wiki.techinc.nl/tests/api-testing/action/PageProtection.js

'use strict';

const { action, assert, utils } = require( 'api-testing' );

describe( 'Test page protection levels and effectiveness', function () {
	// users
	let admin, wikiUser, eve, root;
	const anonymousUser = action.getAnon();

	const protectedPage = utils.title( 'Protected_' );
	const semiProtectedPage = utils.title( 'SemiProtected_' );
	const testWatchlist = utils.title( 'TestWatchlist_' );

	const testForExpiry = async ( expiry ) => {
		const adminEditToken = await admin.token();
		const token = await wikiUser.token();
		const title = utils.title( 'TestExpiry_' );
		await admin.edit( title, {
			text: 'Test for Expiry'
		} );
		await admin.action( 'protect', {
			title,
			token: adminEditToken,
			expiry: expiry,
			protections: 'edit=sysop'
		}, 'POST' );

		const editPage = await wikiUser.actionError( 'edit', {
			title,
			token,
			text: 'wikiUser editing protected page'
		}, 'POST' );
		return editPage.code;
	};

	const protectWithWatchParam = async ( watchedBefore, watchlistParam, title ) => {
		const watchArgs = {
			title: title,
			token: await eve.token( 'watch' )
		};
		if ( watchedBefore !== 'watched' ) {
			watchArgs.unwatch = true;
		}
		await eve.action( 'watch', watchArgs, 'POST' );
		const token = await eve.token();
		await eve.action( 'protect', {
			title,
			token,
			protections: 'edit=autoconfirmed',
			watchlist: watchlistParam
		}, 'POST' );
		const res = await eve.action( 'query', {
			list: 'watchlistraw',
			wrfromtitle: title,
			wrtotitle: title
		} );
		return res.watchlistraw;
	};

	before( async () => {
		admin = await action.mindy();
		wikiUser = await action.alice();
		eve = action.getAnon();
		await eve.account( 'Eve' );
		root = await action.root();
		await root.addGroups( eve.username, [ 'sysop' ] );

		// Get edit token for admin
		const adminEditToken = await admin.token();

		// Create Protected page
		await admin.edit( protectedPage, { text: 'Protected Page' } );

		// Create SemiProtected page
		await admin.edit( semiProtectedPage, { text: 'Semi Protected Page' } );

		// Create TestWatchlist page
		await eve.edit( testWatchlist, {
			text: 'Protecting this page'
		} );

		// Add edit protections to only allow members of sysop group to edit Protected page
		const addSysopProtection = await admin.action( 'protect', { title: protectedPage, token: adminEditToken, protections: 'edit=sysop' }, 'POST' );
		assert.equal( addSysopProtection.protect.protections[ 0 ].edit, 'sysop' );

		// Add edit protections to only allow auto confirmed users to edit Semi Protected page
		const addAutoConfirmedProtection = await admin.action( 'protect', { title: semiProtectedPage, token: adminEditToken, protections: 'edit=autoconfirmed' }, 'POST' );
		assert.equal( addAutoConfirmedProtection.protect.protections[ 0 ].edit, 'autoconfirmed' );
	} );

	it( 'should allow admin to edit Protected page', async () => {
		await admin.edit( protectedPage, { text: 'Admin editing protected page' } );
	} );

	it( 'should allow admin to edit Semi Protected page', async () => {
		await admin.edit( semiProtectedPage, { text: 'Admin editing semi protected page' } );
	} );

	it( 'should NOT allow autoconfirmed user to edit Protected page', async () => {
		const token = await wikiUser.token();
		const editPage = await wikiUser.actionError( 'edit', {
			title: protectedPage,
			token,
			text: 'wikiUser editing protected page'
		}, 'POST' );

		assert.equal( editPage.code, 'protectedpage' );
	} );

	it( 'should allow autoconfirmed user to edit Semi Protected page', async () => {
		await wikiUser.edit( semiProtectedPage, { text: 'wikiUser editing semi protected page' } );
	} );

