End-to-end rauthy login validation (browser-real)

017-idp-login-e2e

The rauthy driver's full browser round-trip (SPA -> same-origin /auth proxy -> rauthy login UI -> OIDC callback -> app session cookie) has been exercised by hand but never by an automated end-to-end test; this was the standing owed item from the enrahi phase close-out. This spec adds a Playwright-driven e2e that boots the app plus the dev rauthy (docker compose, spec 005), completes a real password login in a real browser engine, and asserts the session, profile, and logout behavior. Kept out of the default verify verb; runs as its own npm script and an optional scheduled CI job.

Depends on

• 005-rauthy-same-origin
• 006-webapp-spa

Establishes

• e2e/ (directory)
• .github/workflows/e2e.yml

Sections

• 017: IdP login e2e
• 1. Purpose
• 2. Territory
• 3. Behavior
• 4. Acceptance
• 5. Out of scope

Source

specs/017-idp-login-e2e/spec.md @ dc4c9237e12aas of 2026-07-21 · shard 2a502f52e628