@camunda/e2e-test-suite 0.0.547 → 0.0.549

package/dist/pages/8.10/UtilitiesPage.js

@@ -9,21 +9,49 @@ const randomSleep_1 = require("../../utils/randomSleep");
 const fileUpload_1 = require("../../utils/fileUpload");
 const mailSlurpClient_1 = require("../../utils/mailSlurpClient");
 async function loginWithRetry(page, loginPage, testUser, timeout, maxRetries = 3) {
+    let lastError;
     for (let attempt = 0; attempt < maxRetries; attempt++) {
         try {
-            await page.goto('/');
+            await page.context().clearCookies();
+            await page.goto('about:blank');
+            await page
+                .evaluate(() => {
+                try {
+                    localStorage.clear();
+                }
+                catch (_) {
+                    // storage may be unavailable in some contexts
+                }
+                try {
+                    sessionStorage.clear();
+                }
+                catch (_) {
+                    // storage may be unavailable in some contexts
+                }
+            })
+                .catch(() => { });
+            await page.goto('/', { waitUntil: 'domcontentloaded', timeout: 60000 });
+            await page
+                .waitForLoadState('networkidle', { timeout: 30000 })
+                .catch(() => { });
             await (0, sleep_1.sleep)(timeout);
+            // Confirm we reached the login page before filling credentials.
+            // Without this check the locator for 'Email address' can match a hidden
+            // invite-user input on the Console page when the logout redirect has not
+            // yet completed, causing a 200 s wait before failing.
+            await (0, test_1.expect)(loginPage.loginMessage).toBeVisible({ timeout: 60000 });
             await loginPage.loginWithTestUser(testUser);
             return;
         }
         catch (error) {
+            lastError = error;
             if (attempt < maxRetries - 1) {
-                console.warn(`Attempt ${attempt + 1} failed for logging in. Retrying...`);
+                console.warn(`Attempt ${attempt + 1} failed for logging in. Retrying with clean session...`, error);
                 await (0, randomSleep_1.randomSleep)(10000, 20000);
             }
             else {
-                console.error(error);
-                throw new Error(`Login failed after ${maxRetries} attempts`);
+                console.error(lastError);
+                throw new Error(`Login failed after ${maxRetries} attempts: ${String(lastError)}`);
             }
         }
     }
@@ -288,7 +316,7 @@ async function clickInvitationLinkInEmail(page, id) {
 }
 exports.clickInvitationLinkInEmail = clickInvitationLinkInEmail;
 async function assertLatestAlertEmail(id, mailSlurp, processName, alertText) {
-    const maxRetries = 3;
+    const maxRetries = 5;
     for (let retries = 0; retries < maxRetries; retries++) {
         try {
             const email = await mailSlurp.waitForLatestEmail(id, 120000);

