RI-8003 Add encryption handling E2E tests

tests/e2e-playwright/TEST_PLAN.md

@@ -185,8 +185,8 @@ The test plan is organized by feature area. Tests are grouped for parallel execu
 ### 1.7 Certificate and Encryption Handling
 | Status | Group | Test Case |
 |--------|-------|-----------|
-| 🔲 | main | Store credentials encrypted in local keychain when encryption enabled |
-| 🔲 | main | Display warning when encryption disabled and credentials stored as plaintext |
+| ✅ | main | Store credentials encrypted in local keychain when encryption enabled |
+| ✅ | main | Display warning when encryption disabled and credentials stored as plaintext |
 
 ### 1.8 Decompression
 | Status | Group | Test Case |

tests/e2e-playwright/tests/main/databases/encryption/encryption.spec.ts

@@ -0,0 +1,63 @@
+import { test, expect } from 'e2eSrc/fixtures/base';
+
+/**
+ * Certificate and Encryption Handling Tests (TEST_PLAN.md: 1.7 Certificate and Encryption Handling)
+ *
+ * Tests for credential encryption settings managed through the EULA popup.
+ * These tests reset the EULA agreements to trigger the consent dialog,
+ * so they re-accept EULA after each test to restore normal state.
+ */
+test.describe('Certificate and Encryption Handling', () => {
+  test.describe.configure({ mode: 'serial' });
+
+  test.afterAll(async ({ apiHelper }) => {
+    await apiHelper.acceptEula();
+  });
+
+  test('should store credentials encrypted when encryption enabled', async ({ apiHelper, eulaPage }) => {
+    // Reset agreements to trigger EULA popup
+    await apiHelper.resetAgreements();
+
+    await eulaPage.goto();
+    await eulaPage.waitForPopup();
+
+    // Encryption is enabled by default in the EULA dialog
+    const isEncryptionChecked = await eulaPage.isSwitchChecked(eulaPage.encryptionSwitch);
+    expect(isEncryptionChecked).toBe(true);
+
+    // Accept with encryption enabled (default)
+    await eulaPage.acceptEula();
+
+    // Verify via API that encryption is enabled
+    const settings = await apiHelper.getSettings();
+    expect(settings.agreements?.encryption).toBe(true);
+  });
+
+  test('should display warning when encryption disabled and credentials stored as plaintext', async ({
+    apiHelper,
+    eulaPage,
+  }) => {
+    // Reset agreements to trigger EULA popup again
+    await apiHelper.resetAgreements();
+
+    await eulaPage.goto();
+    await eulaPage.waitForPopup();
+
+    // Disable encryption
+    await eulaPage.encryptionSwitch.click();
+    const isEncryptionChecked = await eulaPage.isSwitchChecked(eulaPage.encryptionSwitch);
+    expect(isEncryptionChecked).toBe(false);
+
+    // Verify the plain-text storage warning is visible in the dialog
+    await expect(eulaPage.dialog.getByText(/stored locally in plain text/)).toBeVisible();
+
+    // Accept EULA and submit
+    await eulaPage.eulaSwitch.click();
+    await eulaPage.submitButton.click();
+    await expect(eulaPage.dialog).not.toBeVisible();
+
+    // Verify via API that encryption is disabled
+    const settings = await apiHelper.getSettings();
+    expect(settings.agreements?.encryption).toBe(false);
+  });
+});