mirror of
https://github.com/snapotter-hq/SnapOtter.git
synced 2026-08-03 07:46:42 +02:00
test: add comprehensive E2E Playwright tests for analytics feature
Covers consent flow, API endpoints, privacy/no-data-leak verification, disabled-server behavior, settings toggle, and privacy policy page.
This commit is contained in:
ashim-hq
@@ -0,0 +1,215 @@
|
||||
import fs from "node:fs";
|
||||
import path from "node:path";
|
||||
import { expect, test } from "@playwright/test";
|
||||
|
||||
// ─── Analytics Privacy / No Data Leak ───────────────────────────────
|
||||
// CRITICAL privacy tests: verify that declining analytics means
|
||||
// absolutely zero data is sent to PostHog, Sentry, or any external
|
||||
// analytics domain. Also verifies that tool functionality is not
|
||||
// degraded when analytics are declined.
|
||||
|
||||
const SAMPLES_DIR = path.join(process.env.HOME ?? "/Users/sidd", "Downloads", "sample");
|
||||
const FIXTURES_DIR = path.join(process.cwd(), "tests", "fixtures");
|
||||
|
||||
/** Analytics-related domains to watch for in network traffic. */
|
||||
const ANALYTICS_DOMAINS = [
|
||||
"posthog.com",
|
||||
"us.i.posthog.com",
|
||||
"eu.i.posthog.com",
|
||||
"sentry.io",
|
||||
"ingest.sentry.io",
|
||||
"o4508.ingest.us.sentry.io",
|
||||
];
|
||||
|
||||
function isAnalyticsRequest(url: string): boolean {
|
||||
return ANALYTICS_DOMAINS.some((domain) => url.includes(domain));
|
||||
}
|
||||
|
||||
async function loginFresh(page: import("@playwright/test").Page) {
|
||||
await page.goto("/login");
|
||||
await page.getByLabel("Username").fill("admin");
|
||||
await page.getByLabel("Password").fill("admin");
|
||||
await page.getByRole("button", { name: /login/i }).click();
|
||||
}
|
||||
|
||||
function getFixture(name: string): string {
|
||||
return path.join(FIXTURES_DIR, name);
|
||||
}
|
||||
|
||||
async function uploadFiles(
|
||||
page: import("@playwright/test").Page,
|
||||
filePaths: string[],
|
||||
): Promise<void> {
|
||||
const fileChooserPromise = page.waitForEvent("filechooser");
|
||||
const dropzone = page.locator("[class*='border-dashed']").first();
|
||||
await dropzone.click();
|
||||
const fileChooser = await fileChooserPromise;
|
||||
await fileChooser.setFiles(filePaths);
|
||||
await page.waitForTimeout(3_000);
|
||||
}
|
||||
|
||||
async function waitForProcessingDone(
|
||||
page: import("@playwright/test").Page,
|
||||
timeoutMs = 60_000,
|
||||
): Promise<void> {
|
||||
try {
|
||||
const spinner = page.locator("[class*='animate-spin']");
|
||||
if (await spinner.isVisible({ timeout: 3_000 })) {
|
||||
await spinner.waitFor({ state: "hidden", timeout: timeoutMs });
|
||||
}
|
||||
} catch {
|
||||
// No spinner — processing may have been instant
|
||||
}
|
||||
await page.waitForTimeout(500);
|
||||
}
|
||||
|
||||
test.describe("No data leak after declining analytics", () => {
|
||||
// Use fresh browser context — no saved auth state
|
||||
test.use({ storageState: { cookies: [], origins: [] } });
|
||||
|
||||
test("zero PostHog/Sentry traffic after explicitly declining analytics", async ({ page }) => {
|
||||
const analyticsRequests: string[] = [];
|
||||
|
||||
// Set up network interception BEFORE any navigation
|
||||
await page.route("**/*", (route) => {
|
||||
const url = route.request().url();
|
||||
if (isAnalyticsRequest(url)) {
|
||||
analyticsRequests.push(url);
|
||||
}
|
||||
return route.continue();
|
||||
});
|
||||
|
||||
// Login and decline analytics
|
||||
await loginFresh(page);
|
||||
await page.waitForURL("**/analytics-consent", { timeout: 30_000 });
|
||||
await page.getByRole("button", { name: "Maybe later" }).click();
|
||||
await page.waitForURL("/", { timeout: 15_000 });
|
||||
|
||||
// Navigate to several pages
|
||||
await page.goto("/resize");
|
||||
await page.waitForTimeout(2_000);
|
||||
await page.goto("/compress");
|
||||
await page.waitForTimeout(2_000);
|
||||
await page.goto("/fullscreen");
|
||||
await page.waitForTimeout(2_000);
|
||||
await page.goto("/");
|
||||
await page.waitForTimeout(2_000);
|
||||
|
||||
// Assert ZERO analytics requests were made
|
||||
expect(
|
||||
analyticsRequests,
|
||||
`Expected zero analytics requests, but found: ${analyticsRequests.join(", ")}`,
|
