n8n/cypress/e2e/17-sharing.cy.ts

import * as projects from '../composables/projects';
import { INSTANCE_MEMBERS, INSTANCE_OWNER, INSTANCE_ADMIN, NOTION_NODE_NAME } from '../constants';
import {
	CredentialsModal,
	CredentialsPage,
	NDV,
	WorkflowPage,
	WorkflowSharingModal,
	WorkflowsPage,
} from '../pages';
import { getVisibleDropdown, getVisiblePopper, getVisibleSelect } from '../utils';

/**
 * User U1 - Instance owner
 * User U2 - User, owns C1, W1, W2
 * User U3 - User, owns C2
 *
 * W1 - Workflow owned by User U2, shared with User U3
 * W2 - Workflow owned by User U2
 *
 * C1 - Credential owned by User U2
 * C2 - Credential owned by User U3, shared with User U1 and User U2
 */

const credentialsPage = new CredentialsPage();
const credentialsModal = new CredentialsModal();

const workflowsPage = new WorkflowsPage();
const workflowPage = new WorkflowPage();
const workflowSharingModal = new WorkflowSharingModal();
const ndv = new NDV();

describe('Sharing', { disableAutoLogin: true }, () => {
	before(() => cy.enableFeature('sharing'));

	let workflowW2Url = '';
	it('should create C1, W1, W2, share W1 with U3, as U2', () => {
		cy.signinAsMember(0);

		cy.visit(credentialsPage.url);
		credentialsPage.getters.emptyListCreateCredentialButton().click();
		credentialsModal.getters.newCredentialTypeOption('Notion API').click();
		credentialsModal.getters.newCredentialTypeButton().click();
		credentialsModal.getters.connectionParameter('Internal Integration Secret').type('1234567890');
		credentialsModal.actions.setName('Credential C1');
		credentialsModal.actions.save();
		credentialsModal.actions.close();

		workflowPage.actions.visit();
		workflowPage.actions.setWorkflowName('Workflow W1');
		workflowPage.actions.addInitialNodeToCanvas('Manual Trigger');
		workflowPage.actions.addNodeToCanvas('Notion', true, true);
		ndv.getters.credentialInput().find('input').should('have.value', 'Credential C1');
		ndv.actions.close();

		workflowPage.actions.openShareModal();
		workflowSharingModal.actions.addUser(INSTANCE_MEMBERS[1].email);
		workflowSharingModal.actions.save();
		workflowPage.actions.saveWorkflowOnButtonClick();

		cy.visit(workflowsPage.url);
		workflowsPage.getters.createWorkflowButton().click();
		cy.createFixtureWorkflow('Test_workflow_1.json', 'Workflow W2');
		workflowPage.actions.saveWorkflowOnButtonClick();
		cy.url().then((url) => {
			workflowW2Url = url;
		});
	});

	it('should create C2, share C2 with U1 and U2, as U3', () => {
		cy.signinAsMember(1);

		cy.visit(credentialsPage.url);
		credentialsPage.getters.emptyListCreateCredentialButton().click();
		credentialsModal.getters.newCredentialTypeOption('Airtable Personal Access Token API').click();
		credentialsModal.getters.newCredentialTypeButton().click();
		credentialsModal.getters.connectionParameter('Access Token').type('1234567890');
		credentialsModal.actions.setName('Credential C2');
		credentialsModal.actions.changeTab('Sharing');
		credentialsModal.actions.addUser(INSTANCE_OWNER.email);
		credentialsModal.actions.addUser(INSTANCE_MEMBERS[0].email);
		credentialsModal.actions.save();
		credentialsModal.actions.close();
	});

	it('should open W1, add node using C2 as U3', () => {
		cy.signinAsMember(1);

		cy.visit(workflowsPage.url);
		workflowsPage.getters.workflowCards().should('have.length', 1);
		workflowsPage.getters.workflowCard('Workflow W1').click();
		workflowPage.actions.addNodeToCanvas('Airtable', true, true);
		ndv.getters.credentialInput().find('input').should('have.value', 'Credential C2');
		ndv.actions.close();
		workflowPage.actions.saveWorkflowOnButtonClick();

		workflowPage.actions.openNode('Notion');
		ndv.getters.credentialInput().should('have.value', 'Credential C1').should('be.disabled');
		ndv.actions.close();
	});

	it('should open W1, add node using C2 as U2', () => {
		cy.signinAsMember(0);