package/dist/pages/SM-8.10/OperateProcessesPage.js

@@ -24,18 +24,12 @@ class OperateProcessesPage {
         this.page = page;
         this.processResultCount = page.getByTestId('result-count');
         this.processesTabLink = page.getByRole('link', { name: 'Processes' });
-        this.processActiveCheckbox = page
-            .locator('label')
-            .filter({ hasText: 'Active' });
-        this.processCompletedCheckbox = page
-            .locator('label')
-            .filter({ hasText: 'Completed' });
+        this.processActiveCheckbox = page.locator('input#active');
+        this.processCompletedCheckbox = page.locator('input#completed');
         this.processRunningInstancesCheckbox = page
-            .locator('label')
-            .filter({ hasText: 'Running Instances' });
-        this.processIncidentsCheckbox = page
-            .locator('label')
-            .filter({ hasText: 'Incidents' });
+            .getByTestId('filter-running-instances')
+            .getByRole('checkbox');
+        this.processIncidentsCheckbox = page.locator('input#incidents');
         this.processPageHeading = page
             .getByTestId('expanded-panel')
             .getByRole('heading', { name: 'Process' });
@@ -53,22 +47,22 @@ class OperateProcessesPage {
         this.gotItButton = page.getByRole('button', { name: 'Got it' });
     }
     async checkCheckbox(checkbox) {
-        await checkbox.waitFor({ state: 'visible', timeout: constants_1._1_SECOND_IN_MS * 10 });
+        await checkbox.waitFor({ state: 'attached', timeout: constants_1._1_SECOND_IN_MS * 10 });
         if (!(await checkbox.isChecked())) {
-            await checkbox.click();
+            await checkbox.check({ force: true, timeout: constants_1._1_SECOND_IN_MS * 30 });
             await (0, test_1.expect)(checkbox).toBeChecked({
                 checked: true,
-                timeout: constants_1._1_SECOND_IN_MS * 2,
+                timeout: constants_1._1_SECOND_IN_MS * 30,
             });
         }
     }
     async uncheckCheckbox(checkbox) {
-        await checkbox.waitFor({ state: 'visible', timeout: constants_1._1_SECOND_IN_MS * 10 });
+        await checkbox.waitFor({ state: 'attached', timeout: constants_1._1_SECOND_IN_MS * 10 });
         if (await checkbox.isChecked()) {
-            await checkbox.click();
+            await checkbox.uncheck({ force: true, timeout: constants_1._1_SECOND_IN_MS * 30 });
             await (0, test_1.expect)(checkbox).toBeChecked({
                 checked: false,
-                timeout: constants_1._1_SECOND_IN_MS * 2,
+                timeout: constants_1._1_SECOND_IN_MS * 30,
             });
         }
     }
@@ -82,7 +76,7 @@ class OperateProcessesPage {
         await this.uncheckCompletedCheckbox();
         await this.clickProcessIncidentsCheckbox();
         await this.processActiveCheckbox.waitFor({
-            state: 'visible',
+            state: 'attached',
             timeout: constants_1._1_SECOND_IN_MS * 10,
         });
         if (await this.processActiveCheckbox.isChecked({ timeout: constants_1._1_SECOND_IN_MS })) {
@@ -98,7 +92,7 @@ class OperateProcessesPage {
         await this.uncheckActiveCheckbox();
         await this.clickProcessIncidentsCheckbox();
         await this.processCompletedCheckbox.waitFor({
-            state: 'visible',
+            state: 'attached',
             timeout: constants_1._1_SECOND_IN_MS * 10,
         });
         if (await this.processCompletedCheckbox.isChecked({ timeout: constants_1._1_SECOND_IN_MS })) {
@@ -142,11 +136,11 @@ class OperateProcessesPage {
     }
     async clickProcessActiveCheckbox() {
         await this.processActiveCheckbox.waitFor({
-            state: 'visible',
+            state: 'attached',
             timeout: constants_1._1_SECOND_IN_MS * 10,
         });
-        if (!(await this.processActiveCheckbox.isChecked({ timeout: 60000 }))) {
-            await this.processActiveCheckbox.click({ timeout: 120000 });
+        if (!(await this.processActiveCheckbox.isChecked())) {
+            await this.processActiveCheckbox.check({ force: true, timeout: 120000 });
             await (0, test_1.expect)(this.processActiveCheckbox).toBeChecked({
                 checked: true,
                 timeout: constants_1._1_SECOND_IN_MS * 5,
@@ -155,11 +149,11 @@ class OperateProcessesPage {
     }
     async clickProcessCompletedCheckbox() {
         await this.processCompletedCheckbox.waitFor({
-            state: 'visible',
+            state: 'attached',
             timeout: constants_1._1_SECOND_IN_MS * 10,
         });
-        if (!(await this.processCompletedCheckbox.isChecked({ timeout: 60000 }))) {
-            await this.processCompletedCheckbox.click({ timeout: 120000 });
+        if (!(await this.processCompletedCheckbox.isChecked())) {
+            await this.processCompletedCheckbox.check({ force: true, timeout: 120000 });
             await (0, test_1.expect)(this.processCompletedCheckbox).toBeChecked({
                 checked: true,
                 timeout: constants_1._1_SECOND_IN_MS * 5,
@@ -168,11 +162,19 @@ class OperateProcessesPage {
     }
     async clickProcessIncidentsCheckbox() {
         await this.processIncidentsCheckbox.waitFor({
-            state: 'visible',
+            state: 'attached',
             timeout: constants_1._1_SECOND_IN_MS * 10,
         });
         const wasChecked = await this.processIncidentsCheckbox.isChecked();
-        await this.processIncidentsCheckbox.click({ timeout: 90000 });
+        if (wasChecked) {
+            await this.processIncidentsCheckbox.uncheck({
+                force: true,
+                timeout: 90000,
+            });
+        }
+        else {
+            await this.processIncidentsCheckbox.check({ force: true, timeout: 90000 });
+        }
         await (0, test_1.expect)(this.processIncidentsCheckbox).toBeChecked({
             checked: !wasChecked,
             timeout: constants_1._1_SECOND_IN_MS * 5,
@@ -180,11 +182,22 @@ class OperateProcessesPage {
     }
     async clickRunningProcessInstancesCheckbox() {
         await this.processRunningInstancesCheckbox.waitFor({
-            state: 'visible',
+            state: 'attached',
             timeout: constants_1._1_SECOND_IN_MS * 10,
         });
         const wasChecked = await this.processRunningInstancesCheckbox.isChecked();
-        await this.processRunningInstancesCheckbox.click({ timeout: 90000 });
+        if (wasChecked) {
+            await this.processRunningInstancesCheckbox.uncheck({
+                force: true,
+                timeout: 90000,
+            });
+        }
+        else {
+            await this.processRunningInstancesCheckbox.check({
+                force: true,
+                timeout: 90000,
+            });
+        }
         await (0, test_1.expect)(this.processRunningInstancesCheckbox).toBeChecked({
             checked: !wasChecked,
             timeout: constants_1._1_SECOND_IN_MS * 5,

