@dargmuesli/nuxt-vio-testing 13.1.0

package/e2e/specs/server/headers.spec.ts

@@ -0,0 +1,53 @@
+import { test, expect } from '@playwright/test'
+
+test.describe('headers middleware', () => {
+  test('sets the correct security headers', async ({ request }) => {
+    if (process.env.VIO_SERVER === 'static') return // TODO: use single snapshot and all servers
+
+    const headers = (await request.get('/')).headers()
+
+    expect(headers.connection).toStrictEqual('close')
+    expect(headers['access-control-allow-origin']).toStrictEqual('*')
+    expect(
+      headers['content-security-policy'].replace(/nonce-[^']+/g, 'nonce'),
+    ).toMatchSnapshot(
+      `csp-${
+        process.env.NODE_ENV === 'production' ? 'production' : 'development'
+      }.txt`,
+    )
+    expect(headers['content-type']).toStrictEqual('text/html;charset=utf-8')
+    expect(headers['cross-origin-embedder-policy']).toStrictEqual(
+      process.env.NODE_ENV === 'production' ? 'require-corp' : 'unsafe-none',
+    ) // https://stackoverflow.com/questions/71904052/getting-notsameoriginafterdefaultedtosameoriginbycoep-error-with-helmet
+    expect(headers['cross-origin-opener-policy']).toStrictEqual('same-origin')
+    expect(headers['cross-origin-resource-policy']).toStrictEqual('same-origin')
+    expect('expect-ct' in headers).toBeFalsy() // deprecated (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Expect-CT)
+    expect(headers.nel).toStrictEqual(
+      '\'{"report_to":"csp-endpoint","max_age":31536000,"include_subdomains":true}\'',
+    )
+    expect(headers['origin-agent-cluster']).toStrictEqual('?1')
+    expect(headers['permissions-policy']).toStrictEqual(
+      'camera=(), display-capture=(), fullscreen=(), geolocation=(), microphone=()',
+    )
+    expect(headers['referrer-policy']).toStrictEqual('no-referrer')
+    expect(headers['report-to']).toStrictEqual(
+      '{"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url":"https://o4507259039973376.ingest.sentry.io/api/4507260561653840/security/?sentry_key=1e53178c1dba9b39147de4a21853a3e3"}],"include_subdomains":true}}',
+    )
+
+    if (process.env.NODE_ENV === 'production') {
+      expect(headers['strict-transport-security']).toStrictEqual(
+        'max-age=31536000; includeSubDomains; preload;',
+      )
+    } else {
+      expect('strict-transport-security' in headers).toBeFalsy()
+    }
+
+    expect(headers['x-content-type-options']).toStrictEqual('nosniff')
+    expect(headers['x-dns-prefetch-control']).toStrictEqual('off')
+    expect(headers['x-download-options']).toStrictEqual('noopen')
+    expect(headers['x-frame-options']).toStrictEqual('SAMEORIGIN')
+    expect(headers['x-permitted-cross-domain-policies']).toStrictEqual('none')
+    expect('x-powered-by' in headers).toBeFalsy()
+    expect(headers['x-xss-protection']).toStrictEqual('1; mode=block')
+  })
+})

package/e2e/specs/server/headers.spec.ts-snapshots/csp-production-chromium-linux.txt

@@ -0,0 +1 @@
+base-uri 'none'; form-action 'none'; frame-ancestors 'none'; img-src https://*.google-analytics.com https://*.googletagmanager.com 'self' data:; style-src 'nonce' 'self'; connect-src https://cloudflareinsights.com https://*.analytics.google.com https://*.google-analytics.com https://*.googletagmanager.com 'self'; default-src 'none'; report-to csp-endpoint; report-uri https://o4507259039973376.ingest.sentry.io/api/4507260561653840/security/?sentry_key=1e53178c1dba9b39147de4a21853a3e3; script-src-elem https://static.cloudflareinsights.com https://*.googletagmanager.com 'nonce' http://localhost:3001/_nuxt/; manifest-src http://localhost:3001/site.webmanifest;

package/e2e/specs/server/headers.spec.ts-snapshots/csp-production-firefox-linux.txt

