> [email protected] pretest
> cross-env MONGODB_VERSION=${MONGODB_VERSION:=5.3.2} MONGODB_TOPOLOGY=${MONGODB_TOPOLOGY:=standalone} mongodb-runner start

  ◠ Starting a MongoDB deployment to test against...
> [email protected] test
> npm run testonly "spec/ParseUser.spec.js"


> [email protected] testonly
> cross-env MONGODB_VERSION=${MONGODB_VERSION:=5.3.2} MONGODB_TOPOLOGY=${MONGODB_TOPOLOGY:=standalone} TESTING=1 jasmine "spec/ParseUser.spec.js"

Randomized with seed 60989
Started
Jasmine started
(node:16648) ExperimentalWarning: stream/web is an experimental feature. This feature could change at any time
(Use `node --trace-warnings ...` to show where the warning was created)
warn: DeprecationWarning: The Parse Server option 'allowClientClassCreation' default will change to 'false' in a future version.
warn: DeprecationWarning: The Parse Server option 'allowExpiredAuthDataToken' default will change to 'false' in a future version.
warn: DeprecationWarning: The Parse Server option 'encodeParseObjectInCloudFunction' default will change to 'true' in a future version.
F
  Parse.User testing
    ✗ log in with Facebook and update email for signed up User
      - Unhandled promise rejection: ParseError: 206 Cannot modify user aV67EHAYgx.



Failures:
1) Parse.User testing log in with Facebook and update email for signed up User
  Message:
    Unhandled promise rejection: ParseError: 206 Cannot modify user aV67EHAYgx.
  Stack:
    error properties: Object({ code: 206 })
    Error: Cannot modify user aV67EHAYgx.
        at handleError (/Users/ashishn/Developer/GitHub Projects/Parse-Server-Fix-Facebook-Signup-Error206/node_modules/parse/lib/node/RESTController.js:274:17)
        at processTicksAndRejections (node:internal/process/task_queues:96:5)

Ran 1 of 161 specs
1 spec, 1 failure
Finished in 0.863 seconds
Randomized with seed 60989 (jasmine --random=true --seed=60989)
**************************************************
*                    Failures                    *
**************************************************

1) Parse.User testing log in with Facebook and update email for signed up User
  - Unhandled promise rejection: ParseError: 206 Cannot modify user aV67EHAYgx.

Executed 1 of 161 specs (1 FAILED) (160 SKIPPED) in 0.863 sec.
Randomized with seed 60989.

user.set('email', '[email protected]');
user.set('loginProvider', 'facebook');

      verifyUserEmails: true,
      preventLoginWithUnverifiedEmail: true,

 if (req.userFromJWT) {
    req.auth = new _Auth.default.Auth({
      config: req.config,
      installationId: info.installationId,
      isMaster: false,
      user: req.userFromJWT
    });
    return handleRateLimit(req, res, next);
  }

 if (!info.sessionToken) {
    req.auth = new _Auth.default.Auth({
      config: req.config,
      installationId: info.installationId,
      isMaster: false
    });
  }

if (!this.storage.authProvider &&
  // signup call, with
  this.config.preventLoginWithUnverifiedEmail === true &&
  // no login without verification
  this.config.verifyUserEmails) {
    // verification is on
    this.storage.rejectSignup = true;
    return;
  }

// No user found with provided authData we need to validate
  if (!results.length) {

  Parse.User testing
    ✓ log in with Facebook and save signed up User with verifyUserEmails=true and preventLoginWithUnverifiedEmail=true

RestWrite.prototype.createSessionTokenIfNeeded = function() {
  if (this.className !== '_User') {
    return;
  }
  if (this.query) {
    return;
  }
  if (!this.storage['authProvider'] // signup call, with
      && this.config.preventLoginWithUnverifiedEmail // no login without verification
      && this.config.verifyUserEmails) { // verification is on
    return; // do not create the session token in that case!
  }
  return this.createSessionToken();
}

if (
    !this.storage.authProvider && // signup call, with
    this.config.preventLoginWithUnverifiedEmail === true && // no login without verification
    this.config.verifyUserEmails
  ) {
    // verification is on
    this.storage.rejectSignup = true;
    return;
  }