package/dist/pages/SM-8.9/OperateProcessesPage.js

@@ -52,7 +52,7 @@ class OperateProcessesPage {
             await checkbox.check({ force: true, timeout: constants_1._1_SECOND_IN_MS * 30 });
             await (0, test_1.expect)(checkbox).toBeChecked({
                 checked: true,
-                timeout: constants_1._1_SECOND_IN_MS * 10,
+                timeout: constants_1._1_SECOND_IN_MS * 30,
             });
         }
     }
@@ -62,7 +62,7 @@ class OperateProcessesPage {
             await checkbox.uncheck({ force: true, timeout: constants_1._1_SECOND_IN_MS * 30 });
             await (0, test_1.expect)(checkbox).toBeChecked({
                 checked: false,
-                timeout: constants_1._1_SECOND_IN_MS * 10,
+                timeout: constants_1._1_SECOND_IN_MS * 30,
             });
         }
     }

package/dist/tests/8.10/login.spec.js

@@ -7,6 +7,7 @@ const sleep_1 = require("../../utils/sleep");
 _8_10_1.test.describe.configure({ mode: 'parallel' });
 _8_10_1.test.describe('Login Tests', () => {
     _8_10_1.test.beforeEach(async ({ page }, testInfo) => {
+        await page.context().clearCookies();
         await page.goto('/');
         await (0, sleep_1.sleep)((testInfo.workerIndex + 1) * 1000);
     });
@@ -15,11 +16,13 @@ _8_10_1.test.describe('Login Tests', () => {
         await (0, _setup_1.captureFailureVideo)(page, testInfo);
     });
     (0, _8_10_1.test)('Basic Login', async ({ loginPage, homePage }) => {
+        await (0, test_1.expect)(loginPage.loginMessage).toBeVisible({ timeout: 60000 });
+        await (0, test_1.expect)(loginPage.usernameInput.locator).toBeVisible({ timeout: 60000 });
         await loginPage.fillUsername(process.env.C8_USERNAME);
-        await (0, test_1.expect)(loginPage.loginMessage).toBeVisible();
         await loginPage.clickContinueButton();
+        await (0, test_1.expect)(loginPage.passwordHeading).toBeVisible({ timeout: 60000 });
+        await (0, test_1.expect)(loginPage.passwordInput).toBeVisible({ timeout: 60000 });
         await loginPage.fillPassword(process.env.C8_PASSWORD);
-        await (0, test_1.expect)(loginPage.passwordHeading).toBeVisible();
         await loginPage.clickLoginButton();
         await (0, test_1.expect)(homePage.consoleBanner).toBeVisible({ timeout: 120000 });
     });

