mozilla / fx-private-relay / 1e16dbc1-b6c3-4629-8d5c-c459b1d9e3ad / 1

92%

main: 92%

Pull #6492

circleci

fix(e2e): send fxa-ci header in global setup to bypass Fastly CAPTCHA

The fxa-ci header bypasses Fastly's dynamic CAPTCHA challenge on FxA
stage. PR #6469 added it via extraHTTPHeaders in playwright.config.ts,
but that only applies to test contexts, not globalSetup's manual browser.

Move the header to global-setup.ts where the FxA signup happens.

Use route interception to strip fxa-ci from api-accounts requests. The
custom header triggers a CORS preflight that fails because api-accounts
doesn't include fxa-ci in Access-Control-Allow-Headers, which blocks
the OAuth client info fetch and causes "Invalid OAuth parameter: scope".

3058 of 3917 branches covered (78.07%)

Branch coverage included in aggregate %.

18869 of 20013 relevant lines covered (94.28%)

14.4 hits per line