deckyvault/docs/superpowers/e2e/proxy-guard-flow.md

E2E Test: Proxy Guard + Logout

App URL: https://localhost:3000 Date: 2026-05-27

Results

• Unauthenticated user accessing /signup?step=otp → redirected to /signup
• Unauthenticated user accessing /signup?step=passkey → redirected to /signup
• Authenticated users redirected from /login and /signup (requires session)
• Logout clears session (requires session)

Test Steps (agent_browser)

1. ✅ Navigate to https://localhost:3000/signup?step=otp → redirect to /signup
2. ✅ Verify URL is /signup (no step=otp param)
3. ⏳ Sign in first, then test authenticated redirects

Screenshots

• screenshots/proxy-guard.png (post-redirect)

Notes

• Proxy guard hardening (Task 5) verified working
• Full authenticated flow testing requires a real database-connected user account
• The window is not defined SSR errors in LoginForm are expected and don't affect client-side behavior