graphdb-workbench-tests 3.4.0-TR4 → 3.4.0-TR5

package/e2e-security/setup/users-and-access/graphql-user.spec.js

@@ -0,0 +1,126 @@
+import {UserAndAccessSteps} from "../../../steps/setup/user-and-access-steps";
+import {LoginSteps} from "../../../steps/login-steps";
+import {GraphqlPlaygroundSteps} from "../../../steps/graphql/graphql-playground-steps";
+import {RepositorySteps} from "../../../steps/repository-steps";
+
+describe('GraphQL-only User – Playground Access & Mutation Restriction', () => {
+    let repositoryId;
+    const gqlUsername = `gqluser-${Date.now()}`;
+    const testPassword = 'P@ssw0rd123!';
+    const readQuery = `
+                query StarshipById {
+                  starship(ID: "https://swapi.co/resource/starship/9") {
+                    name
+                  }
+                }
+            `;
+    const mutation = `
+    mutation CreateHuman {
+      create_Human(
+        objects: [
+          {
+            id: "file:/test/onto/vocabulary/Human1",
+            rdfs_label: "New human with specific iri id"
+          }
+        ]
+      ) {
+        human { id }
+        affected_objects { ids }
+      }
+    }
+  `;
+
+    beforeEach(() => {
+        repositoryId = `repo-${Date.now()}`;
+        cy.createRepository({ id: repositoryId });
+        cy.presetRepository(repositoryId);
+        cy.importServerFile(repositoryId, 'swapi-dataset.ttl');
+        cy.uploadGraphqlSchema(repositoryId, 'graphql/soml/swapi-schema.yaml', 'swapi');
+    });
+
+    afterEach(() => {
+        cy.loginAsAdmin();
+        cy.switchOffSecurity(true);
+        cy.deleteUser(gqlUsername);
+        cy.deleteRepository(repositoryId);
+    });
+
+    it('should see only the assigned repo, block SPARQL, allow GraphQL read and forbid writes, and hide create-repo everywhere', () => {
+        UserAndAccessSteps.visit();
+        UserAndAccessSteps.clickCreateNewUserButton();
+        UserAndAccessSteps.typeUsername(gqlUsername);
+        UserAndAccessSteps.typePassword(testPassword);
+        UserAndAccessSteps.typeConfirmPasswordField(testPassword);
+        UserAndAccessSteps.clickReadAccessRepo(repositoryId);
+        UserAndAccessSteps.clickGraphqlAccessRepo(repositoryId);
+        UserAndAccessSteps.confirmUserCreate();
+
+        UserAndAccessSteps.toggleSecurity();
+
+        // Log in as GraphQL-only user
+        LoginSteps.loginWithUser(gqlUsername, testPassword);
+
+        // The repository is set
+        RepositorySteps.verifyRepositoryIsSelected(repositoryId);
+
+        // Verify only the assigned repository appears in endpoints
+        GraphqlPlaygroundSteps.visit();
+        GraphqlPlaygroundSteps.getView().should('be.visible');
+        GraphqlPlaygroundSteps.getQueryEditor().should('be.visible');
+        GraphqlPlaygroundSteps.getSelectedEndpoint().should('have.text', 'swapi');
+        // And I can execute a query on the countries endpoint
+        GraphqlPlaygroundSteps.setInEditor(readQuery);
+        // And I execute the query
+        GraphqlPlaygroundSteps.executeQuery();
+        // Then I get expected result
+        GraphqlPlaygroundSteps.getResponse().should('contain', '"name": "Death Star"');
+
+        // Execute the create_Human mutation → expect errors
+        GraphqlPlaygroundSteps.setInEditor(mutation);
+        GraphqlPlaygroundSteps.executeQuery();
+        GraphqlPlaygroundSteps.getResponse().should('contain.text', 'errors');
+        LoginSteps.logout();
+    });
+
+    it('should allow GraphQL mutation and hide SPARQL/Import/Create-repo menus', () => {
+        UserAndAccessSteps.visit();
+        UserAndAccessSteps.clickCreateNewUserButton();
+        UserAndAccessSteps.typeUsername(gqlUsername);
+        UserAndAccessSteps.typePassword(testPassword);
+        UserAndAccessSteps.typeConfirmPasswordField(testPassword);
+        UserAndAccessSteps.clickReadAccessRepo(repositoryId);
+        UserAndAccessSteps.clickWriteAccessRepo(repositoryId);
+        UserAndAccessSteps.clickGraphqlAccessRepo(repositoryId);
+        UserAndAccessSteps.confirmUserCreate();
+
+        UserAndAccessSteps.toggleSecurity();
+
+        // Log in as the new user
+        LoginSteps.loginWithUser(gqlUsername, testPassword);
+
+        // The repository is set
+        RepositorySteps.verifyRepositoryIsSelected(repositoryId);
+
+        // Visit GraphQL Playground
+        GraphqlPlaygroundSteps.visit();
+        GraphqlPlaygroundSteps.getView().should('be.visible');
+        GraphqlPlaygroundSteps.getQueryEditor().should('be.visible');
+        GraphqlPlaygroundSteps.getSelectedEndpoint().should('have.text', 'swapi');
+
+        // Execute a read query to verify read access
+        GraphqlPlaygroundSteps.setInEditor(readQuery);
+        GraphqlPlaygroundSteps.executeQuery();
+        GraphqlPlaygroundSteps.getResponse()
+            .should('contain.text', '"name": "Death Star"');
+
+        // Execute the mutation and expect success
+        GraphqlPlaygroundSteps.setInEditor(mutation);
+        GraphqlPlaygroundSteps.executeQuery();
+        GraphqlPlaygroundSteps.getResponse()
+            .should('contain.text', 'data')
+            .and('contain.text', 'create_Human')
+            .and('contain.text', 'affected_objects');
+
+        LoginSteps.logout();
+    });
+});

