ruby_raider 3.10.0 → 3.11.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2a901c209fc30681088e9acb4d7c5fb315990db7346128a63533e0e70ef8c58f
-  data.tar.gz: 1e99b0e973091657bfc10b98d5de1b730d9f7972a2446c56b7a56ddd786f9392
+  metadata.gz: e07bc6e38598246845e628bc2f4fde5aff9155fe2a925f7a16465c97b279ba87
+  data.tar.gz: 78a6aa99c1790db921530d5f6da67727ac984bd3452fdb46573b8a97d683bbee
 SHA512:
-  metadata.gz: 757ad8b61b6c3605d17739690e895198f2ad4c0aadbe4144fc1df77ec743afefd8095472c07e4d2ba4246c515d8038c052d096badc8cfbb04c432218c68ddb45
-  data.tar.gz: 2e9d2bfb4e714c98052cb6df654be058d37fe40476aa93ce20e9319aeea5bbc24abe4359299b7a9f71f0c204ad19599865f1396794393e634b7200ed29a80bdb
+  metadata.gz: e846e3fc291059fd5fe7571011b99e837819dd0adba93bd20016981b14b3854e76f1094c2e93b0a08590c0158ef362c0af4b3fcc49822bc3ce17644a423fe159
+  data.tar.gz: 788aed67f16f4ef33ceeb98a8a2bdd6e87a5eef7d5fd3b0a941e036fe76b4ed876ec4ca04d74e5d0ef276f12df251a3076e295d4600e7ee06f0c45ed6c6b804c

data/README.md

@@ -61,6 +61,7 @@ Every generated project comes with:
 - **Page Object Model** — Base page and component classes with example pages
 - **Test examples** — Working login tests against the [Raider Test Store](https://raider-test-site.onrender.com/)
 - **Raider reporting** — RSpec and Cucumber projects include [raider_reporter](https://github.com/RaiderHQ/raider_reporter), which writes results to `raider-results/` and uploads runs to your Raider Hideout server when `RAIDER_TOKEN` and `RAIDER_ENDPOINT` are set; generated CI runs the suite through `raider-reporter exec` with `RAIDER_QUARANTINE`, so quarantined tests do not fail the build; an opt-in `raider-gate` job (`RAIDER_GATE=1`) fails CI when the Raider quality gate fails
+- **Login reuse** — generated web projects (Selenium or Watir) log in once and restore the saved session for examples tagged `:logged_in` (RSpec) or `@logged_in` (Cucumber); `RAIDER_LOGIN_STATE=off|refresh` and `login_state: max_age:` control it, and the state stays in git-ignored `.raider/auth/`
 - **Failure video replay** — Every test is recorded and the video is kept only for failing tests, attached to the report as `video` (WebM from page screenshots for Selenium and Watir, Appium's own MP4 for mobile, which needs `ffmpeg` on the Appium server host for iOS and for Android recordings over 180 s). Turn it off per run with `VIDEO=off`, or per project with `raider u video off`; ffmpeg is downloaded once, SHA-256 checked and cached in `~/.cache/raider`. The RaiderHQ `ffmpeg-7.1` build that the download uses is not published yet, so for now set `RAIDER_FFMPEG_PATH` to an ffmpeg with libvpx to get web videos
 - **GitHub Actions CI** — Ready-to-use test pipeline that caches ffmpeg for failure videos
 - **Rake tasks** — Default, smoke, and regression tasks with tag-based filtering

data/lib/generators/cucumber/templates/feature.tt

@@ -6,6 +6,11 @@ Scenario: A user can login
     When I login with my credentials
     Then I'm logged in
 
+@logged_in
+Scenario: A logged-in user opens the account page
+    Given I'm a registered user
+    Then I'm logged in
+
 <%- else -%>
 Feature: Home Page
 

data/lib/generators/cucumber/templates/partials/selenium_env.tt

@@ -8,6 +8,10 @@ require 'raider_reporter/cucumber'
 require 'tmpdir'
 require 'yaml'
 require_relative '../../helpers/video_helper'
+require_relative '../../helpers/session_state'
+require_relative '../../models/user_factory'
+require_relative '../../page_objects/pages/account'
+require_relative '../../page_objects/pages/login'
 
