Add E2E connection string login tests for SQL, Gremlin, and Tables

2026-09-19 17:12:47 +01:00 · 2026-08-12 16:42:11 -04:00
parent f447974f0a
commit cd1b8da36e
3 changed files with 270 additions and 0 deletions
@@ -0,0 +1,91 @@
+import { expect, test } from "@playwright/test";
+
+import { DataExplorer, getAccountName, ONE_MINUTE_MS, resourceGroupName, TestAccount } from "../fx";
+import { createTestSQLContainer, TestContainerContext } from "../testData";
+
+const nosqlAccountRbacToken = process.env.NOSQL_TESTACCOUNT_TOKEN ?? "";
+const documentId = "testdoc1";
+
+test.describe("SQL account using connection string login", () => {
+  let context: TestContainerContext = null!;
+
+  test.beforeAll("Seed Test Database", async () => {
+    if (nosqlAccountRbacToken.length > 0) {
+      return;
+    }
+    context = await createTestSQLContainer({ partitionKey: "/id" });
+    await context.container.items.upsert({ id: documentId });
+  });
+
+  test.afterAll("Delete Test Database", async () => {
+    await context?.dispose();
+  });
+
+  test("reads a document after connection string login", async ({ page }) => {
+    // Connection string (account key) login is not supported when local auth is disabled for data plane RBAC.
+    test.skip(nosqlAccountRbacToken.length > 0);
+
+    const accountName = getAccountName(TestAccount.SQL);
+    const account = await context.armClient.databaseAccounts.get(resourceGroupName, accountName);
+    const keys = await context.armClient.databaseAccounts.listKeys(resourceGroupName, accountName);
+
+    // SQL signs data-plane requests client-side with the account key, so no encrypted token is issued.
+    const connectionString = `AccountEndpoint=${account.documentEndpoint};AccountKey=${keys.primaryMasterKey};`;
+
+    await page.goto("https://localhost:1234/hostedExplorer.html");
+    const switchConnectionLink = page.getByTestId("Link:SwitchConnectionType");
+    await switchConnectionLink.waitFor();
+    await switchConnectionLink.click();
+    await page.getByPlaceholder("Please enter a connection string").fill(connectionString);
+    await page.getByRole("button", { name: "Connect" }).click();
+
+    const explorer = await DataExplorer.waitForExplorer(page);
+    const collectionNode = await explorer.waitForContainerNode(context.database.id, context.container.id);
+    await expect(collectionNode.element).toBeAttached();
+    await collectionNode.expand();
+
+    // Open the Items node to load the Documents tab and read the seeded document through the data plane.
+    const itemsNode = await explorer.waitForContainerItemsNode(context.database.id, context.container.id);
+    await itemsNode.element.click();
+
+    const documentsTab = explorer.documentsTab("tab0");
+    await documentsTab.documentsFilter.waitFor();
+    await documentsTab.documentsListPane.waitFor();
+    await expect(documentsTab.resultsEditor.locator).toBeAttached({ timeout: ONE_MINUTE_MS });
+
+    const documentRow = documentsTab.documentsListPane.getByText(documentId, { exact: true }).nth(0);
+    await documentRow.waitFor();
+    await documentRow.click();
+    await expect(documentsTab.resultsEditor.locator).toBeAttached({ timeout: ONE_MINUTE_MS });
+
+    const resultText = await documentsTab.resultsEditor.text();
+    expect(resultText).not.toBeNull();
+    const resultData = JSON.parse(resultText!);
+    expect(resultData?.id).toEqual(documentId);
+  });
+
+  test("shows an error when the connection string has the wrong account key", async ({ page }) => {
+    // Connection string (account key) login is not supported when local auth is disabled for data plane RBAC.
+    test.skip(nosqlAccountRbacToken.length > 0);
+
+    const accountName = getAccountName(TestAccount.SQL);
+    const account = await context.armClient.databaseAccounts.get(resourceGroupName, accountName);
+
+    // A well-formed but incorrect base64 account key: the endpoint is valid, so the Cosmos client reaches
+    // the account but the data-plane request is rejected with 401 Unauthorized.
+    const wrongKey = Buffer.alloc(64).toString("base64");
+    const connectionString = `AccountEndpoint=${account.documentEndpoint};AccountKey=${wrongKey};`;
+
+    await page.goto("https://localhost:1234/hostedExplorer.html");
+    const switchConnectionLink = page.getByTestId("Link:SwitchConnectionType");
+    await switchConnectionLink.waitFor();
+    await switchConnectionLink.click();
+    await page.getByPlaceholder("Please enter a connection string").fill(connectionString);
+    await page.getByRole("button", { name: "Connect" }).click();
+
+    // The connect form stays visible and surfaces the connectivity error instead of opening the explorer.
+    await expect(page.locator(".errorDetails")).toContainText("Unable to connect to the account", {
+      timeout: ONE_MINUTE_MS,
+    });
+  });
+});