Parse.Cloud.beforeLogin(async request => {
  const { object: user }  = request;
  if (user.get('login_provider') == "email" && user.get('emailVerified') != true) {
    logger.error(`beforeLogin: User ${user.id} is not verified`)
    throw new Parse.Error(302,'Email is unverified')
   }
});

% npm test spec/ParseUser.spec.js

> [email protected] pretest
> cross-env MONGODB_VERSION=${MONGODB_VERSION:=5.3.2} MONGODB_TOPOLOGY=${MONGODB_TOPOLOGY:=standalone} mongodb-runner start -t ${MONGODB_TOPOLOGY} --version ${MONGODB_VERSION} -- --port 27017

Server started and running at mongodb://127.0.0.1:27017/
Run the following command to stop the instance:
mongodb-runner stop --id=3c53f8e2-946a-4012-a356-ce497958e619

> [email protected] test
> npm run testonly "spec/ParseUser.spec.js"


> [email protected] testonly
> cross-env MONGODB_VERSION=${MONGODB_VERSION:=5.3.2} MONGODB_TOPOLOGY=${MONGODB_TOPOLOGY:=standalone} TESTING=1 jasmine "spec/ParseUser.spec.js"

Randomized with seed 34178
Started
Jasmine started
warn: DeprecationWarning: The Parse Server option 'encodeParseObjectInCloudFunction' default will change to 'true' in a future version.
.
  allowExpiredAuthDataToken option
    ✓ should default false
.    ✓ should enforce boolean values
.    ✓ should accept true value
.    ✓ should accept false value

.  Parse.User testing
    ✓ user login with non-string username with REST API
.    ✓ user login with context
.    ✓ user login wrong password
.    ✓ login with provider should be blockable by beforeLogin
.    ✓ user with missing username
.    ✓ login with provider should not call beforeSave trigger
.    ✓ user login wrong username
.    ✓ should allow PUT request with stale auth Data
.    ✓ saving user after browser refresh
.    ✓ become
.    ✓ signup with provider should not call beforeLogin trigger
.    ✓ user sign up instance method
.    ✓ querying for users only gets the expected fields
.    ✓ should fail linking with existing
.    ✓ user save should fail with invalid email
.    ✓ log in with provider failed
.    ✓ link multiple providers
.    ✓ unset user email
.    ✓ link with provider
.    ✓ cannot delete session if no sessionToken
.    ✓ should not fail querying non existing relations
.    ✓ user sign up class method
.    ✓ should be able to update user with authData passed
.    ✓ log in with provider cancelled
.    ✓ can login when both email and username are passed
.    ✓ should not allow login with expired authData token since allowExpiredAuthDataToken is set to false by default
.    ✓ should not retrieve hidden fields on GET users/me (#3432)
.    ✓ password format matches hosted parse
.    ✓ should not revoke session tokens if the server is configures to not revoke session tokens
.    ✓ logout with provider should call afterLogout trigger
.    ✓ should throw OBJECT_NOT_FOUND instead of SESSION_MISSING when using masterKey
.    ✓ fails to login when email and username are not provided
.    ✓ can not set authdata to null
.    ✓ user cannot update email to existing user
.    ✓ link with provider for already linked user
.    ✓ should revoke sessions when converting anonymous user to "normal" user
.    ✓ user modified while saving with unsaved child
.    ✓ user associations
.    ✓ should revoke sessions when setting paswword with masterKey (#3289)
.    ✓ should not create extraneous session tokens
.    ✓ should let legacy users without ACL login
.    ✓ fails to login when email doesn't match username
.    ✓ should not overwrite username when unlinking facebook user (regression test for #1532)
.    ✓ link with provider failed
.    ✓ can login with email
.    ✓ should return current session with expired expiration date
.    ✓ link with provider via sessionToken should not create new sessionToken (Regression #5799)
.    ✓ become sends token back
.    ✓ allows login when providing email as username
.    ✓ log in with explicit facebook auth data
.    ✓ should fail linking with existing through REST
.    ✓ should not retrieve hidden fields on GET users/id (#3432)
.    ✓ login with provider should be blockable by beforeLogin even when the user has a attached file
.    ✓ fails to login when password is not provided
.    ✓ should send email when upgrading from anon
.    ✓ should allow updates to fields with maintenanceKey
.    ✓ create session from user
.    ✓ authenticated check
.    ✓ user queries
.    ✓ user loaded from localStorage from signup
.    ✓ user login with files
.    ✓ log in with provider and update token
.    ✓ should not allow updates to emailVerified
.    ✓ link async with explicit facebook auth data
.    ✓ cannot saveAll with non-authed user
.    ✓ should properly error when password is missing
    ✗ log in with Facebook and save signed up User with verifyUserEmails=true and preventLoginWithUnverifiedEmail=true
      - Expected [object Promise] to be resolved.
.    ✓ should be let masterKey lock user out with authData
.    ✓ user updates
.    ✓ handles properly when 2 users share username / email pairs, counterpart
.    ✓ user modified while saving
.    ✓ should not retrieve hidden fields on login (#3432)
.    ✓ async methods
.    ✓ unlink with provider
.    ✓ log in with provider
.    ✓ user.isCurrent
.    ✓ user get session from token on signup
.    ✓ should have authData in beforeSave and afterSave
.    ✓ fails to login when username doesn't match email
.    ✓ should cleanup null authData keys (regression test for #935)
.    ✓ user loaded from localStorage from login
.
    issue #4897
      ✓ should be able to login with a legacy user (no ACL)