 Before do
   viewport = YAML.load_file('config/config.yml')['viewport']
@@ -20,6 +24,18 @@ Before do
   @video_recorder.start
 end
 
+Before('@logged_in') do
+  user = UserFactory.for('registered user')
+  account = Account.new(driver)
+  SessionState.new(driver).reuse(
+    valid: -> { account.tap(&:visit).header.customer_name == "Welcome back #{user['name']}" }
+  ) do
+    login = Login.new(driver)
+    login.visit
+    login.login(user['username'], user['password'])
+  end
+end
+
 After do |scenario|
   video_path = @video_recorder&.stop(keep: scenario.failed?)
   RaiderReporter.attach('video', video_path, type: :webm) if video_path

data/lib/generators/cucumber/templates/partials/watir_env.tt

@@ -4,6 +4,10 @@ require 'raider_reporter/cucumber'
 require 'tmpdir'
 require 'yaml'
 require_relative '../../helpers/video_helper'
+require_relative '../../helpers/session_state'
+require_relative '../../models/user_factory'
+require_relative '../../page_objects/pages/account'
+require_relative '../../page_objects/pages/login'
 
 Before do
   viewport = YAML.load_file('config/config.yml')['viewport']
@@ -16,6 +20,18 @@ Before do
   @video_recorder.start
 end
 
+Before('@logged_in') do
+  user = UserFactory.for('registered user')
+  account = Account.new(browser)
+  SessionState.new(browser.driver).reuse(
+    valid: -> { account.tap(&:visit).header.customer_name == "Welcome back #{user['name']}" }
+  ) do
+    login = Login.new(browser)
+    login.visit
+    login.login(user['username'], user['password'])
+  end
+end
+
 After do |scenario|
   video_path = @video_recorder&.stop(keep: scenario.failed?)
   RaiderReporter.attach('video', video_path, type: :webm) if video_path

data/lib/generators/cucumber/templates/partials/web_steps.tt

@@ -9,6 +9,10 @@ Given("I'm a {user} on the login page") do |user|
   @login_page.visit
 end
 
+Given("I'm a {user}") do |user|
+  @user = user
+end
+
 When('I login with my credentials') do
   @login_page.login(@user['username'], @user['password'])
 end

data/lib/generators/helper_generator.rb

@@ -9,6 +9,7 @@ class HelpersGenerator < Generator
     generate_appium_helper
     generate_spec_helper
     generate_video_helper
+    generate_session_state
   end
 
   private
@@ -35,6 +36,12 @@ class HelpersGenerator < Generator
     template('helpers/video_helper.tt', "#{name}/helpers/video_helper.rb")
   end
 
+  def generate_session_state
+    return if mobile?
+
+    template('helpers/session_state.tt', "#{name}/helpers/session_state.rb")
+  end
+
   def generate_appium_helper
     return unless cross_platform?
 

data/lib/generators/rspec/templates/spec.tt

@@ -6,6 +6,7 @@ require_relative '../models/model_factory'
 require_relative '../page_objects/pages/account'
 require_relative '../page_objects/pages/login'
 
+# rubocop:disable RSpec/MultipleDescribes
 describe 'Login' do
   subject(:header) { account_page.header.customer_name }
 
@@ -36,6 +37,17 @@ describe 'Login' do
     end
   end
 end
+
+describe 'Account', :logged_in do
+  let(:user) { ModelFactory.for('users')['registered user'] }
+  let(:account_page) { <% if watir? -%>Account.new(browser)<% else -%>Account.new(driver)<% end -%> }
+
+  it 'opens the account page with the saved login' do
+    account_page.visit
+    expect(account_page.header.customer_name).to eq "Welcome back #{user['name']}"
+  end
+end
+# rubocop:enable RSpec/MultipleDescribes
 <%- else -%>
 <% if cross_platform? -%>
 require_relative '../helpers/appium_helper'

