vault/ui/tests/acceptance/wrapped-token-test.js

/**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: BUSL-1.1
 */

import { module, test } from 'qunit';
import { setupApplicationTest } from 'ember-qunit';
import { settled, currentURL, visit } from '@ember/test-helpers';
import { create } from 'ember-cli-page-object';
import { setupMirage } from 'ember-cli-mirage/test-support';
import auth from 'vault/tests/pages/auth';
import consoleClass from 'vault/tests/pages/components/console/ui-panel';

const consoleComponent = create(consoleClass);

const wrappedAuth = async () => {
  await consoleComponent.runCommands(`write -field=token auth/token/create policies=default -wrap-ttl=3m`);
  await settled();
  return consoleComponent.lastLogOutput;
};

const setupWrapping = async () => {
  await auth.logout();
  await settled();
  await auth.visit();
  await settled();
  await auth.tokenInput('root').submit();
  await settled();
  const token = await wrappedAuth();
  await auth.logout();
  await settled();
  return token;
};
module('Acceptance | wrapped_token query param functionality', function (hooks) {
  setupApplicationTest(hooks);
  setupMirage(hooks);

  test('it authenticates you if the query param is present', async function (assert) {
    const token = await setupWrapping();
    await auth.visit({ wrapped_token: token });
    await settled();
    assert.strictEqual(
      currentURL(),
      '/vault/dashboard',
      'authenticates and redirects to home (dashboard page)'
    );
  });

  test('it authenticates when used with the with=token query param', async function (assert) {
    const token = await setupWrapping();
    await auth.visit({ wrapped_token: token, with: 'token' });
    await settled();
    assert.strictEqual(
      currentURL(),
      '/vault/dashboard',
      'authenticates and redirects to home (dashboard page)'
    );
  });

  test('it should authenticate when hitting logout url with wrapped_token when logged out', async function (assert) {
    this.server.post('/sys/wrapping/unwrap', () => {
      return { auth: { client_token: 'root' } };
    });

    await visit(`/vault/logout?wrapped_token=1234`);
    assert.strictEqual(
      currentURL(),
      '/vault/dashboard',
      'authenticates and redirects to home (dashboard page)'
    );
  });
});