.    ✓ contained in user array queries
.    ✓ user get session from token on anonymous login
.    ✓ ignore setting authdata to undefined
.    ✓ login with provider should call beforeLogin trigger
.    ✓ should let masterKey lockout user
.    ✓ link with provider cancelled
.    ✓ never locks himself up
.    ✓ cannot save non-authed user
.    ✓ set password then change password
.    ✓ should aftersave with full object
.    ✓ link with provider should return sessionToken
.    ✓ Invalid session tokens are rejected
.    ✓ user signup class method uses subclassing
.    ✓ user with missing password
.    ✓ unlink and link
.    ✓ incorrect login with provider should not call beforeLogin trigger
.    ✓ should not call beforeLogin with become
.    ✓ count users
.    ✓ should cleanup null authData keys ParseUser update (regression test for #1198, #2252)
.    ✓ should respect ACL without locking user out
.    ✓ user authData should be available in cloudcode (#2342)
.    ✓ log in with provider with files
.
    case insensitive signup not allowed
      ✓ signup should fail with duplicate case insensitive username with field specific setter
.      ✓ edit should fail with duplicate case insensitive email
.      ✓ signup should fail with duplicate case insensitive username with basic setter
.      ✓ signup should fail with duplicate case insensitive email
.
      anonymous users
        ✓ should not fail on case insensitive matches