	it( 'should NOT allow anonymous user to edit Protected page', async () => {
		const token = await anonymousUser.token();
		const editPage = await anonymousUser.actionError( 'edit', {
			title: protectedPage,
			token,
			text: 'anonymous user editing protected page'
		}, 'POST' );

		assert.equal( editPage.code, 'protectedpage' );
	} );

	it( 'should NOT allow anonymous user to edit Semi Protected page', async () => {
		const token = await anonymousUser.token();
		const editPage = await anonymousUser.actionError( 'edit', {
			title: semiProtectedPage,
			token,
			text: 'anonymous user editing semi protected page'
		}, 'POST' );

		assert.equal( editPage.code, 'protectedpage' );
	} );

	it( 'should apply protections to a page for an indefinite duration', async () => {
		const errorCode = await testForExpiry( 'indefinite' );
		assert.equal( errorCode, 'protectedpage' );
	} );

	it( 'should apply protections to a page for an infinite duration', async () => {
		const errorCode = await testForExpiry( 'infinite' );
		assert.equal( errorCode, 'protectedpage' );
	} );

	it( 'should apply protections to a page for an infinity duration', async () => {
		const errorCode = await testForExpiry( 'infinity' );
		assert.equal( errorCode, 'protectedpage' );
	} );

	it( 'should apply protections to a page for some centuries to come', async () => {
		const errorCode = await testForExpiry( '9999-01-01T00:00:00Z' );
		assert.equal( errorCode, 'protectedpage' );
	} );

	it( 'protect a page for an infinite time to allow only autoconfirmed users to edit it and only sysops to move it', async () => {
		const adminEditToken = await admin.token();
		const token = await anonymousUser.token();
		const title = utils.title( 'TestExpiry_' );
		await admin.edit( title, {
			text: 'Test for Expiry'
		} );
		await admin.action( 'protect', {
			title,
			token: adminEditToken,
			expiry: 'infinite',
			protections: 'edit=autoconfirmed|move=sysop'
		}, 'POST' );

		const editPage = await anonymousUser.actionError( 'edit', {
			title,
			token,
			text: 'wikiUser editing protected page'
		}, 'POST' );

		const movePage = await anonymousUser.actionError( 'move', {
			from: title,
			to: 'Page with new Title',
			token,
			reason: 'to test that the page cannot be moved by a wikiUser'
		}, 'POST' );

		assert.equal( editPage.code, 'protectedpage' );
		assert.equal( movePage.code, 'cantmove-anon' );
	} );

	it( 'should confirm that a user has created and edited pages on users watchlist by default', async () => {
		const list = await eve.action( 'query', {
			list: 'watchlistraw',
			wrfromtitle: testWatchlist,
			wrtotitle: testWatchlist
		} );
		assert.sameTitle( list.watchlistraw[ 0 ].title, testWatchlist );
	} );

	it( 'should test that a user has created and edited pages on users watchlist when the watchlist parameter is set to preferences', async () => {
		const list = await protectWithWatchParam( 'watched', 'preferences', testWatchlist );
		assert.sameTitle( list[ 0 ].title, testWatchlist );
	} );

	it( 'should test that the nochange parameter  does not change the pages on the watchlist', async () => {
		const list = await protectWithWatchParam( 'watched', 'nochange', testWatchlist );
		assert.sameTitle( list[ 0 ].title, testWatchlist );
	} );

	it( 'should remove a page from the users watchlist and check that an empty array is returned if the page is the only page on the users watchlist', async () => {
		const list = await protectWithWatchParam( 'watched', 'unwatch', testWatchlist );
		assert.isEmpty( list );
	} );

	it( 'should add a page to the users watchlist', async () => {
		const list = await protectWithWatchParam( 'unwatched', 'watch', semiProtectedPage );
		assert.sameTitle( list[ 0 ].title, semiProtectedPage );
	} );
} );