data/lib/generators/templates/common/git_ignore.tt

@@ -4,4 +4,7 @@ spec/examples.txt
 <%- end -%>
 <%- if cucumber? -%>
 rerun.txt
-<%- end -%>
+<%- end -%>
+<%- if web? -%>
+.raider/auth/
+<%- end -%>

data/lib/generators/templates/common/partials/web_config.tt

@@ -18,4 +18,7 @@ browser_arguments:
 video:
   enabled: true
   fps: 5
-  max_width: 1280
+  max_width: 1280
+
+login_state:
+  max_age: 3600 # seconds a saved login is reused before logging in again

data/lib/generators/templates/common/read_me.tt

@@ -193,6 +193,30 @@ would exit 2 on every run.
 Parallel test jobs that upload to one build must each set `RAIDER_SHARD_TOTAL` (the number of jobs) and
 `RAIDER_SHARD_INDEX` (1 to that number), so the gate waits for all of them instead of judging the first one to finish.
 
+<%- end -%>
+<%- if web? -%>
+## Reusing the login
+
+Tag an example `:logged_in` (RSpec) or a scenario `@logged_in` (Cucumber) and the suite logs in once, saves the
+session, and restores it for the next tagged example or run instead of filling in the login form again. The generated
+account example shows it. If the saved session no longer works, the real login runs again and the state is saved anew.
+
+For another role, call it yourself with its own name:
+
+```ruby
+SessionState.new(driver, name: 'admin').reuse(valid: -> { dashboard.tap(&:visit).admin? }) do
+  # the real login for the admin
+end
+```
+
+With Watir, pass `browser.driver`, the Selenium driver underneath the browser.
+
+- `login_state: max_age:` in `config/config.yml` is how many seconds a saved login stays valid (default 3600).
+- `RAIDER_LOGIN_STATE=off` always does the real login and saves nothing; `RAIDER_LOGIN_STATE=refresh` ignores the saved
+  file, logs in and saves again.
+- The state lives in `.raider/auth/` and is git-ignored. It holds live session tokens, so it must not be committed,
+  cached or uploaded as a CI artifact. Nothing in it is ever printed.
+
 <%- end -%>
 <%- if azure? && mobile? -%>
 ## CI

