spikerj/spikersoft-issues
1
0 Fork 0
Code Issues 23 Pull Requests Actions Packages Projects Releases Wiki Activity

[E2E P4] Authenticated core journeys #316

New Issue
Closed
opened 2026-07-01 21:17:10 +00:00 by spikerj · 4 comments
spikerj commented 2026-07-01 21:17:10 +00:00
Owner
Copy link
Copy source

Phase P4 of epic #307. Depends on P3's verified-user fixture (or a seeded Keycloak test user + storage-state).

  • Login/logout round-trip through Keycloak; storage-state reuse across specs
  • /profile (including unsavedChangesGuard behavior)
  • /reading-journey + /reader/:bookId (needs ReadingInterestGuard satisfied)
  • /calendar create/edit/delete event
  • /chat, /ai interactions
  • Lessons + code playgrounds (run code round-trip through coderunner)
  • /blog/create, /fundraisers, /info-vault, /tracker
  • Auth-gated games load (/space-game, /hexatile-game, …)
  • Marks (/mark/customer, /mark/map)
Phase P4 of epic #307. Depends on P3's verified-user fixture (or a seeded Keycloak test user + storage-state). - [ ] Login/logout round-trip through Keycloak; storage-state reuse across specs - [ ] `/profile` (including unsavedChangesGuard behavior) - [ ] `/reading-journey` + `/reader/:bookId` (needs ReadingInterestGuard satisfied) - [ ] `/calendar` create/edit/delete event - [ ] `/chat`, `/ai` interactions - [ ] Lessons + code playgrounds (run code round-trip through coderunner) - [ ] `/blog/create`, `/fundraisers`, `/info-vault`, `/tracker` - [ ] Auth-gated games load (`/space-game`, `/hexatile-game`, …) - [ ] Marks (`/mark/customer`, `/mark/map`)
spikerj added the enhancement label 2026-07-01 21:17:10 +00:00
spikerj commented 2026-07-03 19:43:21 +00:00
Author
Owner
Copy link
Copy source

Progress — angular PR #107 (authenticated-suite foundation)

  • Storage-state login fixture — auth-setup Playwright project performs one real Keycloak UI login (ids.spikersoft.com, spikersoft realm) and persists the SSO cookies; the authenticated project starts every spec from that state via check-sso silent SSO. Credential-gated: without E2E_USER_USERNAME/E2E_USER_PASSWORD everything self-skips, so the credential-less CI job is untouched.
  • Authenticated walk spec — all 38 walkable auth routes + the 9 auth-gated tools deferred from P1 (language playgrounds incl. regex/sql/x86, git-playground). Exclusions with reasons in AUTH_WALK_EXCLUDED_PATHS (/video-call → own spec; /keycloak-admin → P6/#340).
  • Coverage reporter counts auth surfaces as walked only when creds are configured — with them active, route coverage goes 32% → ~72%.

Blocked on: a seeded test user in the live spikersoft realm (live-is-test). Registration self-serve is blocked by the P3 SMS hook, so the account needs to be created via Keycloak admin. Once creds land in .env.e2e (and later a CI secret for a nightly authenticated job), the first real run + console-noise triage is next, then the per-journey specs (profile/unsavedChangesGuard, calendar CRUD, chat/ai, reading journey, playground run round-trip).

### Progress — angular PR #107 (authenticated-suite foundation) - [x] **Storage-state login fixture** — `auth-setup` Playwright project performs one real Keycloak UI login (ids.spikersoft.com, `spikersoft` realm) and persists the SSO cookies; the `authenticated` project starts every spec from that state via `check-sso` silent SSO. Credential-gated: without `E2E_USER_USERNAME`/`E2E_USER_PASSWORD` everything self-skips, so the credential-less CI job is untouched. - [x] **Authenticated walk spec** — all 38 walkable auth routes + the 9 auth-gated tools deferred from P1 (language playgrounds incl. regex/sql/x86, git-playground). Exclusions with reasons in `AUTH_WALK_EXCLUDED_PATHS` (`/video-call` → own spec; `/keycloak-admin` → P6/#340). - [x] Coverage reporter counts auth surfaces as walked only when creds are configured — with them active, route coverage goes 32% → ~72%. **Blocked on:** a seeded test user in the live `spikersoft` realm (live-is-test). Registration self-serve is blocked by the P3 SMS hook, so the account needs to be created via Keycloak admin. Once creds land in `.env.e2e` (and later a CI secret for a nightly authenticated job), the first real run + console-noise triage is next, then the per-journey specs (profile/unsavedChangesGuard, calendar CRUD, chat/ai, reading journey, playground run round-trip).
spikerj commented 2026-07-04 01:57:00 +00:00
Author
Owner
Copy link
Copy source

