www-account-creation-oidc-test.mjs

import supertest from 'supertest'
import rdf from 'rdflib'
import ldnode from '../../index.mjs'
import path from 'path'
import { fileURLToPath } from 'url'
import fs from 'fs-extra'
import { rm, read, checkDnsSettings, cleanDir } from '../utils/index.mjs'

const __filename = fileURLToPath(import.meta.url)
const __dirname = path.dirname(__filename)
const $rdf = rdf

// FIXME: #1502
describe('AccountManager (OIDC account creation tests)', function () {
  const port = 7457
  const serverUri = `https://localhost:${port}`
  const host = `localhost:${port}`
  const root = path.normalize(path.join(__dirname, '../resources/accounts/'))
  const configPath = path.normalize(path.join(__dirname, '../resources/config'))
  const dbPath = path.normalize(path.join(__dirname, '../resources/accounts/db'))

  let ldpHttpsServer

  const ldp = ldnode.createServer({
    root,
    configPath,
    sslKey: path.normalize(path.join(__dirname, '../keys/key.pem')),
    sslCert: path.normalize(path.join(__dirname, '../keys/cert.pem')),
    auth: 'oidc',
    webid: true,
    multiuser: true,
    strictOrigin: true,
    dbPath,
    serverUri,
    enforceToc: true
  })

  before(checkDnsSettings)

  before(function (done) {
    ldpHttpsServer = ldp.listen(port, done)
  })

  after(function () {
    if (ldpHttpsServer) ldpHttpsServer.close()
    fs.removeSync(path.join(dbPath, 'oidc/users/users'))
    cleanDir(path.join(root, 'localhost'))
  })

  const server = supertest(serverUri)

  it('should expect a 404 on GET /accounts', function (done) {
    server.get('/api/accounts')
      .expect(404, done)
  })

  describe('accessing accounts', function () {
    it('should be able to access public file of an account', function (done) {
      const subdomain = supertest('https://tim.' + host)
      subdomain.get('/hello.html')
        .expect(200, done)
    })
    it('should get 404 if root does not exist', function (done) {
      const subdomain = supertest('https://nicola.' + host)
      subdomain.get('/')
        .set('Accept', 'text/turtle')
        .set('Origin', 'http://example.com')
        .expect(404)
        .expect('Access-Control-Allow-Origin', 'http://example.com')
        .expect('Access-Control-Allow-Credentials', 'true')
        .end(function (err, res) {
          done(err)
        })
    })
  })

  describe('creating an account with POST', function () {
    beforeEach(function () {
      rm('accounts/nicola.localhost')
    })

    after(function () {
      rm('accounts/nicola.localhost')
    })

    it('should not create WebID if no username is given', (done) => {
      const subdomain = supertest('https://' + host)
      subdomain.post('/api/accounts/new')
        .send('username=&password=12345')
        .expect(400, done)
    })

    it('should not create WebID if no password is given', (done) => {
      const subdomain = supertest('https://' + host)
      subdomain.post('/api/accounts/new')
        .send('username=nicola&password=')
        .expect(400, done)
    })

    it('should not create a WebID if it already exists', function (done) {
      const subdomain = supertest('https://' + host)
      subdomain.post('/api/accounts/new')
        .send('username=nicola&password=12345&acceptToc=true')
        .expect(302)
        .end((err, res) => {
          if (err) {
            return done(err)
          }
          subdomain.post('/api/accounts/new')
            .send('username=nicola&password=12345&acceptToc=true')
            .expect(400)
            .end((err) => {
              done(err)
            })
        })
    })

    it('should not create WebID if T&C is not accepted', (done) => {
      const subdomain = supertest('https://' + host)
      subdomain.post('/api/accounts/new')
        .send('username=nicola&password=12345&acceptToc=')
        .expect(400, done)
    })

    it('should create the default folders', function (done) {
      const subdomain = supertest('https://' + host)
      subdomain.post('/api/accounts/new')
        .send('username=nicola&password=12345&acceptToc=true')
        .expect(302)
        .end(function (err) {
          if (err) {
            return done(err)
          }
          const domain = host.split(':')[0]
          const card = read(path.normalize(path.join('accounts/nicola.' + domain,
            'profile/card$.ttl')))
          const cardAcl = read(path.normalize(path.join('accounts/nicola.' + domain,
            'profile/.acl')))
          const prefs = read(path.normalize(path.join('accounts/nicola.' + domain,
            'settings/prefs.ttl')))
          const inboxAcl = read(path.normalize(path.join('accounts/nicola.' + domain,
            'inbox/.acl')))
          const rootMeta = read(path.normalize(path.join('accounts/nicola.' + domain, '.meta')))
          const rootMetaAcl = read(path.normalize(path.join('accounts/nicola.' + domain,
            '.meta.acl')))

