4 Commits

Include renames

Author	SHA1	Message	Date
ilia	4273162d9e	test: interceptNetworkCall + Zod widening, PROD smoke, NextAuth write gates ... - upload.smoke.spec.ts / gallery.search-filters.spec.ts: replace waitForResponse/text-scrape with typed interceptNetworkCall spies (status + JSON shape) on the real upload POST and the filtered /api/search GET. - api.fastapi-login.spec.ts: Zod-validate the FastAPI TokenResponse and /auth/me UserResponse instead of loose casts. gallery.search-filters.spec.ts gets the same treatment for the Prisma-backed SearchResponse. - prod.smoke.spec.ts: opt-in (PROD_BASE_URL) health + login-page check on a real PROD host; skips as a no-op until the PROD LXC exists (none does yet per `pct list` — see ROADMAP). - viewer.write-gates.spec.ts: NextAuth (browser-session) hasWriteAccess gate on POST /api/faces/{id}/identify — viewer 403s, admin passes through. Provisioned a third, independent auth-DB user (e2e-viewer@levkine.ca, hasWriteAccess=false) for this via ansible's provision-punimtag-e2e-user.py (see that repo for the vault/Infisical/Gitea/Vaultwarden side).	2026-07-14 22:07:30 -04:00
ilia	72e89aef9f	docs: playkit gaps + next e2e ideas (#67)	2026-07-14 20:26:33 -05:00
ilia	e78fad692f	test: FastAPI e2e role-permission gates + gallery search filter coverage ... - Wire E2E_API_USERNAME/PASSWORD (admin) + E2E_API_VIEWER_USERNAME/PASSWORD (viewer) into the Gitea Actions e2e job so FastAPI-authed specs run in CI. - Add api.role-permissions.spec.ts: viewer 403 vs admin 200/200/200 on /api/v1/users, /api/v1/role-permissions, and /api/v1/photos/bulk-delete (safe no-op via a non-existent photo id — proves the gate, not deletion). - Add gallery.search-filters.spec.ts: tag_id and person_id filters on the public /api/search route return correct subsets, combined filters narrow results, and the /search UI tag-filter interaction updates the URL/count. - Update ROADMAP/README/.env.example for the new env vars and coverage.	2026-07-14 20:42:47 -04:00
ilia	d9910acdde	Fill e2e gaps: storageState, real upload POST, session smoke ... Add auth setup project, viewer session check, upload that posts a fixture, FastAPI login spec (skips without E2E_API_*), and repo ROADMAP.md.	2026-07-14 19:17:14 -04:00