Function setupSmsMfaUser

spec/vulnerabilities.spec.js:5025–5054

()

    });

    async function setupSmsMfaUser() {
      const user = await Parse.User.signUp('smsmfauser', 'password123');
      // Enroll SMS MFA
      await request({
        method: 'PUT',
        url: `http://localhost:8378/1/users/${user.id}`,
        headers: {
          ...mfaHeaders,
          'X-Parse-Session-Token': user.getSessionToken(),
        },
        body: JSON.stringify({
          authData: { mfa: { mobile: '+15551234567' } },
        }),
      });
      const enrollToken = sentToken;
      // Confirm enrollment with the received OTP
      await request({
        method: 'PUT',
        url: `http://localhost:8378/1/users/${user.id}`,
        headers: {
          ...mfaHeaders,
          'X-Parse-Session-Token': user.getSessionToken(),
        },
        body: JSON.stringify({
          authData: { mfa: { mobile: '+15551234567', token: enrollToken } },
        }),
      });
      sentToken = null;
      return user;
    }

    async function requestLoginOtp(username, password) {
      try {