@@ -0,0 +1 @@
+base-uri 'none'; form-action 'none'; frame-ancestors 'none'; img-src https://*.google-analytics.com https://*.googletagmanager.com 'self' data:; style-src 'nonce' 'self'; connect-src https://cloudflareinsights.com https://*.analytics.google.com https://*.google-analytics.com https://*.googletagmanager.com 'self'; default-src 'none'; report-to csp-endpoint; report-uri https://o4507259039973376.ingest.sentry.io/api/4507260561653840/security/?sentry_key=1e53178c1dba9b39147de4a21853a3e3; script-src-elem https://static.cloudflareinsights.com https://*.googletagmanager.com 'nonce' http://localhost:3001/_nuxt/; manifest-src http://localhost:3001/site.webmanifest;

package/e2e/specs/server/headers.spec.ts-snapshots/csp-production-webkit-linux.txt

@@ -0,0 +1 @@
+base-uri 'none'; form-action 'none'; frame-ancestors 'none'; img-src https://*.google-analytics.com https://*.googletagmanager.com 'self' data:; style-src 'nonce' 'self'; connect-src https://cloudflareinsights.com https://*.analytics.google.com https://*.google-analytics.com https://*.googletagmanager.com 'self'; default-src 'none'; report-to csp-endpoint; report-uri https://o4507259039973376.ingest.sentry.io/api/4507260561653840/security/?sentry_key=1e53178c1dba9b39147de4a21853a3e3; script-src-elem https://static.cloudflareinsights.com https://*.googletagmanager.com 'nonce' http://localhost:3001/_nuxt/; manifest-src http://localhost:3001/site.webmanifest;

package/e2e/specs/server/robots.spec.ts

@@ -0,0 +1,29 @@
+import { test, expect } from '@playwright/test'
+import { escapeRegExp } from 'lodash-es'
+
+import { SITE_URL } from '#src/utils/constants'
+
+const path = '/robots.txt'
+
+test.describe('page load', () => {
+  test('loads the page successfully', async ({ request }) => {
+    const resp = await request.get(path)
+    expect(resp.status()).toBe(200)
+  })
+})
+
+test.describe('robots.txt', () => {
+  test('content', async ({ request }) => {
+    const resp = await request.get(path)
+    expect(
+      (await resp.text()).replace(
+        new RegExp(escapeRegExp(SITE_URL), 'g'),
+        'https://example.com',
+      ),
+    ).toMatchSnapshot(
+      `robots-txt-content-${
+        process.env.NODE_ENV === 'production' ? 'production' : 'development'
+      }.txt`,
+    )
+  })
+})

package/e2e/specs/server/robots.spec.ts-snapshots/robots-txt-content-development-chromium-linux.txt

@@ -0,0 +1,4 @@
+User-agent: *
+Disallow: /
+
+# DEVELOPMENT HINTS: Indexing is blocked because of the environment. You can mock a production environment with ?indexable query.

package/e2e/specs/server/robots.spec.ts-snapshots/robots-txt-content-development-firefox-linux.txt

@@ -0,0 +1,4 @@
+User-agent: *
+Disallow: /
+
+# DEVELOPMENT HINTS: Indexing is blocked because of the environment. You can mock a production environment with ?indexable query.

package/e2e/specs/server/robots.spec.ts-snapshots/robots-txt-content-development-webkit-linux.txt

@@ -0,0 +1,4 @@
+User-agent: *
+Disallow: /
+
+# DEVELOPMENT HINTS: Indexing is blocked because of the environment. You can mock a production environment with ?indexable query.

package/e2e/specs/server/robots.spec.ts-snapshots/robots-txt-content-production-chromium-linux.txt

@@ -0,0 +1,4 @@
+User-agent: *
+Disallow: 
+
+Sitemap: https://example.com/sitemap_index.xml

package/e2e/specs/server/robots.spec.ts-snapshots/robots-txt-content-production-firefox-linux.txt

