first commit

packages/testing/playwright/tests/e2e/auth/admin-smoke.spec.ts

@@ -0,0 +1,21 @@
+import { test, expect } from '../../../fixtures/base';
+
+test.describe(
+	'Admin user',
+	{
+		annotation: [{ type: 'owner', description: 'Identity & Access' }],
+	},
+	() => {
+		test('should see same Settings sub menu items as instance owner', async ({ n8n }) => {
+			await n8n.api.setupTest('signin-only', 'owner');
+			await n8n.settingsPersonal.gotoSettings();
+
+			const ownerMenuItems = await n8n.settingsPersonal.getMenuItems().count();
+
+			await n8n.api.setupTest('signin-only', 'admin');
+			await n8n.settingsPersonal.gotoSettings();
+
+			await expect(n8n.settingsPersonal.getMenuItems()).toHaveCount(ownerMenuItems);
+		});
+	},
+);

packages/testing/playwright/tests/e2e/auth/authenticated.spec.ts

@@ -0,0 +1,22 @@
+import { test, expect } from '../../../fixtures/base';
+
+test.describe('Authentication', {
+	annotation: [
+		{ type: 'owner', description: 'Identity & Access' },
+	],
+}, () => {
+	const testCases = [
+		{ role: 'default', expectedUrl: /\/workflow/, auth: '' },
+		{ role: 'owner', expectedUrl: /\/workflow/, auth: '@auth:owner' },
+		{ role: 'admin', expectedUrl: /\/workflow/, auth: '@auth:admin' },
+		{ role: 'member', expectedUrl: /\/workflow/, auth: '@auth:member' },
+		{ role: 'none', expectedUrl: /\/signin/, auth: '@auth:none' },
+	];
+
+	for (const { role, expectedUrl, auth } of testCases) {
+		test(`${role} authentication ${auth}`, async ({ n8n }) => {
+			await n8n.goHome();
+			await expect(n8n.page).toHaveURL(expectedUrl);
+		});
+	}
+});

packages/testing/playwright/tests/e2e/auth/oidc.spec.ts

@@ -0,0 +1,35 @@
+import { test, expect } from '../../../fixtures/base';
+
+test.use({
+	capability: 'oidc',
+	ignoreHTTPSErrors: true, // Keycloak uses self-signed certs
+});
+
+test.describe('OIDC Authentication @capability:oidc', {
+	annotation: [
+		{ type: 'owner', description: 'Identity & Access' },
+	],
+}, () => {
+	test('should configure OIDC and login with Keycloak @auth:owner', async ({
+		n8n,
+		api,
+		services,
+	}) => {
+		const keycloak = services.keycloak;
+		await api.enableFeature('oidc');
+		await n8n.oidcComposer.configureOidc(
+			keycloak.internalDiscoveryUrl,
+			keycloak.clientId,
+			keycloak.clientSecret,
+		);
+
+		await n8n.sideBar.signOutFromWorkflows();
+		await n8n.page.waitForURL('/signin');
+
+		await n8n.signIn.getSsoButton().click();
+		await n8n.keycloakLogin.login(keycloak.testUser.email, keycloak.testUser.password);
+
+		await expect(n8n.page).toHaveURL(/\/(workflow|home)/);
+		await expect(n8n.sideBar.getSettings()).toBeVisible();
+	});
+});

packages/testing/playwright/tests/e2e/auth/password-reset.spec.ts

@@ -0,0 +1,21 @@
+import { test, expect } from '../../../fixtures/base';
+
+test.use({ capability: 'email' });
+
+test('Password reset email is delivered @capability:email', {
+	annotation: [
+		{ type: 'owner', description: 'Identity & Access' },
+	],
+}, async ({ api, services }) => {
+	const ownerEmail = 'nathan@n8n.io';
+	const res = await api.request.post('/rest/forgot-password', {
+		data: { email: ownerEmail },
+	});
+	expect(res.ok()).toBeTruthy();
+
+	const msg = await services.mailpit.waitForMessage({
+		to: ownerEmail,
+		subject: /password reset/i,
+	});
+	expect(msg).toBeTruthy();
+});

packages/testing/playwright/tests/e2e/auth/signin.spec.ts

@@ -0,0 +1,23 @@
+import { INSTANCE_OWNER_CREDENTIALS } from '../../../config/test-users';
+import { test, expect } from '../../../fixtures/base';
+
+test.describe(
+	'Sign In',
+	{
+		annotation: [{ type: 'owner', description: 'Identity & Access' }],
+	},
+	() => {
+		test('should login and logout @auth:none', async ({ n8n }) => {
+			await n8n.goHome();
+
+			await n8n.signIn.goto();
+
+			await n8n.signIn.loginWithEmailAndPassword(
+				INSTANCE_OWNER_CREDENTIALS.email,
+				INSTANCE_OWNER_CREDENTIALS.password,
+			);
+
+			await expect(n8n.sideBar.getSettings()).toBeVisible();
+		});
+	},
+);