nocodb/cypress/integration/common/6c_swagger_api.js

import { loginPage } from "../../support/page_objects/navigation"
import { mainPage } from "../../support/page_objects/mainPage"
import { roles } from "../../support/page_objects/projectConstants"

describe(`Swagger API - Test preparation`, () => {
    before(()=> {
        loginPage.loginAndOpenProject('rest', false)
    })

    it("[REST] open project & record swagger URL, AuthToken", () => {
        let authToken = mainPage.getAuthToken()
        cy.url().then( (url) => {
            // retrieve project name from URL & use it to construct Swagger URL
            // URL on homepage: http://localhost:3000/#/nc/externalrest_weUO?type=roles&dbalias=&name=Team%20%26%20Auth%20
            // Swagger URL: http://localhost:8080/nc/externalrest_weUO/db/swagger
            //
            const projectName = url.split("/")[5].split("?")[0];
            let swaggerURL = `http://localhost:8080/nc/${projectName}/db/swagger`

            // exchange information between two tests using a file
            // https://stackoverflow.com/questions/52050657/what-is-the-best-practice-of-pass-states-between-tests-in-cypress
            // 
            cy.writeFile("shared.json", {SWAGGER_URL: swaggerURL, AUTH_TOKEN: authToken})
      })
    })
})

describe(`Swagger page, base verification`, () => {

    // returns swagger button intended for
    //
    const getSwaggerButton = (tag, idx, desc) => {
        return cy.get(`#operations-tag-${tag}`).next().find('.opblock').eq(idx).find(`button:contains(${desc})`)
    }

    let Token

    // basic authentication tag verification
    //
    it("Swagger URL access & basic validation", () => {
        // retrieve information stored in previous IT block
        //
        cy.readFile("shared.json").then((jsonPayload) => {
            let URL = jsonPayload.SWAGGER_URL
            Token = jsonPayload.AUTH_TOKEN

            cy.visit(URL)
            cy.log(Token)

            // validate; API order assumed
            cy.get('#operations-tag-Authentication').next().find('.opblock').should('has.length', 9)
            getSwaggerButton("Authentication", 0, "User login").should('exist')
            getSwaggerButton("Authentication", 1, "User signup").should('exist')
            getSwaggerButton("Authentication", 2, "Password Forgot").should('exist')
            getSwaggerButton("Authentication", 3, "Email validate link").should('exist')
            getSwaggerButton("Authentication", 4, "Validate password reset token").should('exist')
            getSwaggerButton("Authentication", 5, "Password reset").should('exist')
            getSwaggerButton("Authentication", 6, "User details").should('exist')
            getSwaggerButton("Authentication", 7, "Update user details").should('exist')
            getSwaggerButton("Authentication", 8, "Update user details").should('exist')
        })
    })

    it("Authorize success: Valid token", ()=> {
        // authorize button, feed token, click authorize
        cy.get('[class="btn authorize unlocked"]').click()
        cy.get('input').type(Token)
        cy.get('.auth-btn-wrapper > .authorize').click()

        // Response: "Authorized" should exist on DOM
        cy.get('.auth-container').contains('Authorized').should('exist')        
        cy.get('.btn-done').click()

        // Authorize button is LOCKED now
        cy.get('[class="btn authorize locked"]').should('exist')
    })

    it("Execute Authentication (valid token case) > GET: User details API", ()=> {  
        // Auth> User details API  
        getSwaggerButton("Authentication", 6, "User details").click()

        // "Try it out" button, followed by "Execute"
        cy.get('.try-out > .btn').click()
        cy.get('.execute-wrapper > .btn').click()

        // check response: validate email credentials
        cy.get('.highlight-code > .microlight').contains('email').should('exist')
        cy.get('.highlight-code > .microlight').contains(roles.owner.credentials.username).should('exist')

        // reset operations (clear, cancel, windback User details tab)
        cy.get('.btn-clear').click()
        cy.get('.try-out > .btn').click()
        getSwaggerButton("Authentication", 6, "User details").click()
    })

    it("Logout post authorization", ()=> {
        // authorize button, logout
        cy.get('[class="btn authorize locked"]').click()
        cy.get('.auth-btn-wrapper > button:contains("Logout")').click()
        cy.get('.btn-done').click()

        // Authorize button is UNLOCKED now
        cy.get('[class="btn authorize unlocked"]').should('exist')
    })    

    it("Execute Authentication (logout case) > GET: User details API", ()=> {    
        // Auth> User details API  
        getSwaggerButton("Authentication", 6, "User details").click()

        // "Try it out" button, followed by "Execute"
        cy.get('.try-out > .btn').click()
        cy.get('.execute-wrapper > .btn').click()

        // check response: email credentials shouldnt exist. should display 'guest:true'
        cy.get('.highlight-code > .microlight').contains('guest').should('exist')
        cy.get('.highlight-code > .microlight').contains('email').should('not.exist')
        cy.get('.highlight-code > .microlight').contains(roles.owner.credentials.username).should('not.exist')

        // reset operations (clear, cancel, windback User details tab)
        cy.get('.btn-clear').click()
        cy.get('.try-out > .btn').click()
        getSwaggerButton("Authentication", 6, "User details").click()        
    })

    it("Authorize failure: invalid token", ()=> {
        // authorize button, feed *invalid* token, click authorize
        cy.get('[class="btn authorize unlocked"]').click()
        cy.get('input').type('xyz')
        cy.get('.auth-btn-wrapper > .authorize').click()

        // Response: "Authorized" should *not* exist on DOM
        // TBD: cy.get('.auth-container').contains('Authorized').should('not.exist')        
        cy.get('.btn-done').click()

        // Authorize button should be UNLOCKED now
        // TBD: cy.get('[class="btn authorize unlocked"]').should('exist')
    })    

    it("Execute Authentication (invalid token case) > GET: User details API", ()=> {    
        // Auth> User details API  
        getSwaggerButton("Authentication", 6, "User details").click()

        // "Try it out" button, followed by "Execute"
        cy.get('.try-out > .btn').click()
        cy.get('.execute-wrapper > .btn').click()

        // check response: email credentials shouldnt exist. should display 'guest:true'
        cy.get('.highlight-code > .microlight').contains('guest').should('exist')
        cy.get('.highlight-code > .microlight').contains('email').should('not.exist')
        cy.get('.highlight-code > .microlight').contains(roles.owner.credentials.username).should('not.exist')

        // reset operations (clear, cancel, windback User details tab)
        cy.get('.btn-clear').click()
        cy.get('.try-out > .btn').click()
        getSwaggerButton("Authentication", 6, "User details").click()         
    })

    // clean-up created file (shared.json)
    after(() => {
        cy.exec("del shared.json").then(()=> {
            cy.log("file cleaned up!")
        })
    })
})