.    ✓ user stupid subclassing
.    ✓ user get session from token on username/password login
.    ✓ should not allow updates to hidden fields
.    ✓ user login
.    ✓ handles properly when 2 users share username / email pairs
.    ✓ should not serve null authData keys
.    ✓ cannot delete non-authed user
.    ✓ log in with provider twice
.    ✓ user login using POST with REST API
.    ✓ saving a user signs them up but doesn't log them in
.    ✓ link multiple providers and updates token
.    ✓ retrieve user data from fetch, make sure the session token hasn't changed
.    ✓ current user
.    ✓ current user isn't dirty
.    ✓ returns authData when authed and logged in with provider (regression test for #1498)
.    ✓ changes to a user should update the cache
.    ✓ ensure logout works
.    ✓ querying for users doesn't get session tokens
.    ✓ log in async with explicit facebook auth data
.    ✓ can login with email through query string
.    ✓ user sign up with container class
.    ✓ user login with non-string username with REST API (again)
.    ✓ changing password clears sessions
.    ✓ user signup should error if email taken
.    ✓ user update session with other field
.    ✓ link multiple providers and update token
.    ✓ only creates a single session for an installation / user pair (#2885)
.    ✓ user on disk gets updated after save
.    ✓ should strip out authdata in LiveQuery
.    ✓ cannot login with email and invalid password
*.    ✓ link with explicit facebook auth data
.    ✓ cannot update session if invalid or no session token
.    ✓ should not send email when email is not a string
.    ✓ session expiresAt correct format
.    ✓ does not duplicate session when logging in multiple times #3451
.    ✓ user login with enforcePrivateUsers
.    ✓ get session only for current user
.    ✓ should fail to become user with expired token
.    ✓ support user/password signup with empty authData block
.    ✓ test parse user become
.    ✓ should throw when enforcePrivateUsers is invalid
.    ✓ delete session by object

.  Security Advisory GHSA-8w3j-g983-8jh5
    ✓ should ignore authData field
.    ✓ should validate credentials first and check if account already linked afterwards ()

.  login as other user
    ✓ rejects creating a session for another user with invalid parameters
.    ✓ rejects creating a session for another user without the master key
.    ✓ rejects creating a session for another user if the user does not exist
.    ✓ allows creating a session for another user with the master key

.  allowClientClassCreation option
    ✓ should accept false value
.    ✓ should default false
.    ✓ should enforce boolean values
.    ✓ should accept true value



Failures:
1) Parse.User testing log in with Facebook and save signed up User with verifyUserEmails=true and preventLoginWithUnverifiedEmail=true
  Message:
    Expected [object Promise] to be resolved.
  Stack:
    Error
        at <Jasmine>
        at UserContext.<anonymous> (/Users/ashishn/Developer/GitHub Projects/Parse-Server-Fix-Facebook-Signup-Error206/spec/ParseUser.spec.js:1290:36)
        at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
Pending:

1) Parse.User testing should not send a verification email if the user signed up using oauth
  this test fails.  See: https://github.com/parse-community/parse-server/issues/5097

166 specs, 1 failure, 1 pending spec
Finished in 20.468 seconds
Randomized with seed 34178 (jasmine --random=true --seed=34178)
**************************************************
*                    Failures                    *
**************************************************

1) Parse.User testing log in with Facebook and save signed up User with verifyUserEmails=true and preventLoginWithUnverifiedEmail=true
  - Expected [object Promise] to be resolved.

**************************************************
*                    Pending                     *
**************************************************

1) Parse.User testing should not send a verification email if the user signed up using oauth
  this test fails.  See: https://github.com/parse-community/parse-server/issues/5097

Executed 165 of 166 specs (1 FAILED) (1 PENDING) in 20 secs.
Randomized with seed 34178.

Parse.Cloud.define('signInWithAuth', async ({ params: { loginProvider, accessToken, expirationDate, email, userId, displayName } }) => {
  
  var authDataToSave = {"id":userId,"expiration_date":expirationDate,"access_token":accessToken}

  try {

      const payload = await verifyFacebookAccessToken(accessToken, authDataToSave)
    var userQuery = new Parse.Query('_User');
    userQuery.equalTo('email', email);

    var users = await userQuery.find({ useMasterKey: true });

    try {
          if (users.length == 0) {

            var user = new Parse.User();
            user.set('email', email);
            user.set('username', email);
            user.set('login_provider', loginProvider);
            user.set('social_id', userId);
            user.set('name:', displayName)
            await user.save(null, { useMasterKey: true })

            try {
                await user.linkWith(loginProvider, { authData: authDataToSave }, { useMasterKey: true });