||||
).toEqual([]);
|
||||
});
|
||||
|
||||
test("zero PostHog/Sentry traffic for fresh user who chose Maybe later", async ({ page }) => {
|
||||
const analyticsRequests: string[] = [];
|
||||
|
||||
await page.route("**/*", (route) => {
|
||||
const url = route.request().url();
|
||||
if (isAnalyticsRequest(url)) {
|
||||
analyticsRequests.push(url);
|
||||
}
|
||||
return route.continue();
|
||||
});
|
||||
|
||||
// Login and immediately dismiss via "Maybe later"
|
||||
await loginFresh(page);
|
||||
await page.waitForURL("**/analytics-consent", { timeout: 30_000 });
|
||||
await page.getByRole("button", { name: "Maybe later" }).click();
|
||||
await page.waitForURL("/", { timeout: 15_000 });
|
||||
|
||||
// Browse around
|
||||
await page.goto("/crop");
|
||||
await page.waitForTimeout(2_000);
|
||||
await page.goto("/convert");
|
||||
await page.waitForTimeout(2_000);
|
||||
await page.goto("/");
|
||||
await page.waitForTimeout(2_000);
|
||||
|
||||
expect(
|
||||
analyticsRequests,
|
||||
`Expected zero analytics requests, but found: ${analyticsRequests.join(", ")}`,
|
||||
).toEqual([]);
|
||||
});
|
||||
|
||||
test("tool processing works normally after declining analytics", async ({ page }) => {
|
||||
// Login and decline analytics
|
||||
await loginFresh(page);
|
||||
await page.waitForURL("**/analytics-consent", { timeout: 30_000 });
|
||||
await page.getByRole("button", { name: "Maybe later" }).click();
|
||||
await page.waitForURL("/", { timeout: 15_000 });
|
||||
|
||||
// Navigate to resize tool
|
||||
await page.goto("/resize");
|
||||
await page.waitForTimeout(2_000);
|
||||
|
||||
// Upload a test image
|
||||
const testImage = getFixture("test-200x150.png");
|
||||
await uploadFiles(page, [testImage]);
|
||||
|
||||
// Set resize parameters
|
||||
const widthInput = page.getByLabel("Width (px)");
|
||||
await widthInput.fill("100");
|
||||
|
||||
// Process the image
|
||||
const processBtn = page.getByTestId("resize-submit");
|
||||
await expect(processBtn).toBeEnabled({ timeout: 15_000 });
|
||||
await processBtn.click();
|
||||
await waitForProcessingDone(page);
|
||||
|
||||
// Verify no errors
|
||||
const error = page.locator(".text-red-500");
|
||||
expect(await error.isVisible({ timeout: 2_000 }).catch(() => false)).toBe(false);
|
||||
|
||||
// Verify a download link or result appeared
|
||||
const downloadLink = page.locator(
|
||||
"a[download], a[href*='download'], button:has-text('Download')",
|
||||
);
|
||||
await expect(downloadLink.first()).toBeVisible({ timeout: 15_000 });
|
||||
});
|
||||
|
||||
test("tool processing works with sample portrait after declining analytics", async ({ page }) => {
|
||||
const portraitPath = path.join(
|
||||
SAMPLES_DIR,
|
||||
"portrait-of-a-smiling-man-with-glasses-and-a-beard-isolated.png",
|
||||
);
|
||||
if (!fs.existsSync(portraitPath)) {
|
||||
test.skip();
|
||||
return;
|
||||
}
|
||||
|
||||
// Login and decline analytics
|
||||
await loginFresh(page);
|
||||
await page.waitForURL("**/analytics-consent", { timeout: 30_000 });
|
||||
await page.getByRole("button", { name: "Maybe later" }).click();
|
||||
await page.waitForURL("/", { timeout: 15_000 });
|
||||
|
||||
// Navigate to resize tool
|
||||
await page.goto("/resize");
|
||||
await page.waitForTimeout(2_000);
|
||||
|
||||
// Upload sample portrait
|
||||
await uploadFiles(page, [portraitPath]);
|
||||
|
||||
// Set resize width
|
||||
const widthInput = page.getByLabel("Width (px)");
|
||||
await widthInput.fill("200");
|
||||
|
||||
// Process
|
||||
const processBtn = page.getByTestId("resize-submit");
|
||||
await expect(processBtn).toBeEnabled({ timeout: 15_000 });
|
||||
await processBtn.click();
|
||||
await waitForProcessingDone(page);
|
||||
|
||||
// Verify no errors
|
||||
const error = page.locator(".text-red-500");
|
||||
expect(await error.isVisible({ timeout: 2_000 }).catch(() => false)).toBe(false);
|
||||
|
||||
// Verify download appeared — proves functionality is not degraded
|
||||
const downloadLink = page.locator(
|
||||
"a[download], a[href*='download'], button:has-text('Download')",
|
||||
);
|
||||
await expect(downloadLink.first()).toBeVisible({ timeout: 15_000 });
|
||||
});
|
||||
});
|
||||
Reference in New Issue
Block a user