summaryrefslogtreecommitdiffstats
path: root/browser/components/aboutlogins/tests/browser/browser_breachAlertShowingForAddedLogin.js
blob: a5aef703fa33aac9aed3ec7583d27acfb8d04251 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
/* Any copyright is dedicated to the Public Domain.
 * http://creativecommons.org/publicdomain/zero/1.0/ */

EXPECTED_BREACH = {
  AddedDate: "2018-12-20T23:56:26Z",
  BreachDate: "2018-12-16",
  Domain: "breached.example.com",
  Name: "Breached",
  PwnCount: 1643100,
  DataClasses: ["Email addresses", "Usernames", "Passwords", "IP addresses"],
  _status: "synced",
  id: "047940fe-d2fd-4314-b636-b4a952ee0043",
  last_modified: "1541615610052",
  schema: "1541615609018",
};

add_setup(async function () {
  await BrowserTestUtils.openNewForegroundTab({
    gBrowser,
    url: "about:logins",
  });
  registerCleanupFunction(() => {
    BrowserTestUtils.removeTab(gBrowser.selectedTab);
    Services.logins.removeAllUserFacingLogins();
  });
});

add_task(async function test_added_login_shows_breach_warning() {
  let browser = gBrowser.selectedBrowser;
  await SpecialPowers.spawn(browser, [], async () => {
    let loginList = Cu.waiveXrays(content.document.querySelector("login-list"));
    Assert.equal(
      loginList._loginGuidsSortedOrder.length,
      0,
      "the login list should be empty"
    );
  });

  TEST_LOGIN3 = await addLogin(TEST_LOGIN3);
  await SpecialPowers.spawn(
    browser,
    [TEST_LOGIN3.guid],
    async aTestLogin3Guid => {
      let loginList = Cu.waiveXrays(
        content.document.querySelector("login-list")
      );
      await ContentTaskUtils.waitForCondition(
        () => loginList._loginGuidsSortedOrder.length == 1,
        "waiting for login list count to equal one. count=" +
          loginList._loginGuidsSortedOrder.length
      );
      Assert.equal(
        loginList._loginGuidsSortedOrder.length,
        1,
        "one login should be in the list"
      );
      let breachedLoginListItems;
      await ContentTaskUtils.waitForCondition(() => {
        breachedLoginListItems = loginList._list.querySelectorAll(
          ".login-list-item[data-guid].breached"
        );
        return breachedLoginListItems.length == 1;
      }, "waiting for the login to get marked as breached");
      Assert.equal(
        breachedLoginListItems[0].dataset.guid,
        aTestLogin3Guid,
        "the breached login should be login3"
      );
    }
  );

  info("adding a login that uses the same password as the breached login");
  let vulnerableLogin = new nsLoginInfo(
    "https://2.example.com",
    "https://2.example.com",
    null,
    "user2",
    "pass3",
    "username",
    "password"
  );
  vulnerableLogin = await addLogin(vulnerableLogin);
  await SpecialPowers.spawn(
    browser,
    [[TEST_LOGIN3.guid, vulnerableLogin.guid]],
    async ([aTestLogin3Guid, aVulnerableLoginGuid]) => {
      let loginList = Cu.waiveXrays(
        content.document.querySelector("login-list")
      );
      await ContentTaskUtils.waitForCondition(
        () => loginList._loginGuidsSortedOrder.length == 2,
        "waiting for login list count to equal two. count=" +
          loginList._loginGuidsSortedOrder.length
      );
      Assert.equal(
        loginList._loginGuidsSortedOrder.length,
        2,
        "two logins should be in the list"
      );
      let breachedAndVulnerableLoginListItems;
      await ContentTaskUtils.waitForCondition(() => {
        breachedAndVulnerableLoginListItems = [
          ...loginList._list.querySelectorAll(".breached, .vulnerable"),
        ];
        return breachedAndVulnerableLoginListItems.length == 2;
      }, "waiting for the logins to get marked as breached and vulnerable");
      Assert.ok(
        !!breachedAndVulnerableLoginListItems.find(
          listItem => listItem.dataset.guid == aTestLogin3Guid
        ),
        "the list should include the breached login: " +
          breachedAndVulnerableLoginListItems.map(li => li.dataset.guid)
      );
      Assert.ok(
        !!breachedAndVulnerableLoginListItems.find(
          listItem => listItem.dataset.guid == aVulnerableLoginGuid
        ),
        "the list should include the vulnerable login: " +
          breachedAndVulnerableLoginListItems.map(li => li.dataset.guid)
      );
    }
  );
});