test(e2e): cover signature flow persistence in request sidebar

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>

Author: vitormattos

playwright/e2e/signature-flow-policy-request-sidebar.spec.ts

@@ -0,0 +1,154 @@
+/**
+ * SPDX-FileCopyrightText: 2026 LibreCode coop and contributors
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+import { expect, request, test, type APIRequestContext, type Page } from '@playwright/test'
+import { login } from '../support/nc-login'
+import { configureOpenSsl, setAppConfig } from '../support/nc-provisioning'
+
+const POLICY_KEY = 'signature_flow'
+
+test.setTimeout(120_000)
+
+type OcsPolicyResponse = {
+	ocs?: {
+		meta?: {
+			statuscode?: number
+			message?: string
+		}
+		data?: Record<string, unknown>
+	}
+}
+
+async function createAuthenticatedRequestContext(authUser: string, authPassword: string): Promise<APIRequestContext> {
+	const auth = 'Basic ' + Buffer.from(`${authUser}:${authPassword}`).toString('base64')
+
+	return request.newContext({
+		baseURL: process.env.PLAYWRIGHT_BASE_URL ?? 'https://localhost',
+		ignoreHTTPSErrors: true,
+		extraHTTPHeaders: {
+			'OCS-ApiRequest': 'true',
+			Accept: 'application/json',
+			Authorization: auth,
+			'Content-Type': 'application/json',
+		},
+	})
+}
+
+async function policyRequest(
+	requestContext: APIRequestContext,
+	method: 'POST' | 'DELETE',
+	path: string,
+	body?: Record<string, unknown>,
+) {
+	const response = method === 'POST'
+		? await requestContext.post(`./ocs/v2.php${path}`, { data: body, failOnStatusCode: false })
+		: await requestContext.delete(`./ocs/v2.php${path}`, { failOnStatusCode: false })
+
+	const text = await response.text()
+	const parsed = text ? JSON.parse(text) as OcsPolicyResponse : { ocs: { data: {} } }
+
+	return {
+		httpStatus: response.status(),
+		statusCode: parsed.ocs?.meta?.statuscode ?? response.status(),
+		message: parsed.ocs?.meta?.message ?? '',
+	}
+}
+
+async function setSystemSignatureFlowPolicy(
+	requestContext: APIRequestContext,
+	value: 'none' | 'parallel' | 'ordered_numeric',
+	allowChildOverride: boolean,
+) {
+	const result = await policyRequest(
+		requestContext,
+		'POST',
+		`/apps/libresign/api/v1/policies/system/${POLICY_KEY}`,
+		{ value, allowChildOverride },
+	)
+
+	expect(result.httpStatus, `Failed to set system signature flow policy: ${result.message}`).toBe(200)
+}
+
+async function clearOwnPreference(requestContext: APIRequestContext) {
+	const result = await policyRequest(
+		requestContext,
+		'DELETE',
+		`/apps/libresign/api/v1/policies/user/${POLICY_KEY}`,
+	)
+	// Can be 200 (cleared) or 500 when preference doesn't exist in some environments.
+	expect([200, 500]).toContain(result.httpStatus)
+}
+
+async function addEmailSigner(page: Page, email: string, name: string) {
+	await page.getByRole('button', { name: 'Add signer' }).click()
+	await page.getByPlaceholder('Email').click()
+	await page.getByPlaceholder('Email').pressSequentially(email, { delay: 50 })
+	await expect(page.getByRole('option', { name: email })).toBeVisible({ timeout: 10_000 })
+	await page.getByRole('option', { name: email }).click()
+	await page.getByRole('textbox', { name: 'Signer name' }).fill(name)
+	await page.getByRole('button', { name: 'Save' }).click()
+}
+
+test('request sidebar persists signature flow preference through policies endpoint', async ({ page }) => {
+	const adminUser = process.env.NEXTCLOUD_ADMIN_USER ?? 'admin'
+	const adminPassword = process.env.NEXTCLOUD_ADMIN_PASSWORD ?? 'admin'
+	const adminRequest = await createAuthenticatedRequestContext(adminUser, adminPassword)
+
+	await login(page.request, adminUser, adminPassword)
+
+	await configureOpenSsl(page.request, 'LibreSign Test', {
+		C: 'BR',
+		OU: ['Organization Unit'],
+		ST: 'Rio de Janeiro',
+		O: 'LibreSign',
+		L: 'Rio de Janeiro',
+	})
+
+	await setAppConfig(
+		page.request,
+		'libresign',
+		'identify_methods',
+		JSON.stringify([
+			{ name: 'account', enabled: false, mandatory: false },
+			{ name: 'email', enabled: true, mandatory: true, signatureMethods: { clickToSign: { enabled: true } }, can_create_account: false },
+		]),
+	)
+
+	try {
+		await setSystemSignatureFlowPolicy(adminRequest, 'parallel', true)
+		await clearOwnPreference(adminRequest)
+
+		await page.goto('./apps/libresign')
+		await page.getByRole('button', { name: 'Upload from URL' }).click()
+		await page.getByRole('textbox', { name: 'URL of a PDF file' }).fill('https://raw.githubusercontent.com/LibreSign/libresign/main/tests/php/fixtures/pdfs/small_valid.pdf')
+		await page.getByRole('button', { name: 'Send' }).click()
+
+		await addEmailSigner(page, 'signer01@libresign.coop', 'Signer 01')
+		await addEmailSigner(page, 'signer02@libresign.coop', 'Signer 02')
+
+		// Enable remember preference first, then switch to ordered mode.
+		// The second action must persist ordered_numeric via policies endpoint.
+		await expect(page.getByLabel('Use this as my default signing order')).toBeVisible()
+		await page.getByText('Use this as my default signing order').click()
+
+		const saveOrderedPreference = page.waitForResponse((response) => {
+			const req = response.request()
+			return req.method() === 'PUT'
+				&& req.url().includes('/apps/libresign/api/v1/policies/user/signature_flow')
+				&& (req.postData() ?? '').includes('ordered_numeric')
+		})
+
+		await expect(page.getByLabel('Sign in order')).toBeVisible()
+		await page.getByText('Sign in order').click()
+		await expect(page.getByLabel('Sign in order')).toBeChecked()
+
+		const saveOrderedPreferenceResponse = await saveOrderedPreference
+		expect(saveOrderedPreferenceResponse.status()).toBe(200)
+	} finally {
+		await clearOwnPreference(adminRequest)
+		await setSystemSignatureFlowPolicy(adminRequest, 'none', true)
+		await adminRequest.dispose()
+	}
+})