1 files changed, 218 insertions, 0 deletions
diff --git a/toolkit/components/aboutwebauthn/tests/browser/browser_aboutwebauthn_pin.js b/toolkit/components/aboutwebauthn/tests/browser/browser_aboutwebauthn_pin.js
new file mode 100644
index 0000000000..0849b194a4
--- /dev/null
+++ b/toolkit/components/aboutwebauthn/tests/browser/browser_aboutwebauthn_pin.js
@@ -0,0 +1,218 @@
+/* Any copyright is dedicated to the Public Domain.
+   http://creativecommons.org/publicdomain/zero/1.0/ */
+
+"use strict";
+
+const ABOUT_URL = "about:webauthn";
+
+var doc, tab;
+
+async function send_authinfo_and_open_pin_section(ops) {
+  reset_about_page(doc);
+  send_auth_info_and_check_categories(doc, ops);
+
+  ["credentials-tab-button", "bio-enrollments-tab-button"].forEach(
+    button_id => {
+      let button = doc.getElementById(button_id);
+      is(
+        button.style.display,
+        "none",
+        button_id + " in the sidebar not hidden"
+      );
+    }
+  );
+
+  if (ops.clientPin !== null) {
+    let pin_tab_button = doc.getElementById("pin-tab-button");
+    // Check if PIN section is visible
+    isnot(
+      pin_tab_button.style.display,
+      "none",
+      "PIN button in the sidebar not visible"
+    );
+
+    // Click the section and wait for it to open
+    let pin_section = doc.getElementById("set-change-pin-section");
+    pin_tab_button.click();
+    isnot(pin_section.style.display, "none", "PIN section not visible");
+    is(
+      pin_tab_button.getAttribute("selected"),
+      "true",
+      "PIN section button not selected"
+    );
+  }
+}
+
+add_setup(async function () {
+  info("Starting about:webauthn");
+  tab = await BrowserTestUtils.openNewForegroundTab({
+    gBrowser,
+    opening: "about:webauthn",
+    waitForLoad: true,
+  });
+
+  doc = tab.linkedBrowser.contentDocument;
+});
+
+registerCleanupFunction(async function () {
+  // Close tab.
+  await BrowserTestUtils.removeTab(tab);
+});
+
+add_task(async function pin_not_supported() {
+  // Not setting clientPIN at all should lead to not showing it in the sidebar
+  send_authinfo_and_open_pin_section({ uv: true, clientPin: null });
+  // Check if PIN section is invisible
+  let pin_tab_button = doc.getElementById("pin-tab-button");
+  is(pin_tab_button.style.display, "none", "PIN button in the sidebar visible");
+});
+
+add_task(async function pin_already_set() {
+  send_authinfo_and_open_pin_section({ clientPin: true });
+
+  let set_pin_button = doc.getElementById("set-pin-button");
+  is(set_pin_button.style.display, "none", "Set PIN button visible");
+
+  let change_pin_button = doc.getElementById("change-pin-button");
+  isnot(
+    change_pin_button.style.display,
+    "none",
+    "Change PIN button not visible"
+  );
+
+  let current_pin_div = doc.getElementById("current-pin-div");
+  is(current_pin_div.hidden, false, "Current PIN field not visible");
+
+  // Test that the button is only active if both inputs are set the same
+  let new_pin = doc.getElementById("new-pin");
+  let new_pin_repeat = doc.getElementById("new-pin-repeat");
+  let current_pin = doc.getElementById("current-pin");
+
+  set_text(new_pin, "abcdefg");
+  is(change_pin_button.disabled, true, "Change PIN button not disabled");
+  set_text(new_pin_repeat, "abcde");
+  is(change_pin_button.disabled, true, "Change PIN button not disabled");
+  set_text(new_pin_repeat, "abcdefg");
+  is(change_pin_button.disabled, true, "Change PIN button not disabled");
+  set_text(current_pin, "1234567");
+  is(change_pin_button.disabled, false, "Change PIN button disabled");
+});
+
+add_task(async function pin_not_yet_set() {
+  send_authinfo_and_open_pin_section({ clientPin: false });
+
+  let set_pin_button = doc.getElementById("set-pin-button");
+  isnot(set_pin_button.style.display, "none", "Set PIN button not visible");
+
+  let change_pin_button = doc.getElementById("change-pin-button");
