mirror of
https://github.com/Vateron-Media/XC_VM.git
synced 2026-10-04 20:03:11 +02:00
rootandClaude Opus 5
d0458a8eeb
The Playwright suite only checked that pages render. It now performs the administrator's work against a live test panel and asserts the panel's own data after each step: - catalogue: a stream category, a bouquet and a reseller package — created, renamed / edited, reopened, deleted; - subscribers: a line with a bouquet (search, edit in the modal, disable / enable, ban / unban, delete), a MAG and an Enigma2 device; - bulk: two lines selected with the header checkbox, disabled and deleted; - resellers: created with credits, topped up, edited, disabled, deleted; - block lists: an IP (RFC 5737 address — blocking adds an iptables rule), a user agent and an ISP; - streams: a live stream added with a source and a server, started, running with codecs and the Resources column filled in, stopped, renamed, deleted; - sign-in: a second administrator refused with a wrong password, signing in and out — a separate account, because every admin login re-hashes the password and ends that account's other sessions. Records are named `e2e-<run>-…`; a teardown project sweeps whatever a run leaves behind and nothing else. tools/create-admin.php provisions the dedicated test administrator on the panel host. The first runs found three save paths that answered an empty page (fixed inf7bba5cb,fd13c940,ee2f586a). Against the test panel: 82 passed, 1 skipped (no series to select). Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_016WDhDajBPziJwjWZcXnh6R
86 lines
4.2 KiB
Markdown
86 lines
4.2 KiB
Markdown
# XC_VM admin E2E (Playwright)
|
|
|
|
Browser tests for the admin panel. They run against a **live** panel (there is no
|
|
built-in server), so point them at a test instance, never at production:
|
|
the admin specs create, edit, start and delete real records.
|
|
|
|
## What runs
|
|
|
|
| File | Covers |
|
|
| --- | --- |
|
|
| `tests/auth.setup.ts` | Signs in once; the other specs reuse that session (`.auth/admin.json`) |
|
|
| `tests/dashboard.spec.ts`, `customizer.spec.ts`, `newui-tables.spec.ts` | Smoke: the new-UI shell, dashboard tiles, per-user UI prefs, every migrated list page loads |
|
|
| `tests/admin/catalog.spec.ts` | Stream category, bouquet and reseller package: create, rename / edit, reopen, delete |
|
|
| `tests/admin/subscribers.spec.ts` | Line with a bouquet: create, search, edit in the modal, disable / enable, ban / unban, delete; MAG and Enigma2 devices: create, find, delete |
|
|
| `tests/admin/bulk.spec.ts` | Lines bulk bar: select with the header checkbox, bulk disable, bulk delete |
|
|
| `tests/admin/resellers.spec.ts` | Reseller: create with credits, top up from the list, edit in the modal, disable / enable, delete |
|
|
| `tests/admin/blocklists.spec.ts` | Block and unblock an IP, a user agent and an ISP |
|
|
| `tests/admin/streams.spec.ts` | Live stream: add with a source and a server, start, wait until it runs with codecs and the Resources column (producer / CPU / RAM), stop, rename, delete |
|
|
| `tests/admin/signin.spec.ts` | A second administrator: created, refused with a wrong password, signs in and out, deleted |
|
|
| `tests/admin/cleanup.teardown.ts` | After everything: removes whatever the admin specs left behind (see below) |
|
|
|
|
## Run
|
|
|
|
```bash
|
|
# one-time: install deps + the Chromium browser
|
|
cd tests/e2e && npm ci && npx playwright install --with-deps chromium
|
|
|
|
# configure (or copy .env.example -> .env)
|
|
export XC_E2E_BASE_URL="http://<host>:<port>/<access-code>"
|
|
export XC_E2E_USER="<admin user>"
|
|
export XC_E2E_PASS="<admin pass>"
|
|
|
|
# from the repo root:
|
|
make e2e # headless run
|
|
make e2e-ui # interactive Playwright UI
|
|
|
|
# one spec, e.g. while working on it:
|
|
cd tests/e2e && npx playwright test tests/admin/streams.spec.ts
|
|
```
|
|
|
|
`XC_E2E_BASE_URL` is the admin base including the access-code path segment
|
|
(e.g. `http://panel.example.com:8080/ACCESS_CODE`) — the same prefix as `/<code>/login`.
|
|
|
|
Optional:
|
|
|
|
| Variable | Default | Used by |
|
|
| --- | --- | --- |
|
|
| `XC_E2E_STREAM_SOURCE` | Unified Streaming's public 24/7 demo channel | `streams.spec.ts` — a **live** source the panel's server can reach |
|
|
| `XC_E2E_SERVER` | `Main Server` | `streams.spec.ts` — the server the stream runs on |
|
|
| `XC_E2E_RUN` | a timestamp | the run tag in every record name (below) |
|
|
|
|
Traces/screenshots/video for failures land in `test-results/`, the HTML report in
|
|
`playwright-report/` (`npm run report`).
|
|
|
|
## A dedicated admin account
|
|
|
|
Use an account that exists only for the tests. A successful admin login re-hashes
|
|
the password, which **signs out every other session of that account** — each run
|
|
would log a person out of their own panel.
|
|
|
|
`tools/create-admin.php` creates (or re-keys) that account on the panel host, the
|
|
same way the first-run setup page does. The password is read from stdin:
|
|
|
|
```bash
|
|
scp tests/e2e/tools/create-admin.php root@panel:/tmp/
|
|
ssh root@panel 'sudo -u xc_vm /home/xc_vm/bin/php/bin/php /tmp/create-admin.php e2e_admin' < password.txt
|
|
```
|
|
|
|
## Test data
|
|
|
|
Every record the admin specs create is named after the run: `e2e-<run>-<label>`
|
|
(categories, bouquets, packages, streams, block lists), `e2e<run><label>` for
|
|
usernames, and devices carry an `e2e-<run>` tag in their notes. Each spec deletes
|
|
what it made; `cleanup.teardown.ts` runs after the whole suite (also after a
|
|
failure) and sweeps anything matching those patterns, from any earlier run. It
|
|
never touches other records, nor the `XC_E2E_USER` account.
|
|
|
|
Side effects on the panel host worth knowing:
|
|
|
|
- **Blocking an IP** adds an iptables DROP rule. The spec uses an address from
|
|
198.51.100.0/24 (RFC 5737 documentation range) and lifts the block again.
|
|
- **The wrong-password test** counts once against the login flood limit
|
|
(Settings → `login_flood`, failures per IP per day).
|
|
- **The stream test** pulls its source for a minute or two, and the panel's cron
|
|
must be running: codecs and resources are filled in by `cron:streams`.
|