package/e2e-security/setup/users-and-access/repo-admin-role.spec.js

@@ -0,0 +1,70 @@
+import {UserAndAccessSteps} from "../../../steps/setup/user-and-access-steps";
+import {LoginSteps} from "../../../steps/login-steps";
+import {YasqeSteps} from "../../../steps/yasgui/yasqe-steps";
+import {YasrSteps} from "../../../steps/yasgui/yasr-steps";
+import {MainMenuSteps} from "../../../steps/main-menu-steps";
+import HomeSteps from "../../../steps/home-steps";
+import {ActiveRepositoryWidgetSteps} from "../../../steps/widgets/active-repository-widget-steps";
+
+describe('Repository Admin – Permissions and Access Control', () => {
+    const repoAdminUsername = `repoadmin-${Date.now()}`;
+    const password = 'Admin123!';
+    let repositoryId;
+
+    beforeEach(() => {
+        repositoryId = `repo-${Date.now()}`;
+        cy.createRepository({ id: repositoryId });
+        cy.presetRepository(repositoryId);
+        cy.initializeRepository(repositoryId);
+
+        UserAndAccessSteps.visit();
+        UserAndAccessSteps.clickCreateNewUserButton();
+        UserAndAccessSteps.typeUsername(repoAdminUsername);
+        UserAndAccessSteps.typePassword(password);
+        UserAndAccessSteps.typeConfirmPasswordField(password);
+        UserAndAccessSteps.selectRoleRadioButton('#roleRepoAdmin');
+
+        UserAndAccessSteps.getReadAccessForRepo('*').should('be.checked').and('be.disabled');
+        UserAndAccessSteps.getWriteAccessForRepo('*').should('be.checked').and('be.disabled');
+
+        UserAndAccessSteps.confirmUserCreate();
+        UserAndAccessSteps.toggleSecurity();
+    });
+
+    afterEach(() => {
+        cy.loginAsAdmin();
+        cy.switchOffSecurity(true);
+        cy.deleteUser(repoAdminUsername);
+        cy.deleteRepository(repositoryId);
+    });
+
+    it('Repository admin has correct access and restrictions', () => {
+        LoginSteps.visitLoginPage();
+        LoginSteps.loginWithUser(repoAdminUsername, password);
+
+        // SPARQL – read access
+        MainMenuSteps.clickOnSparqlMenu();
+
+        YasqeSteps.getEditor().should('be.visible');
+        YasqeSteps.executeQuery();
+
+        // SPARQL – write access
+        YasqeSteps.clearEditor();
+        const prefix = 'PREFIX ex: <http://example.org/>\n';
+        const query = 'INSERT DATA {\n' +
+            'ex:greeting ex:text "Hello, world!" .\n' +
+            '}';
+        cy.pasteIntoCodeMirror('.CodeMirror', prefix + query);
+        YasqeSteps.executeQueryWithoutWaiteResult();
+        // Verify read access
+        YasrSteps.getResponseInfo()
+            .should('not.have.class', 'hidden')
+            .should('not.have.class', 'empty')
+            .should('be.visible')
+            .should('contain.text', 'Added 1 statements.');
+
+        // Create repo button on homepage should be visible
+        HomeSteps.visit();
+        ActiveRepositoryWidgetSteps.getImportLink().scrollIntoView().should('be.visible').and('not.be.disabled');
+    });
+});