		cy.visit(workflowsPage.url);
		workflowsPage.getters.workflowCards().should('have.length', 2);
		workflowsPage.getters.workflowCard('Workflow W1').click();
		workflowPage.actions.addNodeToCanvas('Airtable', true, true);
		ndv.getters.credentialInput().find('input').should('have.value', 'Credential C2');
		ndv.actions.close();
		workflowPage.actions.saveWorkflowOnButtonClick();

		workflowPage.actions.openNode('Notion');
		ndv.getters
			.credentialInput()
			.find('input')
			.should('have.value', 'Credential C1')
			.should('be.enabled');
		ndv.actions.close();
	});

	it('should not have access to W2, as U3', () => {
		cy.signinAsMember(1);

		cy.visit(workflowW2Url);
		cy.waitForLoad();
		cy.wait(1000);
		cy.get('.el-notification').contains('Could not find workflow').should('be.visible');
	});

	it('should have access to W1, W2, as U1', () => {
		cy.signinAsOwner();

		cy.visit(workflowsPage.url);
		workflowsPage.getters.workflowCards().should('have.length', 2);
		workflowsPage.getters.workflowCard('Workflow W1').click();
		workflowPage.actions.openNode('Notion');
		ndv.getters
			.credentialInput()
			.find('input')
			.should('have.value', 'Credential C1')
			.should('be.enabled');
		ndv.actions.close();

		cy.waitForLoad();
		cy.visit(workflowsPage.url);
		workflowsPage.getters.workflowCard('Workflow W2').click('top');
		workflowPage.actions.executeWorkflow();
	});

	it('should automatically test C2 when opened by U2 sharee', () => {
		cy.signinAsMember(0);

		cy.visit(credentialsPage.url);
		credentialsPage.getters.credentialCard('Credential C2').click();
		credentialsModal.getters.testSuccessTag().should('be.visible');
	});

	it('should work for admin role on credentials created by others (also can share it with themselves)', () => {
		cy.signinAsMember(0);

		cy.visit(credentialsPage.url);
		credentialsPage.getters.createCredentialButton().click();
		credentialsModal.getters.newCredentialTypeOption('Notion API').click();
		credentialsModal.getters.newCredentialTypeButton().click({ force: true });
		credentialsModal.getters.connectionParameter('Internal Integration Secret').type('1234567890');
		credentialsModal.actions.setName('Credential C3');
		credentialsModal.actions.save();
		credentialsModal.actions.close();

		cy.signout();
		cy.signinAsAdmin();
		cy.visit(credentialsPage.url);
		credentialsPage.getters.credentialCard('Credential C3').click();
		credentialsModal.getters.testSuccessTag().should('be.visible');
		cy.get('input').should('not.have.length');
		credentialsModal.actions.changeTab('Sharing');
		cy.contains(
			'Sharing a credential allows people to use it in their workflows. They cannot access credential details.',
		).should('be.visible');

		credentialsModal.getters.usersSelect().click();
		getVisiblePopper()
			.find('[data-test-id="project-sharing-info"]')
			.filter(':visible')
			.should('have.length', 3)
			.contains(INSTANCE_ADMIN.email)
			.should('have.length', 1);
		getVisibleSelect().contains(INSTANCE_OWNER.email.toLowerCase()).click();

		credentialsModal.actions.addUser(INSTANCE_MEMBERS[1].email);
		credentialsModal.actions.addUser(INSTANCE_ADMIN.email);
		credentialsModal.actions.saveSharing();
		credentialsModal.actions.close();
	});

	it('credentials should work between team and personal projects', () => {
		cy.resetDatabase();
		cy.enableFeature('sharing');
		cy.enableFeature('advancedPermissions');
		cy.enableFeature('projectRole:admin');
		cy.enableFeature('projectRole:editor');
		cy.changeQuota('maxTeamProjects', -1);

		cy.signinAsOwner();
		cy.visit('/');

		projects.createProject('Development');

		projects.getHomeButton().click();
		workflowsPage.getters.newWorkflowButtonCard().click();
		projects.createWorkflow('Test_workflow_1.json', 'Test workflow');

		projects.getHomeButton().click();
		projects.getProjectTabCredentials().click();
		credentialsPage.getters.emptyListCreateCredentialButton().click();
		projects.createCredential('Notion API');

