28 lines
1.3 KiB
TypeScript
28 lines
1.3 KiB
TypeScript
|
import { expect, test } from '@playwright/test';
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Track Q Q2 / frontend backlog F59: past "verified live" admin claims were
|
||
|
|
* code-inspection only, because /backoffice needs a real Telegram login this
|
||
|
|
* suite cannot perform. ?devBypassAdmin=true (src/app/app.ts, gated by
|
||
|
|
* Angular's isDevMode() at runtime in @marketplaces/auth's
|
||
|
|
* AdminAuthService.devBypassLogin - not just build-time, and a no-op in any
|
||
|
|
* production build) is the existing, already-shipped answer - this test just
|
||
|
|
* proves it actually gets an E2E run into the admin shell.
|
||
|
|
*/
|
||
|
|
test.describe('admin dev bypass', () => {
|
||
|
|
test('?devBypassAdmin=true reaches the admin shell without a Telegram login', async ({ page }) => {
|
||
|
|
await page.goto('/?devBypassAdmin=true');
|
||
|
|
await page.waitForLoadState('networkidle');
|
||
|
|
|
||
|
|
// The bypass alone doesn't navigate anywhere - it only activates the
|
||
|
|
// session, so the admin surface has to be reached directly afterwards.
|
||
|
|
await page.goto('/admin/dashboard');
|
||
|
|
await page.waitForLoadState('networkidle');
|
||
|
|
|
||
|
|
// A real Telegram-gated admin route would redirect to a login dialog;
|
||
|
|
// reaching dashboard content is the actual proof the bypass worked.
|
||
|
|
await expect(page).not.toHaveURL(/login/i);
|
||
|
|
await expect(page.locator('body')).not.toContainText(/scan.*qr|log in with telegram/i);
|
||
|
|
});
|
||
|
|
});
|