3 Commits

Include renames

Author	SHA1	Message	Date
Frank	b563053966	test(e2e): accept IdP redirect as a valid gate in the direct-nav guard spec ... Live run against the fleet showed the outpost redirects direct navigation to auth.franksdank.cloud with the guarded host preserved as redirect_uri, rather than rendering the flow UI in place. The security property under test is that an unauthenticated visitor never sees app content; assert that shape (uidField visible + no leak markers + gate is either in-place or a redirect carrying the return path) instead of hostname preservation.	2026-09-03 17:00:34 -07:00
Frank	5a083eee6c	test(e2e): prove guard chain blocks direct navigation and admins keep admin reach ... 14-guard.spec.ts: every authentik-guarded vhost (www, search, romm, files, seerr, grafana, prometheus, loki) must challenge an unauthenticated direct navigation; plex is asserted exempt (PMS answers directly, no IdP form). 11-admin.spec.ts: admin direct-nav to grafana/prometheus/loki passes through with host preserved and no uidField challenge.	2026-09-03 16:16:11 -07:00
Frank	dfd9c8d1c0	e2e: Playwright suite for homepage + guard chain; RBAC gate on /admin; fix stale service links	2026-09-01 16:42:33 -07:00