@@ -0,0 +1,4 @@
+User-agent: *
+Disallow: 
+
+Sitemap: https://example.com/sitemap_index.xml

package/e2e/specs/server/robots.spec.ts-snapshots/robots-txt-content-production-webkit-linux.txt

@@ -0,0 +1,4 @@
+User-agent: *
+Disallow: 
+
+Sitemap: https://example.com/sitemap_index.xml

package/e2e/specs/server/sitemap.spec.ts

@@ -0,0 +1,42 @@
+import { test, expect } from '@playwright/test'
+import { escapeRegExp } from 'lodash-es'
+
+import { SITE_URL } from '#src/utils/constants'
+
+const path = '/sitemap_index.xml'
+
+test.describe('page load', () => {
+  test('loads the page successfully', async ({ request }) => {
+    const resp = await request.get(path)
+    expect(resp.status()).toBe(200)
+  })
+})
+
+test.describe('sitemap', () => {
+  const languages = ['en', 'de']
+
+  test('index', async ({ request }) => {
+    const resp = await request.get(path)
+    const text = await resp.text()
+
+    for (const language of languages) {
+      expect(text).toContain(`${SITE_URL}/${language}-sitemap.xml`)
+    }
+  })
+
+  test('content', async ({ request }) => {
+    for (const language of languages) {
+      const resp = await request.get(`/${language}-sitemap.xml`)
+      const text = await resp.text()
+
+      expect(
+        text
+          .replace(/\n.+<\/lastmod>/g, '')
+          .replace(
+            new RegExp(escapeRegExp(SITE_URL), 'g'),
+            'https://example.com',
+          ),
+      ).toMatchSnapshot(`sitemap-content-${language}.txt`)
+    }
+  })
+})

package/e2e/specs/server/sitemap.spec.ts-snapshots/sitemap-content-de-chromium-linux.txt

@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="/__sitemap__/style.xsl"?>
+<urlset xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:video="http://www.google.com/schemas/sitemap-video/1.1" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd http://www.google.com/schemas/sitemap-image/1.1 http://www.google.com/schemas/sitemap-image/1.1/sitemap-image.xsd" xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
+    <url>
+        <loc>https://example.com/de</loc>
+        <xhtml:link rel="alternate" hreflang="en" href="https://example.com/" />
+        <xhtml:link rel="alternate" hreflang="de" href="https://example.com/de" />
+        <xhtml:link rel="alternate" hreflang="x-default" href="https://example.com/" />
+    </url>
+    <url>
+        <loc>https://example.com/de/legal-notice</loc>
+        <xhtml:link rel="alternate" hreflang="en" href="https://example.com/legal-notice" />
+        <xhtml:link rel="alternate" hreflang="de" href="https://example.com/de/legal-notice" />
+        <xhtml:link rel="alternate" hreflang="x-default" href="https://example.com/legal-notice" />
+    </url>
+    <url>
+        <loc>https://example.com/de/privacy-policy</loc>
+        <xhtml:link rel="alternate" hreflang="en" href="https://example.com/privacy-policy" />
+        <xhtml:link rel="alternate" hreflang="de" href="https://example.com/de/privacy-policy" />
+        <xhtml:link rel="alternate" hreflang="x-default" href="https://example.com/privacy-policy" />
+    </url>
+</urlset>

package/e2e/specs/server/sitemap.spec.ts-snapshots/sitemap-content-de-firefox-linux.txt

