chemlab 0.0.1 → 0.1.0

data/qa/specs/features/ee/browser_ui/1_manage/group/group_saml_group_managed_accounts_spec.rb

@@ -1,178 +0,0 @@
-# frozen_string_literal: true
-
-module QA
-  context 'Manage', :group_saml, :orchestrated, :requires_admin, quarantine: { issue: 'https://gitlab.com/gitlab-org/gitlab/issues/202260', type: :bug } do
-    describe 'Group SAML SSO - Group managed accounts' do
-      include Support::Api
-
-      before(:all) do
-        # Create a new user (with no existing SAML identities) who will be added as owner to the SAML group.
-        @owner_user = Resource::User.fabricate_via_api!
-
-        Flow::Login.sign_in(as: @owner_user)
-
-        @group = Resource::Sandbox.fabricate_via_api! do |sandbox_group|
-          sandbox_group.path = "saml_sso_group_#{SecureRandom.hex(8)}"
-        end
-
-        @saml_idp_service = Flow::Saml.run_saml_idp_service(@group.path)
-
-        @api_client = Runtime::API::Client.new(:gitlab, personal_access_token: Runtime::Env.admin_personal_access_token)
-
-        @developer_user = Resource::User.fabricate_via_api!
-
-        @group.add_member(@owner_user, QA::Resource::Members::AccessLevel::OWNER)
-
-        @group.add_member(@developer_user)
-
-        @managed_group_url = Flow::Saml.enable_saml_sso(@group, @saml_idp_service)
-
-        @saml_linked_for_admin = false
-
-        setup_and_enable_group_managed_accounts
-
-        Page::Main::Menu.perform(&:sign_out_if_signed_in)
-
-        Flow::Saml.logout_from_idp(@saml_idp_service)
-      end
-
-      it 'removes existing users from the group, forces existing users to create a new account and allows to leave group' do
-        expect(@group.list_members.map { |item| item["username"] }).not_to include(@developer_user.username)
-
-        visit_managed_group_url
-
-        EE::Page::Group::SamlSSOSignIn.perform(&:click_sign_in)
-
-        Flow::Saml.login_to_idp_if_required('user3', 'user3pass')
-
-        expect(page).to have_text("uses group managed accounts. You need to create a new GitLab account which will be managed by")
-
-        Support::Retrier.retry_until(raise_on_failure: true) do
-          @idp_user_email = EE::Page::Group::SamlSSOSignUp.perform(&:current_email)
-
-          remove_user_if_exists(@idp_user_email)
-
-          @new_username = EE::Page::Group::SamlSSOSignUp.perform(&:current_username)
-
-          EE::Page::Group::SamlSSOSignUp.perform(&:click_register_button)
-
-          page.has_no_content?("Email has already been taken")
-        end
-
-        expect(page).to have_text("Sign up was successful! Please confirm your email to sign in.")
-
-        QA::Flow::User.confirm_user(@new_username)
-
-        visit_managed_group_url
-
-        EE::Page::Group::SamlSSOSignIn.perform(&:click_sign_in)
-
-        expect(page).to have_text("Signed in with SAML")
-
-        Page::Group::Show.perform(&:leave_group)
-
-        expect(page).to have_text("You left")
-
-        Page::Main::Menu.perform(&:sign_out)
-
-        visit_managed_group_url
-
-        EE::Page::Group::SamlSSOSignIn.perform(&:click_sign_in)
-
-        expect(page).to have_text("uses group managed accounts. You need to create a new GitLab account which will be managed by")
-      end
-
-      after(:all) do
-        page.visit Runtime::Scenario.gitlab_address
-
-        %w[enforced_sso enforced_sso_requires_session group_managed_accounts sign_up_on_sso group_scim group_administration_nav_item].each do |flag|