data/lib/generators/templates/helpers/session_state.tt

@@ -0,0 +1,206 @@
+# frozen_string_literal: true
+
+require 'fileutils'
+require 'json'
+require 'time'
+require 'uri'
+require 'yaml'
+
+# Saves the browser login (cookies, localStorage, sessionStorage) to .raider/auth/<name>.json
+# and restores it into a new browser. The file holds live session tokens: it is git-ignored,
+# written 0600, and its values are never printed.
+#
+#   SessionState.new(driver, name: 'user').reuse(valid: -> { account.logged_in? }) { log_in }
+#
+# RAIDER_LOGIN_STATE=off always logs in and never saves; =refresh logs in and saves again.
+# Stale age is login_state.max_age (seconds) in config/config.yml.
+class SessionState
+  FORMAT = 1
+  DEFAULT_MAX_AGE = 3600
+  NAME_PATTERN = /\A[a-z0-9_-]+\z/.freeze
+  DIR = File.join('.raider', 'auth')
+  READ_STORAGE = 'return Object.assign({}, window[arguments[0]]);'
+  WRITE_STORAGE = 'var s = window[arguments[0]]; s.clear(); var d = arguments[1]; ' \
+                  'Object.keys(d).forEach(function (k) { s.setItem(k, d[k]); });'
+  STORAGES = { 'local_storage' => 'localStorage', 'session_storage' => 'sessionStorage' }.freeze
+  COOKIE_KEYS = %i[name value domain path secure http_only same_site].freeze
+
+  attr_reader :name
+
+  def initialize(driver, name: 'user')
+    raise ArgumentError, "name must match #{NAME_PATTERN.source}" unless name.to_s.match?(NAME_PATTERN)
+
+    @driver = driver
+    @name = name.to_s
+  end
+
+  def path
+    File.join(DIR, "#{name}.json")
+  end
+
+  def reuse(valid: nil, &login)
+    lock = open_lock unless ENV.fetch('RAIDER_LOGIN_STATE', nil) == 'off'
+    lock ? reuse_locked(lock, valid, &login) : login.call
+    true
+  end
+
+  def save
+    ensure_dir
+    visit_origin
+    state = { 'format' => FORMAT, 'name' => name, 'origin' => origin, 'saved_at' => Time.now.utc.iso8601,
+              'cookies' => @driver.manage.all_cookies.map { |cookie| dump_cookie(cookie) } }
+    STORAGES.each { |key, kind| state[key] = @driver.execute_script(READ_STORAGE, kind) || {} }
+    write_atomically(JSON.generate(state))
+    path
+  end
+
+  def restore
+    state = read_state
+    usable?(state) && apply(state)
+  rescue StandardError => e
+    fall_back("could not restore #{path} (#{e.class})")
+  end
+
+  def clear
+    FileUtils.rm_f(path)
+  end
+
+  def fresh?
+    state = read_state
+    usable?(state) && Time.now - Time.iso8601(state['saved_at']) < max_age
+  rescue ArgumentError, TypeError
+    false
+  end
+
+  private
+
+  def reuse_locked(lock, valid, &login)
+    lock.flock(File::LOCK_EX)
+    return if ENV.fetch('RAIDER_LOGIN_STATE', nil) != 'refresh' && fresh? && restore && still_valid?(valid)
+
+    clear
+    reset if @applied
+    login.call
+    save_after_login
+  ensure
+    lock.close
+  end
+
+  def open_lock
+    ensure_dir
+    File.open(File.join(DIR, "#{name}.lock"), File::RDWR | File::CREAT, 0o600)
+  rescue SystemCallError => e
+    fall_back("cannot write #{DIR} (#{e.class}), so nothing is saved")
+  end
+
+  def save_after_login
+    save
+  rescue StandardError => e
+    warn("[login_state] could not save #{path} (#{e.class}), the next run logs in again")
+  end
+
+  def reset
+    visit_origin
+    @driver.manage.delete_all_cookies
+    STORAGES.each_value { |kind| @driver.execute_script(WRITE_STORAGE, kind, {}) }
+  rescue StandardError
+    nil # a browser that cannot be reset fails the real login on its own
+  end
+
+  def visit_origin
+    @driver.navigate.to("#{origin}/") unless origin_of(URI.parse(@driver.current_url.to_s)) == origin
+  end
+
+  def still_valid?(valid)
+    valid.nil? || valid.call || fall_back("login restored from #{path} is no longer valid")
+  rescue StandardError => e
+    fall_back("validity check failed (#{e.class})")
+  end
+
+  def apply(state)
+    @driver.navigate.to("#{origin}/")
+    @applied = true
+    @driver.manage.delete_all_cookies
+    live, skipped = state['cookies'].partition { |cookie| live_for_origin?(cookie) }
+    live.each { |cookie| add_cookie(load_cookie(cookie)) }
+    warn("[login_state] #{skipped.size} cookies skipped (expired or another domain) from #{path}") if skipped.any?
+    STORAGES.each { |key, kind| @driver.execute_script(WRITE_STORAGE, kind, state[key] || {}) }
+    @driver.navigate.refresh
+    true
+  end
+
+  def add_cookie(attributes)
+    @driver.manage.add_cookie(attributes.dup) # Selenium's Manager rewrites the hash it is given
+  rescue StandardError
+    raise unless attributes.key?(:same_site)
+
+    @driver.manage.add_cookie(attributes.except(:same_site))
+  end
+
+  def live_for_origin?(cookie)
+    (cookie['expires'].nil? || Time.iso8601(cookie['expires']) > Time.now) && domain_matches?(cookie['domain'])
+  end
+
+  def domain_matches?(domain)
+    bare = domain.to_s.delete_prefix('.')
+    bare.empty? || base_uri.host == bare || base_uri.host.end_with?(".#{bare}")
+  end
+
+  def dump_cookie(cookie)
+    COOKIE_KEYS.to_h { |key| [key.to_s, cookie[key]] }.merge('expires' => cookie[:expires]&.to_time&.utc&.iso8601)
+  end
+
+  def load_cookie(cookie)
+    COOKIE_KEYS.to_h { |key| [key, cookie[key.to_s]] }
+               .merge(expires: cookie['expires'] && Time.iso8601(cookie['expires'])).compact
+  end
+
+  def read_state
+    JSON.parse(File.read(path)) if File.exist?(path)
+  rescue JSON::ParserError, SystemCallError
+    fall_back("#{path} is unreadable or corrupt")
+  end
+
+  def usable?(state)
+    return false unless state
+    return state['origin'] == origin if state.is_a?(Hash) && state['format'] == FORMAT
+
+    fall_back("#{path} has an unsupported format")
+  end
+
+  def write_atomically(json)
+    temp = "#{path}.#{Process.pid}.#{Thread.current.object_id}.tmp"
+    File.write(temp, json, perm: 0o600)
+    File.rename(temp, path)
+  end
+
+  def ensure_dir
+    FileUtils.chmod(0o700, FileUtils.mkdir_p(DIR))
+  end
+
+  def config
+    @config ||= YAML.load_file('config/config.yml') || {}
+  end
+
+  def max_age
+    Integer(config.dig('login_state', 'max_age') || DEFAULT_MAX_AGE)
+  end
+
+  def base_uri
+    @base_uri ||= URI.parse(config.fetch('url'))
+  end
+
+  def origin
+    @origin ||= origin_of(base_uri)
+  end
+
+  def origin_of(uri)
+    port = uri.port == uri.default_port ? '' : ":#{uri.port}"
+    "#{uri.scheme}://#{uri.host}#{port}"
+  end
+
+  def fall_back(reason)
+    warn("[login_state] #{reason}, logging in again")
+    false
+  end
+end