@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="/__sitemap__/style.xsl"?>
+<urlset xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:video="http://www.google.com/schemas/sitemap-video/1.1" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd http://www.google.com/schemas/sitemap-image/1.1 http://www.google.com/schemas/sitemap-image/1.1/sitemap-image.xsd" xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
+    <url>
+        <loc>https://example.com/de</loc>
+        <xhtml:link rel="alternate" hreflang="en" href="https://example.com/" />
+        <xhtml:link rel="alternate" hreflang="de" href="https://example.com/de" />
+        <xhtml:link rel="alternate" hreflang="x-default" href="https://example.com/" />
+    </url>
+    <url>
+        <loc>https://example.com/de/legal-notice</loc>
+        <xhtml:link rel="alternate" hreflang="en" href="https://example.com/legal-notice" />
+        <xhtml:link rel="alternate" hreflang="de" href="https://example.com/de/legal-notice" />
+        <xhtml:link rel="alternate" hreflang="x-default" href="https://example.com/legal-notice" />
+    </url>
+    <url>
+        <loc>https://example.com/de/privacy-policy</loc>
+        <xhtml:link rel="alternate" hreflang="en" href="https://example.com/privacy-policy" />
+        <xhtml:link rel="alternate" hreflang="de" href="https://example.com/de/privacy-policy" />
+        <xhtml:link rel="alternate" hreflang="x-default" href="https://example.com/privacy-policy" />
+    </url>
+</urlset>

package/e2e/specs/server/sitemap.spec.ts-snapshots/sitemap-content-de-webkit-linux.txt

@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="/__sitemap__/style.xsl"?>
+<urlset xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:video="http://www.google.com/schemas/sitemap-video/1.1" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd http://www.google.com/schemas/sitemap-image/1.1 http://www.google.com/schemas/sitemap-image/1.1/sitemap-image.xsd" xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
+    <url>
+        <loc>https://example.com/de</loc>
+        <xhtml:link rel="alternate" hreflang="en" href="https://example.com/" />
+        <xhtml:link rel="alternate" hreflang="de" href="https://example.com/de" />
+        <xhtml:link rel="alternate" hreflang="x-default" href="https://example.com/" />
+    </url>
+    <url>
+        <loc>https://example.com/de/legal-notice</loc>
+        <xhtml:link rel="alternate" hreflang="en" href="https://example.com/legal-notice" />
+        <xhtml:link rel="alternate" hreflang="de" href="https://example.com/de/legal-notice" />
+        <xhtml:link rel="alternate" hreflang="x-default" href="https://example.com/legal-notice" />
+    </url>
+    <url>
+        <loc>https://example.com/de/privacy-policy</loc>
+        <xhtml:link rel="alternate" hreflang="en" href="https://example.com/privacy-policy" />
+        <xhtml:link rel="alternate" hreflang="de" href="https://example.com/de/privacy-policy" />
+        <xhtml:link rel="alternate" hreflang="x-default" href="https://example.com/privacy-policy" />
+    </url>
+</urlset>

package/e2e/specs/server/sitemap.spec.ts-snapshots/sitemap-content-en-chromium-linux.txt

@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="/__sitemap__/style.xsl"?>
+<urlset xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:video="http://www.google.com/schemas/sitemap-video/1.1" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd http://www.google.com/schemas/sitemap-image/1.1 http://www.google.com/schemas/sitemap-image/1.1/sitemap-image.xsd" xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
+    <url>
+        <loc>https://example.com/</loc>
+        <xhtml:link rel="alternate" hreflang="en" href="https://example.com/" />
+        <xhtml:link rel="alternate" hreflang="de" href="https://example.com/de" />
+        <xhtml:link rel="alternate" hreflang="x-default" href="https://example.com/" />
+    </url>
+    <url>
+        <loc>https://example.com/legal-notice</loc>
+        <xhtml:link rel="alternate" hreflang="en" href="https://example.com/legal-notice" />
+        <xhtml:link rel="alternate" hreflang="de" href="https://example.com/de/legal-notice" />
+        <xhtml:link rel="alternate" hreflang="x-default" href="https://example.com/legal-notice" />
+    </url>
+    <url>
+        <loc>https://example.com/privacy-policy</loc>
+        <xhtml:link rel="alternate" hreflang="en" href="https://example.com/privacy-policy" />
+        <xhtml:link rel="alternate" hreflang="de" href="https://example.com/de/privacy-policy" />
+        <xhtml:link rel="alternate" hreflang="x-default" href="https://example.com/privacy-policy" />
+    </url>
+</urlset>

package/e2e/specs/server/sitemap.spec.ts-snapshots/sitemap-content-en-firefox-linux.txt

