@camunda/e2e-test-suite 0.0.1287 → 0.0.1289

package/dist/tests/8.9/rba-enabled-v2-user-flows.spec.js

@@ -9,6 +9,7 @@ const roleAuthorizations_1 = require("../../utils/roleAuthorizations");
 const expectTextWithRetry_1 = require("../../utils/assertionHelpers/expectTextWithRetry");
 const expectTextWithPagination_1 = require("../../utils/assertionHelpers/expectTextWithPagination");
 const users_1 = require("../../utils/users");
+const consoleApiHelpers_1 = require("../../utils/consoleApiHelpers");
 const mainUser = (0, users_1.getTestUser)('twentySixthUser');
 _8_9_1.test.describe.parallel('RBA Enabled User Flows Test @tasklistV2', () => {
     const clusterNames = {
@@ -18,6 +19,10 @@ _8_9_1.test.describe.parallel('RBA Enabled User Flows Test @tasklistV2', () => {
         'RBA On User Flow - Permission for Selected Processes Only': 'Fourth RBA V2 Cluster',
     };
     _8_9_1.test.beforeEach(async ({ page, homePage, clusterPage, loginPage, clusterDetailsPage, appsPage }, testInfo) => {
+        // Claimed here, not in each body: creating the cluster and waiting for
+        // it to come back Healthy after the authorizations toggle can outlast
+        // the default per-test timeout before the body starts.
+        _8_9_1.test.slow();
         await (0, UtilitiesPage_1.loginWithRetry)(page, loginPage, mainUser, (testInfo.workerIndex + 1) * 1000);
         await (0, test_1.expect)(homePage.clusterTab).toBeVisible({ timeout: 120000 });
         await homePage.clickClusters();
@@ -25,13 +30,20 @@ _8_9_1.test.describe.parallel('RBA Enabled User Flows Test @tasklistV2', () => {
         (0, test_1.expect)(clusterName, `No cluster mapping for test title: "${testInfo.title}")`).toBeTruthy();
         await clusterPage.createClusterIfNotExists(clusterName);
         await (0, UtilitiesPage_1.disableRBA)(clusterName, homePage, clusterPage, clusterDetailsPage, appsPage);
+        // The flows below hand off to test users with no elevated or DevOps org
+        // role, and Hub only lets those roles assign an environment to a
+        // workspace (camunda-hub#28955). Without this, the test user's deploy
+        // dialog never offers this cluster and every runProcessInstance retry
+        // fails until the test times out. Assign it now, while the elevated
+        // main user's session is active. test-setup creates the test users'
+        // workspaces up front so that they exist at this point.
+        await (0, consoleApiHelpers_1.linkClusterToWorkspacesNamedViaApi)(page, clusterName);
     });
     _8_9_1.test.afterEach(async ({ page }, testInfo) => {
         await (0, _setup_1.captureScreenshot)(page, testInfo);
         await (0, _setup_1.captureFailureVideo)(page, testInfo);
     });
     (0, _8_9_1.test)('RBA On User Flow - No User Permission', async ({ page, homePage, modelerHomePage, appsPage, modelerCreatePage, clusterPage, clusterDetailsPage, taskPanelPage, taskProcessesPage, operateHomePage, ocIdentityHomePage, ocIdentityAuthorizationsPage, ocIdentityRolesPage, loginPage, settingsPage, }, testInfo) => {
-        _8_9_1.test.slow();
         const clusterName = clusterNames[testInfo.title];
         const randomString = await (0, _setup_1.generateRandomStringAsync)(3);
         const processName = 'RBA_NO_PERM' + randomString;
@@ -137,7 +149,6 @@ _8_9_1.test.describe.parallel('RBA Enabled User Flows Test @tasklistV2', () => {
         });
     });
     (0, _8_9_1.test)('RBA On User Flow - Permission for One Process', async ({ page, homePage, modelerHomePage, appsPage, modelerCreatePage, clusterPage, clusterDetailsPage, taskPanelPage, taskProcessesPage, operateHomePage, loginPage, ocIdentityHomePage, ocIdentityAuthorizationsPage, ocIdentityRolesPage, settingsPage, }, testInfo) => {
-        _8_9_1.test.slow();
         const clusterName = clusterNames[testInfo.title];
         const randomString = await (0, _setup_1.generateRandomStringAsync)(3);
         const processName = 'RBA_ONE_PERM' + randomString;
@@ -292,7 +303,6 @@ _8_9_1.test.describe.parallel('RBA Enabled User Flows Test @tasklistV2', () => {
         });
     });
     (0, _8_9_1.test)('RBA On User Flow - Permission for All Processes with Full Permissions', async ({ page, homePage, modelerHomePage, appsPage, modelerCreatePage, clusterPage, clusterDetailsPage, taskPanelPage, taskProcessesPage, operateHomePage, ocIdentityHomePage, ocIdentityAuthorizationsPage, }, testInfo) => {
-        _8_9_1.test.slow();
         const clusterName = clusterNames[testInfo.title];
         const randomString = await (0, _setup_1.generateRandomStringAsync)(3);
         const processName = 'AFTER_RBA' + randomString;
@@ -361,7 +371,6 @@ _8_9_1.test.describe.parallel('RBA Enabled User Flows Test @tasklistV2', () => {
         });
     });
     (0, _8_9_1.test)('RBA On User Flow - Permission for Selected Processes Only', async ({ page, homePage, modelerHomePage, appsPage, modelerCreatePage, clusterPage, clusterDetailsPage, taskPanelPage, taskProcessesPage, operateHomePage, ocIdentityHomePage, ocIdentityAuthorizationsPage, ocIdentityRolesPage, loginPage, }, testInfo) => {
-        _8_9_1.test.slow();
         const clusterName = clusterNames[testInfo.title];
         const randomString = await (0, _setup_1.generateRandomStringAsync)(3);
         const processName = 'RBA_SELECTED_PERM' + randomString;

