Multichain API E2E Test: wallet_revokeSession

test/e2e/flask/multichain-api/wallet_revokeSession.spec.ts

@@ -0,0 +1,170 @@
+import { strict as assert } from 'assert';
+import {
+  ACCOUNT_1,
+  ACCOUNT_2,
+  largeDelayMs,
+  WINDOW_TITLES,
+  withFixtures,
+} from '../../helpers';
+import { Driver } from '../../webdriver/driver';
+import FixtureBuilder from '../../fixture-builder';
+import {
+  initCreateSessionScopes,
+  DEFAULT_MULTICHAIN_TEST_DAPP_FIXTURE_OPTIONS,
+  openMultichainDappAndConnectWalletWithExternallyConnectable,
+  addAccountInWalletAndAuthorize,
+  getSessionScopes,
+} from './testHelpers';
+
+describe('Initializing a session w/ several scopes and accounts, then calling `wallet_revokeSession`', function () {
+  const GANACHE_SCOPES = ['eip155:1337', 'eip155:1338', 'eip155:1000'];
+  const ACCOUNTS = [ACCOUNT_1, ACCOUNT_2];
+  it('Should return empty object from `wallet_getSession` call', async function () {
+    await withFixtures(
+      {
+        title: this.test?.fullTitle(),
+        fixtures: new FixtureBuilder()
+          .withNetworkControllerTripleGanache()
+          .build(),
+        ...DEFAULT_MULTICHAIN_TEST_DAPP_FIXTURE_OPTIONS,
+      },
+      async ({
+        driver,
+        extensionId,
+      }: {
+        driver: Driver;
+        extensionId: string;
+      }) => {
+        await openMultichainDappAndConnectWalletWithExternallyConnectable(
+          driver,
+          extensionId,
+        );
+        await initCreateSessionScopes(driver, GANACHE_SCOPES, ACCOUNTS);
+        await addAccountInWalletAndAuthorize(driver);
+        await driver.clickElement({ text: 'Connect', tag: 'button' });
+        await driver.delay(largeDelayMs);
+        await driver.switchToWindowWithTitle(WINDOW_TITLES.MultichainTestDApp);
+
+        /**
+         * We verify that scopes are not empty before calling `wallet_revokeSession`
+         */
+        const { sessionScopes } = await getSessionScopes(driver);
+        for (const scope of GANACHE_SCOPES) {
+          assert.notStrictEqual(
+            sessionScopes[scope],
+            undefined,
+            `scope ${scope} should not be empty.`,
+          );
+        }
+
+        await driver.clickElement({
+          text: 'wallet_revokeSession',
+          tag: 'span',
+        });
+
+        const parsedResult = await getSessionScopes(driver);
+        const resultSessionScopes = parsedResult.sessionScopes;
+        assert.deepStrictEqual(
+          resultSessionScopes,
+          {},
+          'Should receive an empty session scope after calling `wallet_getSession`',
+        );
+      },
+    );
+  });
+
+  it('Should throw an error if `wallet_invokeMethod` is called afterwards', async function () {
+    await withFixtures(
+      {
+        title: this.test?.fullTitle(),
+        fixtures: new FixtureBuilder()
+          .withNetworkControllerTripleGanache()
+          .build(),
+        ...DEFAULT_MULTICHAIN_TEST_DAPP_FIXTURE_OPTIONS,
+      },
+      async ({
+        driver,
+        extensionId,
+      }: {
+        driver: Driver;
+        extensionId: string;
+      }) => {
+        await openMultichainDappAndConnectWalletWithExternallyConnectable(
+          driver,
+          extensionId,
+        );
+        const expectedError = {
+          code: 4100,
+          message:
+            'The requested account and/or method has not been authorized by the user.',
+        };
+
+        await initCreateSessionScopes(driver, GANACHE_SCOPES, ACCOUNTS);
+        await addAccountInWalletAndAuthorize(driver);
+        await driver.clickElement({ text: 'Connect', tag: 'button' });
+        await driver.delay(largeDelayMs);
+        await driver.switchToWindowWithTitle(WINDOW_TITLES.MultichainTestDApp);
+
+        await driver.clickElement({
+          text: 'wallet_revokeSession',
+          tag: 'span',
+        });
+
+        for (const scope of GANACHE_SCOPES) {
+          const id = 1999133338649204;
+          const data = JSON.stringify({
+            id,
+            jsonrpc: '2.0',
+            method: 'wallet_invokeMethod',
+            params: {
+              scope,
+              request: {
+                method: 'eth_getBalance',
+                params: [ACCOUNT_1, 'latest'],
+              },
+            },
+          });
+
+          const script = `
+            const port = chrome.runtime.connect('${extensionId}');
+            const data = ${data};
+            const result = new Promise((resolve) => {
+              port.onMessage.addListener((msg) => {
+                if (msg.type !== 'caip-x') {
+                  return;
+                }
+                if (msg.data?.id !== ${id}) {
+                  return;
+                }
+
+                if (msg.data.id || msg.data.error) {
+                  resolve(msg)
+                }
+              })
+            })
+            port.postMessage({ type: 'caip-x', data });
+            return result;`;
+
+          /**
+           * We call `executeScript` to attempt JSON rpc call directly through the injected provider object since when session is revoked,
+           * webapp does not provide UI to make call.
+           */
+          const actualError = await driver
+            .executeScript(script)
+            .then((res) => res.data?.error);
+
+          /**
+           * We make sure it's the expected error by comparing expected error code and message (we ignore `stack` property)
+           */
+          Object.entries(expectedError).forEach(([key, value]) => {
+            assert.deepEqual(
+              value,
+              actualError[key],
+              `calling wallet_invokeMethod should throw an error with ${key} ${value} for scope ${scope}`,
+            );
+          });
+        }
+      },
+    );
+  });
+});