-          Runtime::Feature.remove(flag)
-        end
-
-        remove_user_if_exists(@idp_user_email)
-
-        @group.remove_via_api!
-
-        Flow::Saml.remove_saml_idp_service(@saml_idp_service)
-
-        page.visit Runtime::Scenario.gitlab_address
-        Page::Main::Menu.perform(&:sign_out_if_signed_in)
-      end
-    end
-
-    def remove_user_if_exists(username_or_email)
-      QA::Runtime::Logger.debug("Attempting to remove user \"#{username_or_email}\" via API")
-
-      return if username_or_email.nil?
-
-      response = parse_body(get(Runtime::API::Request.new(@api_client, "/users?search=#{username_or_email}").url))
-
-      if response.any?
-        raise "GET /users?search=#{username_or_email} returned multiple results. response: #{response}" if response.size > 1
-
-        delete_response = delete Runtime::API::Request.new(@api_client, "/users/#{response.first[:id]}").url
-
-        QA::Runtime::Logger.debug("DELETE \"#{username_or_email}\" response code: #{delete_response.code} message: #{delete_response.body}")
-      else
-        QA::Runtime::Logger.debug("GET /users?search=#{username_or_email} returned empty response: #{response}")
-      end
-    end
-
-    def setup_and_enable_group_managed_accounts
-      %w[enforced_sso enforced_sso_requires_session group_managed_accounts sign_up_on_sso group_scim group_administration_nav_item].each do |flag|
-        Runtime::Feature.enable_and_verify(flag)
-      end
-
-      Support::Retrier.retry_on_exception do
-        # We need to logout from IDP. This is required if this is a retry.
-        Flow::Saml.logout_from_idp(@saml_idp_service)
-
-        page.visit Runtime::Scenario.gitlab_address
-
-        Page::Main::Menu.perform(&:sign_out_if_signed_in)
-
-        # The first time you have to be signed in as admin
-        unless @saml_linked_for_admin
-          Flow::Login.sign_in(as: @owner_user)
-          @saml_linked_for_admin = true
-        end
-
-        # We must sign in with SAML before enabling Group Managed Accounts
-        visit_managed_group_url
-
-        EE::Page::Group::SamlSSOSignIn.perform(&:click_sign_in)
-
-        Flow::Saml.login_to_idp_if_required('user1', 'user1pass')
-
-        Flow::Saml.visit_saml_sso_settings(@group)
-
-        EE::Page::Group::Settings::SamlSSO.perform do |saml_sso|
-          # Once the feature flags are enabled, it takes some time for the toggle buttons to show on the UI.
-          # This issue does not happen manually. Only happens with the test as they are too fast.
-          Support::Retrier.retry_until(sleep_interval: 1, raise_on_failure: true) do
-            condition_met = saml_sso.has_enforced_sso_button? && saml_sso.has_group_managed_accounts_button?
-            page.refresh unless condition_met
-
-            condition_met
-          end
-
-          saml_sso.enforce_sso
-          saml_sso.enable_group_managed_accounts
-          saml_sso.click_save_changes
-
-          saml_sso.user_login_url_link_text
-        end
-
-        Flow::Saml.visit_saml_sso_settings(@group, direct: true)
-        raise "Group managed accounts not setup correctly" unless EE::Page::Group::Settings::SamlSSO.perform(&:group_managed_accounts_enabled?)
-      end
-    end
-
-    def visit_managed_group_url
-      Runtime::Logger.debug(%Q[Visiting managed_group_url at "#{@managed_group_url}"])
-
-      page.visit @managed_group_url
-      Support::Waiter.wait_until { current_url == @managed_group_url }
-    end
-  end
-end

