SnapOtter/tests/e2e-docker/analytics-no-data-leak.spec.ts

import fs from "node:fs";
import path from "node:path";
import { expect, test } from "@playwright/test";

// ─── Analytics Privacy / No Data Leak ───────────────────────────────
// CRITICAL privacy tests: verify that declining analytics means
// absolutely zero data is sent to PostHog, Sentry, or any external
// analytics domain. Also verifies that tool functionality is not
// degraded when analytics are declined.

const SAMPLES_DIR = path.join(process.env.HOME ?? "/Users/sidd", "Downloads", "sample");
const FIXTURES_DIR = path.join(process.cwd(), "tests", "fixtures");

/** Analytics-related domains to watch for in network traffic. */
const ANALYTICS_DOMAINS = [
  "posthog.com",
  "us.i.posthog.com",
  "eu.i.posthog.com",
  "sentry.io",
  "ingest.sentry.io",
  "o4508.ingest.us.sentry.io",
];

function isAnalyticsRequest(url: string): boolean {
  return ANALYTICS_DOMAINS.some((domain) => url.includes(domain));
}

async function loginFresh(page: import("@playwright/test").Page) {
  await page.goto("/login");
  await page.getByLabel("Username").fill("admin");
  await page.getByLabel("Password").fill("admin");
  await page.getByRole("button", { name: /login/i }).click();
}

function getFixture(name: string): string {
  return path.join(FIXTURES_DIR, name);
}

async function uploadFiles(
  page: import("@playwright/test").Page,
  filePaths: string[],
): Promise<void> {
  const fileChooserPromise = page.waitForEvent("filechooser");
  const dropzone = page.locator("[class*='border-dashed']").first();
  await dropzone.click();
  const fileChooser = await fileChooserPromise;
  await fileChooser.setFiles(filePaths);
  await page.waitForTimeout(3_000);
}

async function waitForProcessingDone(
  page: import("@playwright/test").Page,
  timeoutMs = 60_000,
): Promise<void> {
  try {
    const spinner = page.locator("[class*='animate-spin']");
    if (await spinner.isVisible({ timeout: 3_000 })) {
      await spinner.waitFor({ state: "hidden", timeout: timeoutMs });
    }
  } catch {
    // No spinner — processing may have been instant
  }
  await page.waitForTimeout(500);
}

test.describe("No data leak after declining analytics", () => {
  // Use fresh browser context — no saved auth state
  test.use({ storageState: { cookies: [], origins: [] } });

  test("zero PostHog/Sentry traffic after explicitly declining analytics", async ({ page }) => {
    const analyticsRequests: string[] = [];

    // Set up network interception BEFORE any navigation
    await page.route("**/*", (route) => {
      const url = route.request().url();
      if (isAnalyticsRequest(url)) {
        analyticsRequests.push(url);
      }
      return route.continue();
    });

    // Login and decline analytics
    await loginFresh(page);
    await page.waitForURL("**/analytics-consent", { timeout: 30_000 });
    await page.getByRole("button", { name: "Maybe later" }).click();
    await page.waitForURL("/", { timeout: 15_000 });

    // Navigate to several pages
    await page.goto("/resize");
    await page.waitForTimeout(2_000);
    await page.goto("/compress");
    await page.waitForTimeout(2_000);
    await page.goto("/fullscreen");
    await page.waitForTimeout(2_000);
    await page.goto("/");
    await page.waitForTimeout(2_000);

    // Assert ZERO analytics requests were made
    expect(
      analyticsRequests,
      `Expected zero analytics requests, but found: ${analyticsRequests.join(", ")}`,
    ).toEqual([]);
  });

  test("zero PostHog/Sentry traffic for fresh user who chose Maybe later", async ({ page }) => {
    const analyticsRequests: string[] = [];

    await page.route("**/*", (route) => {
      const url = route.request().url();
      if (isAnalyticsRequest(url)) {
        analyticsRequests.push(url);
      }
      return route.continue();
    });

    // Login and immediately dismiss via "Maybe later"
    await loginFresh(page);
    await page.waitForURL("**/analytics-consent", { timeout: 30_000 });
    await page.getByRole("button", { name: "Maybe later" }).click();
    await page.waitForURL("/", { timeout: 15_000 });

    // Browse around
    await page.goto("/crop");
    await page.waitForTimeout(2_000);
    await page.goto("/convert");
    await page.waitForTimeout(2_000);
    await page.goto("/");
    await page.waitForTimeout(2_000);

    expect(
      analyticsRequests,
      `Expected zero analytics requests, but found: ${analyticsRequests.join(", ")}`,
    ).toEqual([]);
  });

  test("tool processing works normally after declining analytics", async ({ page }) => {
    // Login and decline analytics
    await loginFresh(page);
    await page.waitForURL("**/analytics-consent", { timeout: 30_000 });
    await page.getByRole("button", { name: "Maybe later" }).click();
    await page.waitForURL("/", { timeout: 15_000 });

    // Navigate to resize tool
    await page.goto("/resize");
    await page.waitForTimeout(2_000);

    // Upload a test image
    const testImage = getFixture("test-200x150.png");
    await uploadFiles(page, [testImage]);

    // Set resize parameters
    const widthInput = page.getByLabel("Width (px)");
    await widthInput.fill("100");

    // Process the image
    const processBtn = page.getByTestId("resize-submit");
    await expect(processBtn).toBeEnabled({ timeout: 15_000 });
    await processBtn.click();
    await waitForProcessingDone(page);

    // Verify no errors
    const error = page.locator(".text-red-500");
    expect(await error.isVisible({ timeout: 2_000 }).catch(() => false)).toBe(false);

    // Verify a download link or result appeared
    const downloadLink = page.locator(
      "a[download], a[href*='download'], button:has-text('Download')",
    );
    await expect(downloadLink.first()).toBeVisible({ timeout: 15_000 });
  });

  test("tool processing works with sample portrait after declining analytics", async ({ page }) => {
    const portraitPath = path.join(
      SAMPLES_DIR,
      "portrait-of-a-smiling-man-with-glasses-and-a-beard-isolated.png",
    );
    if (!fs.existsSync(portraitPath)) {
      test.skip();
      return;
    }

    // Login and decline analytics
    await loginFresh(page);
    await page.waitForURL("**/analytics-consent", { timeout: 30_000 });
    await page.getByRole("button", { name: "Maybe later" }).click();
    await page.waitForURL("/", { timeout: 15_000 });

    // Navigate to resize tool
    await page.goto("/resize");
    await page.waitForTimeout(2_000);

    // Upload sample portrait
    await uploadFiles(page, [portraitPath]);

    // Set resize width
    const widthInput = page.getByLabel("Width (px)");
    await widthInput.fill("200");

    // Process
    const processBtn = page.getByTestId("resize-submit");
    await expect(processBtn).toBeEnabled({ timeout: 15_000 });
    await processBtn.click();
    await waitForProcessingDone(page);

    // Verify no errors
    const error = page.locator(".text-red-500");
    expect(await error.isVisible({ timeout: 2_000 }).catch(() => false)).toBe(false);

    // Verify download appeared — proves functionality is not degraded
    const downloadLink = page.locator(
      "a[download], a[href*='download'], button:has-text('Download')",
    );
    await expect(downloadLink.first()).toBeVisible({ timeout: 15_000 });
  });
});