pomerium / pomerium / 21525623426 / 1
44%
main: 44%

DEFAULT BRANCH: main
Ran
Files 656
Run time 13s
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 44.608% (+0.008%) from 44.6%
21525623426.1

push

github

web-flow 
test(acceptance): add E2E acceptance test harness (#6062)

## Summary
- Add comprehensive E2E acceptance test suite using Playwright
- Docker Compose orchestration with Keycloak IdP
- 59 focused tests covering security-critical behaviors
- Single source of truth for test users via fixtures/users.json
- CI workflow for automated testing

## Test Coverage

### Authentication (`authn/`)
- Login flow with OIDC
- Logout with HMAC-signed URLs
- CSRF/state protection
- Token refresh behavior

### Authorization (`authz/`)
- Email domain policies
- Group-based policies (single, multiple, compound)
- Explicit deny rules
- mTLS client certificates
- Internal endpoint security (path traversal, public vs protected)

### Headers (`headers/`)
- Cookie security flags
- CORS preflight handling
- JWT assertion headers
- WebSocket upgrade

## Test Plan
- [x] All 59 tests pass locally
- [x] TypeScript type checking passes
- [x] Docker compose config validates
- [x] CI workflow passes

## Architecture

```
internal/acceptance/
├── browser/           # Playwright tests
│   ├── fixtures/      # Test data (users.ts, test-data.ts)
│   ├── helpers/       # Shared utilities
│   └── tests/         # Test specs (authn/, authz/, headers/)
├── fixtures/          # Single source of truth (users.json)
├── pomerium/          # Pomerium config
├── keycloak/          # Keycloak realm config
├── scripts/           # Shell scripts for setup
└── ws-server/         # WebSocket/CORS test server
```

30998 of 69490 relevant lines covered (44.61%)

102.56 hits per line

Source Files on job 21525623426.1