package/dist/tests/8.10/operate-access-flow.spec.js

@@ -4,13 +4,18 @@ const test_1 = require("@playwright/test");
 const _8_10_1 = require("../../fixtures/8.10");
 const UtilitiesPage_1 = require("../../pages/8.10/UtilitiesPage");
 const _setup_1 = require("../../test-setup.js");
+const apiHelpers_1 = require("../../utils/apiHelpers");
 const users_1 = require("../../utils/users");
+const urlHelpers_1 = require("../../utils/urlHelpers");
 const testUser = (0, users_1.getTestUser)('twentySecondUser');
 // This test covers the manual scenario: create a new API client via UI, copy the Operate URL, and verify the Operate endpoint denies unauthenticated access.
 _8_10_1.test.describe.configure({ mode: 'parallel' });
 _8_10_1.test.describe('Operate access requires authentication @tasklistV2', () => {
     let clientName;
     const clusterName = 'Test Cluster';
+    _8_10_1.test.beforeEach(async ({ page, loginPage }, testInfo) => {
+        await (0, UtilitiesPage_1.loginWithRetry)(page, loginPage, testUser, (testInfo.workerIndex + 1) * 1000);
+    });
     _8_10_1.test.afterEach(async ({ page, homePage, clusterPage, clusterDetailsPage }, testInfo) => {
         await (0, _setup_1.captureScreenshot)(page, testInfo);
         await (0, _setup_1.captureFailureVideo)(page, testInfo);
@@ -21,9 +26,6 @@ _8_10_1.test.describe('Operate access requires authentication @tasklistV2', () =
             await clusterDetailsPage.deleteAPIClientsIfExist(clientName);
         }
     });
-    _8_10_1.test.beforeEach(async ({ page, loginPage }, testInfo) => {
-        await (0, UtilitiesPage_1.loginWithRetry)(page, loginPage, testUser, (testInfo.workerIndex + 1) * 1000);
-    });
     (0, _8_10_1.test)('check that request POST /v2/process-definitions/search returns 401 without credentials', async ({ homePage, clusterPage, clusterDetailsPage, clientCredentialsDetailsPage, request, }) => {
         clientName = `operate-deny-${await (0, _setup_1.generateRandomStringAsync)(5)}`;
         await _8_10_1.test.step('Add API Client to Cluster', async () => {
@@ -43,13 +45,105 @@ _8_10_1.test.describe('Operate access requires authentication @tasklistV2', () =
             await clusterDetailsPage.clickAPITab();
         });
         await _8_10_1.test.step('POST search endpoint without auth should be rejected', async () => {
-            const sanitizedOperateUrl = operateUrl.replace(/\/$/, '');
+            const sanitizedOperateUrl = (0, urlHelpers_1.sanitizeUrl)(operateUrl);
             const response = await request.post(`${sanitizedOperateUrl}/v2/process-definitions/search`, {
                 data: { filter: {}, size: 10 },
             });
             (0, test_1.expect)(response.status()).toBe(401);
             const body = await response.text();
-            (0, test_1.expect)(body.length).toBe(0);
+            (0, test_1.expect)(body).toBe('');
+        });
+    });
+    (0, _8_10_1.test)('check that request POST /v2/process-definitions/search returns 200 with valid credentials', async ({ homePage, clusterPage, clusterDetailsPage, clientCredentialsDetailsPage, request, }) => {
+        clientName = `operate-allow-${await (0, _setup_1.generateRandomStringAsync)(5)}`;
+        let operateUrl = '';
+        await _8_10_1.test.step('Add API Client to Cluster', async () => {
+            await homePage.clickClusters();
+            await clusterPage.clickClusterLink(clusterName);
+            await clusterDetailsPage.clickAPITab();
+            await clusterDetailsPage.createAPIClient(clientName);
+            await clusterDetailsPage.clickCloseModalButton();
+            await (0, test_1.expect)(clusterDetailsPage.clientsList.filter({ hasText: clientName })).toBeVisible({ timeout: 6000 });
+        });
+        await _8_10_1.test.step('Capture Operate URL', async () => {
+            await clusterDetailsPage.searchAndClickClientCredentialsLink(clientName);
+            operateUrl = await clientCredentialsDetailsPage.getOperateUrl();
+            (0, test_1.expect)(operateUrl).toMatch(/^https?:\/\//);
+            await clientCredentialsDetailsPage.goBack();
+            await clusterDetailsPage.clickAPITab();
+        });
+        await _8_10_1.test.step('POST search endpoint with valid Zeebe bearer token returns 200 or is routed', async () => {
+            const validToken = await (0, apiHelpers_1.authSaasAPI)();
