Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
cypress-firebase
Advanced tools
Utilities and cli to help testing Firebase projects with Cypress
createTestEnvFile
If you are interested in what drove the need for this checkout the why section
Note: Skip cypress install if it already exists within your project
npm i --save-dev cypress
cypress
folder containing cypress tests (or create one by calling cypress open
)Note: These instructions assume your tests are in the cypress
folder (cypress' default). See the folders section below for more info about other supported folders.
Install cypress-firebase and firebase-admin both: npm i cypress-firebase firebase-admin --save-dev
Add the following your custom commands file (cypress/support/commands.js
):
import firebase from 'firebase/app';
import 'firebase/auth';
import 'firebase/database';
import 'firebase/firestore';
import { attachCustomCommands } from 'cypress-firebase';
const fbConfig = {
// Your config from Firebase Console
};
firebase.initializeApp(fbConfig);
attachCustomCommands({ Cypress, cy, firebase })
Setup plugin adding following your plugins file (cypress/plugins/index.js
):
const admin = require('firebase-admin')
const cypressFirebasePlugin = require('cypress-firebase').pluginWithTasks
module.exports = (on, config) => {
// Pass on function, config, and admin instance. Returns extended config
return cypressFirebasePlugin(on, config, admin)
}
cypress/plugins/index.js
):+ const cypressFirebasePlugin = require('cypress-firebase').plugin
- const cypressFirebasePlugin = require('cypress-firebase').pluginWithTasks
Log into your Firebase console for the first time.
Go to Auth tab of Firebase and create a user for testing purpose
Get the UID of created account. This will be the account which you use to login while running tests (we will call this UID TEST_UID
)
Add the following to your .gitignore
:
serviceAccount.json
cypress.env.json
Go to project setting on firebase console and generate new private key. See how to do here
Save the downloaded file as serviceAccount.json
in the root of your project (make sure that it is .gitignored)
Add the UID of the user you created earlier to your cypress environment file (cypress.env.json
) when running locally (make sure this is in you .gitignore
):
{
"TEST_UID": "<- uid of the user you want to test as ->"
}
In CI this will instead be loaded from the TEST_UID
environment variable
cy.login(Cypress.env('TEST_UID'))
NOTE: If you are running tests within your CI provider you will want to set the SERVICE_ACCOUNT
environment variable as the service account object and the TEST_UID
environment variable as the UID of your test user
npm start
) - for faster alternative checkout the test built version sectionnpm run test:open
in another terminal windowCreate test environment file (cypress.env.json
) which contains custom auth token generated using firebase-admin
SDK and serviceAccount.json
.
A service account must be provided. This can be done by setting serviceAccount.json
in the root of the project (often used locally since service accounts should be in gitignore), or by setting the SERVICE_ACCOUNT
enviroment variable. For different environmets you can prefix with the environment name such as STAGE_SERVICE_ACCOUNT
.
cypress-firebase createTestEnvFile
Login to Firebase auth using FIREBASE_AUTH_JWT
environment variable
which is generated using firebase-admin
authenticated with serviceAccount
during build:testConfig
phase.
cy.login()
Log out of Firebase instance
cy.logout()
Call Real Time Database path with some specified action. Authentication is through FIREBASE_TOKEN
since firebase-tools is used (instead of firebaseExtra).
action
String The action type to call with (set, push, update, remove)actionPath
String Path within RTDB that action should be appliedopts
object Options
opts.limitToFirst
number|boolean Limit to the first <num>
results. If true is passed than query is limited to last 1 item.opts.limitToLast
number|boolean Limit to the last <num>
results. If true is passed than query is limited to last 1 item.opts.orderByKey
boolean Order by key nameopts.orderByValue
boolean Order by primitive valueopts.orderByChild
string Select a child key by which to order resultsopts.equalTo
string Restrict results to <val>
(based on specified ordering)opts.startAt
string Start results at <val>
(based on specified ordering)opts.endAt
string End results at <val>
(based on specified ordering)opts.instance
string Use the database <instance>.firebaseio.com
(if omitted, use default database instance)opts.args
Array Command line args to be passedSet data
const fakeProject = { some: 'data' }
cy.callRtdb('set', 'projects/ABC123', fakeProject)
Set Data With Meta
const fakeProject = { some: 'data' }
// Adds createdAt and createdBy (current user's uid) on data
cy.callRtdb('set', 'projects/ABC123', fakeProject, { withMeta: true })
Get/Verify Data
cy.callRtdb('get', 'projects/ABC123')
.then((project) => {
// Confirm new data has users uid
cy.wrap(project)
.its('createdBy')
.should('equal', Cypress.env('TEST_UID'))
})
Other Args
const opts = { args: ['-d'] }
const fakeProject = { some: 'data' }
cy.callRtdb('update', 'project/test-project', fakeProject, opts)
Call Firestore instance with some specified action. Authentication is through serviceAccount.json since it is at the base level. If using delete, auth is through FIREBASE_TOKEN since firebase-tools is used (instead of firebaseExtra).
