@sarahsimionescuchecks…claude/friendly-hoover-5295f7 → main10 files · +347 −133review: @shamsharoonupdated 7h agoThe MCP auth e2e suite has failed on every run since the WorkOS AuthKit migration removed the dev-login button — globalSetup waited for a button that no longer exists, so every run died before collecting a single test.
Browserless login. globalSetup now signs in the agent test account (dashboard-repo@test.composio.io, staging WorkOS env) via the password grant and seals {accessToken, refreshToken, user} with WORKOS_COOKIE_PASSWORD into a wos-session cookie — the exact iron-session shape authkit-nextjs produces, so the dashboard treats it as a normal logged-in session. New helper: tests/mcp-auth/setup/workos-session.ts. No browser, no email round-trip; the CI job no longer installs Playwright browsers and setup takes ~1s.
Consumer-schema guard removed. resolve-consumer-context.ts no longer skips the consumer-schema read outside production — the staging replica role has now been granted access. This fixes consumer.getToken 500ing ("Failed to resolve consumer context after provisioning") for every already-provisioned user on staging/preview.
Degradation instead of abort. The consumer-key fetch and BA org-preselect steps in globalSetup are non-fatal — a broken fixture fails only its dependent specs.
Workflow updates. TEST_ORG_SLUG → dashboard-repo_workspace; secrets switched to TEST_AGENT_PASSWORD + WORKOS_CLIENT_ID + WORKOS_API_KEY + WORKOS_COOKIE_PASSWORD (already set on the repo, staging env values).
The OAuth-bearer specs still fail: the MCP authorization server is hardcoded to the production AuthKit domain (login.composio.dev) in src/app/.well-known/oauth-authorization-server/route.ts and src/app/mcp/_utils/resolve-bearer.ts, so staging can't mint a bearer without a prod-env user. Plan: make the issuer env-aware so staging uses its own AuthKit domain.
Run locally against staging-dashboard.composio.dev: session mint + dashboard tRPC auth verified working; 6/17 specs pass — the consumer-key specs need this branch's guard removal deployed (they hit the live staging deploy), and the bearer specs are the known-remaining item above.
🤖 Generated with Claude Code
The latest updates on your projects. Learn more about Vercel for GitHub.
| Project | Deployment | Actions | Updated (UTC) |
|---|---|---|---|
| dashboard |  Ready | Preview, Comment | Jun 13, 2026 1:26am |