data/qa/specs/features/ee/browser_ui/1_manage/group/group_saml_non_enforced_sso_spec.rb

@@ -1,87 +0,0 @@
-# frozen_string_literal: true
-
-module QA
-  context 'Manage', :group_saml, :orchestrated, :requires_admin do
-    describe 'Group SAML SSO - Non enforced SSO' do
-      include Support::Api
-
-      before(:all) do
-        @group = Resource::Sandbox.fabricate_via_api! do |sandbox_group|
-          sandbox_group.path = "saml_sso_group_#{SecureRandom.hex(8)}"
-        end
-
-        Runtime::Feature.enable_and_verify('group_administration_nav_item')
-
-        @saml_idp_service = Flow::Saml.run_saml_idp_service(@group.path)
-      end
-
-      before do
-        Flow::Saml.logout_from_idp(@saml_idp_service)
-
-        page.visit Runtime::Scenario.gitlab_address
-        Page::Main::Menu.perform(&:sign_out_if_signed_in)
-
-        Flow::Login.sign_in
-      end
-
-      it 'User logs in to group with SAML SSO' do
-        managed_group_url = Flow::Saml.enable_saml_sso(@group, @saml_idp_service)
-
-        page.visit managed_group_url
-
-        EE::Page::Group::SamlSSOSignIn.perform(&:click_sign_in)
-
-        Flow::Saml.login_to_idp_if_required('user1', 'user1pass')
-
-        expect(page).to have_content("SAML for #{@group.path} was added to your connected accounts")
-
-        page.visit managed_group_url
-
-        EE::Page::Group::SamlSSOSignIn.perform(&:click_sign_in)
-
-        expect(page).to have_content("Already signed in with SAML for #{@group.path}")
-      end
-
-      it 'Lets group admin test settings' do
-        incorrect_fingerprint = Digest::SHA1.hexdigest(rand.to_s)
-
-        Flow::Saml.visit_saml_sso_settings(@group)
-
-        EE::Page::Group::Settings::SamlSSO.perform do |saml_sso|
-          saml_sso.set_id_provider_sso_url(@saml_idp_service.idp_sso_url)
-          saml_sso.set_cert_fingerprint(incorrect_fingerprint)
-          saml_sso.click_save_changes
-
-          saml_sso.click_test_button
-        end
-
-        Flow::Saml.login_to_idp_if_required('user2', 'user2pass')
-
-        expect(page).to have_content("Verify SAML Configuration")
-        expect(page).to have_content("Fingerprint mismatch")
-        expect(page).to have_content("<saml:Issuer>#{@saml_idp_service.idp_issuer}</saml:Issuer>")
-
-        EE::Page::Group::Settings::SamlSSO.perform do |saml_sso|
-          saml_sso.set_cert_fingerprint(@saml_idp_service.idp_certificate_fingerprint)
-          saml_sso.click_save_changes
-
-          saml_sso.click_test_button
-        end
-
-        expect(page).to have_content("Verify SAML Configuration")
-        expect(page).not_to have_content("Fingerprint mismatch")
-      end
-
-      after(:all) do
-        @group.remove_via_api!
-
-        Runtime::Feature.remove('group_administration_nav_item')
-
-        page.visit Runtime::Scenario.gitlab_address
-        Page::Main::Menu.perform(&:sign_out_if_signed_in)
-
-        Flow::Saml.remove_saml_idp_service(@saml_idp_service)
-      end
-    end
-  end
-end

data/qa/specs/features/ee/browser_ui/1_manage/group/restrict_by_ip_address_spec.rb