Test accounts seeded and the first credentialed run attempted:

  • Created e2e.student (default roles) and e2e.staff (has staff realm role) directly via the Keycloak Admin API; credentials in spikersoft-angular/.env.e2e. Both verified valid via direct grant against spikersoft-web.
  • Ran auth-setup: Keycloak login succeeds, but the authenticated app crashes on bootstrap with NG0200 (circular DI) — blank shell, no toolbar/user-menu — so storage-state can't be captured. Filed as #345 (blocks all authenticated phases).

P4 is unblocked on the credentials front but now blocked on #345. Once that's fixed the walk should run without further setup (the fixture, projects, and manifest are already in place).

Test accounts seeded and the first credentialed run attempted: - Created `e2e.student` (default roles) and `e2e.staff` (has `staff` realm role) directly via the Keycloak Admin API; credentials in `spikersoft-angular/.env.e2e`. Both verified valid via direct grant against `spikersoft-web`. - Ran `auth-setup`: Keycloak login succeeds, but the authenticated app **crashes on bootstrap with NG0200 (circular DI)** — blank shell, no toolbar/user-menu — so storage-state can't be captured. Filed as **#345** (blocks all authenticated phases). P4 is unblocked on the *credentials* front but now blocked on #345. Once that's fixed the walk should run without further setup (the fixture, projects, and manifest are already in place).
spikerj commented 2026-07-22 02:55:31 +00:00
Author
Owner
Copy link
Copy source

Board-sweep status (2026-07-22): P4 foundation merged (storage-state login + auth walk, nightly CI). REMAINING: NG0200 bootstrap-crash blocker + most of the journey checklist (calendar CRUD, chat/ai, playground round-trips).

Board-sweep status (2026-07-22): P4 foundation merged (storage-state login + auth walk, nightly CI). REMAINING: NG0200 bootstrap-crash blocker + most of the journey checklist (calendar CRUD, chat/ai, playground round-trips).
spikerj commented 2026-08-07 13:53:19 +00:00
Author
Owner
Copy link
Copy source

Migrated to spikerj/spikersoft-angular#696 as part of the umbrella-tracker breakup.

Verified 2026-08-07 against spikersoft-angular@8e5a4048: only 3 authenticated spec files exist (walk, art-studio, photo-gallery) plus video-call; no calendar/reading-journey/profile journey specs. Live: credentialed coverage ratchet 65.4 percent, nightly authenticated project red.

Status: partially done — storage-state login + auth walk merged; none of the per-journey specs exist.

Closing here. Work now lives in the repo that holds the fix, so fixes #696 in a PR will auto-close it on merge. The umbrella tracker keeps cross-repo epics only.

— Opus 5 Agent

Migrated to **spikerj/spikersoft-angular#696** as part of the umbrella-tracker breakup. Verified 2026-08-07 against `spikersoft-angular@8e5a4048`: only 3 authenticated spec files exist (walk, art-studio, photo-gallery) plus video-call; no calendar/reading-journey/profile journey specs. Live: credentialed coverage ratchet 65.4 percent, nightly authenticated project red. Status: partially done — storage-state login + auth walk merged; none of the per-journey specs exist. Closing here. Work now lives in the repo that holds the fix, so `fixes #696` in a PR will auto-close it on merge. The umbrella tracker keeps cross-repo epics only. — Opus 5 Agent
Sign in to join this conversation.
No Branch/Tag Specified
Labels
Clear labels
agentic
Actionable surfaced by the agentic architecture & security review
 bug
Something is not working
 duplicate
This issue or pull request already exists
 enhancement
New feature
 epic
Cross-repo epic — children live in per-repo trackers
 help wanted
Need some help
 invalid
Something is wrong
 question
More information is needed
 sonarqube
Code quality issue surfaced by SonarQube (bug / code smell)
 wontfix
This won't be fixed
No labels enhancement
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
spikerj (Joseph Spiker)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: spikerj/spikersoft-issues#316