                //login the linked user and retutn to client
                try {
                  var loggedInUser = await Parse.User.logInWith(loginProvider, { authData: authDataToSave }, { useMasterKey: true });
                  //return to client to created logged in user  using Parse.become method
                  return {
                      token:loggedInUser.getSessionToken(),
                      isNew:true,
                      objId: loggedInUser.id
                    }
                } catch (loginError) {
                  throw loginError;
                } //eof of try of loginUser

            } catch (linkError) {
              throw linkError;
            } //end of try of linkUser
          }         
    } catch (queryError) {
      throw queryError
    };
  } catch (error) {
    throw error

  };
});

  func performSignInFlow()  {
       
       let facebookPermissions = ["public_profile","email"]

       LoginManager().logIn(permissions: facebookPermissions, from: self) { result, error in
           
           if let error = error {

               print("Error on login \(error.localizedDescription)")

           } else {
               GraphRequest(graphPath: "/me", parameters: ["fields" : "email, name, id"])
                   .start(completion: { connection, result, error in
                       
                       if error != nil {
                           
                           print("Error while fetching user info from Facebook - \(String(describing: error?.localizedDescription))")
                           
                           
                       } else if let result = result {
                                                          
                               let displayName = (result as AnyObject).object(forKey: "name") as! String
                               let socialId = (result as AnyObject).object(forKey: "id") as! String
                               let accessToken = AccessToken.current!.tokenString
                               let tokenExpirationDate = AccessToken.current!.expirationDate
                                                               
                               PFCloud.callFunction(inBackground: "signInWithAuth", withParameters: ["loginProvider": "facebook",
                                                                                                     "accessToken":accessToken,
                                                                                                     "expirationDate": tokenExpirationDate,
                                                                                                     "email" : userEmail,
                                                                                                       "userId":socialId,
                                                                                                       "displayName":displayName])
                               { response, errorFromCloudCode in
                                   if errorFromCloudCode != nil {
                                       
                                       let nsError = errorFromCloudCode! as NSError
                                                           
                                       print("Error in signInWithAuth cloud code \(errorFromCloudCode!.localizedDescription)")
                                   
                                       return
                                   } else  {

                                       let returnedValues = response as! [String:Any?]

                                       if let sessionToken = returnedValues["token"] as? String {
                                           
                                           PFUser.become(inBackground: sessionToken) { pfUser, error in
                                               
                                               if error == nil {
                                                   print("User linked")
                                               } else {
                                                   
                                                   print("Error when becoming user from session token \(error!.localizedDescription)")
                                               }
                                               
                                           } //end ofPFUser.become(inBackground: sessionToken) {
                                       } else {
                                           
                                           print("Parse login failed.")

                                       } //end of else of let sessionToken = returnedValues["token"] as? String
                                       
                                   } // end of if errorFromCloudCode != nil {
                               } //end of PFCloud.callFunction(inBackground:
                       } //end of if let result = result
                   }) //end of GraphRequest.start
              }
       }//end of loginManager.logIn(permissions: f

   }

npm test spec/ParseUser.spec.js

> [email protected] pretest
> cross-env MONGODB_VERSION=${MONGODB_VERSION:=7.0.1} MONGODB_TOPOLOGY=${MONGODB_TOPOLOGY:=standalone} mongodb-runner start -t ${MONGODB_TOPOLOGY} --version ${MONGODB_VERSION} -- --port 27017

Server started and running at mongodb://127.0.0.1:27017/
Run the following command to stop the instance:
mongodb-runner stop --id=2c01330c-f1bd-4635-9f8e-9f5a19a2fc81

> [email protected] test
> npm run testonly spec/ParseUser.spec.js


> [email protected] testonly
> cross-env MONGODB_VERSION=${MONGODB_VERSION:=5.3.2} MONGODB_TOPOLOGY=${MONGODB_TOPOLOGY:=standalone} TESTING=1 jasmine "spec/ParseUser.spec.js"

Randomized with seed 73902
Started
Jasmine started
warn: DeprecationWarning: The Parse Server option 'encodeParseObjectInCloudFunction' default will change to 'true' in a future version.
F
  Parse.User testing
    ✗ log in with Facebook and save signed up User with verifyUserEmails=true and preventLoginWithUnverifiedEmail=true
      - Expected [object Promise] to be resolved.



