PR Custody

test: add scoped project API key e2e coverage

@shamsharoondraftchecks n/achecks…codex/scoped-api-key-playwright-e2e → master3 files · +488 −0updated 3d ago

▸Description

Add Playwright API E2E coverage for scoped project API key enforcement.
Mint throwaway scoped keys directly in the local test DB, derived from the seeded test project key, and clean them up per test.
Cover legacy developer keys, none/read/write/read_write behavior, missing preset defaults, uncataloged fail-closed behavior, v3.1 matching, and explicit proxy execute opt-in.
Add an Apollo CLAUDE.md note to keep this E2E spec updated when scoped API key permissions change.

pnpm exec oxfmt --check tests/api/utils/scoped_project_api_keys.ts tests/api/v3/scoped_project_api_keys.spec.ts
pnpm exec playwright test tests/api/v3/scoped_project_api_keys.spec.ts --config=apollo-test.playwright.config.ts --list
pnpm exec playwright test tests/api/v3/scoped_project_api_keys.spec.ts --config=apollo-test.playwright.config.ts (blocked locally: Apollo is not listening on localhost:9900 and Postgres is not listening on localhost:5432; Docker daemon is not running in this workspace)

loading diff…