@camunda/e2e-test-suite 0.0.112 → 0.0.113

package/dist/fixtures/8.9.d.ts

@@ -32,6 +32,7 @@ import { OCIdentityHomePage } from '../pages/8.9/OCIdentityHomePage';
 import { OCIdentityMappingRulesPage } from '../pages/8.9/OCIdentityMappingRulesPage';
 import { OCIdentityRolesPage } from '../pages/8.9/OCIdentityRolesPage';
 import { OCIdentityAuthorizationsPage } from '../pages/8.9/OCIdentityAuthorizationsPage';
+import { ClientCredentialsDetailsPage } from '../pages/8.9/ClientCredentialsDetailsPage';
 type PlaywrightFixtures = {
     makeAxeBuilder: () => AxeBuilder;
     loginPage: LoginPage;
@@ -67,6 +68,7 @@ type PlaywrightFixtures = {
     ocIdentityMappingRulesPage: OCIdentityMappingRulesPage;
     ocIdentityRolesPage: OCIdentityRolesPage;
     ocIdentityAuthorizationsPage: OCIdentityAuthorizationsPage;
+    clientCredentialsDetailsPage: ClientCredentialsDetailsPage;
     overrideTrackingScripts: void;
 };
 declare const test: import("@playwright/test").TestType<import("@playwright/test").PlaywrightTestArgs & import("@playwright/test").PlaywrightTestOptions & PlaywrightFixtures, import("@playwright/test").PlaywrightWorkerArgs & import("@playwright/test").PlaywrightWorkerOptions>;

package/dist/fixtures/8.9.js

@@ -39,6 +39,7 @@ const OCIdentityHomePage_1 = require("../pages/8.9/OCIdentityHomePage");
 const OCIdentityMappingRulesPage_1 = require("../pages/8.9/OCIdentityMappingRulesPage");
 const OCIdentityRolesPage_1 = require("../pages/8.9/OCIdentityRolesPage");
 const OCIdentityAuthorizationsPage_1 = require("../pages/8.9/OCIdentityAuthorizationsPage");
+const ClientCredentialsDetailsPage_1 = require("../pages/8.9/ClientCredentialsDetailsPage");
 const test = test_1.test.extend({
     makeAxeBuilder: async ({ page }, use) => {
         const makeAxeBuilder = () => new playwright_1.default({ page }).withTags([
@@ -150,6 +151,9 @@ const test = test_1.test.extend({
     ocIdentityGroupsPage: async ({ page }, use) => {
         await use(new OCIdentityGroupsPage_1.OCIdentityGroupsPage(page));
     },
+    clientCredentialsDetailsPage: async ({ page }, use) => {
+        await use(new ClientCredentialsDetailsPage_1.ClientCredentialsDetailsPage(page));
+    },
     overrideTrackingScripts: [
         async ({ context }, use) => {
             await context.route('https://cmp.osano.com/16CVvwSNKHi9t1grQ/9403708a-488b-4f3b-aea6-613825dec79f/osano.js', (route) => route.fulfill({

package/dist/pages/8.9/ClientCredentialsDetailsPage.d.ts

@@ -0,0 +1,12 @@
+import { Page, Locator } from '@playwright/test';
+declare class ClientCredentialsDetailsPage {
+    private page;
+    readonly operateUrlRow: Locator;
+    readonly operateUrlValue: Locator;
+    readonly clientNameHeading: (clientName: string) => Locator;
+    constructor(page: Page);
+    isOpen(clientName: string): Promise<void>;
+    getOperateUrl(): Promise<string>;
+    goBack(): Promise<void>;
+}
+export { ClientCredentialsDetailsPage };

package/dist/pages/8.9/ClientCredentialsDetailsPage.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClientCredentialsDetailsPage = void 0;
+const test_1 = require("@playwright/test");
+class ClientCredentialsDetailsPage {
+    page;
+    operateUrlRow;
+    operateUrlValue;
+    clientNameHeading;
+    constructor(page) {
+        this.page = page;
+        this.operateUrlRow = page.getByRole('cell', { name: 'Operate URL' });
+        this.operateUrlValue = this.operateUrlRow.getByRole('textbox');
+        this.clientNameHeading = (clientName) => page.getByRole('heading', { name: clientName });
+    }
+    async isOpen(clientName) {
+        await (0, test_1.expect)(this.clientNameHeading(clientName)).toBeVisible({
+            timeout: 30000,
+        });
+    }
+    async getOperateUrl() {
+        if (await this.operateUrlValue.isVisible({ timeout: 10000 }).catch(() => false)) {
+            return await this.operateUrlValue.inputValue();
+        }
+        const text = await this.page.innerText('body');
+        const match = text.match(/Operate URL\s*([\w:/.-]+\/?)/i);
+        if (!match || !match[1]) {
+            throw new Error('Operate URL not found in client credentials page');
+        }
+        return match[1];
+    }
+    async goBack() {
+        await this.page.goBack();
+    }
+}
+exports.ClientCredentialsDetailsPage = ClientCredentialsDetailsPage;

package/dist/pages/8.9/ClusterDetailsPage.d.ts

@@ -1,4 +1,5 @@
 import { Page, Locator } from '@playwright/test';
+import { ClientCredentialsDetailsPage } from './ClientCredentialsDetailsPage';
 declare class ClusterDetailsPage {
     private page;
     readonly apiTab: Locator;
@@ -36,6 +37,7 @@ declare class ClusterDetailsPage {
     readonly rbaEnabledMessage: Locator;
     readonly authorizationsHeading: Locator;
     readonly orchestrationClusterCheckbox: Locator;
+    readonly clientCredentialsLink: (clientCredentials: string) => Locator;
     constructor(page: Page);
     clickAPITab(): Promise<void>;
     clickCreateClientButton(): Promise<void>;
@@ -50,7 +52,8 @@ declare class ClusterDetailsPage {
     clickSettingsTab(): Promise<void>;
     enableAuthorizations(): Promise<void>;
     disableAuthorizations(): Promise<void>;
-    deleteAPIClientsIfExist(): Promise<void>;
+    searchAndClickClientCredentialsLink(name: string): Promise<ClientCredentialsDetailsPage>;
+    deleteAPIClientsIfExist(name?: string): Promise<void>;
     clickAlertsTab(): Promise<void>;
     clickExpandButton(): Promise<void>;
     clickCreateFirstAlertButton(): Promise<void>;

package/dist/pages/8.9/ClusterDetailsPage.js

@@ -5,6 +5,7 @@ const test_1 = require("@playwright/test");
 const sleep_1 = require("../../utils/sleep");
 const clickLocatorWithRetry_1 = require("../../utils/assertionHelpers/clickLocatorWithRetry");
 const expectLocatorWithRetry_1 = require("../../utils/assertionHelpers/expectLocatorWithRetry");
+const ClientCredentialsDetailsPage_1 = require("./ClientCredentialsDetailsPage");
 class ClusterDetailsPage {
     page;
     apiTab;
@@ -42,6 +43,7 @@ class ClusterDetailsPage {
     rbaEnabledMessage;
     authorizationsHeading;
     orchestrationClusterCheckbox;
+    clientCredentialsLink;
     constructor(page) {
         this.page = page;
         this.apiTab = page.getByRole('tab', { name: 'API' });
@@ -121,6 +123,7 @@ class ClusterDetailsPage {
         this.orchestrationClusterCheckbox = page
             .locator('label')
             .filter({ hasText: /^Orchestration Cluster API$/ });
+        this.clientCredentialsLink = (clientCredentials) => page.getByRole('cell', { name: clientCredentials });
     }
     async clickAPITab() {
         await (0, test_1.expect)(this.apiTab).toBeVisible({ timeout: 60000 });
@@ -225,7 +228,34 @@ class ClusterDetailsPage {
             console.log('Toggle text elements not found or less than 2.');
         }
     }
-    async deleteAPIClientsIfExist() {
+    async searchAndClickClientCredentialsLink(name) {
+        await (0, test_1.expect)(this.clientsList.first()).toBeVisible({ timeout: 60000 });
+        const clientLink = this.clientCredentialsLink(name);
+        await (0, test_1.expect)(clientLink).toBeVisible({ timeout: 30000 });
+        await clientLink.click();
+        const clientCredentialsDetailsPage = new ClientCredentialsDetailsPage_1.ClientCredentialsDetailsPage(this.page);
+        await clientCredentialsDetailsPage.isOpen(name);
+        return clientCredentialsDetailsPage;
+    }
+    async deleteAPIClientsIfExist(name) {
+        if (name) {
+            const row = this.clientsList.filter({ hasText: name });
+            const deleteButton = row.getByRole('button', { name: 'Delete' });
+            try {
+                await (0, test_1.expect)(deleteButton).toBeVisible({ timeout: 10000 });
+                await deleteButton.click();
+                await (0, test_1.expect)(this.dialog).toBeVisible();
+                await this.deleteSubButton.click();
+                await (0, test_1.expect)(this.page.getByText('Deleting...')).not.toBeVisible({
+                    timeout: 10000,
+                });
+                await (0, test_1.expect)(row).not.toBeVisible();
+            }
+            catch (error) {
+                console.warn(`No client row found for ${name} or deletion failed: ${error}`);
+            }
+            return;
+        }
         await this.doDelete(this.dialog, 'API clients');
     }
     async clickAlertsTab() {

