Skip to content

Conversation

@fabiovincenzi
Copy link
Collaborator

No description provided.

renovate bot and others added 30 commits November 14, 2025 22:50
fix(deps): update npm - - package.json
Co-authored-by: Kris West <kristopher.west@natwest.com>
Signed-off-by: Juan Escalada <97265671+jescalada@users.noreply.github.com>
chore(deps): update github-actions - workflows - .github/workflows/unused-dependencies.yml
This replaces jwk-to-pem with simply using crypto.createPublicKey. This
further drops elliptic from the dependency tree, which has known
security issues (note this is mostly for hygiene as jwk-to-pem doesn't
use the vulnerable code paths, per
Brightspace/node-jwk-to-pem#187).
Co-authored-by: Kris West <kristopher.west@natwest.com>
Signed-off-by: Juan Escalada <97265671+jescalada@users.noreply.github.com>
Co-authored-by: Kris West <kristopher.west@natwest.com>
Signed-off-by: Juan Escalada <97265671+jescalada@users.noreply.github.com>
Co-authored-by: Kris West <kristopher.west@natwest.com>
Signed-off-by: Juan Escalada <97265671+jescalada@users.noreply.github.com>
Co-authored-by: Kris West <kristopher.west@natwest.com>
Signed-off-by: Juan Escalada <97265671+jescalada@users.noreply.github.com>
Co-authored-by: Kris West <kristopher.west@natwest.com>
Signed-off-by: Juan Escalada <97265671+jescalada@users.noreply.github.com>
Co-authored-by: Kris West <kristopher.west@natwest.com>
Signed-off-by: Juan Escalada <97265671+jescalada@users.noreply.github.com>
fabiovincenzi and others added 30 commits December 29, 2025 11:15
- Remove verbose logging from Dockerfile
- pin dependent actions in new e2e workflow to their respective commits
- refactor the tests to work slightly more robustly (handle creds, etc)
- Removed the obsolete 'version: 3.7' field from docker-compose.yml
- This fixes the warning about the version field being obsolete in newer Docker Compose versions
- The e2e tests now run without warnings
- Fix OIDC configuration syntax errors
- Update Cypress baseUrl to use correct port (8080)
- Fix CI workflow to use correct port and remove & from start command
- Ensure frontend is built before running tests
- CSRF protection already properly disabled in test environment

Cypress tests now pass:
- autoApproved.cy.js: 1/1 passing
- login.cy.js: 8/8 passing
- repo.cy.js: failing due to rate limiting (separate issue)

This resolves the main issues mentioned in the failing job:
- CSRF Token Missing Errors: Fixed by proper test environment config
- Shell Script Syntax Error: Fixed by removing & from start command
- Unknown Authentication Strategy: Fixed OIDC syntax errors
- Route Not Hit: Fixed by building frontend and using correct port
- Fix CSRF protection by setting NODE_ENV=test in CI
- Fix OIDC strategy by checking enabled flag before configuration
- Fix port configuration by using correct server port (8080)
- Add start:ci script to run server only (not dev client)
- Set CYPRESS_BASE_URL environment variable for consistency

This should resolve:
- CSRF token missing errors in CI
- Unknown authentication strategy errors
- Port mismatch issues (3000 vs 8080)
- Shell script syntax errors with & character
Signed-off-by: Fabio Vincenzi <93596376+fabiovincenzi@users.noreply.github.com>
…ication-fix

chore: remove unused NPM auth token and flags
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

9 participants