@@ -1,107 +0,0 @@
-# frozen_string_literal: true
-require 'securerandom'
-
-module QA
-  context 'Manage' do
-    describe 'Group access', :requires_admin, :skip_live_env do
-      include Runtime::IPAddress
-
-      before(:all) do
-        @sandbox_group = Resource::Sandbox.fabricate! do |sandbox_group|
-          sandbox_group.path = "gitlab-qa-ip-restricted-sandbox-group-#{SecureRandom.hex(8)}"
-        end
-
-        @user = Resource::User.fabricate_or_use(Runtime::Env.gitlab_qa_username_1, Runtime::Env.gitlab_qa_password_1)
-
-        @group = Resource::Group.fabricate_via_api! do |group|
-          group.path = "ip-address-restricted-group-#{SecureRandom.hex(8)}"
-          group.sandbox = @sandbox_group
-        end
-
-        enable_plan_on_group(@sandbox_group.path, "Gold") if Runtime::Env.dot_com?
-      end
-
-      after(:all) do
-        @sandbox_group.remove_via_api!
-
-        page.visit Runtime::Scenario.gitlab_address
-        Page::Main::Menu.perform(&:sign_out_if_signed_in)
-      end
-
-      before do
-        page.visit Runtime::Scenario.gitlab_address
-
-        set_ip_address_restriction_to(ip_address)
-
-        Flow::Login.sign_in(as: @user)
-      end
-
-      context 'when restricted by another ip address' do
-        let(:ip_address) { get_next_ip_address(fetch_current_ip_address) }
-
-        it 'denies access' do
-          @group.sandbox.visit!
-          expect(page).to have_text('Page Not Found')
-          page.go_back
-
-          @group.visit!
-          expect(page).to have_text('Page Not Found')
-          page.go_back
-        end
-      end
-
-      context 'when restricted by user\'s ip address' do
-        let(:ip_address) { fetch_current_ip_address }
-
-        it 'allows access' do
-          @group.sandbox.visit!
-          expect(page).to have_text(@group.sandbox.path)
-
-          @group.visit!
-          expect(page).to have_text(@group.path)
-        end
-      end
-
-      private
-
-      def set_ip_address_restriction_to(ip_address)
-        Flow::Login.while_signed_in_as_admin do
-          @group.sandbox.visit!
-
-          Page::Group::Menu.perform(&:click_group_general_settings_item)
-
-          Page::Group::Settings::General.perform do |settings|
-            settings.set_ip_address_restriction(ip_address)
-          end
-        end
-      end
-
-      def get_next_ip_address(current_ip_address)
-        current_last_part = current_ip_address.split(".").pop.to_i
-
-        updated_last_part = current_last_part < 255 ? current_last_part + 1 : 1
-
-        current_ip_address.split(".")[0...-1].push(updated_last_part).join(".")
-      end
-
-      def enable_plan_on_group(group, plan)
-        Flow::Login.while_signed_in_as_admin do
-          Page::Main::Menu.perform(&:go_to_admin_area)
-          Page::Admin::Menu.perform(&:go_to_groups_overview)
-
-          Page::Admin::Overview::Groups::Index.perform do |index|
-            index.search_group(group)
-            index.click_group(group)
-          end
-
-          Page::Admin::Overview::Groups::Show.perform(&:click_edit_group_link)
-
-          Page::Admin::Overview::Groups::Edit.perform do |edit|
-            edit.select_plan(plan)
-            edit.click_save_changes_button
-          end
-        end
-      end
-    end
-  end
-end

data/qa/specs/features/ee/browser_ui/1_manage/insights/default_insights_spec.rb

@@ -1,48 +0,0 @@
-# frozen_string_literal: true
-
-module QA
-  context 'Manage' do
-    shared_examples 'default insights page' do
-      it 'displays issues and merge requests dashboards' do
-        EE::Page::Insights::Show.perform do |show|
-          show.wait_for_insight_charts_to_load
-
-          expect(show).to have_insights_dashboard_title('Issues Dashboard')
-
-          show.select_insights_dashboard('Merge Requests Dashboard')
-
-          expect(show).to have_insights_dashboard_title('Merge Requests Dashboard')
-        end
-      end
-    end
-
-    context 'group insights page' do
-      before do
-        Flow::Login.sign_in
-
-        Resource::Group.fabricate_via_api!.visit!
-
-        Page::Group::Menu.perform(&:click_group_insights_link)
-      end
-
-      it_behaves_like 'default insights page'
-    end
-
-    context 'project insights page' do
-      before do
-        Flow::Login.sign_in
-
-        project = Resource::Project.fabricate_via_api! do |project|
-          project.name = 'project-insights'
-          project.description = 'Project Insights'
-        end
-
-        project.visit!
-
-        Page::Project::Menu.perform(&:click_project_insights_link)
-      end
-
-      it_behaves_like 'default insights page'
-    end
-  end
-end

data/qa/specs/features/ee/browser_ui/1_manage/instance/instance_audit_logs_spec.rb

