sefrone-api-e2e 1.2.5__tar.gz → 1.2.6__tar.gz

{sefrone_api_e2e-1.2.5 → sefrone_api_e2e-1.2.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sefrone_api_e2e
-Version: 1.2.5
+Version: 1.2.6
 Summary: A Python package to provide e2e testing helpers for sefrone API projects
 Home-page: https://bitbucket.org/sefrone/sefrone_pypi
 Author: Sefrone

{sefrone_api_e2e-1.2.5 → sefrone_api_e2e-1.2.6}/sefrone_api_e2e/e2e/Scenarios/Auth/4_workspace_endpoints.yaml

@@ -179,7 +179,9 @@ steps:
 
   - name: "Register standard test account"
     method: "POST"
-    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/create"
+    request_headers:
+      - x-api-token: "{$stored.admin_token}"
     send_as: "json"
     body:
       username: "e2e_ws_std_{$stored.seed_account_id}"

sefrone_api_e2e-1.2.6/sefrone_api_e2e/e2e/Scenarios/Auth/8_temporary_passwords_flow.yaml

@@ -0,0 +1,219 @@
+name: "Temporary Passwords Flow"
+base_url: "http://localhost:$var(API_PUBLIC_PORT)"
+
+# This scenario requires the TemporaryCredentials feature to be registered.
+skip_if:
+  - "TemporaryCredentials not in {$stored.0_check_features.enabled_features}"
+
+steps:
+  - name: "Login root admin"
+    retry:
+      attempts: 10
+      delay_seconds: 5
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/login"
+    send_as: "json"
+    body:
+      device: "e2e_test_device"
+      pseudo: "$var(DEFAULT_USERNAME)"
+      password: "$var(DEFAULT_PASSWORD)"
+    expect:
+      status: 200
+      body:
+        response:
+          token: string
+    save:
+      root_admin_token: "{{body.response.token}}"
+
+  - name: "Generate unique test suffix"
+    randomize:
+      seed_id: 8
+
+  - name: "Create temporary credential"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/temp-credentials/create"
+    request_headers:
+      - x-api-token: "{$stored.root_admin_token}"
+    send_as: "json"
+    body:
+      password: "e2e_temp_pwd_{$stored.seed_id}"
+      label: "e2e temp credential {$stored.seed_id}"
+      expiresAt: "$date(+1,end)"
+    expect:
+      status: 200
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+        response:
+          id: string
+          label: string
+          expiresAt: datetime
+          createdAt: datetime
+    save:
+      temp_credential_id: "{{body.response.id}}"
+    assertions:
+      - "{{body.response.label}} == 'e2e temp credential {$stored.seed_id}'"
+
+  - name: "List temporary credentials shows the created one"
+    method: "GET"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/temp-credentials/list"
+    request_headers:
+      - x-api-token: "{$stored.root_admin_token}"
+    expect:
+      status: 200
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+        response:
+          - id: string
+            label: string
+            expiresAt: datetime
+            createdAt: datetime
+    assertions:
+      - "{{body.response.count()}} == 1"
+      - "{{body.response[0].id}} == '{$stored.temp_credential_id}'"
+
+  - name: "Login with original password still works"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/login"
+    send_as: "json"
+    body:
+      device: "e2e_test_device"
+      pseudo: "$var(DEFAULT_USERNAME)"
+      password: "$var(DEFAULT_PASSWORD)"
+    expect:
+      status: 200
+      body:
+        response:
+          token: string
+
+  - name: "Login with the temporary password succeeds"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/login"
+    send_as: "json"
+    body:
+      device: "e2e_test_device"
+      pseudo: "$var(DEFAULT_USERNAME)"
+      password: "e2e_temp_pwd_{$stored.seed_id}"
+    expect:
+      status: 200
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+        response:
+          token: string
+    save:
+      temp_login_token: "{{body.response.token}}"
+    assertions:
+      - "{{body.errorCode}} == 0"
+
+  - name: "Temporary password token is valid - get account info"
+    method: "GET"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/info/{$stored.temp_login_token}"
+    expect:
+      status: 200
+      body:
+        response:
+          accountId: string
+          username: string
+    assertions:
+      - "{{body.response.username}} == '$var(DEFAULT_USERNAME)'"
+
+  - name: "Revoke temporary credential"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/temp-credentials/{$stored.temp_credential_id}/revoke"
+    request_headers:
+      - x-api-token: "{$stored.temp_login_token}"
+    expect:
+      status: 200
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+
+  - name: "List temporary credentials is empty after revoke"
+    method: "GET"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/temp-credentials/list"
+    request_headers:
+      - x-api-token: "{$stored.temp_login_token}"
+    expect:
+      status: 200
+      body:
+        response: []
+    assertions:
+      - "{{body.response.count()}} == 0"
+
+  - name: "Login with revoked temporary password fails"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/login"
+    send_as: "json"
+    body:
+      device: "e2e_test_device"
+      pseudo: "$var(DEFAULT_USERNAME)"
+      password: "e2e_temp_pwd_{$stored.seed_id}"
+    expect:
+      status: 401
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+
+  - name: "Revoking an already-revoked temporary credential returns not found"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/temp-credentials/{$stored.temp_credential_id}/revoke"
+    request_headers:
+      - x-api-token: "{$stored.temp_login_token}"
+    expect:
+      status: 404
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+
+  - name: "Create an already expired temporary credential"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/temp-credentials/create"
+    request_headers:
+      - x-api-token: "{$stored.temp_login_token}"
+    send_as: "json"
+    body:
+      password: "e2e_expired_pwd_{$stored.seed_id}"
+      label: "e2e expired credential {$stored.seed_id}"
+      expiresAt: "$date(-1)"
+    expect:
+      status: 200
+      body:
+        response:
+          id: string
+    save:
+      expired_credential_id: "{{body.response.id}}"
+
+  - name: "Login with an expired temporary password fails"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/login"
+    send_as: "json"
+    body:
+      device: "e2e_test_device"
+      pseudo: "$var(DEFAULT_USERNAME)"
+      password: "e2e_expired_pwd_{$stored.seed_id}"
+    expect:
+      status: 401
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string
+
+  - name: "Cleanup: revoke expired temporary credential"
+    method: "POST"
+    endpoint: "/api/v1/apiAuth/account/$var(AUTH_PROJECT_NAME)/temp-credentials/{$stored.expired_credential_id}/revoke"
+    request_headers:
+      - x-api-token: "{$stored.temp_login_token}"
+    expect:
+      status: 200
+      body:
+        errorCode: number
+        errorCodeStr: string
+        message: string

