Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

10.0.9RC2 Smoke Test results #31922

Closed
phil-davis opened this issue Jun 27, 2018 · 7 comments
Closed

10.0.9RC2 Smoke Test results #31922

phil-davis opened this issue Jun 27, 2018 · 7 comments
Assignees
Labels

Comments

@phil-davis
Copy link
Contributor

This is a place to put smoke test results that need to be re-run for 10.0.9RC2

@phil-davis
Copy link
Contributor Author

phil-davis commented Jun 27, 2018

App password tests

using 10.0.9RC2

Requirements

  • An Android device with a current ownCloud android app installed - 2.7.0 was used
  • An iOS device with a current ownCloud iOS app installed - 3.7.5 was used
  • On both devices, have some files available to upload (e.g. take photos)
  • ownCloud server running on a (local) network (not just on localhost)

Common Test Setup

  1. Create an ordinary user "test123" with some password "abc123"
  2. Create other users and groups so sharing can be done. Make the names >=4 chars to avoid hassle with min search matching.
  3. In config.php set 'token_auth_enforced' => false, (or remove it completely)
  4. In a browser, login as user "test123", go to Settings, Personal, Security. Scroll down to App Passwords
  5. Enter "my-android" in App name and press "Create new app password". Record the generated app password.
  6. Enter "my-ios" in App name and press "Create new app password". Record the generated app password.
  7. On the Android device, open the ownCloud app. Connect to the address of the server.
  8. For username, enter "test123", for password enter the "my-android" app password.
  9. On the iOS device, open the ownCloud app. Connect to the address of the server.
  10. For username, enter "test123", for password enter the "my-ios" app password.

Test App Passwords with token_auth_enforced false

Ensure that token_auth_enforced is off.
Perform the tests on both Android and iOS apps and the browser as user "test123".

Test Case Expected Result Android Result iOS Result Related Comment
General Client Functionality
Login to a browser session Browser-based webUI access works
View files The skeleton files are displayed on the client
Download welcome.txt The "Welcome to your ownCloud account!"... text is displayed
Upload a file The uploaded file can be seen in the browser
Create a folder and upload a file in it The file can be seen in the folder in the browser
Receive a new folder and file In the browser, create a new folder with a file in it. The file can be viewed in the client
Delete a file in the client The file is deleted from the browser
Delete a file in the browser The file is gone on the client
Share a folder on the client Look in the browser, the sharing settings are the same as entered in the client
Create a public link for a folder on the client Look in the browser, view and copy the public link, browse to the link and confirm it works
Share a file on the client Look in the browser, the sharing settings are the same as entered in the client
Rename a file on the client The file is renamed in the browser

Test App Passwords with token_auth_enforced true

Logout from the browser
Change token_auth_enforced to true in config.php
Perform the tests on both Android and iOS apps and the browser as user "test123".

Test Case Expected Result Android Result iOS Result Related Comment
General Client Functionality
Login to a browser session Browser-based webUI access works
View files The skeleton files are displayed on the client
Download welcome.txt The "Welcome to your ownCloud account!"... text is displayed
Upload a file The uploaded file can be seen in the browser
Create a folder and upload a file in it The file can be seen in the folder in the browser
Receive a new folder and file In the browser, create a new folder with a file in it. The file can be viewed in the client
Delete a file in the client The file is deleted from the browser
Delete a file in the browser The file is gone on the client
Share a folder on the client Look in the browser, the sharing settings are the same as entered in the client
Create a public link for a folder on the client Look in the browser, view and copy the public link, browse to the link and confirm it works
Share a file on the client Look in the browser, the sharing settings are the same as entered in the client
Rename a file on the client The file is renamed in the browser

Test Using Regular Password with token_auth_enforced true then false

Ensure token_auth_enforced is true in config.php
Remove the account in both Android and iOS apps
Perform the tests on both Android and iOS apps and the browser as user "test123".

Test Case Expected Result Android Result iOS Result Related Comment
General Client Functionality
Login to a browser session Browser-based webUI access works
Connect to the server using the username and password Cannot connect
Change token_auth_enforced to false in config.php
Connect to the server using the username and password Connect succeeds
View files The skeleton files are displayed on the client

Test Deleting App Passwords

Have the account set up using the app passwords in both Android and iOS apps, and in use.
Perform the tests on both Android and iOS apps and the browser as user "test123".

Test Case Expected Result Android Result iOS Result Related Comment
Deleting App Passwords
Login to a browser session and go to settings, personal, security Check that the app password "most recent activity" is within the last few minutes
Delete the app password for the client The App password is no longer listed
Delete any listed sessions for the clients Sessions are gone
Leave the clients for about 10 minutes It seems to take some time for memory of valid session cookies... to go away
On the client, try to upload a file Upload fails, client goes back to asking for password
Android does not (quickly anyway) have its access forgotten - this is not a new issue
On the browser, upload a new file Refresh the client, the new file is not seen

@ownclouders
Copy link
Contributor

GitMate.io thinks possibly related issues are #22485 (test), #22492 (test), #31579 (test), #29842 (skip known to fail tests on 10.0.3), and #30300 (Smoke Test results for 10.0.6).

