Initial curated itworx-knowledge-hub source from 3b1751d0d9dee551aa6994eee0093704dc334817

tests/e2e/specs/auth-journey.spec.ts

@@ -0,0 +1,56 @@
+import AxeBuilder from "@axe-core/playwright";
+import { expect, test } from "@playwright/test";
+import { OWNER_DISPLAY_NAME, OWNER_EMAIL, OWNER_PASSWORD } from "./support/credentials";
+
+test.describe("login / shell / logout journey", () => {
+  test("a user can log in with the keyboard alone, reach the shell, and log out", async ({
+    page
+  }) => {
+    await page.goto("/");
+    await expect(page.getByRole("heading", { name: "Aanmelden" })).toBeVisible();
+
+    // Keyboard-only: no page.click() anywhere in this test.
+    await page.getByLabel("E-mailadres").click();
+    await page.keyboard.type(OWNER_EMAIL);
+    await page.keyboard.press("Tab");
+    await page.keyboard.type(OWNER_PASSWORD);
+    await page.keyboard.press("Enter");
+
+    await expect(page.getByRole("button", { name: "Accountmenu" })).toContainText(OWNER_DISPLAY_NAME);
+    await expect(page.getByRole("heading", { name: "Operationeel overzicht" })).toBeVisible();
+
+    const shellAccessibility = await new AxeBuilder({ page }).analyze();
+    expect(shellAccessibility.violations).toEqual([]);
+
+    // Account menu and logout remain keyboard-operable in the V2 shell.
+    await page.getByRole("button", { name: "Accountmenu" }).focus();
+    await page.keyboard.press("Enter");
+    await page.getByRole("menuitem", { name: "Afmelden" }).focus();
+    await page.keyboard.press("Enter");
+
+    await expect(page.getByRole("heading", { name: "Aanmelden" })).toBeVisible();
+  });
+
+  test("an incorrect password shows a clear, accessible error and does not sign the user in", async ({
+    page
+  }) => {
+    await page.goto("/");
+
+    // Deliberately a non-existent account rather than the shared owner account: the
+    // owner is reused (and logged in) by every project in this suite, and repeatedly
+    // failing its password here would risk tripping real account lockout across
+    // parallel workers/projects. The generic error text and non-authenticated outcome
+    // are the same either way (see LoginUseCase — unknown account and wrong password
+    // are indistinguishable by design).
+    await page.getByLabel("E-mailadres").fill("onbekend@itworx.e2e");
+    await page.getByLabel("Wachtwoord", { exact: true }).fill("whatever-password-value");
+    await page.getByRole("button", { name: "Aanmelden" }).click();
+
+    const alert = page.getByRole("alert");
+    await expect(alert).toBeVisible();
+    await expect(alert).toContainText("onjuist");
+
+    // Still on the login screen, not silently signed in.
+    await expect(page.getByRole("heading", { name: "Aanmelden" })).toBeVisible();
+  });
+});