action
String The action type to call with (set, push, update, remove)actionPath
String Path within RTDB that action should be appliedopts
Object Options
opts.args
Array Command line args to be passedBasic
cy.callFirestore('set', 'project/test-project', 'fakeProject.json')
Recursive Delete
const opts = { recursive: true }
cy.callFirestore('delete', 'project/test-project', opts)
Other Args
const opts = { args: ['-r'] }
cy.callFirestore('delete', 'project/test-project', opts)
Full
describe('Test firestore', () => {
const TEST_UID = Cypress.env('TEST_UID');
const mockAge = 8;
beforeEach(() => {
cy.visit('http://localhost:4200');
});
it('read/write test', () => {
cy.log('Starting test');
cy.callFirestore('set', `testCollection/${TEST_UID}`, {
name: 'axa',
age: 8,
});
cy.callFirestore('get', `testCollection/${TEST_UID}`).then(r => {
cy.wrap(r[0])
.its('id')
.should('equal', TEST_UID);
cy.wrap(r[0])
.its('data.age')
.should('equal', mockAge);
});
cy.log('Ended test');
});
});
Install cross-env for cross system environment variable support: npm i --save-dev cross-env
Add the following to the scripts
section of your package.json
:
"emulators": "firebase emulators:start --only database,firestore",
"test": "cross-env CYPRESS_baseUrl=http://localhost:3000 cypress run",
"test:open": "cross-env CYPRESS_baseUrl=http://localhost:3000 cypress open",
"test:emulate": "cross-env FIREBASE_DATABASE_EMULATOR_HOST=\"localhost:$(cat firebase.json | jq .emulators.database.port)\" FIRESTORE_EMULATOR_HOST=\"localhost:$(cat firebase.json | jq .emulators.firestore.port)\" yarn test:open"
Add support in your application for connecting to the emulators:
const shouldUseEmulator = window.location.hostname === 'localhost' // or other logic to determine when to use
// Emulate RTDB
if (shouldUseEmulator) {
console.log('Using RTDB emulator')
fbConfig.databaseURL = `http://localhost:9000?ns=${fbConfig.projectId}`
}
// Initialize Firebase instance
firebase.initializeApp(fbConfig)
// Emulate Firestore
if (shouldUseEmulator) {
console.log('Using Firestore emulator')
const firestoreSettings = {
host: 'localhost:8080',
ssl: false,
};
// Pass long polling setting to Firestore when running in Cypress
if (window.Cypress) {
// Needed for Firestore support in Cypress (see https://github.com/cypress-io/cypress/issues/6350)
firestoreSettings.experimentalForceLongPolling = true;
}
firebase.firestore().settings(firestoreSettings)
}
Make sure you also have matching init logic in cypress/support/commands.js
or cypress/support/index.js
:
import firebase from 'firebase/app';
import 'firebase/auth';
import 'firebase/database';
import 'firebase/firestore';
import { attachCustomCommands } from 'cypress-firebase';
const fbConfig = {
// Your Firebase Config
}
// Emulate RTDB if Env variable is passed
const rtdbEmulatorHost = Cypress.env('FIREBASE_DATABASE_EMULATOR_HOST')
if (rtdbEmulatorHost) {
fbConfig.databaseURL = `http://${rtdbEmulatorHost}?ns=${fbConfig.projectId}`
}
firebase.initializeApp(fbConfig);
// Emulate Firestore if Env variable is passed
const firestoreEmulatorHost = Cypress.env('FIRESTORE_EMULATOR_HOST')
if (firestoreEmulatorHost) {
firebase.firestore().settings({
host: firestoreEmulatorHost,
ssl: false
})
}
attachCustomCommands({ Cypress, cy, firebase })
Start emulators: npm run emulators
In another terminal window, start the application: npm start
In another terminal window, open test runner with emulator settings: npm run test:emulate
NOTE: If you are using react-scripts or other environment management, you can use environment variables to pass settings into your app:
const { REACT_APP_FIREBASE_DATABASE_EMULATOR_HOST, REACT_APP_FIRESTORE_EMULATOR_HOST } = process.env
// Emulate RTDB if REACT_APP_FIREBASE_DATABASE_EMULATOR_HOST exists in environment
if (REACT_APP_FIREBASE_DATABASE_EMULATOR_HOST) {
console.log('Using RTDB emulator')
fbConfig.databaseURL = `http://${REACT_APP_FIREBASE_DATABASE_EMULATOR_HOST}?ns=${fbConfig.projectId}`
}
// Initialize Firebase instance
firebase.initializeApp(fbConfig)
// Emulate RTDB if REACT_APP_FIRESTORE_EMULATOR_HOST exists in environment
if (REACT_APP_FIRESTORE_EMULATOR_HOST) {
console.log('Using Firestore emulator')
const firestoreSettings = {
host: REACT_APP_FIRESTORE_EMULATOR_HOST,
ssl: false,
};
if (window.Cypress) {
// Needed for Firestore support in Cypress (see https://github.com/cypress-io/cypress/issues/6350)
firestoreSettings.experimentalForceLongPolling = true;
}
firebase.firestore().settings(firestoreSettings)
}
Add the following to the scripts
section of your package.json
:
"build:testConfig": "cypress-firebase createTestEnvFile",
"test": "npm run build:testConfig && cypress run",
"test:open": "npm run build:testConfig && cypress open",
Add your config info to your environment variables (for CI) or cypress.env.json
when running locally (make sure this is in you .gitignore
)
{
"TEST_UID": "<- uid of the user you want to test as ->"
}
Environment variables can be passed through --env
. envName
points to the firebase project within the projects section of .firebaserc
.