{sefrone_api_e2e-1.2.5 → sefrone_api_e2e-1.2.6}/sefrone_api_e2e.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sefrone_api_e2e
-Version: 1.2.5
+Version: 1.2.6
 Summary: A Python package to provide e2e testing helpers for sefrone API projects
 Home-page: https://bitbucket.org/sefrone/sefrone_pypi
 Author: Sefrone

{sefrone_api_e2e-1.2.5 → sefrone_api_e2e-1.2.6}/sefrone_api_e2e.egg-info/SOURCES.txt

@@ -23,4 +23,5 @@ sefrone_api_e2e/e2e/Scenarios/Auth/3_admin_account_endpoints.yaml
 sefrone_api_e2e/e2e/Scenarios/Auth/4_workspace_endpoints.yaml
 sefrone_api_e2e/e2e/Scenarios/Auth/5_apikey_endpoints.yaml
 sefrone_api_e2e/e2e/Scenarios/Auth/6_project_endpoints.yaml
-sefrone_api_e2e/e2e/Scenarios/Auth/7_email_2fa_flow.yaml
+sefrone_api_e2e/e2e/Scenarios/Auth/7_email_2fa_flow.yaml
+sefrone_api_e2e/e2e/Scenarios/Auth/8_temporary_passwords_flow.yaml

{sefrone_api_e2e-1.2.5 → sefrone_api_e2e-1.2.6}/setup.py

@@ -5,7 +5,7 @@ with open("README.md", "r", encoding="utf-8") as fh:
 
 setup(
     name="sefrone_api_e2e",
-    version="1.2.5",
+    version="1.2.6",
     author="Sefrone",
     author_email="contact@sefrone.com",
     description="A Python package to provide e2e testing helpers for sefrone API projects",