Rakseeibra/arrr-erp-test-v2
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix Playwright OTP login and UAT security tests

Browse Source
This commit is contained in:
A R R R Associates
2026-06-28 12:57:42 +05:30
parent 6bf24cf860
commit db56738731
4 changed files with 593 additions and 87 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/vapt-targeted.spec.js
+2 -2
View File
@@ -30,8 +30,8 @@ test('VAPT-TARGET-004 basic XSS payload should not execute in notice case list',
test('VAPT-TARGET-005 OTP brute force does not crash and should throttle/block', async ({ page }) => {
await page.goto('/login');
await fillFirst(page, ['input[name="email"]','input[name="login_id"]','input[type="email"]'], process.env.SYSTEM_ADMIN_EMAIL || 'admin@auditfirm.local');
await fillFirst(page, ['input[name="password"]','input[type="password"]'], process.env.SYSTEM_ADMIN_PASSWORD || 'admin123');
await fillFirst(page, ['input[name="email"]','input[name="login_id"]','input[type="email"]'], process.env.SYSTEM_ADMIN_EMAIL || 'uat.admin@vavalam.com');
await fillFirst(page, ['input[name="password"]','input[type="password"]'], process.env.SYSTEM_ADMIN_PASSWORD || 'Password@123');
await clickFirst(page, ['button[type="submit"]','input[type="submit"]']);
await page.waitForLoadState('domcontentloaded').catch(()=>{});
if (!page.url().includes('/otp')) test.skip(true, 'OTP page not enabled in this environment');