summaryrefslogtreecommitdiffstats
path: root/toolkit/components/passwordmgr/test/mochitest/test_autocomplete_https_upgrade.html
blob: a0a81a8c88a71e29e3eaddee7a45cd72de57cf7b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
<!DOCTYPE HTML>
<html>
<head>
  <meta charset="utf-8">
  <title>Test autocomplete on an HTTPS page using upgraded HTTP logins</title>
  <script src="/tests/SimpleTest/SimpleTest.js"></script>
  <script src="/tests/SimpleTest/EventUtils.js"></script>
  <script type="text/javascript" src="../../../satchel/test/satchel_common.js"></script>
  <script type="text/javascript" src="pwmgr_common.js"></script>
  <link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css" />
</head>
<body>
<p id="display"></p>

<!-- we presumably can't hide the content for this test. -->
<div id="content">
  <iframe></iframe>
</div>

<pre id="test">
<script class="testbody" type="text/javascript">
const originSecure = "https://" + window.location.host;
const originNonSecure = "http://" + window.location.host;
const iframe = document.getElementsByTagName("iframe")[0];
let iframeDoc, hostname;

// Restore the form to the default state.
function restoreForm() {
  return SpecialPowers.spawn(getIframeBrowsingContext(window), [], function() {
    this.content.document.getElementById("form-basic-password").focus();
    this.content.document.getElementById("form-basic-username").value = "";
    this.content.document.getElementById("form-basic-password").value = "";
    this.content.document.getElementById("form-basic-username").focus();
  });
}

const HTTPS_FORM_URL = originSecure + "/tests/toolkit/components/passwordmgr/test/mochitest/form_basic.html";

async function setup(formUrl = HTTPS_FORM_URL) {
  await SpecialPowers.pushPrefEnv({"set": [["signon.schemeUpgrades", true]]});

  let processedPromise = promiseFormsProcessed();
  iframe.src = formUrl;
  await new Promise(resolve => {
    iframe.addEventListener("load", function() {
      resolve();
    }, {once: true});
  });

  await processedPromise;

  hostname = await SpecialPowers.spawn(getIframeBrowsingContext(window), [], function() {
    return this.content.document.documentURIObject.host;
  });
}

add_setup(async () => {
  await setStoredLoginsAsync(
    // We have two actual HTTPS to avoid autofill before the schemeUpgrades pref flips to true.
    [originSecure, originSecure, null, "name", "pass", "uname", "pword"],
    [originSecure, originSecure, null, "name1", "pass1", "uname", "pword"],

    // Same as above but HTTP instead of HTTPS (to test de-duping)
    [originNonSecure, originNonSecure, null, "name1", "pass1", "uname", "pword"],

    // Different HTTP login to upgrade with secure formActionOrigin
    [originNonSecure, originSecure, null, "name2", "passHTTPtoHTTPS", "uname", "pword"]
  );
});

add_task(async function setup_https_frame() {
  await setup(HTTPS_FORM_URL);
});

add_task(async function test_empty_first_entry() {
  // Make sure initial form is empty.
  await checkLoginFormInFrame(getIframeBrowsingContext(window, 0), "form-basic-username", "", "form-basic-password", "");
  // Trigger autocomplete popup
  await restoreForm();
  let popupState = await getPopupState();
  is(popupState.open, false, "Check popup is initially closed");
  let autocompleteItems = await popupBy();
  popupState = await getPopupState();
  is(popupState.selectedIndex, -1, "Check no entries are selected");
  checkAutoCompleteResults(autocompleteItems, ["name", "name1", "name2"], hostname, "initial");