Failures:
1) Parse.User testing log in with Facebook and save signed up User with verifyUserEmails=true and preventLoginWithUnverifiedEmail=true
  Message:
    Expected [object Promise] to be resolved.
  Stack:
    Error
        at <Jasmine>
        at UserContext.<anonymous> (/Users/ashishn/Developer/GitHub Projects/Parse-Server-Fix-Facebook-Signup-Error206/spec/ParseUser.spec.js:1290:36)
        at process.processTicksAndRejections (node:internal/process/task_queues:95:5)

Ran 1 of 166 specs
1 spec, 1 failure
Finished in 0.446 seconds
Randomized with seed 73902 (jasmine --random=true --seed=73902)
**************************************************
*                    Failures                    *
**************************************************

1) Parse.User testing log in with Facebook and save signed up User with verifyUserEmails=true and preventLoginWithUnverifiedEmail=true
  - Expected [object Promise] to be resolved.

Executed 1 of 166 specs (1 FAILED) (165 SKIPPED) in 0.445 sec.
Randomized with seed 73902.

fit('link and login with provider with verifyUserEmails=true and preventLoginWithUnverifiedEmail=true', async done => {
  const provider = getMockFacebookProvider();
  const emailAdapter = {
    sendPasswordResetEmail: () => Promise.resolve(),
    sendMail: () => Promise.resolve(),
  };
  await reconfigureServer({
    appName: 'ExampleApp',
    verifyUserEmails: true,
    preventLoginWithUnverifiedEmail: false,
    emailAdapter: {
      module: emailAdapter,
    },
    publicServerURL: 'http://localhost:8378/1',
  });

  Parse.User._registerAuthenticationProvider(provider);
  var user = new Parse.User();
  await expectAsync(user.save()).toBeResolved();
  console.log("saved")
  user.set('username', 'testLinkWithProvider');
  user.set('password', 'mypass');
  await user.signUp();
  console.log("signed up")
  user.set('username', 'testLinkWithProvider');
  user.set('password', 'mypass');
  await user.logIn()
  console.log("logged in")
  const model = await user._linkWith('facebook');
  console.log("linked")
  expect(user instanceof Parse.User).toBeTrue();
  expect(user instanceof Parse.User).toBeTrue();
  expect(Parse.User.current()).toEqual(user);
  expect(user.extended()).toBeTrue();
  expect(provider.authData.id).toBe(provider.synchronizedUserId);
  expect(provider.authData.access_token).toBe(provider.synchronizedAuthToken);
  expect(provider.authData.expiration_date).toBe(provider.synchronizedExpiration);
  expect(user._isLinked('facebook')).toBeTrue();
  console.log("Linked");
  const loggedinuser = await Parse.User._logInWith('facebook');
  console.log("logged in "   loggedinuser.getSessionToken());
  await expectAsync(loggedinuser.save()).toBeResolved();

}, 10000);

const user2 = await Parse.User.logInWith('doNotSaveAdapter', {
      authData: { id: 'doNotSaveAdapter', example: 'example' },
    });
expect(user2.getSessionToken()).toBeDefined();

if (!results.length) {
    const { authData: validatedAuthData, authDataResponse } = await Auth.handleAuthDataValidation(
      authData,
      this
    );
    this.authDataResponse = authDataResponse;
    // Replace current authData by the new validated one
    this.data.authData = validatedAuthData;
    return;
  }