggedIn
+          include ::Booth::MethodObject
+          include ::Booth::Test::Helpers
+
+          option :page
+          option :scope
+          option :show_onboarding_path
+          option :new_login_path
+
+          def call
+            # Setup
+
+            alice = ::Booth::Models::Credential.create!(
+              username: 'alice',
+              password: 'qwrasfyxv',
+              scope:,
+              mode: :username_and_password,
+              allowed_modes: [:username_and_password]
+            )
+
+            bobby = ::Booth::Models::Credential.create!(
+              username: 'bobby',
+              password: 'qwrasfyxv',
+              scope:,
+              mode: :username_and_password,
+              allowed_modes: [:username_and_password]
+            )
+
+            onboarding = ::Booth::Models::Onboarding.create!(
+              credential_id: bobby.id,
+              mode: :username_and_password
+            )
+
+            # Loging in Alice
+
+            page.visit new_login_path
+
+            assert_userland_partial controller: :login, step: :enter_username
+
+            page.fill_in :username, with: 'alice'
+            page.click_on :submit
+
+            assert_userland_partial controller: :login, step: :enter_password
+
+            page.fill_in :password, with: 'qwrasfyxv'
+            page.click_on :submit
+
+            assert_logged_in credential: alice
+
+            # Onboarding as Bobby
+
+            page.visit show_onboarding_path.sub('ID', onboarding.secret_key)
+
+            assert_userland_partial controller: :onboarding, step: :already_logged_in
+          end
+        end
+      end
+    end
+  end
+end

data/lib/booth/test/userland/onboardings/otp.rb

@@ -0,0 +1,63 @@
+module Booth
+  module Test
+    module Userland
+      module Onboardings
+        class Otp
+          include ::Booth::MethodObject
+          include ::Booth::Test::Helpers
+
+          option :page
+          option :scope
+          option :show_onboarding_path
+          option :new_login_path
+
+          def call
+            # Setup
+
+            credential = ::Booth::Models::Credential.create!(
+              username: 'alice',
+              password: 'qwrasfyxv',
+              scope:,
+              mode: :username_password_and_otp,
+              allowed_modes: %i[username_password_and_otp username_and_webauth]
+            )
+
+            onboarding = ::Booth::Models::Onboarding.create!(
+              credential_id: credential.id,
+              mode: :first_time
+            )
+
+            # Onboarding
+
+            page.visit show_onboarding_path.sub('ID', onboarding.secret_key)
+
+            assert_userland_partial controller: :onboarding, step: :choose_mode
+
+            page.click_on :choose_username_password_and_otp
+
+            assert_userland_partial controller: :onboarding, step: :choose_password
+
+            page.fill_in :password, with: 'qwrasfyxv'
+            page.click_on :submit
+
+            assert_userland_partial controller: :onboarding, step: :confirm_password
+
+            page.fill_in :password, with: 'qwrasfyxv'
+            page.click_on :submit
+
+            assert_userland_partial controller: :onboarding, step: :register_otp
+
+            page.click_on :confirm
+
+            assert_userland_partial controller: :onboarding, step: :confirm_otp
+
+            page.fill_in :code, with: onboarding.reload.otp_code
+            page.click_on :submit
+
+            assert_logged_in credential:
+          end
+        end
+      end
+    end
+  end
+end

data/lib/booth/test/userland/onboardings/password.rb

@@ -0,0 +1,49 @@
+module Booth
+  module Test
+    module Userland
+      module Onboardings
+        class Password
+          include ::Booth::MethodObject
+          include ::Booth::Test::Helpers
+
+          option :page
+          option :scope
+          option :show_onboarding_path
+
+          def call
+            # Setup
+
+            credential = ::Booth::Models::Credential.create!(
+              username: 'alice',
+              password: 'qwrasfyxv',
+              scope:,
+              mode: :username_and_password,
+              allowed_modes: %i[username_and_password username_and_webauth]
+            )
+
+            onboarding = ::Booth::Models::Onboarding.create!(
+              credential_id: credential.id,
+              mode: :first_time
+            )
+
+            # Onboarding
+
+            page.visit show_onboarding_path.sub('ID', onboarding.secret_key)
+
+            assert_userland_partial controller: :onboarding, step: :choose_mode
+
+            page.click_on :choose_username_and_password
+
+            page.fill_in :password, with: 'qwrasfyxv'
+            page.click_on :submit
+
+            page.fill_in :password, with: 'qwrasfyxv'
+            page.click_on :submit
+
+            assert_logged_in credential:
+          end
+        end
+      end
+    end
+  end
+end