data/lib/generators/templates/helpers/spec_helper.tt

@@ -13,6 +13,12 @@ require_relative 'browser_helper'
 require_relative 'driver_helper'
 <%- end -%>
 require_relative 'video_helper'
+<%- if web? -%>
+require_relative 'session_state'
+require_relative '../models/model_factory'
+require_relative '../page_objects/pages/login'
+require_relative '../page_objects/pages/account'
+<%- end -%>
 
 module SpecHelper
   RSpec.configure do |config|
@@ -49,6 +55,20 @@ module SpecHelper
       @video_recorder = VideoHelper.recorder_for(<%= watir? ? 'browser' : 'driver' %>)
       @video_recorder.start
     end
+<%- if web? -%>
+
+    config.before(:each, :logged_in) do
+      user = ModelFactory.for('users')['registered user']
+      account = Account.new(<%= watir? ? 'browser' : 'driver' %>)
+      SessionState.new(<%= watir? ? 'browser.driver' : 'driver' %>).reuse(
+        valid: -> { account.tap(&:visit).header.customer_name == "Welcome back #{user['name']}" }
+      ) do
+        login = Login.new(<%= watir? ? 'browser' : 'driver' %>)
+        login.visit
+        login.login(user['username'], user['password'])
+      end
+    end
+<%- end -%>
 
     config.after(:each) do |example|
       example_name = example.description

data/lib/version

@@ -1 +1 @@
-3.10.0
+3.11.0

data/ruby_raider.gemspec

@@ -21,6 +21,7 @@ Gem::Specification.new do |s|
   s.add_development_dependency 'rubocop-performance', '~> 1.15.0'
   s.add_development_dependency 'rubocop-rspec', '~> 2.9.0'
   s.add_development_dependency 'ruby_audit', '~> 3.1'
+  s.add_development_dependency 'selenium-webdriver', '~> 4.0'
   s.add_development_dependency 'steep', '~> 1.9'
 
   s.add_runtime_dependency 'thor', '~> 1.2.1'

data/spec/integration/content/azure_content_spec.rb

@@ -124,6 +124,10 @@ describe 'Azure Pipelines content' do
         expect(raw).not_to match(/allure/i)
       end
 
+      it 'does not mention the saved login state' do
+        expect(raw).not_to include('.raider')
+      end
+
       it 'documents Azure Pipelines in the README and no GitHub Actions setup' do
         readme = read_generated(name, 'Readme.md')
         expect(readme).to include('## Azure Pipelines', 'RAIDER_TOKEN', 'Contribute to pull requests',

data/spec/integration/content/ci_content_spec.rb

@@ -319,4 +319,15 @@ describe 'CI pipeline content' do
       include_examples 'github raider-gate job', name, 'appium_pipeline.yml', test_jobs
     end
   end
+
+  context 'with the saved login state' do
+    workflows = FRAMEWORKS.product(%w[selenium watir]).map { |f, a| ["#{f}_#{a}", 'test_pipeline.yml'] } +
+                FRAMEWORKS.product(%w[android ios cross_platform]).map { |f, a| ["#{f}_#{a}", 'appium_pipeline.yml'] }
+
+    workflows.each do |name, file|
+      it "keeps .raider/auth out of #{name}/#{file}" do
+        expect(read_generated(name, ".github/workflows/#{file}")).not_to include('.raider')
+      end
+    end
+  end
 end

data/spec/integration/content/common_content_spec.rb

@@ -139,6 +139,21 @@ describe 'Common file content' do
     end
   end
 
+  shared_examples 'web gitignore for saved logins' do |project_name|
+    subject(:lines) { read_generated(project_name, '.gitignore').lines.map(&:strip) }
+
+    it 'ignores .raider/auth/ but not the whole .raider/' do
+      expect(lines).to include('.raider/auth/')
+      expect(lines).not_to include('.raider/', '.raider')
+    end
+  end
+
+  shared_examples 'mobile gitignore without saved logins' do |project_name|
+    it 'has no .raider line' do
+      expect(read_generated(project_name, '.gitignore')).not_to include('.raider')
+    end
+  end
+
   # --- Spec helper retry config (C4) ---
 
   shared_examples 'spec helper with retry config' do |project_name|
@@ -207,6 +222,7 @@ describe 'Common file content' do
     it_behaves_like 'rspec gitignore', name
     it_behaves_like 'spec helper with retry config', name
     it_behaves_like 'gemfile with rspec-retry', name
+    it_behaves_like 'web gitignore for saved logins', name
   end
 
   context 'with rspec and watir' do
@@ -217,6 +233,7 @@ describe 'Common file content' do
     it_behaves_like 'rspec gitignore', name
     it_behaves_like 'spec helper with retry config', name
     it_behaves_like 'gemfile with rspec-retry', name
+    it_behaves_like 'web gitignore for saved logins', name
   end
 
   # --- Cucumber contexts ---
@@ -229,6 +246,7 @@ describe 'Common file content' do
     it_behaves_like 'non-rspec gitignore', name
     it_behaves_like 'gemfile without rspec-retry', name
     it_behaves_like 'cucumber config with retry', name
+    it_behaves_like 'web gitignore for saved logins', name
   end
 
   context 'with cucumber and watir' do
@@ -239,5 +257,14 @@ describe 'Common file content' do
     it_behaves_like 'non-rspec gitignore', name
     it_behaves_like 'gemfile without rspec-retry', name
     it_behaves_like 'cucumber config with retry', name
+    it_behaves_like 'web gitignore for saved logins', name
+  end
+
+  %w[android ios cross_platform].each do |automation|
+    %w[rspec cucumber].each do |framework|
+      context "with #{framework} and #{automation}" do
+        it_behaves_like 'mobile gitignore without saved logins', "#{framework}_#{automation}"
+      end
+    end
   end
 end

data/spec/integration/content/config_content_spec.rb

@@ -59,6 +59,13 @@ describe 'Config file content' do
     end
   end
 
+  shared_examples 'login state config' do |project_name|
+    it 'has a login_state max_age of an hour' do
+      config = YAML.safe_load(read_generated(project_name, 'config/config.yml'), permitted_classes: [Symbol])
+      expect(config['login_state']).to eq('max_age' => 3600)
+    end
+  end
+
   # --- Web config per automation ---
 
   context 'with rspec and selenium' do
@@ -66,18 +73,21 @@ describe 'Config file content' do
     include_examples 'valid web config', name
     include_examples 'selenium config with timeout', name
     include_examples 'video config', name
+    include_examples 'login state config', name
   end
 
   context 'with rspec and watir' do
     name = "#{FrameworkIndex::RSPEC}_#{AutomationIndex::WATIR}"
     include_examples 'valid web config', name
     include_examples 'config without driver_options', name
+    include_examples 'login state config', name
   end
 
   context 'with cucumber and selenium' do
     name = "#{FrameworkIndex::CUCUMBER}_#{AutomationIndex::SELENIUM}"
     include_examples 'valid web config', name
     include_examples 'selenium config with timeout', name
+    include_examples 'login state config', name
   end
 
   # --- Mobile config ---
@@ -100,4 +110,12 @@ describe 'Config file content' do
       expect(caps).to match(/platformName/i)
     end
   end
+
+  %w[android ios cross_platform].each do |automation|
+    it "has no login_state in the #{automation} config" do
+      Dir.glob(File.join("#{FrameworkIndex::RSPEC}_#{automation}", 'config', '*.yml')).each do |file|
+        expect(File.read(file)).not_to include('login_state')
+      end
+    end
+  end
 end

data/spec/integration/content/cucumber_reporter_content_spec.rb

@@ -83,3 +83,28 @@ describe 'Cucumber raider_reporter wiring' do
     end
   end
 end
+
+describe 'Cucumber login reuse wiring' do
+  { 'selenium' => 'driver', 'watir' => 'browser.driver' }.each do |automation, target|
+    context "with cucumber and #{automation}" do
+      let(:env) { read_generated("#{FrameworkIndex::CUCUMBER}_#{automation}", 'features/support/env.rb') }
+
+      it 'requires session_state' do
+        expect(env).to include("require_relative '../../helpers/session_state'")
+      end
+
+      it "reuses the saved login in Before('@logged_in'), defined after the plain Before" do
+        expect(env).to include("Before('@logged_in') do", "SessionState.new(#{target}).reuse(",
+                               "UserFactory.for('registered user')")
+        expect(env.index("Before('@logged_in')")).to be > env.index(/^Before do/)
+      end
+    end
+  end
+
+  %w[android ios cross_platform].each do |automation|
+    it "does not mention session_state with cucumber and #{automation}" do
+      env = read_generated("#{FrameworkIndex::CUCUMBER}_#{automation}", 'features/support/env.rb')
+      expect(env).not_to include('session_state')
+    end
+  end
+end

data/spec/integration/content/helper_content_spec.rb

@@ -365,4 +365,36 @@ describe 'Helper file content' do
       end
     end
   end
+
+  # --- Opt-in login reuse ---
+
+  { 'selenium' => 'driver', 'watir' => 'browser.driver' }.each do |automation, target|
+    context "with rspec and #{automation} login reuse" do
+      subject(:helper) { read_generated("#{FrameworkIndex::RSPEC}_#{automation}", 'helpers/spec_helper.rb') }
+
+      it 'requires session_state and opts in through the :logged_in tag' do
+        expect(helper).to include("require_relative 'session_state'", 'config.before(:each, :logged_in)')
+      end
+
+      it 'reuses the saved login for the driver, falling back to the real login' do
+        expect(helper).to include("SessionState.new(#{target}).reuse(")
+        expect(helper).to include("user = ModelFactory.for('users')['registered user']", ".login(user['username'], user['password'])")
+        expect(helper).to include("header.customer_name == \"Welcome back \#{user['name']}\"")
+      end
+
+      it 'requires the models and pages the login needs' do
+        expect(helper).to include("require_relative '../models/model_factory'",
+                                  "require_relative '../page_objects/pages/login'",
+                                  "require_relative '../page_objects/pages/account'")
+      end
+    end
+  end
+
+  %w[android ios cross_platform].each do |automation|
+    context "with rspec and #{automation} without login reuse" do
+      it 'does not mention session_state' do
+        expect(read_generated("#{FrameworkIndex::RSPEC}_#{automation}", 'helpers/spec_helper.rb')).not_to include('session_state')
+      end
+    end
+  end
 end