Skip to content

auth_testing.md

Latest commit

 

History

History
30 lines (27 loc) · 969 Bytes

auth_testing.md

File metadata and controls

30 lines (27 loc) · 969 Bytes

Auth-Gated App Testing Playbook (Emergent Google Auth)

Step 1: Create Test User & Session

mongosh --eval " use('test_database'); var userId = 'test-user-' + Date.now(); var sessionToken = 'test_session_' + Date.now(); db.users.insertOne({ user_id: userId, email: 'test.user.' + Date.now() + '@example.com', name: 'Test User', picture: 'https://via.placeholder.com/150', created_at: new Date() }); db.user_sessions.insertOne({ user_id: userId, session_token: sessionToken, expires_at: new Date(Date.now() + 72460601000), created_at: new Date() }); print('Session token: ' + sessionToken); print('User ID: ' + userId); "

Step 2: Test Backend API

  • GET /api/auth/me with Authorization: Bearer <session_token>
  • Protected endpoints: /api/ideas, /api/ideas/:id, /api/ideas/:id/diagnose, /api/ideas/:id/checkins

Step 3: Browser Testing

Set cookie session_token with domain=your-app.com, path=/, httpOnly=true, secure=true, sameSite=None