package/dist/tests/8.9/test-setup.spec.js

@@ -123,11 +123,64 @@ _8_9_1.test.describe('Cluster Setup Tests', () => {
             await clusterSecretsPage.createSetOfSecrets(clusterName, connectorSecrets_1.connectorSecretsValues);
         }
     });
-    for (const [index, user] of (0, users_1.getTestUsers)().entries()) {
-        (0, _8_9_1.test)(`Create Project Folder for User ${index + 1}`, async ({ page, loginPage, homePage, appsPage, modelerHomePage, }, testInfo) => {
-            await _8_9_1.test.step('Log in', async () => {
-                await (0, UtilitiesPage_1.loginWithRetry)(page, loginPage, user, (testInfo.workerIndex + 1) * 1000);
+    // The RBA specs hand off to these developer-role users, who cannot assign an
+    // environment to a workspace (camunda-hub#28955). Their workspaces must exist
+    // before the RBA beforeEach links its cluster to them as the admin main user.
+    const rbaHandoffUsers = process.env.IS_AG === 'true' && process.env.RUN_FULL_SUITE !== 'true'
+        ? []
+        : ['4', '5', '6']
+            .map((n) => ({
+            username: process.env[`C8_USERNAME_TEST_${n}`] ?? '',
+            password: process.env[`C8_PASSWORD_TEST_${n}`] ?? '',
+            title: `Create Project Folder for RBA hand-off user TEST_${n}`,
+        }))
+            .filter((user) => user.username !== '' && user.password !== '');
+    for (const [index, user] of [
+        ...(0, users_1.getTestUsers)().map((u, i) => ({
+            ...u,
+            title: `Create Project Folder for User ${i + 1}`,
+        })),
+        ...rbaHandoffUsers,
+    ].entries()) {
+        const isRbaHandoffUser = index >= (0, users_1.getTestUsers)().length;
+        (0, _8_9_1.test)(user.title, async ({ page, loginPage, homePage, appsPage, modelerHomePage }, testInfo) => {
+            const loggedIn = await _8_9_1.test.step('Log in', async () => {
+                // GitHub drops a create-organization job output whose value contains
+                // a masked secret, which leaves that slot's password empty. Only the
+                // specs that log in as this user need its workspace, and they fail
+                // on their own login with loginWithRetry's "no password" error.
+                if (index > 0 && user.username && !user.password) {
+                    console.warn(`${user.title}: no password reached the runner`);
+                    testInfo.annotations.push({
+                        type: 'warning',
+                        description: 'Password job output was dropped; no workspace',
+                    });
+                    return false;
+                }
+                try {
+                    await (0, UtilitiesPage_1.loginWithRetry)(page, loginPage, user, (testInfo.workerIndex + 1) * 1000);
+                    return true;
+                }
+                catch (error) {
+                    // Every test depends on this setup project. A hand-off slot that
+                    // this org did not provision (Auth0 rejected it in a PR run) must
+                    // not block the whole suite; the RBA spec that logs in as that
+                    // user fails on its own login instead.
+                    if (!isRbaHandoffUser ||
+                        !String(error).includes('AUTH0_INVALID_CREDENTIALS')) {
+                        throw error;
+                    }
+                    console.warn(`${user.title}: ${String(error)}`);
+                    testInfo.annotations.push({
+                        type: 'warning',
+                        description: 'Auth0 rejected this hand-off user; no workspace',
+                    });
+                    return false;
+                }
             });
+            if (!loggedIn) {
+                return;
+            }
             await _8_9_1.test.step('Navigate to Web Modeler', async () => {
                 // Camunda Hub replaced Console + Web Modeler on SaaS: it lands on the
                 // Modeler home directly and has no app switcher to wait for.

