10.0.9RC2 Smoke Test results

[phil-davis]

This is a place to put smoke test results that need to be re-run for 10.0.9RC2

[phil-davis]

App password tests

using 10.0.9RC2

Requirements

• An Android device with a current ownCloud android app installed - 2.7.0 was used
• An iOS device with a current ownCloud iOS app installed - 3.7.5 was used
• On both devices, have some files available to upload (e.g. take photos)
• ownCloud server running on a (local) network (not just on localhost)

Common Test Setup

1. Create an ordinary user "test123" with some password "abc123"
2. Create other users and groups so sharing can be done. Make the names >=4 chars to avoid hassle with min search matching.
3. In config.php set 'token_auth_enforced' => false, (or remove it completely)
4. In a browser, login as user "test123", go to Settings, Personal, Security. Scroll down to App Passwords
5. Enter "my-android" in App name and press "Create new app password". Record the generated app password.
6. Enter "my-ios" in App name and press "Create new app password". Record the generated app password.
7. On the Android device, open the ownCloud app. Connect to the address of the server.
8. For username, enter "test123", for password enter the "my-android" app password.
9. On the iOS device, open the ownCloud app. Connect to the address of the server.
10. For username, enter "test123", for password enter the "my-ios" app password.

Test App Passwords with token_auth_enforced false

Ensure that token_auth_enforced is off.
Perform the tests on both Android and iOS apps and the browser as user "test123".

Test Case	Expected Result	Android Result	iOS Result	Related Comment
General Client Functionality
Login to a browser session	Browser-based webUI access works
View files	The skeleton files are displayed on the client
Download welcome.txt	The "Welcome to your ownCloud account!"... text is displayed
Upload a file	The uploaded file can be seen in the browser
Create a folder and upload a file in it	The file can be seen in the folder in the browser
Receive a new folder and file	In the browser, create a new folder with a file in it. The file can be viewed in the client
Delete a file in the client	The file is deleted from the browser
Delete a file in the browser	The file is gone on the client
Share a folder on the client	Look in the browser, the sharing settings are the same as entered in the client
Create a public link for a folder on the client	Look in the browser, view and copy the public link, browse to the link and confirm it works
Share a file on the client	Look in the browser, the sharing settings are the same as entered in the client
Rename a file on the client	The file is renamed in the browser

Test App Passwords with token_auth_enforced true

Logout from the browser
Change token_auth_enforced to true in config.php
Perform the tests on both Android and iOS apps and the browser as user "test123".

Test Case	Expected Result	Android Result	iOS Result	Related Comment
General Client Functionality
Login to a browser session	Browser-based webUI access works
View files	The skeleton files are displayed on the client
Download welcome.txt	The "Welcome to your ownCloud account!"... text is displayed
Upload a file	The uploaded file can be seen in the browser
Create a folder and upload a file in it	The file can be seen in the folder in the browser
Receive a new folder and file	In the browser, create a new folder with a file in it. The file can be viewed in the client
Delete a file in the client	The file is deleted from the browser
Delete a file in the browser	The file is gone on the client
Share a folder on the client	Look in the browser, the sharing settings are the same as entered in the client
Create a public link for a folder on the client	Look in the browser, view and copy the public link, browse to the link and confirm it works
Share a file on the client	Look in the browser, the sharing settings are the same as entered in the client
Rename a file on the client	The file is renamed in the browser

Test Using Regular Password with token_auth_enforced true then false

Ensure token_auth_enforced is true in config.php
Remove the account in both Android and iOS apps
Perform the tests on both Android and iOS apps and the browser as user "test123".

Test Case	Expected Result	Android Result	iOS Result	Related Comment
General Client Functionality
Login to a browser session	Browser-based webUI access works
Connect to the server using the username and password	Cannot connect
Change token_auth_enforced to false in config.php
Connect to the server using the username and password	Connect succeeds
View files	The skeleton files are displayed on the client

Test Deleting App Passwords

Have the account set up using the app passwords in both Android and iOS apps, and in use.
Perform the tests on both Android and iOS apps and the browser as user "test123".

Test Case	Expected Result	Android Result	iOS Result	Related Comment
Deleting App Passwords
Login to a browser session and go to settings, personal, security	Check that the app password "most recent activity" is within the last few minutes
Delete the app password for the client	The App password is no longer listed
Delete any listed sessions for the clients	Sessions are gone
Leave the clients for about 10 minutes	It seems to take some time for memory of valid session cookies... to go away
On the client, try to upload a file	Upload fails, client goes back to asking for password			Android does not (quickly anyway) have its access forgotten - this is not a new issue
On the browser, upload a new file	Refresh the client, the new file is not seen

[ownclouders]

GitMate.io thinks possibly related issues are #22485 (test), #22492 (test), #31579 (test), #29842 (skip known to fail tests on 10.0.3), and #30300 (Smoke Test results for 10.0.6).