Tests will run faster locally if you tests against the build version of your app instead of your dev version (with hot module reloading and other dev tools). You can do that by:
Adding the following npm script:
"start:dist": "npm run build && firebase serve --only hosting -p 3000",
Run npm run start:dist
to build your app and serve it with firebase
In another terminal window, run a test command such as npm run test:open
firebase login:ci
to generate a CI token for firebase-tools
(this will give your cy.callRtdb
and cy.callFirestore
commands admin access to the DB)FIREBASE_TOKEN
within CI environment variablesSeparate Install
name: Test Build
on: [pull_request]
jobs:
ui-tests:
name: UI Tests
runs-on: ubuntu-latest
steps:
- name: Checkout Repo
uses: actions/checkout@v1
# Install is run separatley from test so that dependencies are available
# for other steps
- name: Install Dependencies
uses: cypress-io/github-action@v1
with:
# just perform install
runTests: false
- name: Build Test Environment Config
env:
FIREBASE_TOKEN: ${{ secrets.FIREBASE_TOKEN }}
TEST_UID: ${{ secrets.TEST_UID }}
SERVICE_ACCOUNT: ${{ secrets.SERVICE_ACCOUNT }}
GITHUB_HEAD_REF: ${{ github.head_ref }}
GITHUB_REF: ${{ github.ref }}
run: |
$(npm bin)/cypress-firebase createTestEnvFile $TEST_ENV
# Cypress action manages installing/caching npm dependencies and Cypress binary.
- name: Cypress Run
uses: cypress-io/github-action@v1
with:
# we have already installed all dependencies above
install: false
group: 'E2E Tests'
env:
# pass the Dashboard record key as an environment variable
CYPRESS_RECORD_KEY: ${{ secrets.CYPRESS_KEY }}
FIREBASE_TOKEN: ${{ secrets.FIREBASE_TOKEN }}
GITHUB_HEAD_REF: ${{ github.head_ref }}
GITHUB_REF: ${{ github.ref }}
Using Start For Local
name: Test Hosted
on: [pull_request]
jobs:
ui-tests:
name: UI Tests
runs-on: ubuntu-latest
steps:
- name: Checkout Repo
uses: actions/checkout@v1
# Install is run separatley from test so that dependencies are available
# for other steps
- name: Install Dependencies
uses: cypress-io/github-action@v1
with:
# just perform install
runTests: false
- name: Build Test Environment Config
env:
FIREBASE_TOKEN: ${{ secrets.FIREBASE_TOKEN }}
TEST_UID: ${{ secrets.TEST_UID }}
SERVICE_ACCOUNT: ${{ secrets.SERVICE_ACCOUNT }}
GITHUB_HEAD_REF: ${{ github.head_ref }}
GITHUB_REF: ${{ github.ref }}
run: |
$(npm bin)/cypress-firebase createTestEnvFile $TEST_ENV
# Cypress action manages installing/caching npm dependencies and Cypress binary.
- name: Cypress Run
uses: cypress-io/github-action@v1
with:
# we have already installed all dependencies above
install: false
group: 'E2E Tests'
start: npm start
wait-on: http://localhost:3000
env:
# pass the Dashboard record key as an environment variable
CYPRESS_RECORD_KEY: ${{ secrets.CYPRESS_KEY }}
FIREBASE_TOKEN: ${{ secrets.FIREBASE_TOKEN }}
GITHUB_REF: ${{ github.head_ref }}
It isn't currently possible to use Firebase's firebase-admin
SDK directly within Cypress due to dependencies not being able to be loaded into the Browser environment. Since firebase-admin
is nessesary to generate custom token needed to login to Firebase, the usage of it happens outside of Cypress (through cypress-firebase createTestEnvFile
) before booting up.
Instead of a cli tool, the plugin that is included could maybe use firebase-admin
(since cypress plugins is a node environment) - when investigating this, I found it frustrating to get the values back into the test. That said, always open to better ways of solving this, so please reach out with your ideas!
fireadmin.io - A Firebase project management tool (here is the source)
FAQs
Utilities to help testing Firebase projects with Cypress.
The npm package cypress-firebase receives a total of 18,371 weekly downloads. As such, cypress-firebase popularity was classified as popular.
We found that cypress-firebase demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.