mozilla / fx-private-relay / 15e7de0f-4926-498e-aabc-b20cdb711712

92%

main: 92%

push

circleci

fix(e2e): send fxa-ci header in global setup to bypass Fastly CAPTCHA

The fxa-ci header bypasses Fastly's dynamic CAPTCHA challenge on FxA
stage. PR #6469 added it via extraHTTPHeaders in playwright.config.ts,
but that only applies to test contexts, not globalSetup's manual browser.

Move the header to global-setup.ts where the FxA signup happens.

Use route interception to strip fxa-ci from api-accounts requests. The
custom header triggers a CORS preflight that fails because api-accounts
doesn't include fxa-ci in Access-Control-Allow-Headers, which blocks
the OAuth client info fetch and causes "Invalid OAuth parameter: scope".

3058 of 3917 branches covered (78.07%)

Branch coverage included in aggregate %.

18883 of 20027 relevant lines covered (94.29%)

14.39 hits per line