Local Data Lock: Tests

Github


Note: these tests require a passkey-enabled device (TouchID, FaceID, etc); also, the data entered is saved (encrypted!) only in the session-storage on this device, which can be inspected via this browser's developer-tools.

Steps To Run Tests:

  1. Register a local account (providing a username and display-name for the first passkey on the account).
  2. Register another local account (providing a different username and display name for the passkey on that second account).
  3. Select one of the accounts from the drop-down list, and click the 'unlock account' button.
  4. Type some text into the box, and click the 'save' button.
  5. Click the 'sign & verify' button, then click the 'Sign' button (after modifying the text, if you prefer), and look for "Verified!" under the signature. Close the dialog.
  6. Click the 'lock account' button.
  7. Click the 'detect (and unlock) account' button; you will be prompted to choose one of the passkeys for one of the registered local accounts.
  8. Click 'add passkey' and provide yet another username and display-name for the additional passkey on the currently selected account.
  9. Change the 'Passkey Keep-Alive' value to 1 minute, and click the 'set' button.
  10. Wait at least 1 minute, then enter (or change) some text, and click 'save'; you will be prompted to re-authenticate a registered passkey.
  11. While logged into both accounts, you will be able to switch between them (using the dropdown and the 'login to account' button), and update the text for each account and click 'save' button... all WITHOUT being re-prompted for any passkeys; once the 1 minute has expired, you'll be prompted for the passkey at the first interaction with each account.
  12. Click the 'reset account' button; you will be prompted to create a new passkey for the current account (previous passkeys will be discarded).
  13. Change the passkey timeout from 0 to 5 (seconds).
  14. Click 'lock account', then 'unlock account'. Wait for at least 5 seconds, and see the authentication dialog be canceled/closed and an error message displayed.

When complete with testing:

  1. Click the 'reset (remove all accounts)' button.
  2. Use the device's system management settings to remove all the passkeys registered during testing.

(0 to disable)