+  is(change_pin_button.style.display, "none", "Change PIN button visible");
+
+  let current_pin_div = doc.getElementById("current-pin-div");
+  is(current_pin_div.hidden, true, "Current PIN field visible");
+
+  // Test that the button is only active if both inputs are set the same
+  let new_pin = doc.getElementById("new-pin");
+  let new_pin_repeat = doc.getElementById("new-pin-repeat");
+
+  set_text(new_pin, "abcdefg");
+  is(set_pin_button.disabled, true, "Set PIN button not disabled");
+  set_text(new_pin_repeat, "abcde");
+  is(set_pin_button.disabled, true, "Set PIN button not disabled");
+  set_text(new_pin_repeat, "abcdefg");
+  is(set_pin_button.disabled, false, "Set PIN button disabled");
+});
+
+add_task(async function pin_switch_back_and_forth() {
+  // This will click the PIN section button
+  send_authinfo_and_open_pin_section({ clientPin: false });
+
+  let pin_tab_button = doc.getElementById("pin-tab-button");
+  let pin_section = doc.getElementById("set-change-pin-section");
+  let info_tab_button = doc.getElementById("info-tab-button");
+  let info_section = doc.getElementById("token-info-section");
+
+  // a11y-tree is racy here, so we have to wait a tick for it to get up to date
+  await TestUtils.waitForTick();
+  // Now click the "info"-button and verify the correct buttons are highlighted
+  info_tab_button.click();
+  // await info_promise;
+  isnot(info_section.style.display, "none", "info section not visible");
+  is(
+    info_tab_button.getAttribute("selected"),
+    "true",
+    "Info tab button not selected"
+  );
+  isnot(
+    pin_tab_button.getAttribute("selected"),
+    "true",
+    "PIN tab button selected"
+  );
+
+  // Click back to the PIN section
+  pin_tab_button.click();
+  isnot(pin_section.style.display, "none", "PIN section not visible");
+  is(
+    pin_tab_button.getAttribute("selected"),
+    "true",
+    "PIN tab button not selected"
+  );
+  isnot(
+    info_tab_button.getAttribute("selected"),
+    "true",
+    "Info button selected"
+  );
+});
+
+add_task(async function invalid_pin() {
+  send_authinfo_and_open_pin_section({ clientPin: true });
+  let pin_tab_button = doc.getElementById("pin-tab-button");
+  // Click the section and wait for it to open
+  pin_tab_button.click();
+  is(
+    pin_tab_button.getAttribute("selected"),
+    "true",
+    "PIN section button not selected"
+  );
+
+  let change_pin_button = doc.getElementById("change-pin-button");
+
+  // Test that the button is only active if both inputs are set the same
+  let new_pin = doc.getElementById("new-pin");
+  let new_pin_repeat = doc.getElementById("new-pin-repeat");
+  let current_pin = doc.getElementById("current-pin");
+
+  // Needed to activate change_pin_button
+  set_text(new_pin, "abcdefg");
+  set_text(new_pin_repeat, "abcdefg");
+  set_text(current_pin, "1234567");
+
+  // This should silently error out since we have no authenticator
+  change_pin_button.click();
+
+  // Now we fake a response from the authenticator, saying the PIN was invalid
+  let pin_required = doc.getElementById("pin-required-section");
+  let msg = JSON.stringify({ type: "pin-required" });
+  Services.obs.notifyObservers(null, "about-webauthn-prompt", msg);
+  isnot(pin_required.style.display, "none", "PIN required dialog not visible");
+
+  let info_tab_button = doc.getElementById("info-tab-button");
+  is(
+    info_tab_button.classList.contains("disabled-category"),
+    true,
+    "Sidebar not disabled"
+  );
+
+  let pin_field = doc.getElementById("pin-required");
+  let send_pin_button = doc.getElementById("send-pin-button");
+
+  set_text(pin_field, "654321");
+  send_pin_button.click();
+
+  is(
+    pin_required.style.display,
+    "none",
+    "PIN required dialog did not disappear"
+  );
+  let pin_section = doc.getElementById("set-change-pin-section");
+  isnot(pin_section.style.display, "none", "PIN section did not reappear");
+});