		credentialsPage.getters.credentialCard('Notion API').click();
		credentialsModal.actions.changeTab('Sharing');
		credentialsModal.getters.usersSelect().click();
		getVisibleSelect()
			.find('li')
			.should('have.length', 4)
			.filter(':contains("Development")')
			.should('have.length', 1)
			.click();
		credentialsModal.getters.saveButton().click();
		credentialsModal.getters.saveButton().should('have.text', 'Saved');
		credentialsModal.actions.close();

		projects.getProjectTabWorkflows().click();
		workflowsPage.getters.workflowCardActions('Test workflow').click();
		getVisibleDropdown().find('li').contains('Share').click();

		workflowSharingModal.getters.usersSelect().filter(':visible').click();
		getVisibleSelect().find('li').should('have.length', 3).first().click();
		workflowSharingModal.getters.saveButton().click();

		projects.getMenuItems().first().click();
		workflowsPage.getters.newWorkflowButtonCard().click();
		projects.createWorkflow('Test_workflow_1.json', 'Test workflow 2');
		workflowPage.actions.openShareModal();
		workflowSharingModal.getters.usersSelect().should('not.exist');

		cy.get('body').type('{esc}');

		projects.getMenuItems().first().click();
		projects.getProjectTabCredentials().click();
		credentialsPage.getters.createCredentialButton().click();
		projects.createCredential('Notion API 2', false);
		credentialsModal.actions.changeTab('Sharing');
		credentialsModal.getters.usersSelect().click();
		getVisibleSelect().find('li').should('have.length', 4).first().click();
		credentialsModal.getters.saveButton().click();
		credentialsModal.getters.saveButton().should('have.text', 'Saved');
		credentialsModal.actions.close();

		credentialsPage.getters
			.credentialCards()
			.should('have.length', 2)
			.filter(':contains("Owned by me")')
			.should('have.length', 1);
	});
});

describe('Credential Usage in Cross Shared Workflows', () => {
	beforeEach(() => {
		cy.resetDatabase();
		cy.enableFeature('sharing');
		cy.enableFeature('advancedPermissions');
		cy.enableFeature('projectRole:admin');
		cy.enableFeature('projectRole:editor');
		cy.changeQuota('maxTeamProjects', -1);
		cy.reload();
		cy.signinAsOwner();
		cy.visit(credentialsPage.url);
	});

	it('should only show credentials from the same team project', () => {
		// Create a notion credential in the home project
		credentialsPage.getters.emptyListCreateCredentialButton().click();
		credentialsModal.actions.createNewCredential('Notion API');

		// Create a notion credential in one project
		projects.createProject('Development');
		projects.getProjectTabCredentials().click();
		credentialsPage.getters.emptyListCreateCredentialButton().click();
		credentialsModal.actions.createNewCredential('Notion API');

		// Create a notion credential in another project
		projects.createProject('Test');
		projects.getProjectTabCredentials().click();
		credentialsPage.getters.emptyListCreateCredentialButton().click();
		credentialsModal.actions.createNewCredential('Notion API');
		// Create a workflow with a notion node in the same project
		projects.getProjectTabWorkflows().click();
		workflowsPage.actions.createWorkflowFromCard();
		workflowPage.actions.addNodeToCanvas(NOTION_NODE_NAME, true, true);

		// Only the credential in this project (+ the 'Create new' option) should
		// be in the dropdown
		workflowPage.getters.nodeCredentialsSelect().click();
		getVisibleSelect().find('li').should('have.length', 2);
	});

	it('should only show credentials in their personal project for members', () => {
		// Create a notion credential as the owner
		credentialsPage.getters.emptyListCreateCredentialButton().click();
		credentialsModal.actions.createNewCredential('Notion API');

		// Create another notion credential as the owner, but share it with member
		// 0
		credentialsPage.getters.createCredentialButton().click();
		credentialsModal.actions.createNewCredential('Notion API', false);
		credentialsModal.actions.changeTab('Sharing');
		credentialsModal.actions.addUser(INSTANCE_MEMBERS[0].email);
		credentialsModal.actions.saveSharing();

		// As the member, create a new notion credential and a workflow
		cy.signinAsMember();
		cy.visit(credentialsPage.url);
		credentialsPage.getters.createCredentialButton().click();
		credentialsModal.actions.createNewCredential('Notion API');
		cy.visit(workflowsPage.url);
		workflowsPage.actions.createWorkflowFromCard();
		workflowPage.actions.addNodeToCanvas(NOTION_NODE_NAME, true, true);