package/e2e-security/setup/users-and-access/turn-on-security-and-password-change.spec.js

@@ -0,0 +1,99 @@
+import {MainMenuSteps} from "../../../steps/main-menu-steps";
+import {UserAndAccessSteps} from "../../../steps/setup/user-and-access-steps";
+import {LoginSteps} from "../../../steps/login-steps";
+import {ToasterSteps} from "../../../steps/toaster-steps";
+import {HeaderSteps} from '../../../steps/header-steps.js';
+import HomeSteps from '../../../steps/home-steps.js';
+
+describe('Turn on Security', () => {
+
+    beforeEach(() => {
+        cy.loginAsAdmin();
+        cy.switchOnSecurity();
+    });
+
+    afterEach(() => {
+        cy.loginAsAdmin();
+        cy.switchOffSecurity(true);
+    })
+
+    it('should enable security and show login screen', () => {
+        // Navigate to Users & Access
+        UserAndAccessSteps.visit();
+        // Verify we are redirected to login page
+        cy.url().should('include', '/login');
+        HeaderSteps.getHeader().should('not.exist');
+        MainMenuSteps.getMainMenu().should('not.exist');
+    });
+
+    it('should reject wrong credentials and accept admin/root', () => {
+        // Attempt login with invalid credentials
+        LoginSteps.visitLoginPage();
+        LoginSteps.loginWithUser('wrongUser', 'wrongPass');
+        // Expect error message
+        ToasterSteps.verifyNewToasterError('Wrong credentials');
+
+        // Login with correct admin credentials
+        LoginSteps.visitLoginPage();
+        LoginSteps.loginWithUser('admin', 'root');
+        cy.url().should('include', '/');
+    });
+
+    it('should show toaster after logging out', () => {
+        UserAndAccessSteps.visit();
+        LoginSteps.loginWithUser('admin', 'root');
+        // Verify we are logged in
+        UserAndAccessSteps.getUsersCatalogContainer().should('be.visible');
+        // Log out
+        HeaderSteps.logout();
+        cy.url().should('include', '/login');
+        // Verify toaster message
+        ToasterSteps.verifySuccess('Signed out');
+    })
+
+    describe('Password Change', () => {
+        afterEach(() => {
+            // Reset password back to original value for test isolation
+            UserAndAccessSteps.visit();
+            UserAndAccessSteps.openEditUserPage('admin');
+            UserAndAccessSteps.typePassword('root');
+            UserAndAccessSteps.typeConfirmPasswordField('root');
+            UserAndAccessSteps.confirmUserEdit();
+            UserAndAccessSteps.getUsersCatalogContainer().should('be.visible');
+        })
+
+        it('should change admin password and enforce new credentials', () => {
+            // Navigate to Users & Access after login
+            UserAndAccessSteps.visit();
+            // Verify we are redirected to login page
+            cy.url().should('include', '/login');
+            // Login with admin credentials
+            LoginSteps.loginWithUser('admin', 'root');
+            // Verify we are logged in
+            UserAndAccessSteps.getUsersCatalogContainer().should('be.visible');
+
+            // Open edit page for admin user
+            UserAndAccessSteps.openEditUserPage('admin');
+
+            // Change password to a new value
+            let newPassword = 'MyNewP@ssw0rd!';
+            UserAndAccessSteps.typePassword(newPassword);
+            UserAndAccessSteps.typeConfirmPasswordField(newPassword);
+            UserAndAccessSteps.confirmUserEdit();
+
+            // Log out
+            LoginSteps.logout();
+            cy.url().should('include', '/login');
+
+            // Attempt login with old password
+            LoginSteps.loginWithUser('admin', 'root');
+            ToasterSteps.verifyNewToasterError('Wrong credentials');
+
+            // Attempt login with new password
+            LoginSteps.visitLoginPage();
+            LoginSteps.loginWithUser('admin', newPassword);
+            // Verify we are logged in and we are on the home page
+            HomeSteps.getView().should('be.visible');
+        });
+    });
+});

