1 /* eslint-disable @typescript-eslint/no-unused-expressions,@typescript-eslint/require-await */
3 import { expect } from 'chai'
4 import { MockSmtpServer } from '@server/tests/shared'
5 import { HttpStatusCode } from '@shared/models'
11 setAccessTokensToServers,
13 } from '@shared/server-commands'
15 describe('Test users email verification', function () {
16 let server: PeerTubeServer
18 let userAccessToken: string
19 let verificationString: string
20 let expectedEmailsLength = 0
23 password: 'super password'
27 password: 'super password'
29 const emails: object[] = []
31 before(async function () {
34 const port = await MockSmtpServer.Instance.collectEmails(emails)
35 server = await createSingleServer(1, ConfigCommand.getEmailOverrideConfig(port))
37 await setAccessTokensToServers([ server ])
40 it('Should register user and send verification email if verification required', async function () {
43 await server.config.updateExistingSubConfig({
47 requiresApproval: false,
48 requiresEmailVerification: true,
54 await server.registrations.register(user1)
56 await waitJobs(server)
57 expectedEmailsLength++
58 expect(emails).to.have.lengthOf(expectedEmailsLength)
60 const email = emails[expectedEmailsLength - 1]
62 const verificationStringMatches = /verificationString=([a-z0-9]+)/.exec(email['text'])
63 expect(verificationStringMatches).not.to.be.null
65 verificationString = verificationStringMatches[1]
66 expect(verificationString).to.have.length.above(2)
68 const userIdMatches = /userId=([0-9]+)/.exec(email['text'])
69 expect(userIdMatches).not.to.be.null
71 userId = parseInt(userIdMatches[1], 10)
73 const body = await server.users.get({ userId })
74 expect(body.emailVerified).to.be.false
77 it('Should not allow login for user with unverified email', async function () {
78 const { detail } = await server.login.login({ user: user1, expectedStatus: HttpStatusCode.BAD_REQUEST_400 })
79 expect(detail).to.contain('User email is not verified.')
82 it('Should verify the user via email and allow login', async function () {
83 await server.users.verifyEmail({ userId, verificationString })
85 const body = await server.login.login({ user: user1 })
86 userAccessToken = body.access_token
88 const user = await server.users.get({ userId })
89 expect(user.emailVerified).to.be.true
92 it('Should be able to change the user email', async function () {
95 let updateVerificationString: string
98 await server.users.updateMe({
99 token: userAccessToken,
100 email: 'updated@example.com',
101 currentPassword: user1.password
104 await waitJobs(server)
105 expectedEmailsLength++
106 expect(emails).to.have.lengthOf(expectedEmailsLength)
108 const email = emails[expectedEmailsLength - 1]
110 const verificationStringMatches = /verificationString=([a-z0-9]+)/.exec(email['text'])
111 updateVerificationString = verificationStringMatches[1]
115 const me = await server.users.getMyInfo({ token: userAccessToken })
116 expect(me.email).to.equal('user_1@example.com')
117 expect(me.pendingEmail).to.equal('updated@example.com')
121 await server.users.verifyEmail({ userId, verificationString: updateVerificationString, isPendingEmail: true })
123 const me = await server.users.getMyInfo({ token: userAccessToken })
124 expect(me.email).to.equal('updated@example.com')
125 expect(me.pendingEmail).to.be.null
129 it('Should register user not requiring email verification if setting not enabled', async function () {
131 await server.config.updateExistingSubConfig({
134 requiresEmailVerification: false
139 await server.registrations.register(user2)
141 await waitJobs(server)
142 expect(emails).to.have.lengthOf(expectedEmailsLength)
144 const accessToken = await server.login.getAccessToken(user2)
146 const user = await server.users.getMyInfo({ token: accessToken })
147 expect(user.emailVerified).to.be.null
150 it('Should allow login for user with unverified email when setting later enabled', async function () {
151 await server.config.updateCustomSubConfig({
154 requiresEmailVerification: true
159 await server.login.getAccessToken(user2)
162 after(async function () {
163 MockSmtpServer.Instance.kill()
165 await cleanupTests([ server ])