		// Only the own credential the shared one (+ the 'Create new' option)
		// should be in the dropdown
		workflowPage.getters.nodeCredentialsSelect().click();
		getVisibleSelect().find('li').should('have.length', 3);
	});

	it('should only show credentials in their personal project for members if the workflow was shared with them', () => {
		const workflowName = 'Test workflow';

		// Create a notion credential as the owner and a workflow that is shared
		// with member 0
		credentialsPage.getters.emptyListCreateCredentialButton().click();
		credentialsModal.actions.createNewCredential('Notion API');
		//cy.visit(workflowsPage.url);
		projects.getProjectTabWorkflows().click();
		workflowsPage.actions.createWorkflowFromCard();
		workflowPage.actions.setWorkflowName(workflowName);
		workflowPage.actions.openShareModal();
		workflowSharingModal.actions.addUser(INSTANCE_MEMBERS[0].email);
		workflowSharingModal.actions.save();

		// As the member, create a new notion credential
		cy.signinAsMember();
		cy.visit(credentialsPage.url);
		credentialsPage.getters.emptyListCreateCredentialButton().click();
		credentialsModal.actions.createNewCredential('Notion API');
		cy.visit(workflowsPage.url);
		workflowsPage.getters.workflowCard(workflowName).click();
		workflowPage.actions.addNodeToCanvas(NOTION_NODE_NAME, true, true);

		// Only the own credential the shared one (+ the 'Create new' option)
		// should be in the dropdown
		workflowPage.getters.nodeCredentialsSelect().click();
		getVisibleSelect().find('li').should('have.length', 2);
	});

	it("should show all credentials from all personal projects the workflow's been shared into for the global owner", () => {
		const workflowName = 'Test workflow';

		// As member 1, create a new notion credential. This should not show up.
		cy.signinAsMember(1);
		cy.visit(credentialsPage.url);
		credentialsPage.getters.emptyListCreateCredentialButton().click();
		credentialsModal.actions.createNewCredential('Notion API');

		// As admin, create a new notion credential. This should show up.
		cy.signinAsAdmin();
		cy.visit(credentialsPage.url);
		credentialsPage.getters.createCredentialButton().click();
		credentialsModal.actions.createNewCredential('Notion API');

		// As member 0, create a new notion credential and a workflow and share it
		// with the global owner and the admin.
		cy.signinAsMember();
		cy.visit(credentialsPage.url);
		credentialsPage.getters.emptyListCreateCredentialButton().click();
		credentialsModal.actions.createNewCredential('Notion API');
		cy.visit(workflowsPage.url);
		workflowsPage.actions.createWorkflowFromCard();
		workflowPage.actions.setWorkflowName(workflowName);
		workflowPage.actions.openShareModal();
		workflowSharingModal.actions.addUser(INSTANCE_OWNER.email);
		workflowSharingModal.actions.addUser(INSTANCE_ADMIN.email);
		workflowSharingModal.actions.save();

		// As the global owner, create a new notion credential and open the shared
		// workflow
		cy.signinAsOwner();
		cy.visit(credentialsPage.url);
		credentialsPage.getters.createCredentialButton().click();
		credentialsModal.actions.createNewCredential('Notion API');
		cy.visit(workflowsPage.url);
		workflowsPage.getters.workflowCard(workflowName).click();
		workflowPage.actions.addNodeToCanvas(NOTION_NODE_NAME, true, true);

		// Only the personal credentials of the workflow owner and the global owner
		// should show up.
		workflowPage.getters.nodeCredentialsSelect().click();
		getVisibleSelect().find('li').should('have.length', 4);
	});

	it('should show all personal credentials if the global owner owns the workflow', () => {
		// As member 0, create a new notion credential.
		cy.signinAsMember();
		cy.visit(credentialsPage.url);
		credentialsPage.getters.emptyListCreateCredentialButton().click();
		credentialsModal.actions.createNewCredential('Notion API');

		// As the global owner, create a workflow and add a notion node
		cy.signinAsOwner();
		cy.visit(workflowsPage.url);
		workflowsPage.actions.createWorkflowFromCard();
		workflowPage.actions.addNodeToCanvas(NOTION_NODE_NAME, true, true);

		// Show all personal credentials
		workflowPage.getters.nodeCredentialsSelect().click();
		getVisibleSelect().find('li').should('have.have.length', 2);
	});
});