dafbdb9f71
The previous setup asserted that the URL after submitting wp-login.php matches /wp-admin/. On staging.peptiderepo.com, a login_redirect filter sends successful admin logins to the site homepage instead of wp-admin, so this assertion failed even on correct credentials — the setup logged in, the storage state would have been usable, but Playwright treated it as a credential failure and the storage state was never written. Replaces the post-submit assertion with two safer checks: - Wait until URL is no longer wp-login.php (i.e. login was accepted) - Navigate explicitly to /wp-admin/ and assert we land there with the admin bar visible This bug was hidden behind the testDir misalignment (fixed in #1) and the stale staging admin username GH Secret (rotated 2026-05-14). With both of those fixed, the third bug surfaced. Agent-Session: cto peptide-e2e-post-login-redirect-fix
53 lines
1.9 KiB
TypeScript
Executable File
53 lines
1.9 KiB
TypeScript
Executable File
/**
|
|
* global.setup.ts
|
|
*
|
|
* What: Authenticates to WordPress admin once and persists the session to disk.
|
|
* Who triggers it: Playwright "setup" project, runs before all smoke tests.
|
|
* Dependencies: WP_ADMIN_USER and WP_ADMIN_PASSWORD env vars.
|
|
*
|
|
* The saved auth state (playwright/.auth/admin.json) is reused by the
|
|
* "chromium" project so individual tests don't each incur a login round-trip.
|
|
*/
|
|
|
|
import { test as setup, expect } from '@playwright/test';
|
|
import * as path from 'path';
|
|
import * as fs from 'fs';
|
|
|
|
const AUTH_FILE = path.join(__dirname, 'playwright/.auth/admin.json');
|
|
|
|
setup('authenticate as WP admin', async ({ page }) => {
|
|
const user = process.env.WP_ADMIN_USER;
|
|
const password = process.env.WP_ADMIN_PASSWORD;
|
|
|
|
if (!user || !password) {
|
|
throw new Error(
|
|
'WP_ADMIN_USER and WP_ADMIN_PASSWORD must be set in .env or CI secrets'
|
|
);
|
|
}
|
|
|
|
// Ensure directory exists
|
|
fs.mkdirSync(path.dirname(AUTH_FILE), { recursive: true });
|
|
|
|
await page.goto('/wp-login.php');
|
|
await page.fill('#user_login', user);
|
|
await page.fill('#user_pass', password);
|
|
await page.click('#wp-submit');
|
|
|
|
// Wait for any post-login navigation. The site may redirect successful logins
|
|
// to the homepage (via a login_redirect filter) rather than to wp-admin —
|
|
// staging does this. So we don't assert the post-submit URL; instead, we
|
|
// verify we're no longer ON wp-login.php (which would indicate a credential
|
|
// rejection or 2FA prompt) and then navigate explicitly to wp-admin.
|
|
await page.waitForURL((url) => !url.pathname.includes('/wp-login.php'), {
|
|
timeout: 20_000,
|
|
});
|
|
|
|
// Navigate explicitly into wp-admin to capture the authenticated admin session.
|
|
await page.goto('/wp-admin/');
|
|
await expect(page).toHaveURL(/\/wp-admin\//, { timeout: 20_000 });
|
|
await expect(page.locator('#wpadminbar')).toBeVisible();
|
|
|
|
// Persist session cookies + localStorage to disk
|
|
await page.context().storageState({ path: AUTH_FILE });
|
|
});
|