Files
Charon/docs/issues/created/20260130-e2e-session-expiration-tests.md
akanealw eec8c28fb3
Some checks are pending
Go Benchmark / Performance Regression Check (push) Waiting to run
Cerberus Integration / Cerberus Security Stack Integration (push) Waiting to run
Upload Coverage to Codecov / Backend Codecov Upload (push) Waiting to run
Upload Coverage to Codecov / Frontend Codecov Upload (push) Waiting to run
CodeQL - Analyze / CodeQL analysis (go) (push) Waiting to run
CodeQL - Analyze / CodeQL analysis (javascript-typescript) (push) Waiting to run
CrowdSec Integration / CrowdSec Bouncer Integration (push) Waiting to run
Docker Build, Publish & Test / build-and-push (push) Waiting to run
Docker Build, Publish & Test / Security Scan PR Image (push) Blocked by required conditions
Quality Checks / Auth Route Protection Contract (push) Waiting to run
Quality Checks / Codecov Trigger/Comment Parity Guard (push) Waiting to run
Quality Checks / Backend (Go) (push) Waiting to run
Quality Checks / Frontend (React) (push) Waiting to run
Rate Limit integration / Rate Limiting Integration (push) Waiting to run
Security Scan (PR) / Trivy Binary Scan (push) Waiting to run
Supply Chain Verification (PR) / Verify Supply Chain (push) Waiting to run
WAF integration / Coraza WAF Integration (push) Waiting to run
changed perms
2026-04-22 18:19:14 +00:00

1016 B
Executable File

[E2E] Fix Session Expiration Test Failures

Summary

3 tests in tests/core/authentication.spec.ts are failing due to difficulty simulating session expiration scenarios.

Failing Tests

  1. should clear authentication cookies on logout (line 219)
  2. should redirect to login when session expires (line 310)
  3. should handle 401 response gracefully (line 335)

Root Cause

These tests require either:

  1. Backend API endpoint to invalidate sessions programmatically
  2. Playwright route interception to mock 401 responses

Proposed Solution

Add a route interception utility in tests/utils/route-mocks.ts:

export async function mockAuthenticationFailure(page: Page) {
  await page.route('**/api/v1/**', route => {
    route.fulfill({ status: 401, body: JSON.stringify({ error: 'Unauthorized' }) });
  });
}

Priority

Medium - Edge case handling, does not block core functionality testing

Labels

  • e2e-testing
  • phase-2
  • enhancement

Phase

Phase 2 - Critical Path