          if (domain && card && cardAcl && prefs && inboxAcl && rootMeta &&
            rootMetaAcl) {
            done()
          } else {
            done(new Error('failed to create default files'))
          }
        })
    }).timeout(20000)

    it('should link WebID to the root account', function (done) {
      const domain = supertest('https://' + host)
      domain.post('/api/accounts/new')
        .send('username=nicola&password=12345&acceptToc=true')
        .expect(302)
        .end(function (err) {
          if (err) {
            return done(err)
          }
          const subdomain = supertest('https://nicola.' + host)
          subdomain.get('/.meta')
            .expect(200)
            .end(function (err, data) {
              if (err) {
                return done(err)
              }
              const graph = $rdf.graph()
              $rdf.parse(
                data.text,
                graph,
                'https://nicola.' + host + '/.meta',
                'text/turtle')
              const statements = graph.statementsMatching(
                undefined,
                $rdf.sym('http://www.w3.org/ns/solid/terms#account'),
                undefined)
              if (statements.length === 1) {
                done()
              } else {
                done(new Error('missing link to WebID of account'))
              }
            })
        })
    }).timeout(20000)

    describe('after setting up account', () => {
      beforeEach(done => {
        const subdomain = supertest('https://' + host)
        subdomain.post('/api/accounts/new')
          .send('username=nicola&password=12345&acceptToc=true')
          .end(done)
      })

      it('should create a private settings container', function (done) {
        const subdomain = supertest('https://nicola.' + host)
        subdomain.head('/settings/')
          .expect(401)
          .end(function (err) {
            done(err)
          })
      })

      it('should create a private prefs file in the settings container', function (done) {
        const subdomain = supertest('https://nicola.' + host)
        subdomain.head('/inbox/prefs.ttl')
          .expect(401)
          .end(function (err) {
            done(err)
          })
      })

      it('should create a private inbox container', function (done) {
        const subdomain = supertest('https://nicola.' + host)
        subdomain.head('/inbox/')
          .expect(401)
          .end(function (err) {
            done(err)
          })
      })
    })
  })
})

// FIXME: #1502
describe('Single User signup page', () => {
  const serverUri = 'https://localhost:7457'
  const port = 7457
  let ldpHttpsServer
  const rootDir = path.normalize(path.join(__dirname, '../resources/accounts/single-user/'))
  const configPath = path.normalize(path.join(__dirname, '../resources/config'))
  const ldp = ldnode.createServer({
    port,
    root: rootDir,
    configPath,
    sslKey: path.normalize(path.join(__dirname, '../keys/key.pem')),
    sslCert: path.normalize(path.join(__dirname, '../keys/cert.pem')),
    webid: true,
    multiuser: false,
    strictOrigin: true
  })
  const server = supertest(serverUri)

  before(function (done) {
    fs.removeSync(rootDir)
    ldpHttpsServer = ldp.listen(port, () => server.post('/api/accounts/new')
      .send('username=foo&password=12345&acceptToc=true')
      .end(done))
  })

  after(function () {
    if (ldpHttpsServer) ldpHttpsServer.close()
    fs.removeSync(rootDir)
  })

  it('should return a 406 not acceptable without accept text/html', done => {
    server.get('/')
      .set('accept', 'text/plain')
      .expect(406)
      .end(done)
  })
})

// FIXME: #1502
describe('Signup page where Terms & Conditions are not being enforced', () => {
  const port = 3457
  const host = `localhost:${port}`
  const root = path.normalize(path.join(__dirname, '../resources/accounts/'))
  const configPath = path.normalize(path.join(__dirname, '../resources/config'))
  const dbPath = path.normalize(path.join(__dirname, '../resources/accounts/db'))
  const ldp = ldnode.createServer({
    port,
    root,
    configPath,
    sslKey: path.normalize(path.join(__dirname, '../keys/key.pem')),
    sslCert: path.normalize(path.join(__dirname, '../keys/cert.pem')),
    auth: 'oidc',
    webid: true,
    multiuser: true,
    strictOrigin: true,
    enforceToc: false
  })
  let ldpHttpsServer

  before(function (done) {
    ldpHttpsServer = ldp.listen(port, done)
  })

  after(function () {
    if (ldpHttpsServer) ldpHttpsServer.close()
    fs.removeSync(path.join(dbPath, 'oidc/users/users'))
    cleanDir(path.join(root, 'localhost'))
    rm('accounts/nicola.localhost')
  })

  beforeEach(function () {
    rm('accounts/nicola.localhost')
  })

  it('should not enforce T&C upon creating account', function (done) {
    const subdomain = supertest('https://' + host)
    subdomain.post('/api/accounts/new')
      .send('username=nicola&password=12345')
      .expect(302, done)
  })
})