package/dist/tests/8.9/utr-enabled-user-flows.spec.js

@@ -8,7 +8,9 @@ const sleep_1 = require("../../utils/sleep");
 const expectTextWithRetry_1 = require("../../utils/assertionHelpers/expectTextWithRetry");
 const expectLocatorWithRetry_1 = require("../../utils/assertionHelpers/expectLocatorWithRetry");
 const LoginPage_1 = require("../../pages/8.9/LoginPage");
+const WorkspaceMembersPage_1 = require("../../pages/8.9/WorkspaceMembersPage");
 const users_1 = require("../../utils/users");
+const consoleApiHelpers_1 = require("../../utils/consoleApiHelpers");
 const mainUser = (0, users_1.getTestUser)('twelfthUser');
 _8_9_1.test.describe.parallel('UTR Enabled User Flows Test @tasklistV1', () => {
     const clusterName = 'Test Cluster';
@@ -129,6 +131,22 @@ _8_9_1.test.describe.parallel('UTR Enabled User Flows Test @tasklistV1', () => {
             await ocIdentityGroupsPage.clickGroupId(groupNameMultiple);
             await ocIdentityGroupsPage.assignUserToGroup(testUser2.username);
         });
+        // Test user 1 is the org's Developer. Hub shows a non-admin only the
+        // environments assigned to a workspace they are Editor or Workspace Admin
+        // on (camunda-hub EnvironmentVisibilityResolver), so without this the
+        // Tasklist hand-off below finds no "Test Cluster" in the sidebar. Test
+        // user 2 is an org Admin and sees every environment already.
+        await _8_9_1.test.step('Grant Test User 1 Editor rights on a workspace with the cluster', async () => {
+            await appsPage.clickCamundaApps();
+            await appsPage.clickModeler();
+            await (0, test_1.expect)(modelerHomePage.modelerPageBanner).toBeVisible({
+                timeout: 120000,
+            });
+            const workspaceMembersPage = new WorkspaceMembersPage_1.WorkspaceMembersPage(page);
+            await workspaceMembersPage.openManageMembers('Cross Component Test Project');
+            await workspaceMembersPage.setMemberRole(testUser1.username, 'Editor');
+            await (0, consoleApiHelpers_1.linkClusterToWorkspaceViaApi)(page, workspaceMembersPage.workspaceId(), clusterName);
+        });
         await _8_9_1.test.step('Navigate to Web Modeler', async () => {
             await appsPage.clickCamundaApps();
             await appsPage.clickModeler();

package/dist/tests/8.9/web-modeler-user-flows.spec.js

@@ -34,7 +34,9 @@ _8_9_1.test.describe('Web Modeler User Flow Tests', () => {
             await (0, mailSlurpClient_1.deleteInbox)(inboxes[testInfo.title]);
         }
     });
-    (0, _8_9_1.test)('Form.js Integration with User Task and AI Generated Form @ai-external', async ({ page, homePage, modelerHomePage, appsPage, modelerCreatePage, formJsPage, }) => {
+    // Skipped due to bug #29346: https://github.com/camunda/camunda-hub/issues/29346
+    // Also tracked in https://github.com/camunda/product-hub/issues/3655
+    _8_9_1.test.skip('Form.js Integration with User Task and AI Generated Form @ai-external', async ({ page, homePage, modelerHomePage, appsPage, modelerCreatePage, formJsPage, }) => {
         _8_9_1.test.slow();
         const randomString = await (0, _setup_1.generateRandomStringAsync)(3);
         const processName = 'User_Task_Process_With_AI_Form' + randomString;
@@ -92,7 +94,9 @@ _8_9_1.test.describe('Web Modeler User Flow Tests', () => {
             await operateTabTaskDetailsPage.clickCompleteTaskButton();
         });
     });
-    (0, _8_9_1.test)('Form.js Integration with AI generated Start form @ai-external', async ({ page, homePage, modelerHomePage, appsPage, modelerCreatePage, formJsPage, }) => {
+    // Skipped due to bug #29346: https://github.com/camunda/camunda-hub/issues/29346
+    // Also tracked in https://github.com/camunda/product-hub/issues/3655
+    _8_9_1.test.skip('Form.js Integration with AI generated Start form @ai-external', async ({ page, homePage, modelerHomePage, appsPage, modelerCreatePage, formJsPage, }) => {
         _8_9_1.test.slow();
         const randomString = await (0, _setup_1.generateRandomStringAsync)(3);
         const processName = 'AI-generated-Start-form' + randomString;

