From 90ce52164c5884191b7c45c7c1f8274d0b123309 Mon Sep 17 00:00:00 2001
From: David Nguyen <davidngu28@gmail.com>
Date: Wed, 19 Feb 2025 18:41:53 +1100
Subject: [PATCH] chore: add password tests

---
 apps/remix/app/components/forms/password.tsx |  2 +-
 packages/app-tests/e2e/user/password.spec.ts | 94 ++++++++++++++++++++
 2 files changed, 95 insertions(+), 1 deletion(-)
 create mode 100644 packages/app-tests/e2e/user/password.spec.ts

diff --git a/apps/remix/app/components/forms/password.tsx b/apps/remix/app/components/forms/password.tsx
index d397cdcaf..531645211 100644
--- a/apps/remix/app/components/forms/password.tsx
+++ b/apps/remix/app/components/forms/password.tsx
@@ -122,7 +122,7 @@ export const PasswordForm = ({ className }: PasswordFormProps) => {
             render={({ field }) => (
               <FormItem>
                 <FormLabel>
-                  <Trans>Password</Trans>
+                  <Trans>New Password</Trans>
                 </FormLabel>
                 <FormControl>
                   <PasswordInput autoComplete="new-password" {...field} />
diff --git a/packages/app-tests/e2e/user/password.spec.ts b/packages/app-tests/e2e/user/password.spec.ts
new file mode 100644
index 000000000..6713a87a7
--- /dev/null
+++ b/packages/app-tests/e2e/user/password.spec.ts
@@ -0,0 +1,94 @@
+import { type Page, expect, test } from '@playwright/test';
+
+import { prisma } from '@documenso/prisma';
+import { seedUser } from '@documenso/prisma/seed/users';
+
+import { apiSignin, apiSignout } from '../fixtures/authentication';
+
+test.use({ storageState: { cookies: [], origins: [] } });
+
+test('[USER] can reset password via forgot password', async ({ page }: { page: Page }) => {
+  const oldPassword = 'Test123!';
+  const newPassword = 'Test124!';
+
+  const user = await seedUser({
+    password: oldPassword,
+  });
+
+  await page.goto('http://localhost:3000/signin');
+  await page.getByRole('link', { name: 'Forgot your password?' }).click();
+  await page.getByRole('textbox', { name: 'Email' }).fill(user.email);
+  await page.getByRole('button', { name: 'Reset Password' }).click();
+  await expect(page.locator('body')).toContainText('Reset email sent');
+
+  const foundToken = await prisma.passwordResetToken.findFirstOrThrow({
+    where: {
+      userId: user.id,
+    },
+    include: {
+      user: true,
+    },
+  });
+
+  await page.goto(`http://localhost:3000/reset-password/${foundToken.token}`);
+
+  // Assert that password cannot be same as old password.
+  await page.getByRole('textbox', { name: 'Password', exact: true }).fill(oldPassword);
+  await page.getByRole('textbox', { name: 'Repeat Password' }).fill(oldPassword);
+  await page.getByRole('button', { name: 'Reset Password' }).click();
+  await expect(page.locator('body')).toContainText(
+    'Your new password cannot be the same as your old password.',
+  );
+
+  // Assert password reset.
+  await page.getByRole('textbox', { name: 'Password', exact: true }).fill(newPassword);
+  await page.getByRole('textbox', { name: 'Repeat Password' }).fill(newPassword);
+  await page.getByRole('button', { name: 'Reset Password' }).click();
+  await expect(page.locator('body')).toContainText('Your password has been updated successfully.');
+
+  // Assert sign in works.
+  await apiSignin({
+    page,
+    email: user.email,
+    password: newPassword,
+  });
+
+  await page.waitForURL('/documents');
+  await expect(page).toHaveURL('/documents');
+});
+
+test('[USER] can reset password via user settings', async ({ page }: { page: Page }) => {
+  const oldPassword = 'Test123!';
+  const newPassword = 'Test124!';
+
+  const user = await seedUser({
+    password: oldPassword,
+  });
+
+  await apiSignin({
+    page,
+    email: user.email,
+    password: oldPassword,
+    redirectPath: '/settings/security',
+  });
+
+  await page.getByRole('textbox', { name: 'Current password' }).fill(oldPassword);
+  await page.getByRole('textbox', { name: 'New password' }).fill(newPassword);
+  await page.getByRole('textbox', { name: 'Repeat password' }).fill(newPassword);
+  await page.getByRole('button', { name: 'Update password' }).click();
+  await expect(page.locator('body')).toContainText('Password updated');
+
+  await apiSignout({
+    page,
+  });
+
+  // Assert sign in works.
+  await apiSignin({
+    page,
+    email: user.email,
+    password: newPassword,
+  });
+
+  await page.waitForURL('/documents');
+  await expect(page).toHaveURL('/documents');
+});