[paurakhsharma]

Two-factor TOTP tests

using 10.0.9RC2

Requirements

• An Android device with a current ownCloud android app installed - 2.7.0 was used
• An iOS device with a current ownCloud iOS app installed - 3.7.3 was used
• On both devices, have some files available to upload (e.g. take photos)
• Install Google Authenticator app on the Android device
• ownCloud server running on a (local) network (not just on localhost)
• twofactor_totp app installed and enabled

Common Test Setup

1. Create an ordinary user "test123" with some password "abc123"
2. In a browser, login as user "test123", go to Settings, Personal, Security. Scroll down to App Passwords
3. Enter "my-android" in App name and press "Create new app password". Record the generated app password.
4. Enter "my-ios" in App name and press "Create new app password". Record the generated app password.
5. On the Android device, open the ownCloud app. Connect to the address of the server.
6. Enter username "test123" and ordinary password "abc123".
7. On the iOS device, open the ownCloud app. Setup the same account.
8. On both devices, browse the files, upload a file, confirm that they are operational

Tests

Ensure that token_auth_enforced is false or removed from config.php.

Test Case	Expected Result	Browser or Android Result	iOS Result	Related Comment
Login to a browser session as "test123"	Browser-based webUI access works
In Settings, Personal, Security activate TOTP	The key and QR code are displayed
In Google Authenticator, scan the QRcode or enter the key	The app starts showing you 6-digit codes
In the browser, enter the 6-digit code in "Authentication code" and press "Verify"	The code is successfully verified
Logout and login again	You are asked for a Time-based One-time Password
Enter the 6-digit code from Google Authenticator	Login succeeds
Upload, download some files on the browser	It works
Remove the account from the devices	Account is removed
On the devices, try to setup the account "test123" again using the ordinary password	Password is not valid
On the devices, setup the account "test123" again using the app password	Can now browse, download, upload files

[paurakhsharma]

Other Browser Smoke Tests

using 10.0.9RC2
(during other smoke tests we are typically using Firefox, Chrome and Safari)

Edge

Microsoft Edge 42.17134.1.0
Microsoft EdgeHTML 17.17134
Windows 10

• Add and manage users and groups (Users page)
• Create folders, text files
• Upload 1 file, multiple files
• Download file or folder
• Share file/folder and receive share
• Add tags
• Add comments
• Favorite items
• Delete and restore files
• Restore versions

No obvious regressions in Edge webUI behavior.

IE11

Windows 10

• Add and manage users and groups (Users page)
• Create folders, text files
• Upload 1 file, multiple files
• Download file or folder
• Share file/folder and receive share
• Add tags
• Add comments
• Favorite items
• Delete and restore files
• Restore versions

No obvious regressions in IE11 webUI behavior.

[phil-davis]

LDAP Users and Groups

Open LDAP setup information: https://github.com/owncloud/core/wiki/How-to-test-user_ldap

Test Case	Result	Related Comment
login as LDAP user into webUI
upload,download,delete files and folders
share with other users and groups
Android client works with LDAP user password
iOS client works with LDAP user password
Android client works with LDAP user and app password
iOS client works with LDAP user and app password
Setting token_auth_enforced forces client to use app password, even for LDAP user
One-time password (TOTP) webUI login sequence works for an LDAP user
Android client works with LDAP user with TOTP and app password
iOS client works with LDAP user with TOTP and app password
basic auth with with username & password on remote.php/dav e.g. curl -X PROPFIND http://localhost/owncloud/remote.php/dav/files/user2/ -u user2:1234
basic auth with with username & password on ocs e.g. curl http://localhost/owncloud/ocs/v2.php/apps/notifications/api/v1/notifications?format=json -u user2:1234
login as LDAP user and app-password into webUI
basic auth with with username & app-password on remote.php/dav e.g. curl -X PROPFIND http://localhost/owncloud/remote.php/dav/files/user2/ -u user2:XXXXX-XXXXX-XXXXX-XXXXX
basic auth with with username & app-password on ocs e.g. curl http://localhost/owncloud/ocs/v2.php/apps/notifications/api/v1/notifications?format=json -u user2:XXXXX-XXXXX-XXXXX-XXXXX

[paurakhsharma]

Tested with master key encryption with LDAP and local users.

• Sharing between local users and LDAP user and groups
• File versions when edited by LDAP and local users
• Favorites of a file and folders for LDAP and local users.
• Comments by local and LDAP users
• Deletion and restoration of a file for local and LDAP users.

[lock]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.