zitadel/apps/login/acceptance/tests/idp-generic-oidc.spec.ts

// Note, we should use a provider such as Google to test this, where we know OIDC standard is properly implemented

import test from "@playwright/test";

test("login with Generic OIDC IDP", async ({ page }) => {
  test.skip();
  // Given a Generic OIDC IDP is configured on the organization
  // Given the user has Generic OIDC IDP added as auth method
  // User authenticates with the Generic OIDC IDP
  // User is redirected back to login
  // User is redirected to the app
});

test("login with Generic OIDC IDP - error", async ({ page }) => {
  test.skip();
  // Given the Generic OIDC IDP is configured on the organization
  // Given the user has Generic OIDC IDP added as auth method
  // User is redirected to the Generic OIDC IDP
  // User authenticates with the Generic OIDC IDP and gets an error
  // User is redirected back to login
  // An error is shown to the user "Something went wrong"
});

test("login with Generic OIDC IDP, no user existing - auto register", async ({ page }) => {
  test.skip();
  // Given idp Generic OIDC is configure on the organization as only authencation method
  // Given idp Generic OIDC is configure with account creation alloweed, and automatic creation enabled
  // Given no user exists yet
  // User is automatically redirected to Generic OIDC
  // User authenticates in Generic OIDC
  // User is redirect to ZITADEL login
  // User is created in ZITADEL
  // User is redirected to the app (default redirect url)
});

test("login with Generic OIDC IDP, no user existing - auto register not possible", async ({ page }) => {
  test.skip();
  // Given idp Generic OIDC is configure on the organization as only authencation method
  // Given idp Generic OIDC is configure with account creation alloweed, and automatic creation enabled
  // Given no user exists yet
  // User is automatically redirected to Generic OIDC
  // User authenticates in Generic OIDC
  // User is redirect to ZITADEL login
  // Because of missing informaiton on the user auto creation is not possible
  // User will see the registration page with pre filled user information
  // User fills missing information
  // User clicks register button
  // User is created in ZITADEL
  // User is redirected to the app (default redirect url)
});

test("login with Generic OIDC IDP, no user existing - auto register enabled - manual creation disabled, creation not possible", async ({
  page,
}) => {
  test.skip();
  // Given idp Generic OIDC is configure on the organization as only authencation method
  // Given idp Generic OIDC is configure with account creation not allowed, and automatic creation enabled
  // Given no user exists yet
  // User is automatically redirected to Generic OIDC
  // User authenticates in Generic OIDC
  // User is redirect to ZITADEL login
  // Because of missing informaiton on the user auto creation is not possible
  // Error message is shown, that registration of the user was not possible due to missing information
});

test("login with Generic OIDC IDP, no user linked - auto link", async ({ page }) => {
  test.skip();
  // Given idp Generic OIDC is configure on the organization as only authencation method
  // Given idp Generic OIDC is configure with account linking allowed, and linking set to existing email
  // Given user with email address user@zitadel.com exists
  // User is automatically redirected to Generic OIDC
  // User authenticates in Generic OIDC with user@zitadel.com
  // User is redirect to ZITADEL login
  // User is linked with existing user in ZITADEL
  // User is redirected to the app (default redirect url)
});

test("login with Generic OIDC IDP, no user linked, linking not possible", async ({ page }) => {
  test.skip();
  // Given idp Generic OIDC is configure on the organization as only authencation method
  // Given idp Generic OIDC is configure with manually account linking  not allowed, and linking set to existing email
  // Given user with email address user@zitadel.com doesn't exists
  // User is automatically redirected to Generic OIDC
  // User authenticates in Generic OIDC with user@zitadel.com
  // User is redirect to ZITADEL login
  // User with email address user@zitadel.com can not be found
  // User will get an error message that account linking wasn't possible
});

test("login with Generic OIDC IDP, no user linked, linking successful", async ({ page }) => {
  test.skip();
  // Given idp Generic OIDC is configure on the organization as only authencation method
  // Given idp Generic OIDC is configure with manually account linking allowed, and linking set to existing email
  // Given user with email address user@zitadel.com doesn't exists
  // User is automatically redirected to Generic OIDC
  // User authenticates in Generic OIDC with user@zitadel.com
  // User is redirect to ZITADEL login
  // User with email address user@zitadel.com can not be found
  // User is prompted to link the account manually
  // User is redirected to the app (default redirect url)
});