SERVER-77913 Extend OIDC jstests to use Ping Identity for Human User Workflows

evergreen/external_auth_oidc_setup.sh

@@ -8,6 +8,9 @@ set -o errexit
 # Should output contents to new file in home directory.
 cat << EOF > $HOME/oidc_e2e_setup.json
 {
+    "testserversecurityone@ping-test.com" : "${oidc_ping_test_user_account_one_secret}",
+    "testserversecuritytwo@ping-test.com" : "${oidc_ping_test_user_account_two_secret}",
+    "testserversecuritythree@ping-test.com" : "${oidc_ping_test_user_account_three_secret}",
     "tD548GwE1@outlook.com" : "${oidc_azure_test_user_account_one_secret}",
     "tD548GwE2@outlook.com" : "${oidc_azure_test_user_account_two_secret}",
     "tD548GwE3@outlook.com" : "${oidc_azure_test_user_account_three_secret}",

jstests/auth/lib/automated_idp_authn_simulator_ping.py

@@ -0,0 +1,100 @@
+"""
+#! /usr/bin/env python3
+Simulates a human authenticating to PingFederate on the Web, specifically with the
+device authorization grant flow.
+
+Given a device authorization endpoint, a username, a user code and a file with necessary setup information, it
+will simulate automatically logging in as a human would.
+
+"""
+import argparse
+import json
+
+import geckodriver_autoinstaller
+from pathlib import Path
+from selenium import webdriver
+from selenium.webdriver.common.by import By
+from selenium.webdriver.firefox.options import Options
+from selenium.webdriver.support import expected_conditions as EC
+from selenium.webdriver.support.ui import WebDriverWait
+
+def authenticate_ping(activation_endpoint, userCode, username, test_credentials):
+    # Install GeckoDriver if needed.
+    geckodriver_autoinstaller.install()
+
+    # Launch headless Firefox to the device authorization endpoint.
+    firefox_options = Options()
+    firefox_options.add_argument('-headless')
+    driver = webdriver.Firefox(options=firefox_options)
+    driver.get(activation_endpoint)
+
+    try:
+        # Wait for the username, password and signon button to load.
+        username_input_box = WebDriverWait(driver, 30).until(
+            EC.presence_of_element_located((By.XPATH, "//input[@id='username']"))
+        )
+        password_input_box = WebDriverWait(driver, 30).until(
+            EC.presence_of_element_located((By.XPATH, "//input[@id='password']"))
+        )
+        signon_button = WebDriverWait(driver, 30).until(
+            EC.presence_of_element_located((By.XPATH, "//a[@id='signOnButton'][@title='Sign On']"))
+        )
+        
+        # Enter username.
+        username_input_box.send_keys(username)
+        # Enter password.
+        password_input_box.send_keys(test_credentials[username])
+        signon_button.click()
+
+        # Wait for the user code prompt and submit button to load.
+        # User code will be added to the input box.
+        user_code_input_box = WebDriverWait(driver, 30).until(
+            EC.presence_of_element_located((By.XPATH, "//input[@id='user-code']"))
+        )
+        submit_button = WebDriverWait(driver, 30).until(
+            EC.presence_of_element_located((By.XPATH, "//a[@title='Submit']"))
+        )
+
+        # Enter usercode.
+        user_code_input_box.send_keys(userCode)
+        submit_button.click()
+        
+        # Assert 'Allow' message.
+        allow_button = WebDriverWait(driver, 30).until(
+            EC.presence_of_element_located((By.XPATH, "//a[@title='Allow']"))
+        )
+        allow_button.click()
+
+        # Assert that the landing page contains the "The device is now authorized." text, indicating successful auth.
+        landing_header = WebDriverWait(driver, 30).until(
+            EC.presence_of_element_located((By.XPATH, "//div[@class='ping-messages']/div"))
+        )
+
+        assert landing_header is not None and "The device is now authorized." in landing_header.text
+        
+    except Exception as e:
+        print("Error: ", e)
+        print("Traceback: ", traceback.format_exc())
+        print("HTML Source: ", driver.page_source)
+    else:
+        print('Success')
+    finally:
+        driver.quit()
+
+def main():
+    parser = argparse.ArgumentParser(description='PingFederate Automated Authentication Simulator')
+
+    parser.add_argument('-e', '--activationEndpoint', type=str, help="Endpoint to start activation at")
+    parser.add_argument('-c', '--userCode', type=str, help="Code to be added in the endpoint to authenticate")
+    parser.add_argument('-u', '--username', type=str, help="Username to authenticate as")
+    parser.add_argument('-s', '--setupFile', type=str, help="File containing information generated during test setup, relative to home directory")
+
+    args = parser.parse_args()
+
+    with open(Path.home() / args.setupFile) as setup_file:
+        setup_information = json.load(setup_file)
+        assert args.username in setup_information
+        authenticate_ping(args.activationEndpoint, args.userCode, args.username, setup_information)
+
+if __name__ == '__main__':
+    main()