mmintel/klz-cables.com
1
0
Fork 0
Code Issues Pull Requests 3 Actions Packages Projects Releases 1 Wiki Activity

fix(e2e): implement automatic cleanup of test form submissions with authorized secret header

Browse Source
This commit is contained in:
Marc Mintel
2026-04-21 19:26:06 +02:00
parent f989e0604f
commit f87c714402
3 changed files with 39 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

35
scripts/check-forms.ts
View File

@@ -348,13 +348,23 @@ async function main() {
// 5. Cleanup: Delete test submissions from Payload CMS
console.log(`\n🧹 Starting cleanup of test submissions...`);
const payloadSecret = process.env.PAYLOAD_SECRET;
if (!payloadSecret) {
console.warn(` ⚠️ PAYLOAD_SECRET not found in environment. Cleanup will likely fail with 403.`);
}
try {
const apiUrl = `${targetUrl.replace(/\/$/, '')}/api/form-submissions`;
const searchUrl = `${apiUrl}?where[email][equals]=testing@mintel.me`;
// We fetch ALL submissions matching the test email to clean up potential lefovers from previous runs
const searchUrl = `${apiUrl}?where[email][equals]=testing@mintel.me&limit=100`;
// Fetch test submissions
// Fetch test submissions with bypass header
const searchResponse = await axios.get(searchUrl, {
headers: { Cookie: `klz_gatekeeper_session=${gatekeeperPassword}` },
headers: {
Cookie: `klz_gatekeeper_session=${gatekeeperPassword}`,
'x-e2e-secret': payloadSecret || '',
},
});
const testSubmissions = searchResponse.data.docs || [];
@@ -363,25 +373,30 @@ async function main() {
for (const doc of testSubmissions) {
try {
await axios.delete(`${apiUrl}/${doc.id}`, {
headers: { Cookie: `klz_gatekeeper_session=${gatekeeperPassword}` },
headers: {
Cookie: `klz_gatekeeper_session=${gatekeeperPassword}`,
'x-e2e-secret': payloadSecret || '',
},
});
console.log(` ✅ Deleted submission: ${doc.id}`);
console.log(` ✅ Deleted submission: ${doc.id} (${doc.name})`);
} catch (delErr: any) {
// Log but don't fail, 403s on Directus / Payload APIs for guest Gatekeeper sessions are normal
console.warn(
` ⚠️ Cleanup attempt on ${doc.id} returned an error, typically due to API Auth separation: ${delErr.message}`,
` ⚠️ Cleanup attempt on ${doc.id} failed: ${delErr.message}`,
);
}
}
if (testSubmissions.length > 0) {
console.log(`✅ Cleanup completed successfully.`);
}
} catch (err: any) {
if (err.response?.status === 403) {
console.warn(
` ⚠️ Cleanup fetch failed with 403 Forbidden. This is expected if the runner lacks admin API credentials. Test submissions remain in the database.`,
console.error(
` ❌ Cleanup failed with 403 Forbidden. Ensure FormSubmissions access control and PAYLOAD_SECRET are aligned.`,
);
} else {
console.error(` ❌ Cleanup fetch failed: ${err.message}`);
}
// Don't mark the whole test as failed just because cleanup failed
}
await browser.close();