package/dist/utils/consoleApiHelpers.d.ts

@@ -1,4 +1,5 @@
 import { Page } from '@playwright/test';
+export declare function observeBearerTokens(page: Page): void;
 export declare function resetHubBearerToken(page: Page): void;
 export declare function deleteClusterViaApi(page: Page, clusterName: string): Promise<void>;
 export declare function createClusterViaApi(page: Page, clusterName: string, region?: string, tasklistV2Enabled?: boolean): Promise<string>;
@@ -13,4 +14,5 @@ export declare function linkClusterToWorkspaceViaApi(page: Page, workspaceId: st
 export declare function rememberHubWorkspaceId(page: Page, workspaceId: string): void;
 export declare function getHubWorkspaceId(page: Page): string | undefined;
 export declare function linkClusterToSharedWorkspaceViaApi(page: Page, clusterName: string): Promise<void>;
+export declare function linkClusterToWorkspacesNamedViaApi(page: Page, clusterName: string, workspaceName?: string): Promise<void>;
 export declare function ensureClusterLinkedToSharedWorkspace(page: Page, clusterName: string): Promise<void>;

package/dist/utils/consoleApiHelpers.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ensureClusterLinkedToSharedWorkspace = exports.linkClusterToSharedWorkspaceViaApi = exports.getHubWorkspaceId = exports.rememberHubWorkspaceId = exports.linkClusterToWorkspaceViaApi = exports.waitForAiFeaturesEnabledViaApi = exports.areAiFeaturesEnabledViaApi = exports.waitForClusterRestartHealthyViaApi = exports.waitForClusterHealthyViaApi = exports.ensureClientAuditLoggingViaApi = exports.ensureTasklistV2Enabled = exports.ensureClusterViaApi = exports.createClusterViaApi = exports.deleteClusterViaApi = exports.resetHubBearerToken = void 0;
+exports.ensureClusterLinkedToSharedWorkspace = exports.linkClusterToWorkspacesNamedViaApi = exports.linkClusterToSharedWorkspaceViaApi = exports.getHubWorkspaceId = exports.rememberHubWorkspaceId = exports.linkClusterToWorkspaceViaApi = exports.waitForAiFeaturesEnabledViaApi = exports.areAiFeaturesEnabledViaApi = exports.waitForClusterRestartHealthyViaApi = exports.waitForClusterHealthyViaApi = exports.ensureClientAuditLoggingViaApi = exports.ensureTasklistV2Enabled = exports.ensureClusterViaApi = exports.createClusterViaApi = exports.deleteClusterViaApi = exports.resetHubBearerToken = exports.observeBearerTokens = void 0;
 const test_1 = require("@playwright/test");
 const sleep_1 = require("./sleep");
 const PLAN_TYPE_ID = '574cde5f-54ae-43c1-851a-e6fb4f03423a';
@@ -52,6 +52,9 @@ function bearerTokenOf(url, authorization) {
     }
     return authorization.slice('Bearer '.length);
 }
+// Exported so a login can start listening before Hub loads. Hub's Console
+// pages go quiet once loaded (cluster updates arrive over one long-lived SSE
+// request), so a first API call on an idle page otherwise sees no request.
 function observeBearerTokens(page) {
     if (tokenObservedPages.has(page)) {
         return;
@@ -71,6 +74,7 @@ function observeBearerTokens(page) {
         }
     });
 }
+exports.observeBearerTokens = observeBearerTokens;
 // Exported so LoginPage can call this before a new login begins. Without it,
 // a page that signs in as a second user keeps answering getHubBearerToken()
 // with the first user's cached token until some later console.cloud/
@@ -876,9 +880,23 @@ async function linkClusterToWorkspaceViaApi(page, workspaceId, clusterName) {
             return;
         }
         const ids = [...new Set([...current.map((e) => e.id), backing.id])];
-        const response = await clusterApiRequest(page, 'PUT', url, {
-            environmentIds: ids,
-        });
+        // Hub maps AccessDeniedException and an unresolvable path entity to a bare
+        // 404 (ExceptionHandlingAdvice). A PR run saw this PUT 404 once, right
+        // after the GET on the same workspace succeeded, and succeed on a retry.
+        // Bounded by count, not by toPass's timeout, which would also cut off
+        // clusterApiRequest's own 429/5xx backoff. A caller without cluster
+        // management access gets a 404 every time and fails below after 3 tries.
