import { expect, spyOn, test } from 'bun:test';
import { Database } from 'bun:sqlite';
import { mkdtempSync, mkdirSync, realpathSync, rmSync } from 'node:fs';
import * as os from 'node:os';
import path from 'node:path';
import { chromium, type Browser } from 'playwright';
import { generatePickerCode, handleCookiePickerRoute, hasActivePicker } from '../src/cookie-picker-routes';
for (const sameOrigin of [false, true]) {
test(`two real picker windows cannot reset the other ${sameOrigin ? 'same-origin tab' : 'same-host different-port origin'}`, async () => {
const home = mkdtempSync(path.join(os.tmpdir(), 'picker-binding-'));
const profile = path.join(home, '.config/chromium/Default');
mkdirSync(profile, { recursive: true });
expect(realpathSync(profile).startsWith(realpathSync(home) + path.sep)).toBe(true);
const database = new Database(path.join(profile, 'Cookies'));
database.run('CREATE TABLE cookies (host_key TEXT, name TEXT, value TEXT, encrypted_value BLOB, path TEXT, expires_utc INTEGER, is_secure INTEGER, is_httponly INTEGER, has_expires INTEGER, samesite INTEGER)');
database.run('INSERT INTO cookies VALUES (?, ?, ?, ?, ?, 0, 0, 1, 0, 1)', ['127.0.0.1', 'fixture', 'synthetic', Buffer.alloc(0), '/']);
database.close();
const serveTarget = () => Bun.serve({ hostname: '127.0.0.1', port: 0, fetch(request) {
const authenticated = (request.headers.get('cookie') ?? '').split(';').some(value => value.trim() === 'fixture=synthetic');
return new Response(authenticated ? '
Synthetic account
' : 'Not signed in
', {
headers: { 'Content-Type': 'text/html' }, status: authenticated ? 200 : 401,
});
} });
const firstServer = serveTarget();
const secondServer = sameOrigin ? firstServer : serveTarget();
let browser: Browser | undefined;
let picker: ReturnType | undefined;
let homeMock: ReturnType | undefined;
const selector = process.env.GSTACK_COOKIE_AUTH_SELECTOR;
const identity = process.env.GSTACK_COOKIE_AUTH_EXPECTED_IDENTITY;
try {
browser = await chromium.launch({ headless: true });
homeMock = spyOn(os, 'homedir').mockReturnValue(home);
process.env.GSTACK_COOKIE_AUTH_SELECTOR = '#fixture-identity';
process.env.GSTACK_COOKIE_AUTH_EXPECTED_IDENTITY = 'Synthetic account';
const destination = await browser.newContext();
destination.setDefaultTimeout(5_000);
const targetA = await destination.newPage();
const targetB = await destination.newPage();
await targetA.goto(`http://127.0.0.1:${firstServer.port}/a`);
await targetB.goto(`http://127.0.0.1:${secondServer.port}/b`);
for (const target of [targetA, targetB]) {
await target.evaluate(() => { localStorage.setItem('keep', 'preserved'); sessionStorage.setItem('keep', 'preserved'); });
}
const bm = { getActiveSession: () => ({ getPage: () => targetA }), trackCookieImportDomains() {} } as any;
picker = Bun.serve({ hostname: '127.0.0.1', port: 0, fetch: request => handleCookiePickerRoute(new URL(request.url), request, bm) });
const pickerOrigin = `http://127.0.0.1:${picker.port}`;
const client = await browser.newContext();
client.setDefaultTimeout(5_000);
const windowA = await client.newPage();
const windowB = await client.newPage();
const importButton = /^(?:Import|Reimport) 127\.0\.0\.1$/;
const errors: string[] = [];
for (const window of [windowA, windowB]) window.on('pageerror', error => errors.push(error.message));
const open = async (window: typeof windowA, target: typeof targetA) => {
const code = generatePickerCode({ browser: 'Chromium', target: { page: target, url: target.url() } });
await window.goto(pickerOrigin + '/cookie-picker?code=' + code);
await window.getByRole('button', { name: importButton }).waitFor();
await window.locator('#clear-storage').check();
await window.locator('#verify-auth').check();
};
await open(windowA, targetA);
await open(windowB, targetB);
await windowA.getByRole('button', { name: importButton }).click();
await windowA.getByRole('status').filter({ hasText: 'Reopen the picker from the intended page before continuing.' }).waitFor();
for (const target of [targetA, targetB]) {
expect(await target.evaluate(() => [localStorage.getItem('keep'), sessionStorage.getItem('keep')])).toEqual(['preserved', 'preserved']);
}
expect(await destination.cookies()).toEqual([]);
expect(await targetA.locator('#fixture-identity').count()).toBe(0);
expect(await targetB.locator('#fixture-identity').count()).toBe(0);
await windowB.getByRole('button', { name: importButton }).click();
await windowB.getByRole('status').filter({ hasText: 'Authentication verified on the captured target.' }).waitFor();
expect(await targetB.evaluate(() => [localStorage.getItem('keep'), sessionStorage.getItem('keep')])).toEqual([null, null]);
expect(await targetA.evaluate(() => [localStorage.getItem('keep'), sessionStorage.getItem('keep')])).toEqual([sameOrigin ? null : 'preserved', 'preserved']);
expect(await targetB.locator('#fixture-identity').innerText()).toBe('Synthetic account');
expect(await targetA.locator('#fixture-identity').count()).toBe(0);
expect(errors).toEqual([]);
} finally {
homeMock?.mockRestore();
if (selector === undefined) delete process.env.GSTACK_COOKIE_AUTH_SELECTOR;
else process.env.GSTACK_COOKIE_AUTH_SELECTOR = selector;
if (identity === undefined) delete process.env.GSTACK_COOKIE_AUTH_EXPECTED_IDENTITY;
else process.env.GSTACK_COOKIE_AUTH_EXPECTED_IDENTITY = identity;
await browser?.close();
picker?.stop(true);
firstServer.stop(true);
if (!sameOrigin) secondServer.stop(true);
const now = Date.now;
Date.now = () => now() + 3_900_001;
try { hasActivePicker(); } finally { Date.now = now; }
rmSync(home, { recursive: true, force: true });
}
}, 40_000);
}