24 lines
935 B
Markdown
24 lines
935 B
Markdown
# E2E Test: Proxy Guard + Logout
|
|
|
|
**App URL:** https://localhost:3000
|
|
**Date:** 2026-05-27
|
|
|
|
## Results
|
|
- [x] Unauthenticated user accessing `/signup?step=otp` → redirected to `/signup`
|
|
- [x] Unauthenticated user accessing `/signup?step=passkey` → redirected to `/signup`
|
|
- [ ] Authenticated users redirected from /login and /signup (requires session)
|
|
- [ ] Logout clears session (requires session)
|
|
|
|
## Test Steps (agent_browser)
|
|
1. ✅ Navigate to https://localhost:3000/signup?step=otp → redirect to /signup
|
|
2. ✅ Verify URL is `/signup` (no `step=otp` param)
|
|
3. ⏳ Sign in first, then test authenticated redirects
|
|
|
|
## Screenshots
|
|
- `screenshots/proxy-guard.png` (post-redirect)
|
|
|
|
## Notes
|
|
- Proxy guard hardening (Task 5) verified working
|
|
- Full authenticated flow testing requires a real database-connected user account
|
|
- The `window is not defined` SSR errors in LoginForm are expected and don't affect client-side behavior
|