overleaf/server-ce/test/helpers/login.ts

import { runScript } from './hostAdminClient'

export const DEFAULT_PASSWORD = 'Passw0rd!'

const createdUsers = new Set<string>()

export function resetCreatedUsersCache() {
  createdUsers.clear()
}

export async function createMongoUser({
  email,
  isAdmin = false,
}: {
  email: string
  isAdmin?: boolean
}) {
  const t0 = Math.floor(Date.now() / 1000)
  const { stdout } = await runScript({
    cwd: 'services/web',
    script: 'modules/server-ce-scripts/scripts/create-user.js',
    args: [`--email=${email}`, `--admin=${isAdmin}`],
  })
  const [url] = stdout.match(/http:\/\/.+\/user\/activate\?token=\S+/)!
  const userId = new URL(url, location.origin).searchParams.get('user_id')!
  const signupDate = parseInt(userId.slice(0, 8), 16)
  if (signupDate < t0) {
    return { url, exists: true }
  }
  return { url, exists: false }
}

export function ensureUserExists({
  email,
  password = DEFAULT_PASSWORD,
  isAdmin = false,
}: {
  email: string
  password?: string
  isAdmin?: boolean
}) {
  let url: string
  let exists: boolean
  before(async function () {
    exists = createdUsers.has(email)
    if (exists) return
    ;({ url, exists } = await createMongoUser({ email, isAdmin }))
  })
  before(function () {
    if (exists) return
    activateUser(url, password)
    cy.then(() => {
      createdUsers.add(email)
    })
  })
}

export function login(username: string, password = DEFAULT_PASSWORD) {
  cy.session(
    ['via-login', username, password],
    () => {
      cy.visit('/login')
      cy.get('input[name="email"]').type(username)
      cy.get('input[name="password"]').type(password)
      cy.findByRole('button', { name: 'Login' }).click()
      cy.url().should('contain', '/project')
    },
    {
      cacheAcrossSpecs: true,
      async validate() {
        // Hit a cheap endpoint that is behind AuthenticationController.requireLogin().
        cy.request({ url: '/user/personal_info', followRedirect: false }).then(
          response => {
            expect(response.status).to.equal(200)
          }
        )
      },
    }
  )
}

let activateRateLimitState = { count: 0, reset: 0 }
export function resetActivateUserRateLimit() {
  activateRateLimitState = { count: 0, reset: 0 }
}

function handleActivateUserRateLimit() {
  cy.then(() => {
    activateRateLimitState.count++
    if (activateRateLimitState.reset < Date.now()) {
      activateRateLimitState.reset = Date.now() + 65_000
      activateRateLimitState.count = 1
    } else if (activateRateLimitState.count >= 6) {
      cy.wait(activateRateLimitState.reset - Date.now())
      activateRateLimitState.count = 1
    }
  })
}

export function activateUser(url: string, password = DEFAULT_PASSWORD) {
  handleActivateUserRateLimit()

  cy.session(url, () => {
    cy.visit(url)
    cy.url().then(url => {
      if (url.includes('/login')) return
      cy.url().should('contain', '/user/activate')
      cy.get('input[name="password"]').type(password)
      cy.findByRole('button', { name: 'Activate' }).click()
      cy.url().should('contain', '/project')
    })
  })
}