package/dist/tests/8.9/operate-access-flow.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/tests/8.9/operate-access-flow.spec.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const test_1 = require("@playwright/test");
+const _8_9_1 = require("../../fixtures/8.9");
+const UtilitiesPage_1 = require("../../pages/8.9/UtilitiesPage");
+const _setup_1 = require("../../test-setup.js");
+// This test covers the manual scenario: create a new API client via UI, copy the Operate URL, and verify the Operate endpoint denies unauthenticated access.
+_8_9_1.test.describe.configure({ mode: 'parallel' });
+_8_9_1.test.describe('Operate access requires authentication @tasklistV2', () => {
+    let clientName;
+    const clusterName = 'Test Cluster';
+    _8_9_1.test.afterEach(async ({ page, clusterDetailsPage }, testInfo) => {
+        await (0, _setup_1.captureScreenshot)(page, testInfo);
+        await (0, _setup_1.captureFailureVideo)(page, testInfo);
+        await clusterDetailsPage.clickAPITab();
+        await clusterDetailsPage.deleteAPIClientsIfExist(clientName);
+    });
+    _8_9_1.test.beforeEach(async ({ page, loginPage }, testInfo) => {
+        await (0, UtilitiesPage_1.loginWithRetry)(page, loginPage, (testInfo.workerIndex + 1) * 1000);
+    });
+    (0, _8_9_1.test)('check that request POST /v2/process-definitions/search returns 401 without credentials', async ({ homePage, clusterPage, clusterDetailsPage, clientCredentialsDetailsPage, request, }) => {
+        clientName = `operate-deny-${await (0, _setup_1.generateRandomStringAsync)(5)}`;
+        await _8_9_1.test.step('Add API Client to Cluster', async () => {
+            await homePage.clickClusters();
+            await clusterPage.clickClusterLink(clusterName);
+            await clusterDetailsPage.clickAPITab();
+            await clusterDetailsPage.createAPIClient(clientName);
+            await clusterDetailsPage.clickCloseModalButton();
+            await (0, test_1.expect)(clusterDetailsPage.clientsList.filter({ hasText: clientName })).toBeVisible({ timeout: 6000 });
+        });
+        let operateUrl = '';
+        await _8_9_1.test.step('Capture Operate URL from client credentials page and close it', async () => {
+            await clusterDetailsPage.searchAndClickClientCredentialsLink(clientName);
+            operateUrl = await clientCredentialsDetailsPage.getOperateUrl();
+            (0, test_1.expect)(operateUrl).toMatch(/^https?:\/\//);
+            await clientCredentialsDetailsPage.goBack();
+            await clusterDetailsPage.clickAPITab();
+        });
+        await _8_9_1.test.step('POST search endpoint without auth should be rejected', async () => {
+            const sanitizedOperateUrl = operateUrl.replace(/\/$/, '');
+            const response = await request.post(`${sanitizedOperateUrl}/v2/process-definitions/search`, {
+                data: { filter: {}, size: 10 },
+            });
+            (0, test_1.expect)(response.status()).toBe(401);
+            const body = await response.text();
+            (0, test_1.expect)(body.length).toBe(0);
+        });
+    });
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camunda/e2e-test-suite",
-  "version": "0.0.112",
+  "version": "0.0.113",
   "description": "End-to-end test helpers for Camunda 8",
   "repository": {
     "type": "git",