+        let response;
+        let notFoundCount = 0;
+        await (0, test_1.expect)(async () => {
+            response = await clusterApiRequest(page, 'PUT', url, {
+                environmentIds: ids,
+            });
+            if (response.status() === 404) {
+                notFoundCount++;
+            }
+            (0, test_1.expect)(response.status() !== 404 || notFoundCount >= 3, `PUT ${url} (linking "${clusterName}") returned 404`).toBe(true);
+        }).toPass({ intervals: [5000, 10000], timeout: 600000 });
         if (!response.ok()) {
             // clusterApiRequest returns non-2xx for non-transient statuses rather
             // than throwing, so an unchecked call would log success and let the
@@ -946,6 +964,34 @@ async function linkClusterToSharedWorkspaceViaApi(page, clusterName) {
     await linkClusterToWorkspaceViaApi(page, workspaceId, clusterName);
 }
 exports.linkClusterToSharedWorkspaceViaApi = linkClusterToSharedWorkspaceViaApi;
+// Links `clusterName` to EVERY workspace named `workspaceName`, not just the
+// first. Each test user creates its own "Cross Component Test Project"
+// workspace in test-setup, and a user without an elevated or DevOps org role
+// cannot assign an environment to it (camunda-hub#28955: the workspace
+// Environments tab redirects to Members, and the PUT below is gated on
+// hasClusterManagementAccess). A spec that creates a cluster as an elevated
+// user and then hands off to such a user has to make the assignment up front,
+// while the elevated session is still active.
+async function linkClusterToWorkspacesNamedViaApi(page, clusterName, workspaceName = SHARED_HUB_WORKSPACE_NAME) {
+    const origin = await hubApiOrigin(page);
+    const response = await clusterApiRequest(page, 'GET', `${origin}/api/internal/v2/organizations/${encodeURIComponent(process.env.ORG_ID)}/workspaces?search=${encodeURIComponent(workspaceName)}&sort=name,asc&offset=0&limit=100`);
+    if (!response.ok()) {
+        throw new Error(`Failed to list workspaces named "${workspaceName}": ` +
+            `${response.status()} ${response.statusText()}`);
+    }
+    const body = (await response.json());
+    const data = (body.data ?? body);
+    const items = Array.isArray(data.items) ? data.items : [];
+    const workspaceIds = items
+        .map((item) => (item ?? {}))
+        .filter((item) => item.name === workspaceName)
+        .map((item) => item.id)
+        .filter((id) => typeof id === 'string');
+    for (const workspaceId of workspaceIds) {
+        await linkClusterToWorkspaceViaApi(page, workspaceId, clusterName);
+    }
+}
+exports.linkClusterToWorkspacesNamedViaApi = linkClusterToWorkspacesNamedViaApi;
 // Ensure-link at the point a deploy dialog is about to be opened. Resolves the
 // workspace from the id remembered while the flow was on it, else by name.
 // Cheap and idempotent: it returns early once the environment is assigned.

package/dist/utils/resetSession.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.resetSessionAll = exports.resetSession = void 0;
+const test_1 = require("@playwright/test");
 const consoleApiHelpers_1 = require("./consoleApiHelpers");
 async function resetSession(browser, page) {
     const context = browser.contexts()[0];
@@ -10,7 +11,11 @@ async function resetSession(browser, page) {
     // session reset that re-authenticates as a different user must clear it
     // too, or getUserToken() can return the previous user's cached token.
     (0, consoleApiHelpers_1.resetHubBearerToken)(page);
-    await page.reload();
+    // A logout just before this call can still be redirecting, which aborts
+    // the reload with net::ERR_ABORTED; retry until the page settles.
+    await (0, test_1.expect)(async () => {
+        await page.reload();
+    }).toPass({ timeout: 60000 });
     await page.waitForLoadState('domcontentloaded');
     await page.goto('/');
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camunda/e2e-test-suite",
-  "version": "0.0.1287",
+  "version": "0.0.1289",
   "description": "End-to-end test helpers for Camunda 8",
   "repository": {
     "type": "git",