Ufdjrw

I'mt damn frustrated.
I'm a newbi in testing and also in javascript, but i have to write tests for my bachelorthesis.

so that web app I'm testing has a login space, where you can buy different products. I can get two different tokens. the first is about my user Id and the second is about the"shopping cart" (it's not really a shopping cart, cause the buying process is an investment process and the product are real estates)

So Cypress suggests this

 cy.request('POST', 'https://sso.corp.com/auth', username: 'foo', password: 'bar' )
 .then((response) => 
 // pull out the location redirect
 const loc = response.headers['Location']

 // parse out the token from the url (assuming its in there)
 const token = parseOutMyToken(loc)

 // do something with the token that your web application expects
 // likely the same behavior as what your SSO does under the hood
 // assuming it handles query string tokens like this
 cy.visit('http://localhost:8080?token=' + token)

 // if you don't need to work with the token you can sometimes
 // just visit the location header directly
 cy.visit(loc)
 )

I did this:

 it('strategy #1: parse token from HTML', function () 
 // if we cannot change our server code to make it easier
 // to parse out the CSRF token, we can simply use cy.request
 // to fetch the login page, and then parse the HTML contents
 // to find the CSRF token embedded in the page
 cy.request()
 .its('body')
 .then((body) => 
 // we can use Cypress.$ to parse the string body
 // thus enabling us to query into it easily
 const $html = Cypress.$(body)
 const csrf = $html.find('#user_profile__token[name=user_profile[_token]]').val()

 cy.loginByCSRF(csrf)
 .then((resp) => 
 expect(resp.status).to.eq(200)
 expect(resp.body).to.include("<h2>dashboard.html</h2>")
 )
 )
 );

It didn't work out although i found this on a github page.
has anyone of you any idea?

User TokenID: input#user_profile__token[name=user_profile[_token]]

Product Token ID: input#product_filter__token[name=product_filter[_token]]

The task is not only parsing the tokens out but also save them while testing in cypress.

Please help

My code which causes that 401 Error:

import * as LogConst from 'C:\Users\Kristi\Desktop\BATests\tests\cypress\fixtures\Login_Data.json'

describe('Login & Selection of Investment AIF Dr. Peters', function () {

 before(function () 
 cy.visit('https://' + LogConst.server.name + ':' + LogConst.server.password + '@dev.capitalpioneers.de/')
 cy.contains('Login').click();
 cy.url()
 .should('include', '/login'));

 it('logs in', function () 
 cy.get('#email.form-control')
 .type(LogConst.TestUserCostumer.usercos);
 cy.get('#password.form-control')
 .type(LogConst.TestUserCostumer.usercospass);
 cy.contains('Anmelden').click();
 cy.url().shoul('include','/investor');
 );

 it('product selection the Dr. Peters Product', function () 
 cy.contains('Produkt').click();
 cy.url()
 .should('include', '/produkte');


 it('selects Dr. Peters AIF Product', function () 


 cy.contains('Dr. Peters').click();
 cy.url().should('include', '/produkt/hotelimmobilie-aachen/');
 cy.get('#sum_slider[type=range]')
 .invoke('val', 50000)
 .trigger('change')
 );


 it('download nessecary docs', function () 
 cy.get('#ga-btn-invest-now-product-detail-hotelimmobilie-aachen').click();
 cy.contains('Fondsprospekt').click();
 cy.contains('Wesentlichen Anlegerinformationen').click()
 );

 it('sets the right checks', function () 
 cy.get('#pre_check_inGermany').click(force: true);
 cy.get('#pre_check_readDocument1').click(force: true);
 cy.get('#pre_check_readDocument2').click(force: true);
 cy.get('button').contains('Weiter').click();
 );

);

So a real application would never store tokens in the HTML, so I assume that's why you're having trouble.

If your token needs to end up in localStorage, you can try the following

cy.visit(...)
cy.get('input#user_profile__token').then( $el => 
 const token =$el.attr('name')
 // Parse the token if needed, if it's not in the correct format
 window.localStorage.setItem('user_token', token)

)

But again, it doesn't seem clear what you're even trying to do with the token.