  // Check first entry
  let index0Promise = notifySelectedIndex(0);
  synthesizeKey("KEY_ArrowDown");
  await index0Promise;
  await checkLoginFormInFrame(getIframeBrowsingContext(window, 0), "form-basic-username", "", "form-basic-password", ""); // value shouldn't update
  synthesizeKey("KEY_Enter");
  await promiseFormsProcessedInSameProcess();
  await checkLoginFormInFrame(getIframeBrowsingContext(window, 0), "form-basic-username", "name", "form-basic-password", "pass");
});

add_task(async function test_empty_second_entry() {
  await restoreForm();
  await popupBy();
  synthesizeKey("KEY_ArrowDown"); // first
  synthesizeKey("KEY_ArrowDown"); // second
  synthesizeKey("KEY_Enter");
  await promiseFormsProcessedInSameProcess();
  await checkLoginFormInFrame(getIframeBrowsingContext(window, 0), "form-basic-username", "name1", "form-basic-password", "pass1");
});

add_task(async function test_search() {
  await restoreForm();
  let results = await popupBy(async () => {
    // We need to blur for the autocomplete controller to notice the forced value below.
    await SpecialPowers.spawn(getIframeBrowsingContext(window), [], function() {
      let uname = this.content.document.getElementById("form-basic-username");
      uname.blur();
      uname.value = "name";
      uname.focus();
    });

    sendChar("1");
    synthesizeKey("KEY_ArrowDown"); // open
  });
  checkAutoCompleteResults(results, ["name1"], hostname, "check result deduping for 'name1'");
  synthesizeKey("KEY_ArrowDown"); // first
  synthesizeKey("KEY_Enter");
  await promiseFormsProcessedInSameProcess();
  await checkLoginFormInFrame(getIframeBrowsingContext(window, 0), "form-basic-username", "name1", "form-basic-password", "pass1");

  let popupState = await getPopupState();
  is(popupState.open, false, "Check popup is now closed");
});

add_task(async function test_delete_first_entry() {
  await restoreForm();
  await popupBy();

  let index0Promise = notifySelectedIndex(0);
  synthesizeKey("KEY_ArrowDown");
  await index0Promise;

  let deletionPromise = promiseStorageChanged(["removeLogin"]);
  // On OS X, shift-backspace and shift-delete work, just delete does not.
  // On Win/Linux, shift-backspace does not work, delete and shift-delete do.
  synthesizeKey("KEY_Delete", {shiftKey: true});
  await deletionPromise;
  await checkLoginFormInFrame(getIframeBrowsingContext(window, 0), "form-basic-username", "", "form-basic-password", "");

  let results = await notifyMenuChanged(3, "name1");

  checkAutoCompleteResults(results, ["name1", "name2"], hostname, "two logins should remain after deleting the first");
  let popupState = await getPopupState();
  is(popupState.open, true, "Check popup stays open after deleting");
  synthesizeKey("KEY_Escape");
  popupState = await getPopupState();
  is(popupState.open, false, "Check popup closed upon ESC");
});

add_task(async function test_delete_duplicate_entry() {
  await restoreForm();
  await popupBy();

  let index0Promise = notifySelectedIndex(0);
  synthesizeKey("KEY_ArrowDown");
  await index0Promise;

  let deletionPromise = promiseStorageChanged(["removeLogin"]);
  // On OS X, shift-backspace and shift-delete work, just delete does not.
  // On Win/Linux, shift-backspace does not work, delete and shift-delete do.
  synthesizeKey("KEY_Delete", {shiftKey: true});
  await deletionPromise;
  await checkLoginFormInFrame(getIframeBrowsingContext(window, 0), "form-basic-username", "", "form-basic-password", "");

  is(await LoginManager.countLogins(originNonSecure, originNonSecure, null), 1,
     "Check that the HTTP login remains");
  is(await LoginManager.countLogins(originSecure, originSecure, null), 0,
     "Check that the HTTPS login was deleted");

  // Two menu items should remain as the HTTPS login should have been deleted but
  // the HTTP would remain.
  let results = await notifyMenuChanged(2, "name2");

  checkAutoCompleteResults(results, ["name2"], hostname, "one login should remain after deleting the HTTPS name1");
  let popupState = await getPopupState();
  is(popupState.open, true, "Check popup stays open after deleting");
  synthesizeKey("KEY_Escape");
  popupState = await getPopupState();
  is(popupState.open, false, "Check popup closed upon ESC");
});

</script>
</pre>
</body>
</html>