ci: test the webmail hand-off with a webmail session left in the browser

.maestro/signin/07-webmail-totp.yaml

@@ -1,5 +1,7 @@
 # Webmail hand-off for a TOTP account: the webmail asks for the code; if it
-# hands back the password, the app finishes with a code of its own.
+# hands back the password, the app finishes with a code of its own. Uses the
+# beta webmail: the stable one still has 06's session in the browser, which
+# strands the hand-off (see 20-webmail-session.yaml).
 appId: org.bulwarkmail.mobile
 name: Webmail hand-off with TOTP
 tags:
@@ -9,7 +11,7 @@ tags:
 - runFlow:
     file: ../subflows/manual-server.yaml
     env:
-      HOST: ${WEBMAIL}
+      HOST: ${WEBMAIL_BETA}
 - tapOn: "Continue"
 - runFlow: ../subflows/allow-auth-session.yaml
 - runFlow:

.maestro/signin/20-webmail-session.yaml

@@ -0,0 +1,52 @@
+# Sign in via webmail while the browser still has a webmail session (from
+# 06-webmail, or from using the webmail in Safari): the hand-off must still
+# reach the app. Before the fix, the webmail's login page redirected an
+# existing session to its own inbox inside the sign-in sheet, and the app
+# never got the sign-in.
+appId: org.bulwarkmail.mobile
+name: Webmail hand-off with an existing webmail session
+tags:
+  - signin
+---
+# Leaves a webmail session in the shared browser cookies.
+- runFlow: ../subflows/start.yaml
+- runFlow:
+    file: ../subflows/manual-server.yaml
+    env:
+      HOST: ${WEBMAIL}
+- tapOn: "Continue"
+- runFlow: ../subflows/allow-auth-session.yaml
+- extendedWaitUntil:
+    visible: "user@example.com|Hand over to the app|.*Inbox.*"
+    timeout: 60000
+- runFlow:
+    when:
+      visible: "user@example.com"
+    commands:
+      - runFlow:
+          file: ../subflows/webmail-login-page.yaml
+          env:
+            LOGIN: ${ACCOUNT}@example.org
+- runFlow:
+    when:
+      visible: "Hand over to the app"
+    commands:
+      - tapOn: "Hand over to the app"
+- runFlow: ../subflows/inbox.yaml
+- runFlow: ../subflows/sign-out.yaml
+
+# Again: the webmail now knows the user.
+- extendedWaitUntil:
+    visible: "Enter server details manually"
+    timeout: 30000
+- runFlow:
+    file: ../subflows/manual-server.yaml
+    env:
+      HOST: ${WEBMAIL}
+- tapOn: "Continue"
+- runFlow: ../subflows/allow-auth-session.yaml
+- extendedWaitUntil:
+    visible: "user@example.com|Hand over to the app|Search mail.*"
+    timeout: 60000
+- takeScreenshot: webmail-session-01-second-visit
+- assertNotVisible: "Search mail.*"

scripts/e2e/run-flows.sh

@@ -54,6 +54,7 @@ if [ $STATUS -eq 0 ]; then
     -e "ACCOUNT2=${E2E_ACCOUNT2:-}"
     -e "TOTP_ACCOUNT=${E2E_TOTP_ACCOUNT:-}"
     -e "WEBMAIL=${E2E_WEBMAIL:-}"
+    -e "WEBMAIL_BETA=${E2E_WEBMAIL_BETA:-https://bulwark-beta.internal.bulwarkmail.org}"
     -e "HELPER=http://127.0.0.1:${HELPER_PORT:-8787}"
     -e "ORIENTATION=${ORIENTATION:-portrait}"
     -e "DEVICE=${DEVICE:-phone}"