privatebin-mirror/js/test/Prompt.js

'use strict';
require('../common');
const fc = require('fast-check');

describe('Prompt', function () {
    describe('requestPassword & getPassword', function () {
        this.timeout(30000);

        it('returns the password fed into the dialog', () => {
            fc.assert(fc.property(
                fc.string(),
                function (password) {
                    password = password.replace(/\r+|\n+/g, '');
                    const clean = globalThis.cleanup('', {url: 'ftp://example.com/?0000000000000000'});
                    document.body.innerHTML = `
                        <div id="passwordmodal" class="modal fade" role="dialog">
                            <div class="modal-dialog">
                                <div class="modal-content">
                                    <div class="modal-body">
                                        <form id="passwordform" role="form">
                                            <div class="form-group">
                                                <input id="passworddecrypt" type="password"
                                                    class="form-control" placeholder="Enter password">
                                            </div>
                                            <button type="submit">Decrypt</button>
                                        </form>
                                    </div>
                                </div>
                            </div>
                        </div>
                        <nav class="navbar navbar-inverse navbar-static-top">
                            <div id="navbar" class="navbar-collapse collapse">
                            <ul class="nav navbar-nav"><li><button id="newbutton" type="button" class="hidden btn btn-warning navbar-btn">
                            <svg width="16" height="16" fill="currentColor" aria-hidden="true"><use href="img/bootstrap-icons.svg#file-earmark"></use></svg> New</button><button id="clonebutton" type="button" class="hidden btn btn-warning navbar-btn">
                            <svg width="16" height="16" fill="currentColor" aria-hidden="true"><use href="img/bootstrap-icons.svg#copy"></use></svg> Clone</button>
                            <button id="rawtextbutton" type="button" class="hidden btn btn-warning navbar-btn">
                            <svg width="16" height="16" fill="currentColor" aria-hidden="true"><use href="img/bootstrap-icons.svg#filetype-txt"></use></svg> Raw text</button>
                            <button id="downloadtextbutton" type="button" class="hidden btn btn-default navbar-btn"></button>
                            <button id="qrcodelink" type="button" data-toggle="modal" data-target="#qrcodemodal" class="hidden btn btn-warning navbar-btn"/>
                            <svg width="16" height="16" fill="currentColor" aria-hidden="true"><use href="img/bootstrap-icons.svg#qr-code"></use></svg> QR code</button></li></ul></div>
                        </nav>
                        <div id="errormessage"></div>
                        <div id="loadingindicator"></div>
                        <div id="status"></div>
                    `;

                    // Initialize the Prompt module to set up event listeners
                    PrivateBin.Alert.init();
                    PrivateBin.TopNav.init();
                    PrivateBin.Prompt.init();
                    PrivateBin.Prompt.requestPassword();

                    // mock request response
                    const originalFetch = globalThis.fetch;
                    globalThis.fetch = function (url) {
                        assert.strictEqual(url, 'ftp://example.com/?pasteid=0000000000000000');
                        return Promise.resolve({
                            ok: true,
                            status: 200,
                            statusText: 'OK',
                            json: function () {
                                return Promise.resolve({});
                            }
                        });
                    };

                    // Simulate user input
                    const passwordInput = document.getElementById('passworddecrypt');
                    passwordInput.value = password;

                    // Simulate form submission to trigger password capture
                    const passwordForm = document.getElementById('passwordform');
                    /** {@type SubmitEvent} */
                    const submitEvent = new Event('submit', { bubbles: true, cancelable: true });
                    passwordForm.dispatchEvent(submitEvent);

                    // Verify that getPassword returns the submitted password
                    const result = PrivateBin.Prompt.getPassword();
                    globalThis.fetch = originalFetch;
                    clean();
                    return result === password;
                }
            ));
        });
    });

    describe('modal dialogs', function () {
        afterEach(function () {
            cleanup();
        });

        it('shows the password dialog until a password was submitted', function () {
            const clean = globalThis.cleanup('', {url: 'ftp://example.com/?0000000000000000'});
            document.body.innerHTML =
                '<div id="passwordmodal" tabindex="-1" class="modal" role="dialog" aria-hidden="true">' +
                '<div class="modal-dialog" role="document"><div class="modal-content"><div class="modal-body">' +
                '<form id="passwordform" role="form"><input id="passworddecrypt" type="password" />' +
                '<button type="submit">Decrypt</button></form></div></div></div></div>';
            PrivateBin.Alert.init();
            PrivateBin.TopNav.init();
            PrivateBin.Prompt.init();
            const modal = document.getElementById('passwordmodal');

            PrivateBin.Prompt.requestPassword();
            assert.ok(modal.classList.contains('show'), 'password dialog is shown');
            modal.dispatchEvent(new window.KeyboardEvent('keydown', {key: 'Escape', bubbles: true}));
            assert.ok(modal.classList.contains('show'), 'password dialog can not be closed with Escape');

            const originalFetch = globalThis.fetch;
            globalThis.fetch = function () {
                return Promise.resolve({
                    ok: true,
                    status: 200,
                    statusText: 'OK',
                    json: function () {
                        return Promise.resolve({});
                    }
                });
            };
            try {
                document.getElementById('passworddecrypt').value = 'secret';
                document.getElementById('passwordform').dispatchEvent(
                    new window.Event('submit', {bubbles: true, cancelable: true})
                );
                assert.ok(!modal.classList.contains('show'), 'password dialog is hidden after submitting');
                assert.strictEqual(PrivateBin.Prompt.getPassword(), 'secret');
            } finally {
                globalThis.fetch = originalFetch;
                clean();
            }
        });

        it('asks for confirmation before loading a document', function () {
            document.body.innerHTML =
                '<div id="loadconfirmmodal" tabindex="-1" class="modal" role="dialog" aria-hidden="true">' +
                '<div class="modal-dialog" role="document"><div class="modal-content">' +
                '<div class="modal-header"><button type="button" class="btn-close" data-bs-dismiss="modal"></button></div>' +
                '<div class="modal-body"><button id="loadconfirm-open-now" type="button" data-bs-dismiss="modal">' +
                'Yes, see it</button></div></div></div></div>';
            const modal = document.getElementById('loadconfirmmodal');
            PrivateBin.Prompt.requestLoadConfirmation();
            assert.ok(modal.classList.contains('show'), 'confirmation dialog is shown');
            assert.strictEqual(document.activeElement, document.getElementById('loadconfirm-open-now'));
        });
    });
});