Manual integration tests

Tests

(A start. More detail is needed)

Registration

1. Invalid registration
   1. Bad email format
   2. Weak password
   3. Mismatched passwords
2. Valid registration
   1. New email
   2. Previously registered email

Confirmation

1. Click on link in email
2. Paste in token in form
3. Invalid token
4. Previously confirmed token

Login

1. Non-existing account
2. Bad password
3. Unconfirmed account
4. Unconfirmed account with bad password
5. Request password reset

DocumentSet management

1. Import public document set
2. Import private document set
3. Import a document set treating each page as a document
4. Delete imported document set
5. Queue multiple imports
6. Delete NOT_STARTED imports
7. Delete IN_PROGRESS imports
8. Upload csv file
9. Upload csv file with url and id columns
10. Upload csv file with contents column
11. Upload csv file with snippets columns
12. Upload csv file with tags
13. Export csv file with tags in one column
14. Export csv file with tags in multiple columns
15. Share a document set with an existing user
16. Share a document set with non-existing user
17. Register as a user with whom a document set has previously been shared.
18. Stop sharing a document set with a user
19. Stop sharing a document set with a user during cloning.
20. Upload csv in IE9 and Safari
21. Restart csv upload

DocumentSet View

1. Open Nodes
2. Select Nodes
3. View public documents
4. View private documents
5. Add tags to nodes
6. Remove tags from nodes
7. Add tags to documents
8. Remove tags from documents
9. Select tags
10. Rename tags
11. Change tag color
12. Delete tags
13. Rename Nodes
14. Multiple select
15. Keyboard commands (j,k, arrow keys, ctrl-A)

Mixables

1. Multiple concurrent users
   1. Importing document sets
   2. Deleting document sets
   3. Viewing document sets
2. View different document sets in multiple windows
3. View the same document set in different windows
   1. Add tags
   2. Remove tags
4. View the same list of document sets in different windows
   1. Import document sets
   2. Delete document sets

Security

1. View other documentsets and documents via direct http calls
2. Register accounts with improper emails and weak password
3. DoS attack
4. SQL insertion in fields
5. Direct database access
6. Cross scripting
7. Use http
8. All urls lead to login page if not logged in (except /register)

Hosting

1. Redirects to https://www.overviewproject.org
   1. overview-project.org
   2. overview-project.com
   3. overviewproject.com
   4. www variants

Main flow

1. Login
2. Try different queries: Giraffe, Gorilla, Cousin (~800 docs), Sister (~2,000 docs).
   1. There should be progress indication
   2. Document sets should not be viewable before processing is complete
3. Select a document set to view
   1. Expand Nodes
   2. Zoom in and out
   3. Select a document, it should appear in the document view
4. Add tags
   1. Select some nodes
   2. Add tags
   3. Select a subset of tagged documents and remove tags
   4. Reload document set and verify that documents are still tagged
5. Delete the document set
6. Logout

Authentication

1. Try to access URLs without logging in.
   1. Result should be redirect to login page
2. Login and try to access document sets and documents of other users

Stress test