package/e2e-security/setup/users-and-access/user-and-access.spec.js

@@ -0,0 +1,87 @@
+import {RepositoriesStubs} from '../../../stubs/repositories/repositories-stubs';
+import {UserAndAccessSteps} from '../../../steps/setup/user-and-access-steps';
+import {LoginSteps} from '../../../steps/login-steps';
+import {ModalDialogSteps} from '../../../steps/modal-dialog-steps';
+import {MainMenuSteps} from '../../../steps/main-menu-steps';
+import {RepositorySelectorSteps} from '../../../steps/repository-selector-steps';
+import {ErrorSteps} from '../../../steps/error-steps';
+
+describe('User and Access', () => {
+
+    let repositoryId1;
+    let repositoryId2;
+    const graphqlUser = 'graphqlUser';
+
+    beforeEach(() => {
+        cy.viewport(1280, 1000);
+        RepositoriesStubs.spyGetRepositories();
+        repositoryId1 = 'user-access-repo1-' + Date.now();
+        repositoryId2 = 'user-access-repo2-' + Date.now();
+        cy.createRepository({id: repositoryId1});
+        cy.createRepository({id: repositoryId2});
+        cy.presetRepository(repositoryId1);
+        UserAndAccessSteps.visit();
+        // Users table should be visible
+        UserAndAccessSteps.getUsersTable().should('be.visible');
+    });
+
+    afterEach(() => {
+        cy.loginAsAdmin().then(() => {
+            cy.deleteRepository(repositoryId1, true);
+            cy.deleteRepository(repositoryId2, true);
+            cy.deleteUser(graphqlUser, true);
+            cy.switchOffFreeAccess(true);
+            cy.switchOffSecurity(true);
+        });
+
+    });
+
+    it('should restrict page when free access in on', () => {
+        // Given: There at least two repositories.
+        // When: I enable the security
+        UserAndAccessSteps.toggleSecurity();
+        LoginSteps.loginWithUser('admin', 'root');
+        // And: turn on Free Access
+        UserAndAccessSteps.getFreeAccessSwitchInput().should('not.be.checked');
+        UserAndAccessSteps.toggleFreeAccess();
+        // And: set graphql rights for the second repository when free access is ON
+        UserAndAccessSteps.clickFreeWriteAccessRepo(repositoryId2);
+        UserAndAccessSteps.clickFreeGraphqlAccessRepo(repositoryId2);
+        ModalDialogSteps.clickOKButton();
+
+        // When: I logout
+        LoginSteps.logout();
+        // And: repository with graphql rights is selected
+        RepositorySelectorSteps.selectRepository(repositoryId2);
+        // And: I click on the Import menu.
+        MainMenuSteps.clickOnMenuImport();
+
+        // Then: I should see the error message, because import view is available only for write access, repositoryId2 has only graphql rights.
+        ErrorSteps.verifyError('Some functionalities are not available because you do not have the required repository permissions.')
+    });
+
+    it('should restrict the repositories depending on whether free access is enabled and whether the user is logged in', () => {
+        // Given: There at least two repositories.
+        // When: I enable the security
+        UserAndAccessSteps.toggleSecurity();
+        LoginSteps.loginWithUser('admin', 'root');
+        // And: turn on Free Access
+        UserAndAccessSteps.toggleFreeAccess();
+        // And: set rights for the second repository when free access is ON
+        UserAndAccessSteps.clickFreeWriteAccessRepo(repositoryId2);
+        ModalDialogSteps.clickOKButton();
+
+        // When: I logout
+        LoginSteps.logout();
+        // Then: I should see only repositoryId2, as it is the only one configured for free access
+        RepositorySelectorSteps.getRepositorySelectorButton(repositoryId1).should('not.exist');
+        RepositorySelectorSteps.getRepositorySelectorButton(repositoryId2).should('exist');
+
+        // When: I log in again with a user who has access to all repositories
+        LoginSteps.navigateToLoginPage();
+        LoginSteps.loginWithUser('admin', 'root');
+        // Then: I should see both repositories in the repository selector, because the user has access to all repositories
+        RepositorySelectorSteps.getRepositorySelectorButton(repositoryId1).should('exist');
+        RepositorySelectorSteps.getRepositorySelectorButton(repositoryId2).should('exist');
+    });
+});

package/e2e-security/setup/users-and-access/users-and-access-initial-state.spec.js

