qa: Withdrawal Flow Testnet QA – tests and manual checklist (#430)

[MarcusDavidG]

Summary

Closes #430

Adds automated tests and a manual QA checklist for the SEP-24 withdrawal flow on testnet, as part of the testnet deployment readiness wave.

Changes

backend/src/test/withdrawal-flow-testnet.test.ts

19 focused test cases covering the full withdrawal lifecycle:

• Input validation – missing asset_code, unsupported asset, empty string
• Successful URL generation – correct type, UUID id, testnet INTERACTIVE_URL, /kyc-withdraw pathname, transaction_id in URL
• Normalisation – lowercase asset code uppercased, default lang=en, custom lang forwarded
• Optional params – omitted when absent, forwarded when present
• Withdrawal-specific params – dest/dest_extra handling documented
• Quote validation – not found → 400, expired → 400, valid → 200, no quote → prisma not called
• Testnet asset coverage – USDC and USD accepted; BTC (not in assets.ts) rejected

docs/WITHDRAWAL_FLOW_TESTNET_QA.md

Manual QA checklist including:

• Step-by-step UI walkthrough (asset selection → KYC → completion)
• curl examples for all API validation scenarios
• Accessibility checks (keyboard nav, aria-live, aria-label)
• Responsive/mobile checks
• Pass/fail criteria table

Testing

cd backend
npx jest --testPathPatterns="withdrawal-flow-testnet" --no-coverage

All 19 tests are designed to pass against the current implementation in sep24.route.ts and kyc.service.ts.

[drips-wave]

@MarcusDavidG Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits