Marc-André Bombeck 1face234cc test(share-links): end-to-end document share, serve, and revoke lifecycle ...

Adds a Playwright spec that drives the public sharing surface against the
production server and a real Postgres: the owner picks documents into a new
link through the Settings picker, a recipient unlocks it with the passphrase
and pulls each blob through the token-scoped serve route, and a revoke closes
it. Pins the load-bearing guarantees end to end — frozen-set confinement (an
owned but un-attached document 404s), the serving posture (Class A inline with
true type + nosniff + no-store, Class B opaque octet-stream attachment), the
EXIF/GPS strip on the shared image, revocation enforced at serve time, and the
scannable QR promotion at the mobile width.

Seeds a fixed share trio (inline PDF, Exif-bearing JPEG, download-only text)
through the same Postgres transport the vault fixture already uses.

2026-07-07 22:00:27 +02:00

..

global-setup.ts

test(e2e): pin the shared auth state to an explicit English locale cookie

2026-07-05 22:41:43 +02:00

test-helpers.ts

test(e2e): add seeded test user + auth storageState fixture

2026-05-09 16:48:45 +02:00

vault-fixture.ts

test(share-links): end-to-end document share, serve, and revoke lifecycle

2026-07-07 22:00:27 +02:00