Skip to content

Document the browser skips of the backend sign-in tests (unbreaks website deploy) #5969

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
shai-almog merged 1 commit into from
Oct 8, 2026
Merged

Document the browser skips of the backend sign-in tests (unbreaks website deploy) #5969

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
56 changes: 56 additions & 0 deletions docs/website/data/port_status_supplement.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -293,6 +293,62 @@
]
}
]
},
{
"test": "BackendAuthTest",
"reason": "The backend sign-in flows send credentials, read the server's redirects and keep its session cookie by hand, the way OidcClient does minus the system browser. In a browser those three belong to the browser itself: it follows redirects without showing them, withholds the Location header, and owns the cookie jar, so the test cannot observe the steps it asserts on.",
"platform_support": "A skipped backend sign-in test does not mean sign-in is unsupported in the browser. A web app signs in through the browser's own redirect flow, which is what OidcClient uses there.",
"verification": "The same flows run against the test server on every other port in this table; the networking half of the backend suite (BackendRestTest, BackendConnectionRequestTest and the rest) runs in the browser too.",
"reason_codes": [
{
"prefix": "credentials-redirects-and-cookies-belong-to-the-browser",
"ports": [
"javascript"
]
}
]
},
{
"test": "BackendDeviceGrantTest",
"reason": "The backend sign-in flows send credentials, read the server's redirects and keep its session cookie by hand, the way OidcClient does minus the system browser. In a browser those three belong to the browser itself: it follows redirects without showing them, withholds the Location header, and owns the cookie jar, so the test cannot observe the steps it asserts on.",
"platform_support": "A skipped backend sign-in test does not mean sign-in is unsupported in the browser. A web app signs in through the browser's own redirect flow, which is what OidcClient uses there.",
"verification": "The same flows run against the test server on every other port in this table; the networking half of the backend suite (BackendRestTest, BackendConnectionRequestTest and the rest) runs in the browser too.",
"reason_codes": [
{
"prefix": "credentials-redirects-and-cookies-belong-to-the-browser",
"ports": [
"javascript"
]
}
]
},
{
"test": "BackendTokenRefreshTest",
"reason": "The backend sign-in flows send credentials, read the server's redirects and keep its session cookie by hand, the way OidcClient does minus the system browser. In a browser those three belong to the browser itself: it follows redirects without showing them, withholds the Location header, and owns the cookie jar, so the test cannot observe the steps it asserts on.",
"platform_support": "A skipped backend sign-in test does not mean sign-in is unsupported in the browser. A web app signs in through the browser's own redirect flow, which is what OidcClient uses there.",
"verification": "The same flows run against the test server on every other port in this table; the networking half of the backend suite (BackendRestTest, BackendConnectionRequestTest and the rest) runs in the browser too.",
"reason_codes": [
{
"prefix": "credentials-redirects-and-cookies-belong-to-the-browser",
"ports": [
"javascript"
]
}
]
},
{
"test": "BackendTotpTest",
"reason": "The backend sign-in flows send credentials, read the server's redirects and keep its session cookie by hand, the way OidcClient does minus the system browser. In a browser those three belong to the browser itself: it follows redirects without showing them, withholds the Location header, and owns the cookie jar, so the test cannot observe the steps it asserts on.",
"platform_support": "A skipped backend sign-in test does not mean sign-in is unsupported in the browser. A web app signs in through the browser's own redirect flow, which is what OidcClient uses there.",
"verification": "The same flows run against the test server on every other port in this table; the networking half of the backend suite (BackendRestTest, BackendConnectionRequestTest and the rest) runs in the browser too.",
"reason_codes": [
{
"prefix": "credentials-redirects-and-cookies-belong-to-the-browser",
"ports": [
"javascript"
]
}
]
}
],
"features": [
Expand Down