larvit/plainpages
3
0
Fork 0
Code Issues 1 Pull Requests 7 Actions 1 Packages Projects Releases Wiki Activity

Redirect an anonymous hit on /settings to sign-in with the page as return_to
CI / full-gate (push) Successful in 3m25s
Details

Browse Source
This commit is contained in:
Lilleman auf Larv
2026-10-31 09:04:55 +01:00
parent 15c5a09667
commit 2a4ed30e93
6 changed files with 98 additions and 42 deletions
Download Patch File Download Diff File Expand all files Collapse all files
e2e-tests/full-flow.spec.ts
+13
View File
@@ -240,6 +240,19 @@ test("return_to: a deep link while logged out returns to that page after login",
await expect(page.locator("h1")).toHaveText("Users");
});
test("settings: an anonymous visit signs in first, then lands on the settings page", async ({ page }) => {
test.setTimeout(90_000);
// /settings is public (recovery lands there with a Kratos session but no app JWT), so Kratos' 401
// for an anonymous settings flow must send the visitor to sign in, not to the 500 page.
await page.goto("/settings");
await expect(page).toHaveURL(/\/login(\?|$)/);
await page.fill('input[name="identifier"]', ADMIN_EMAIL);
await page.fill('input[name="password"]', ADMIN_PASSWORD);
await page.locator('.auth-form button[type="submit"]').click();
await expect(page).toHaveURL(/\/settings(\?|$)/);
await expect(page.locator("h1")).toHaveText("Account settings");
});
test("mocked SSO login: the provider button signs a user in via OIDC", async ({ page }) => {
test.setTimeout(90_000);
await page.goto("/login");