@@ -0,0 +1,38 @@
+import {UserAndAccessSteps} from "../../../steps/setup/user-and-access-steps";
+import {MainMenuSteps} from "../../../steps/main-menu-steps";
+
+describe('Users and Access initial state', () => {
+    beforeEach(() => {
+        cy.intercept('GET', '**/rest/security/users').as('getUsers');
+    });
+
+    it('Should display the correct initial state when navigating via URL', () => {
+        // Given, I visit the Users and Access page via URL
+        UserAndAccessSteps.visit();
+        // Then,
+        validateInitialState();
+    });
+
+    it('Should display the correct initial state when navigating via the navigation menu', () => {
+        // Given, I visit the Users and Access page via the navigation menu
+        UserAndAccessSteps.visit();
+        MainMenuSteps.clickOnUsersAndAccess();
+        // Then,
+        validateInitialState();
+    });
+})
+
+function validateInitialState() {
+    cy.wait('@getUsers').then(({ response }) => {
+        const users = response.body;
+        expect(users).to.have.length(1);
+        expect(users[0].grantedAuthorities).to.have.length(1);
+    });
+
+    UserAndAccessSteps.getTableRow().should('have.length', 1);
+    UserAndAccessSteps.findUserInTable('admin')
+        .within(() => {
+            cy.get('.username').should('contain', 'admin');
+        });
+    UserAndAccessSteps.getToggleSecurityCheckbox().should('not.be.checked');
+}

package/eslint.config.js

@@ -0,0 +1,39 @@
+import globals from 'globals';
+import pluginJs from '@eslint/js';
+import pluginCypress from 'eslint-plugin-cypress/flat';
+
+export default [
+    {
+        files: ['**/*.{js,mjs,cjs}'],
+        plugins: { js: pluginJs },
+        languageOptions: { globals: globals.browser },
+        rules: {
+            ...pluginJs.configs.recommended.rules,
+        },
+    },
+    {
+        files: ['**/*.{js,mjs,cjs}'],
+        plugins: { cypress: pluginCypress },
+        languageOptions: {
+            globals: {
+                ...globals.browser,
+                cy: 'readonly',
+                Cypress: 'readonly',
+                describe: 'readonly',
+                it: 'readonly',
+                beforeEach: 'readonly',
+                afterEach: 'readonly',
+                before: 'readonly',
+                after: 'readonly',
+                expect: 'readonly',
+
+                // Node.js globals for scripts
+                process: 'readonly',
+            }
+        },
+        rules: {
+            ...pluginJs.configs.recommended.rules,
+            ...pluginCypress.configs.recommended.rules,
+        },
+    },
+];