+            const sanitizedOperateUrl = (0, urlHelpers_1.sanitizeUrl)(operateUrl);
+            const response = await request.post(`${sanitizedOperateUrl}/v2/process-definitions/search`, {
+                headers: {
+                    Authorization: validToken,
+                    'Content-Type': 'application/json',
+                },
+                data: { filter: {}, size: 10 },
+            });
+            (0, test_1.expect)([200, 405]).toContain(response.status());
+            if (response.status() === 200) {
+                const body = await response.json();
+                (0, test_1.expect)(body).toHaveProperty('items');
+            }
+        });
+    });
+    (0, _8_10_1.test)('check that POST /v2/user-tasks/search returns 401 without credentials', async ({ homePage, clusterPage, clusterDetailsPage, clientCredentialsDetailsPage, request, }) => {
+        clientName = `tasklist-deny-${await (0, _setup_1.generateRandomStringAsync)(5)}`;
+        let operateUrl = '';
+        await _8_10_1.test.step('Add API Client to Cluster', async () => {
+            await homePage.clickClusters();
+            await clusterPage.clickClusterLink(clusterName);
+            await clusterDetailsPage.clickAPITab();
+            await clusterDetailsPage.createAPIClient(clientName);
+            await clusterDetailsPage.clickCloseModalButton();
+            await (0, test_1.expect)(clusterDetailsPage.clientsList.filter({ hasText: clientName })).toBeVisible({ timeout: 6000 });
+        });
+        await _8_10_1.test.step('Capture Operate URL (base URL shared with Tasklist v2 endpoint)', async () => {
+            await clusterDetailsPage.searchAndClickClientCredentialsLink(clientName);
+            operateUrl = await clientCredentialsDetailsPage.getOperateUrl();
+            (0, test_1.expect)(operateUrl).toMatch(/^https?:\/\//);
+            await clientCredentialsDetailsPage.goBack();
+            await clusterDetailsPage.clickAPITab();
+        });
+        await _8_10_1.test.step('POST /v2/user-tasks/search without auth returns 401', async () => {
+            const sanitizedOperateUrl = (0, urlHelpers_1.sanitizeUrl)(operateUrl);
+            const response = await request.post(`${sanitizedOperateUrl}/v2/user-tasks/search`, {
+                data: { filter: {}, size: 10 },
+            });
+            (0, test_1.expect)(response.status()).toBe(401);
+        });
+    });
+    (0, _8_10_1.test)('check that POST /v2/process-definitions/search with wrong-audience token returns 401', async ({ homePage, clusterPage, clusterDetailsPage, clientCredentialsDetailsPage, request, }) => {
+        clientName = `operate-wrong-aud-${await (0, _setup_1.generateRandomStringAsync)(5)}`;
+        let operateUrl = '';
+        await _8_10_1.test.step('Add API Client to Cluster', async () => {
+            await homePage.clickClusters();
+            await clusterPage.clickClusterLink(clusterName);
+            await clusterDetailsPage.clickAPITab();
+            await clusterDetailsPage.createAPIClient(clientName);
+            await clusterDetailsPage.clickCloseModalButton();
+            await (0, test_1.expect)(clusterDetailsPage.clientsList.filter({ hasText: clientName })).toBeVisible({ timeout: 6000 });
+        });
+        await _8_10_1.test.step('Capture Operate URL', async () => {
+            await clusterDetailsPage.searchAndClickClientCredentialsLink(clientName);
+            operateUrl = await clientCredentialsDetailsPage.getOperateUrl();
+            (0, test_1.expect)(operateUrl).toMatch(/^https?:\/\//);
+            await clientCredentialsDetailsPage.goBack();
+            await clusterDetailsPage.clickAPITab();
+        });
+        await _8_10_1.test.step('Token scoped for Optimize audience rejected by Operate endpoint', async () => {
+            const optimizeToken = await (0, apiHelpers_1.authSaasAPI)(process.env.OPTIMIZE_API_TOKEN_AUDIENCE);
+            const sanitizedOperateUrl = (0, urlHelpers_1.sanitizeUrl)(operateUrl);
+            const response = await request.post(`${sanitizedOperateUrl}/v2/process-definitions/search`, {
+                headers: {
+                    Authorization: optimizeToken,
+                    'Content-Type': 'application/json',
+                },
+                data: { filter: {}, size: 10 },
+            });
+            (0, test_1.expect)([401, 403]).toContain(response.status());
         });
     });
 });