notandClaude Opus 5
27f2607e4e
`medewerker-login.ts` becomes `keycloak-login.ts`: the three citizen specs each duplicated the same three-line password login, so a fix to the login path had to be made four times. They now call `loginBurger`, and both realms share `submitPassword`. No behaviour change — all 6 specs green against a live stack. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
29 lines
1.5 KiB
TypeScript
29 lines
1.5 KiB
TypeScript
import { expect, test } from '@playwright/test';
|
|
import { loginBurger } from './keycloak-login';
|
|
|
|
// S-11 (Flow 3): a zorgprofessional logs in via mock DigiD, submits a registration, then withdraws
|
|
// it ("trek aanvraag in") from the self-service portal. The withdrawal goes portal → BFF (owner-
|
|
// scoped by the DigiD token's bsn) → domain, which cancels the running workflow (ADR-0014); the page
|
|
// then confirms the registration is ingetrokken.
|
|
test('DigiD submit → trek aanvraag in → self-service confirms ingetrokken', async ({ page }) => {
|
|
// Visiting the guarded page redirects to the Keycloak (mock DigiD) login.
|
|
await page.goto('/');
|
|
|
|
// Its own DigiD user — isolated from the verify-* checks (jan-burger/123456782) so resume-on-load
|
|
// (S-26) can't restore someone else's registration on the shared stack.
|
|
await loginBurger(page, 'lars-burger');
|
|
|
|
await expect(page.getByRole('heading', { name: /Zelfservice/i })).toBeVisible();
|
|
|
|
await page.getByRole('button', { name: /indienen/i }).click();
|
|
|
|
// The BFF accepted it and the page shows the confirmation with the reference.
|
|
await expect(page.getByText(/ontvangen/i)).toBeVisible();
|
|
|
|
// Withdraw it. The confirmation of withdrawal appears only after the decide POST completes (204),
|
|
// so awaiting the "ingetrokken" text also proves the request landed — no premature navigation.
|
|
await page.getByRole('button', { name: /trek aanvraag in/i }).click();
|
|
|
|
await expect(page.getByText(/is ingetrokken/i)).toBeVisible();
|
|
});
|