Run #339 — DEMO-023

Full log

Read from the S3 bucket (the last 20 KB; the whole file is the Run log link above).

[harness] test=DEMO-023 browser=chromium headed=False timeout=180s
[harness] target: http://127.0.0.1:8000/demo/
[test] [   0.76s] starting DEMO-023
[timing] goto http://127.0.0.1:8000/demo/freight/login/: 183ms
[timing] click #forgot-link: 254ms
[timing] fill #forgot-login: 83ms
[timing] click #forgot-btn: 121ms
[timing] inner_text #forgot-ref: 47ms
[test] [   1.45s] reset requested, reference 1A5F39
[timing] goto http://127.0.0.1:8000/demo/freight/mailbox/?to=driver@acme-freight.example: 97ms
[timing] wait_for_selector #mail-list a.mail-subject:has-text('ref 1A5F39'): 6452ms
[timing] wait for the email: 6550ms
[timing] click #mail-list a.mail-subject:has-text('ref 1A5F39'): 82ms
[timing] wait_for_selector #mail-body a[href*='/login/reset/']: 64ms
[test] [   8.25s] screenshot: 01-the_reset_email.png
[timing] click #mail-body a[href*='/login/reset/']: 91ms
[timing] fill #new-password: 115ms
[timing] fill #confirm-password: 51ms
[timing] click #reset-btn: 135ms
[timing] wait_for_selector #login-btn: 82ms
[timing] choose a new password: 474ms
[timing] fill #username: 25ms
[timing] fill #password: 44ms
[timing] click #login-btn: 378ms
[timing] wait_for_selector #signed-in-user: 61ms
[timing] sign in with the new password: 508ms
[test] [   9.23s] signed in with the new password
[timing] click #sign-out: 121ms
[timing] wait_for_selector #login-btn: 57ms
[timing] goto http://127.0.0.1:8000/demo/freight/mailbox/2/: 59ms
[timing] click #mail-body a[href*='/login/reset/']: 101ms
[timing] wait_for_selector #reset-invalid, #reset-form: 45ms
[timing] follow the same link again: 205ms
[test] [   9.68s] screenshot: 02-the_same_link_a_second_time.png
[timing] inner_text #reset-invalid-why: 14ms
[test] [   9.71s] It has already been used to change the password — each reset link works once.
[test] [   9.71s] PASSED
[harness] security: 0 high, 1 medium, 1 low
[harness] saved trace.zip
[harness] saved video.webm
[harness] result: passed

Security observations what the browser noticed while this ran — not a penetration test

All of these appear together on the Security page.