Files

12 lines
679 B
JSON

{
"_comment": "D5 fixture for /demos/auth. The script signs in by default (the demo page hydrates authenticated), sends one message, then in the assertion clicks [data-testid='auth-sign-out-button'] and waits for [data-testid='auth-demo-error'] OR [data-testid='auth-demo-chat-boundary'] to surface — proves the auth gate actually rejects post-sign-out activity. Substring 'auth check turn 1' is unique.",
"fixtures": [
{
"match": { "userMessage": "auth check turn 1" },
"response": {
"content": "Authenticated session is active. The runtime accepted your request because the Authorization header carried the demo bearer token."
}
}
]
}