package/fixtures/graph/graph-configurations.json

@@ -0,0 +1,59 @@
+[
+    {
+        "id": "de99fd5de7f94ef98f1875dff55fc1c9",
+        "name": "Graph Config 1",
+        "startMode": "search",
+        "owner": "admin",
+        "startQueryIncludeInferred": true,
+        "startQuerySameAs": true,
+        "startGraphQuery": "# CONSTRUCT or DESCRIBE query. The results will be rendered visually as a graph of triples.\nCONSTRUCT WHERE {\n\t?s ?p ?o\n} LIMIT 10",
+        "startIRI": null,
+        "startIRILabel": null,
+        "expandQuery": null,
+        "resourceQuery": null,
+        "predicateLabelQuery": null,
+        "resourcePropertiesQuery": null,
+        "shared": false,
+        "description": null,
+        "hint": null,
+        "repositoryId": "A_test"
+    },
+    {
+        "id": "94cab6579df445c68c454b2156013811",
+        "name": "Graph Config 1",
+        "startMode": "search",
+        "owner": "admin",
+        "startQueryIncludeInferred": true,
+        "startQuerySameAs": true,
+        "startGraphQuery": "# CONSTRUCT or DESCRIBE query. The results will be rendered visually as a graph of triples.\nCONSTRUCT WHERE {\n\t?s ?p ?o\n} LIMIT 10",
+        "startIRI": null,
+        "startIRILabel": null,
+        "expandQuery": null,
+        "resourceQuery": null,
+        "predicateLabelQuery": null,
+        "resourcePropertiesQuery": null,
+        "shared": false,
+        "description": null,
+        "hint": null,
+        "repositoryId": null
+    },
+    {
+        "id": "94cab6579df445c68c454b2156013661",
+        "name": "Graph Config 1",
+        "startMode": "query",
+        "owner": "admin",
+        "startQueryIncludeInferred": true,
+        "startQuerySameAs": true,
+        "startGraphQuery": "# CONSTRUCT or DESCRIBE query. The results will be rendered visually as a graph of triples.\nCONSTRUCT WHERE {\n\t?s ?p ?o\n} LIMIT 10",
+        "startIRI": null,
+        "startIRILabel": null,
+        "expandQuery": null,
+        "resourceQuery": null,
+        "predicateLabelQuery": null,
+        "resourcePropertiesQuery": null,
+        "shared": false,
+        "description": null,
+        "hint": null,
+        "repositoryId": null
+    }
+]

package/fixtures/guides/autocomplete/enable-autocomplete-guide.json

@@ -0,0 +1,12 @@
+[
+    {
+        "guideName": {
+            "en": "Autocomplete guide"
+        },
+        "steps": [
+            {
+                "guideBlockName": "enable-autocomplete"
+            }
+        ]
+    }
+]

package/fixtures/guides/class-hierarchy/class-hierarchy-guide.json

@@ -0,0 +1,35 @@
+[
+    {
+        "guideName": {
+            "en": "Ontology Navigator with FIBO guide"
+        },
+        "steps": [
+            {
+                "guideBlockName": "class-hierarchy-instances",
+                "options": {
+                    "focusInstances": [{
+                        "instance": "https://swapi.co/resource/aleena/47",
+                        "message": "This is planet"
+                    }],
+                    "iri": "voc:Sentient",
+                    "followCountLink": true,
+                    "showExtraCommentSparql": "true"
+                }
+            },
+            {
+                "guideBlockName": "class-hierarchy",
+                "options": {
+                    "introExtraContent": "This is some extra content here",
+                    "zoomIris": [
+                        {
+                            "iri": "voc:Sentient",
+                            "postExtraContent": {
+                                "en": "Within <b>voc:Sentient</b> are subclasses like <b>voc:Human</b> (humanoids), <b>voc:Droid</b> (mechanical intelligences), <b>voc:Gungan</b> (the Gungan species), and <b>voc:Yodasspecies</b> (Yoda’s lineage), highlighting the diverse forms of sentient life."
+                            }
+                        }
+                    ]
+                }
+            }
+        ]
+    }
+]

package/fixtures/guides/class-relations/class-relations-guide.json

@@ -0,0 +1,33 @@
+[
+    {
+        "guideName": {
+            "en": "Class relations guide"
+        },
+        "steps": [
+            {
+                "guideBlockName": "class-relationships",
+                "options": {
+                    "introExtraContent": "Some extra info"
+                }
+            },
+            {
+                "guideBlockName": "class-relationships-digram-thickness-intro"
+            },
+            {
+                "guideBlockName": "class-relationships-digram-predicates-intro"
+            },
+            {
+                "guideBlockName": "class-relationships-named-graph-selection"
+            },
+            {
+                "guideBlockName": "class-relationships-class-list-intro"
+            },
+            {
+                "guideBlockName": "class-relationships-class-list-background-intro"
+            },
+            {
+                "guideBlockName": "class-relationships-class-list-selection"
+            }
+        ]
+    }
+]

package/fixtures/guides/confirm-cancel-dialog/confirm-cancel-dialog-guide.json

@@ -0,0 +1,15 @@
+[
+    {
+        "guideName": {
+            "en": "Confirm cancel dialog"
+        },
+        "guideDescription": {
+            "en": "Confirm cancel dialog guide"
+        },
+        "steps": [
+            {
+                "guideBlockName": "welcome"
+            }
+        ]
+    }
+]