fix(editor): Only prompt for MFA code when email is updated (#15065)

This commit is contained in:
Ricardo Espinoza
2025-05-05 07:59:18 -04:00
committed by GitHub
parent 1d4f63985b
commit aa4607e7b5
2 changed files with 48 additions and 14 deletions

View File

@@ -4,6 +4,7 @@ import { MainSidebar } from './../pages/sidebar/main-sidebar';
import { INSTANCE_OWNER, INSTANCE_ADMIN, BACKEND_BASE_URL } from '../constants';
import { SigninPage } from '../pages';
import { MfaLoginPage } from '../pages/mfa-login';
import { successToast } from '../pages/notifications';
import { PersonalSettingsPage } from '../pages/settings-personal';
const MFA_SECRET = 'KVKFKRCPNZQUYMLXOVYDSQKJKZDTSRLD';
@@ -81,6 +82,38 @@ describe('Two-factor authentication', { disableAutoLogin: true }, () => {
mainSidebar.actions.signout();
});
it('Should prompt for MFA code when email changes', () => {
const { email, password } = user;
signinPage.actions.loginWithEmailAndPassword(email, password);
personalSettingsPage.actions.enableMfa();
personalSettingsPage.actions.updateEmail('newemail@test.com');
const mfaCode = generateOTPToken(user.mfaSecret);
personalSettingsPage.getters.mfaCodeOrMfaRecoveryCodeInput().type(mfaCode);
personalSettingsPage.getters.mfaSaveButton().click();
successToast().should('exist');
mainSidebar.actions.signout();
});
it('Should prompt for MFA recovery code when email changes', () => {
const { email, password } = user;
signinPage.actions.loginWithEmailAndPassword(email, password);
personalSettingsPage.actions.enableMfa();
personalSettingsPage.actions.updateEmail('newemail@test.com');
personalSettingsPage.getters.mfaCodeOrMfaRecoveryCodeInput().type(RECOVERY_CODE);
personalSettingsPage.getters.mfaSaveButton().click();
successToast().should('exist');
mainSidebar.actions.signout();
});
it('Should not prompt for MFA code or recovery code when first name or last name changes', () => {
const { email, password } = user;
signinPage.actions.loginWithEmailAndPassword(email, password);
personalSettingsPage.actions.enableMfa();
personalSettingsPage.actions.updateFirstAndLastName('newFirstName', 'newLastName');
successToast().should('exist');
mainSidebar.actions.signout();
});
it('Should be able to disable MFA in account with recovery code', () => {
const { email, password } = user;
signinPage.actions.loginWithEmailAndPassword(email, password);