@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="/__sitemap__/style.xsl"?>
+<urlset xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:video="http://www.google.com/schemas/sitemap-video/1.1" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd http://www.google.com/schemas/sitemap-image/1.1 http://www.google.com/schemas/sitemap-image/1.1/sitemap-image.xsd" xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
+    <url>
+        <loc>https://example.com/</loc>
+        <xhtml:link rel="alternate" hreflang="en" href="https://example.com/" />
+        <xhtml:link rel="alternate" hreflang="de" href="https://example.com/de" />
+        <xhtml:link rel="alternate" hreflang="x-default" href="https://example.com/" />
+    </url>
+    <url>
+        <loc>https://example.com/legal-notice</loc>
+        <xhtml:link rel="alternate" hreflang="en" href="https://example.com/legal-notice" />
+        <xhtml:link rel="alternate" hreflang="de" href="https://example.com/de/legal-notice" />
+        <xhtml:link rel="alternate" hreflang="x-default" href="https://example.com/legal-notice" />
+    </url>
+    <url>
+        <loc>https://example.com/privacy-policy</loc>
+        <xhtml:link rel="alternate" hreflang="en" href="https://example.com/privacy-policy" />
+        <xhtml:link rel="alternate" hreflang="de" href="https://example.com/de/privacy-policy" />
+        <xhtml:link rel="alternate" hreflang="x-default" href="https://example.com/privacy-policy" />
+    </url>
+</urlset>

package/e2e/specs/server/sitemap.spec.ts-snapshots/sitemap-content-en-webkit-linux.txt

@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="/__sitemap__/style.xsl"?>
+<urlset xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:video="http://www.google.com/schemas/sitemap-video/1.1" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd http://www.google.com/schemas/sitemap-image/1.1 http://www.google.com/schemas/sitemap-image/1.1/sitemap-image.xsd" xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
+    <url>
+        <loc>https://example.com/</loc>
+        <xhtml:link rel="alternate" hreflang="en" href="https://example.com/" />
+        <xhtml:link rel="alternate" hreflang="de" href="https://example.com/de" />
+        <xhtml:link rel="alternate" hreflang="x-default" href="https://example.com/" />
+    </url>
+    <url>
+        <loc>https://example.com/legal-notice</loc>
+        <xhtml:link rel="alternate" hreflang="en" href="https://example.com/legal-notice" />
+        <xhtml:link rel="alternate" hreflang="de" href="https://example.com/de/legal-notice" />
+        <xhtml:link rel="alternate" hreflang="x-default" href="https://example.com/legal-notice" />
+    </url>
+    <url>
+        <loc>https://example.com/privacy-policy</loc>
+        <xhtml:link rel="alternate" hreflang="en" href="https://example.com/privacy-policy" />
+        <xhtml:link rel="alternate" hreflang="de" href="https://example.com/de/privacy-policy" />
+        <xhtml:link rel="alternate" hreflang="x-default" href="https://example.com/privacy-policy" />
+    </url>
+</urlset>

package/e2e/utils/constants.ts

@@ -0,0 +1,37 @@
+import { expect } from '@playwright/test'
+import type { Page } from 'playwright-core'
+
+export const COOKIE_CONTROL_DEFAULT = 'ctga'
+export const PAGE_READY = async ({
+  page,
+  options,
+}: {
+  page: Page
+  options?: {
+    cookieControl?: boolean
+    devTools?: boolean
+    isLoading?: boolean
+  }
+}) => {
+  if (!options || options.cookieControl !== false) {
+    await expect(
+      page.getByRole('button', { name: 'Cookie control' }),
+    ).toBeVisible()
+  }
+
+  // if (
+  //   process.env.NODE_ENV === 'development' &&
+  //   (!options || options.devTools !== false)
+  // ) {
+  //   await expect(
+  //     page.getByRole('button', { name: 'Toggle Nuxt DevTools' }),
+  //   ).toBeVisible()
+  // }
+
+  if (!options || options.isLoading !== false) {
+    await expect(page.getByTestId('is-loading')).toHaveAttribute(
+      'data-is-loading',
+      'false',
+    )
+  }
+}