Frank
5cf5416471
spec 24- signs in through SSO as qa-e2e — an identity in no Audiobookshelf group — and must land inside the app with type "user". It is the counterpart to 23-, which pins the admin escalation: together they catch both directions of a scope-mapping regression (household locked out, or household made site admin). Verified red against the pre-change mapping — the identity never received a token — and green after re-provisioning: 4 passed. Joined to the standard project, which is the only project whose identity observes the default.
73 lines
2.9 KiB
TypeScript
73 lines
2.9 KiB
TypeScript
import { defineConfig } from "@playwright/test";
|
|
import { BASE_URL, REAL_UA } from "./lib/env";
|
|
|
|
export default defineConfig({
|
|
testDir: "./specs",
|
|
timeout: 90_000,
|
|
expect: { timeout: 20_000 },
|
|
retries: 1,
|
|
workers: 2,
|
|
fullyParallel: false,
|
|
reporter: [["list"]],
|
|
outputDir: "./test-results",
|
|
use: {
|
|
baseURL: BASE_URL,
|
|
userAgent: REAL_UA,
|
|
ignoreHTTPSErrors: true,
|
|
viewport: { width: 1440, height: 900 },
|
|
trace: "retain-on-failure",
|
|
},
|
|
projects: [
|
|
{
|
|
name: "setup",
|
|
testMatch: /00-auth\.setup\.ts/,
|
|
},
|
|
{
|
|
name: "standard",
|
|
// NOTE: specs are matched by NUMBER PREFIX, not globbed. A spec file
|
|
// whose prefix is not listed in any project silently never runs — a
|
|
// green suite with a test that does not exist. 17- joined on 2026-09-16
|
|
// (the hermes vhost, whose upstream is a host address rather than a
|
|
// container name, so it needs its own pass condition). 18- joined on
|
|
// 2026-09-24 (OpenWebUI SSO through authentik). 20- joined on 2026-10-21
|
|
// (Grafana's OAuth2 relying-party login, which the edge-only 13- never
|
|
// follows). 21- joined 2026-10-21 (the open-notebook vhost, deployed
|
|
// 2026-10-19 - the newest guarded app, in neither GUARDED list nor any
|
|
// spec until now: the 17-hermes "uncovered vhost broke silently" class).
|
|
// 22- joins Prometheus's app-is-really-there proof (its own API), closing
|
|
// the "not a login wall but maybe a 404" hole 20- closed for Grafana. 24-
|
|
// joins 2026-11-03 (Audiobookshelf's DEFAULT listener grant) and belongs to
|
|
// this project precisely because the standard identity is in no Audiobookshelf
|
|
// group — the admin project could not observe the default.
|
|
testMatch: /(10|12|13|16|17|18|20|21|22|24)-.*\.spec\.ts/,
|
|
use: { storageState: ".auth/qa-e2e.json" },
|
|
dependencies: ["setup"],
|
|
},
|
|
{
|
|
name: "admin",
|
|
// 23- joins 2026-11-02 (Audiobookshelf SSO): it needs BOTH halves of the admin
|
|
// fixture — a live authentik session to ride the OIDC round trip, and the
|
|
// qa-e2e-admin group membership that grants site admin in the app.
|
|
testMatch: /(11|23)-.*\.spec\.ts/,
|
|
use: { storageState: ".auth/qa-e2e-admin.json" },
|
|
dependencies: ["setup"],
|
|
},
|
|
{
|
|
name: "guest",
|
|
testMatch: /(14|15)-.*\.spec\.ts/,
|
|
use: { storageState: { cookies: [], origins: [] } },
|
|
},
|
|
{
|
|
name: "frankbook",
|
|
// The *arr/qBittorrent walk (19-). Excluded from default runs and from
|
|
// the deploy e2e gate unless a frankbook trigger path changed — the
|
|
// links terminate on FrankBook-Pro, which sleeps (see tests/e2e/run.sh
|
|
// and scripts/deploy.sh). Matched by number prefix like every project
|
|
// here; joined 2026-10-05.
|
|
testMatch: /19-.*\.spec\.ts/,
|
|
use: { storageState: ".auth/qa-e2e-admin.json" },
|
|
dependencies: ["setup"],
|
|
},
|
|
],
|
|
});
|