@paurakhsharma
Copy link
Member

Two-factor TOTP tests

using 10.0.9RC2

Requirements

  • An Android device with a current ownCloud android app installed - 2.7.0 was used
  • An iOS device with a current ownCloud iOS app installed - 3.7.3 was used
  • On both devices, have some files available to upload (e.g. take photos)
  • Install Google Authenticator app on the Android device
  • ownCloud server running on a (local) network (not just on localhost)
  • twofactor_totp app installed and enabled

Common Test Setup

  1. Create an ordinary user "test123" with some password "abc123"
  2. In a browser, login as user "test123", go to Settings, Personal, Security. Scroll down to App Passwords
  3. Enter "my-android" in App name and press "Create new app password". Record the generated app password.
  4. Enter "my-ios" in App name and press "Create new app password". Record the generated app password.
  5. On the Android device, open the ownCloud app. Connect to the address of the server.
  6. Enter username "test123" and ordinary password "abc123".
  7. On the iOS device, open the ownCloud app. Setup the same account.
  8. On both devices, browse the files, upload a file, confirm that they are operational

Tests

Ensure that token_auth_enforced is false or removed from config.php.

Test Case Expected Result Browser or Android Result iOS Result Related Comment
Login to a browser session as "test123" Browser-based webUI access works
In Settings, Personal, Security activate TOTP The key and QR code are displayed
In Google Authenticator, scan the QRcode or enter the key The app starts showing you 6-digit codes
In the browser, enter the 6-digit code in "Authentication code" and press "Verify" The code is successfully verified
Logout and login again You are asked for a Time-based One-time Password
Enter the 6-digit code from Google Authenticator Login succeeds
Upload, download some files on the browser It works
Remove the account from the devices Account is removed
On the devices, try to setup the account "test123" again using the ordinary password Password is not valid
On the devices, setup the account "test123" again using the app password Can now browse, download, upload files

@paurakhsharma
Copy link
Member

Other Browser Smoke Tests

using 10.0.9RC2
(during other smoke tests we are typically using Firefox, Chrome and Safari)

Edge

Microsoft Edge 42.17134.1.0
Microsoft EdgeHTML 17.17134
Windows 10

  • Add and manage users and groups (Users page)
  • Create folders, text files
  • Upload 1 file, multiple files
  • Download file or folder
  • Share file/folder and receive share
  • Add tags
  • Add comments
  • Favorite items
  • Delete and restore files
  • Restore versions

No obvious regressions in Edge webUI behavior.

IE11

ie11-about

Windows 10

  • Add and manage users and groups (Users page)
  • Create folders, text files
  • Upload 1 file, multiple files
  • Download file or folder
  • Share file/folder and receive share
  • Add tags
  • Add comments
  • Favorite items
  • Delete and restore files
  • Restore versions

No obvious regressions in IE11 webUI behavior.

@phil-davis
Copy link
Contributor Author

phil-davis commented Jun 29, 2018

LDAP Users and Groups

Open LDAP setup information: https://github.com/owncloud/core/wiki/How-to-test-user_ldap

Test Case Result Related Comment
login as LDAP user into webUI
upload,download,delete files and folders
share with other users and groups
Android client works with LDAP user password
iOS client works with LDAP user password
Android client works with LDAP user and app password
iOS client works with LDAP user and app password
Setting token_auth_enforced forces client to use app password, even for LDAP user
One-time password (TOTP) webUI login sequence works for an LDAP user
Android client works with LDAP user with TOTP and app password
iOS client works with LDAP user with TOTP and app password
basic auth with with username & password on remote.php/dav e.g. curl -X PROPFIND http://localhost/owncloud/remote.php/dav/files/user2/ -u user2:1234
basic auth with with username & password on ocs e.g. curl http://localhost/owncloud/ocs/v2.php/apps/notifications/api/v1/notifications?format=json -u user2:1234
login as LDAP user and app-password into webUI
basic auth with with username & app-password on remote.php/dav e.g. curl -X PROPFIND http://localhost/owncloud/remote.php/dav/files/user2/ -u user2:XXXXX-XXXXX-XXXXX-XXXXX
basic auth with with username & app-password on ocs e.g. curl http://localhost/owncloud/ocs/v2.php/apps/notifications/api/v1/notifications?format=json -u user2:XXXXX-XXXXX-XXXXX-XXXXX

@paurakhsharma
Copy link
Member

Tested with master key encryption with LDAP and local users.

  • Sharing between local users and LDAP user and groups
  • File versions when edited by LDAP and local users
  • Favorites of a file and folders for LDAP and local users.
  • Comments by local and LDAP users
  • Deletion and restoration of a file for local and LDAP users.

@lock
Copy link

lock bot commented Jul 31, 2019

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

@lock lock bot locked as resolved and limited conversation to collaborators Jul 31, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

No branches or pull requests

4 participants