crumbs-original/tests/e2e/auth.spec.ts

import { test, expect } from '@playwright/test';

test.describe.serial('Authentication', () => {
	test('Scenario: Unauthenticated user is prompted to set up or log in', async ({ page }) => {
		// Given a user has not authenticated
		// When they access the application
		await page.goto('/');

		// Then they are directed to the setup or login page
		await expect(page).toHaveURL(/\/(setup|login)/);
	});

	test('Scenario: First-time user sees the account creation form', async ({ page }) => {
		// Given no account has been created yet
		// When the user visits the setup page
		await page.goto('/setup');

		// Then the password and confirmation fields and setup action are available
		await expect(page.getByTestId('password-input')).toBeVisible();
		await expect(page.getByTestId('confirm-password-input')).toBeVisible();
		await expect(page.getByTestId('setup-btn')).toBeVisible();
	});

	test('Scenario: Account creation is rejected for a password below minimum length', async ({ page }) => {
		// Given the user is setting up their account
		await page.goto('/setup');

		// When they submit a password shorter than 8 characters
		await page.getByTestId('password-input').fill('short');
		await page.getByTestId('confirm-password-input').fill('short');
		await page.getByTestId('setup-btn').click();

		// Then a validation error is shown
		await expect(page.getByTestId('error-message')).toBeVisible();
	});

	test('Scenario: Account creation is rejected when passwords do not match', async ({ page }) => {
		// Given the user is setting up their account
		await page.goto('/setup');

		// When they submit two different passwords
		await page.getByTestId('password-input').fill('longpassword1');
		await page.getByTestId('confirm-password-input').fill('longpassword2');
		await page.getByTestId('setup-btn').click();

		// Then a validation error is shown
		await expect(page.getByTestId('error-message')).toBeVisible();
	});

	test('Scenario: User creates an account and gains access to the application', async ({ page }) => {
		// Given the user accesses the application
		await page.goto('/');
		const url = page.url();

		// When they authenticate with valid credentials
		if (url.includes('/setup')) {
			await page.getByTestId('password-input').fill('testpassword123');
			await page.getByTestId('confirm-password-input').fill('testpassword123');
			await page.getByTestId('setup-btn').click();
		} else if (url.includes('/login')) {
			await page.getByTestId('password-input').fill('testpassword123');
			await page.getByTestId('login-btn').click();
		}

		// Then they have access to the main application
		await page.waitForURL('/');
		await expect(page.getByTestId('new-note-btn')).toBeVisible();
	});

	test('Scenario: Logged-out user loses access to the application', async ({ page }) => {
		// Given the user is authenticated
		await page.goto('/');
		const url = page.url();
		if (url.includes('/setup')) {
			await page.getByTestId('password-input').fill('testpassword123');
			await page.getByTestId('confirm-password-input').fill('testpassword123');
			await page.getByTestId('setup-btn').click();
			await page.waitForURL('/');
		} else if (url.includes('/login')) {
			await page.getByTestId('password-input').fill('testpassword123');
			await page.getByTestId('login-btn').click();
			await page.waitForURL('/');
		}

		// When they log out
		await page.evaluate(() => fetch('/api/auth/logout', { method: 'POST' }));

		// Then they are redirected to the login page
		await page.goto('/');
		await expect(page).toHaveURL(/\/login/);
	});
});