docs+deploy: production status, lessons learned (9 bugs), deploy compose, e2e test tools

2026-09-04 23:42:36 +00:00
parent f66a4e2d53
commit c00cb94fe7
5 changed files with 206 additions and 3 deletions
@@ -0,0 +1,52 @@
+#!/bin/sh
+# E2E test: ticket exchange -> session -> board access -> single-use -> collab
+set -e
+B=http://localhost:8000
+M=http://mock-exchange:9000
+
+echo "--- 1. Issue ticket (mock addon) ---"
+TICKET=$(wget -qO- --header="Content-Type: application/json" \
+  --post-data='{"ayon_user":"niklas","display_name":"Niklas","project":"lumenfjord","task":"assets/chair/modeling"}' \
+  $M/issue | sed 's/.*"ticket":"\([^"]*\)".*/\1/')
+echo "ticket: ${TICKET:0:8}..."
+
+echo "--- 2. Browser exchange at RefBoard ---"
+EX=$(wget -qO- --header="Content-Type: application/json" \
+  --post-data="{\"ticket\":\"$TICKET\"}" $B/api/auth/ayon/exchange)
+echo "$EX" | head -c 300; echo
+TOKEN=$(echo "$EX" | sed 's/.*"token":"\([^"]*\)".*/\1/')
+BOARD_URL=$(echo "$EX" | sed 's/.*"board_url":"\([^"]*\)".*/\1/')
+echo "board_url: $BOARD_URL"
+
+echo "--- 3. /me with session ---"
+wget -qO- --header="Authorization: Bearer $TOKEN" $B/api/auth/me
+echo
+
+echo "--- 4. Fetch board ---"
+BOARD_ID=${BOARD_URL##*/}
+wget -qO- --header="Authorization: Bearer $TOKEN" $B/api/boards/$BOARD_ID | head -c 200
+echo
+
+echo "--- 5. Ticket reuse must fail (single-use) ---"
+CODE=$(wget -qO- --header="Content-Type: application/json" \
+  --post-data="{\"ticket\":\"$TICKET\"}" $B/api/auth/ayon/exchange 2>&1 | tail -1)
+echo "reuse response: $CODE"
+
+echo "--- 6. Second user joins SAME board ---"
+T2T=$(wget -qO- --header="Content-Type: application/json" \
+  --post-data='{"ayon_user":"artist2","display_name":"Artist Two","project":"lumenfjord","task":"assets/chair/modeling"}' \
+  $M/issue | sed 's/.*"ticket":"\([^"]*\)".*/\1/')
+EX2=$(wget -qO- --header="Content-Type: application/json" \
+  --post-data="{\"ticket\":\"$T2T\"}" $B/api/auth/ayon/exchange)
+T2=$(echo "$EX2" | sed 's/.*"token":"\([^"]*\)".*/\1/')
+echo "user2 board access:"
+wget -qO- --header="Authorization: Bearer $T2" $B/api/boards/$BOARD_ID | head -c 120
+echo
+
+echo "--- 7. Missing ticket -> 400 ---"
+wget -qO- --header="Content-Type: application/json" --post-data="{}" $B/api/auth/ayon/exchange 2>&1 | tail -1 || true
+
+echo "--- 8. Frontend SPA route /b served ---"
+wget -qO- $B/b | head -c 80
+echo
+echo "E2E DONE"