@@ -1,124 +0,0 @@
-# frozen_string_literal: true
-require 'securerandom'
-
-module QA
-  context 'Manage', quarantine: { issue: 'https://gitlab.com/gitlab-org/gitlab/-/issues/207741', type: :flaky } do
-    shared_examples 'audit event' do |expected_events|
-      it 'logs audit events for UI operations' do
-        sign_in
-
-        Page::Main::Menu.perform(&:go_to_admin_area)
-        QA::Page::Admin::Menu.perform(&:go_to_monitoring_audit_logs)
-        EE::Page::Admin::Monitoring::AuditLog.perform do |audit_log_page|
-          expected_events.each do |expected_event|
-            expect(audit_log_page).to have_audit_log_row(expected_event)
-          end
-        end
-      end
-    end
-
-    describe 'Instance', :requires_admin do
-      context 'Failed sign in' do
-        before do
-          Runtime::Browser.visit(:gitlab, Page::Main::Login)
-          invalid_user = QA::Resource::User.new.tap do |user|
-            user.username = 'bad_user_name'
-            user.password = 'bad_pasword'
-          end
-
-          Page::Main::Login.perform do |login_page|
-            login_page.sign_in_using_credentials(user: invalid_user, skip_page_validation: true)
-          end
-          sign_in
-        end
-
-        it_behaves_like 'audit event', ["Failed to login with STANDARD authentication"]
-      end
-
-      context 'Successful sign in' do
-        before do
-          sign_in
-        end
-
-        it_behaves_like 'audit event', ["Signed in with STANDARD authentication"]
-      end
-
-      context 'Add SSH key' do
-        before do
-          sign_in
-          Resource::SSHKey.fabricate_via_browser_ui! do |resource|
-            resource.title = "key for audit event test #{Time.now.to_f}"
-          end
-        end
-
-        it_behaves_like 'audit event', ["Added SSH key"]
-      end
-
-      context 'Add and delete email' do
-        before do
-          sign_in
-          new_email_address = 'new_email@example.com'
-          Page::Main::Menu.perform(&:click_settings_link)
-          Page::Profile::Menu.perform(&:click_emails)
-          Support::Retrier.retry_until(sleep_interval: 3) do
-            Page::Profile::Emails.perform do |emails|
-              emails.add_email_address(new_email_address)
-              expect(emails).to have_text(new_email_address)
-              emails.delete_email_address(new_email_address)
-            end
-          end
-        end
-
-        it_behaves_like 'audit event', ["Added email", "Removed email"]
-      end
-
-      context 'Change password', :skip_signup_disabled do
-        before do
-          user = Resource::User.fabricate_via_api! do |user|
-            user.username = "user_#{SecureRandom.hex(4)}"
-            user.password = "pw_#{SecureRandom.hex(4)}"
-          end
-          Runtime::Browser.visit(:gitlab, Page::Main::Login)
-
-          Page::Main::Login.perform do |login_page|
-            login_page.sign_in_using_credentials(user: user)
-          end
-
-          Page::Main::Menu.perform(&:click_settings_link)
-          Page::Profile::Menu.perform(&:click_password)
-          Page::Profile::Password.perform do |password_page|
-            password_page.update_password('new_password', user.password)
-          end
-          sign_in
-        end
-
-        it_behaves_like 'audit event', ["Changed password"]
-      end
-
-      context 'Start and stop user impersonation' do
-        before do
-          sign_in
-          user = Resource::User.fabricate_or_use(Runtime::Env.gitlab_qa_username_1, Runtime::Env.gitlab_qa_password_1)
-          Page::Main::Menu.perform(&:go_to_admin_area)
-          Page::Admin::Menu.perform(&:go_to_users_overview)
-          Page::Admin::Overview::Users::Index.perform do |index|
-            index.search_user(user.username)
-            index.click_user(user.username)
-          end
-
-          Page::Admin::Overview::Users::Show.perform(&:click_impersonate_user)
-
-          Page::Main::Menu.perform(&:click_stop_impersonation_link)
-        end
-
-        it_behaves_like 'audit event', ["Started Impersonation", "Stopped Impersonation"]
-      end
-
-      def sign_in
-        Page::Main::Menu.perform(&:sign_out_if_signed_in)
-        Runtime::Browser.visit(:gitlab, Page::Main::Login)
-        Page::Main::Login.perform(&:sign_in_using_admin_credentials)
-      end
-    end
-  end
-end