e2e-browser.yml

name: End-to-end browser tests

on: [push]
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true
env:
  CI: true
jobs:
  test:
    runs-on: ubuntu-latest
    environment:
      name: ${{ matrix.environment-name }}
    continue-on-error: ${{ matrix.experimental }}
    strategy:
      matrix:
        # NSS does not support static client registration, which we rely on for testing.
        environment-name: ["ESS PodSpaces", "ESS Dev-2-1", "ESS Dev-2-2"]
        experimental: [false]
        include:
          - environment-name: "ESS Dev-2-3"
            experimental: true
    steps:
      - uses: actions/checkout@v4
      # The Node version does not influence how well our tests run in
      # the browser so we only need to test in one.
      - uses: actions/setup-node@v4
        with:
          node-version-file: ".nvmrc"
          cache: npm
      - run: npm ci
        if: github.actor != 'dependabot[bot]'
      - name: Install e2e tests dependencies
        run: npx playwright install --with-deps
        if: github.actor != 'dependabot[bot]'
      - run: npm run test:e2e:browser:authn-browser
        # Running end-to-end tests requires accessing secrets which aren't available to dependabot.
        # https://github.blog/changelog/2021-02-19-github-actions-workflows-triggered-by-dependabot-prs-will-run-with-read-only-permissions/
        # We want jobs in this workflow to be gating PRs, so the whole matrix must
        # run even for dependabot so that the matrixed jobs are skipped, instead
        # of the whole pipeline.
        if: github.actor != 'dependabot[bot]'
        env:
          E2E_TEST_USER: ${{ secrets.E2E_TEST_USER }}
          E2E_TEST_PASSWORD: ${{ secrets.E2E_TEST_PASSWORD }}
          E2E_TEST_IDP: ${{ secrets.E2E_TEST_IDP }}
          E2E_TEST_OWNER_CLIENT_ID: ${{ secrets.E2E_TEST_OWNER_CLIENT_ID }}
          E2E_TEST_OWNER_CLIENT_SECRET: ${{ secrets.E2E_TEST_OWNER_CLIENT_SECRET }}
          E2E_TEST_ENVIRONMENT: ${{ matrix.environment-name }}
      - run: npm run test:e2e:browser:ui-react
        # Running end-to-end tests requires accessing secrets which aren't available to dependabot.
        # https://github.blog/changelog/2021-02-19-github-actions-workflows-triggered-by-dependabot-prs-will-run-with-read-only-permissions/
        # We want jobs in this workflow to be gating PRs, so the whole matrix must
        # run even for dependabot so that the matrixed jobs are skipped, instead
        # of the whole pipeline.
        if: github.actor != 'dependabot[bot]'
        env:
          E2E_TEST_USER: ${{ secrets.E2E_TEST_USER }}
          E2E_TEST_PASSWORD: ${{ secrets.E2E_TEST_PASSWORD }}
          E2E_TEST_IDP: ${{ secrets.E2E_TEST_IDP }}
          E2E_TEST_OWNER_CLIENT_ID: ${{ secrets.E2E_TEST_OWNER_CLIENT_ID }}
          E2E_TEST_OWNER_CLIENT_SECRET: ${{ secrets.E2E_TEST_OWNER_CLIENT_SECRET }}
          E2E_TEST_ENVIRONMENT: ${{ matrix.environment-name }}
      - name: Archive browser-based end-to-end test failure results, if any
        uses: actions/upload-artifact@v4
        continue-on-error: true
        if: failure()
        with:
          name: e2e-browser-failures
          path: test-results