diff --git a/docs/tests/web/account-shell-integration.md b/docs/tests/web/account-shell-integration.md index d46ee9d..12ad520 100644 --- a/docs/tests/web/account-shell-integration.md +++ b/docs/tests/web/account-shell-integration.md @@ -8,11 +8,11 @@ ## Protected behavior -The authenticated account-creation page consumes the shared role-aware desktop shell and posts to the real account endpoint. The public activation and login pages consume the local themed authentication shell while preserving their raw-token and Spring Security form contracts. The Admin dashboard and navigation link to the implemented `/admin/accounts/new` route, and logout remains a CSRF-protected POST in the shared shell. +The authenticated account-creation page consumes the shared role-aware desktop shell and posts to the real account endpoint. The public bootstrap, activation, and login pages consume the local themed authentication shell while preserving their first-Admin, raw-token, and Spring Security form contracts. The Admin dashboard and navigation link to the implemented `/admin/accounts/new` route, and logout remains a CSRF-protected POST in the shared shell. ## Test method -A focused MockMvc slice renders the production account-creation, activation, and login templates through a test-only controller. It asserts the authenticated and public shell markers, local pre-paint theme and CSS assets, real form actions, accessible error status, activation token retention, and the real account-creation URL. The existing PostgreSQL Account and Authentication web flows then exercise account creation, activation, normalized login, failed login, authorization, and logout through the production controllers and services. +A focused MockMvc slice renders the production bootstrap, account-creation, activation, and login templates through a test-only controller. It asserts the authenticated and public shell markers, local pre-paint theme and CSS assets, real form actions, accessible error status, activation token retention, and the real account-creation URL. The existing PostgreSQL Bootstrap, Account, and Authentication flows then exercise one-time initialization, account creation, activation, normalized login, failed login, authorization, and logout through the production controllers and services. ## Hand-derived expected result @@ -49,6 +49,15 @@ BUILD FAILURE Total time: 5.343 s ``` +The first-Admin bootstrap page then established its own layout RED: + +```text +Tests run: 1, Failures: 1, Errors: 0, Skipped: 0 +AccountTemplateIntegrationTest.bootstrapUsesPublicAuthShellAndPreservesFirstAdminContract expected class="auth-shell" +BUILD FAILURE +Total time: 4.771 s +``` + ## GREEN **Command** @@ -81,6 +90,16 @@ PostgreSQL 18.4 Tests run: 5, Failures: 0, Errors: 0, Skipped: 0 BUILD SUCCESS Total time: 18.361 s + +Bootstrap-specific affected suite: + +```text +./mvnw -Dtest=AccountTemplateIntegrationTest,BootstrapIntegrationTest test +PostgreSQL 18.4 +Tests run: 7, Failures: 0, Errors: 0, Skipped: 0 +BUILD SUCCESS +Total time: 17.350 s +``` ``` ## External-test boundaries diff --git a/src/main/resources/templates/bootstrap/form.html b/src/main/resources/templates/bootstrap/form.html index cbc74a0..dc5a38d 100644 --- a/src/main/resources/templates/bootstrap/form.html +++ b/src/main/resources/templates/bootstrap/form.html @@ -1,15 +1,18 @@ - -Initialize Lab Timesheet +
-

Create the first administrator

-

-
- - - - +

Initialize this installation once. Later accounts are created by an active Admin.

+ + +
+
+
+
diff --git a/src/test/java/com/lab/labtimesheet/feature/reporting/controller/AccountTemplateIntegrationTest.java b/src/test/java/com/lab/labtimesheet/feature/reporting/controller/AccountTemplateIntegrationTest.java index 475fc8e..87864d2 100644 --- a/src/test/java/com/lab/labtimesheet/feature/reporting/controller/AccountTemplateIntegrationTest.java +++ b/src/test/java/com/lab/labtimesheet/feature/reporting/controller/AccountTemplateIntegrationTest.java @@ -63,6 +63,19 @@ class AccountTemplateIntegrationTest { .andExpect(content().string(containsString("src=\"/assets/theme.js\""))); } + @Test + void bootstrapUsesPublicAuthShellAndPreservesFirstAdminContract() throws Exception { + mvc.perform(get("/template-contract/bootstrap") + .with(user("bootstrap-template-viewer"))) + .andExpect(status().isOk()) + .andExpect(content().string(containsString("class=\"auth-shell\""))) + .andExpect(content().string(containsString("action=\"/bootstrap\""))) + .andExpect(content().string(containsString("name=\"email\""))) + .andExpect(content().string(containsString("name=\"displayName\""))) + .andExpect(content().string(containsString("autocomplete=\"new-password\""))) + .andExpect(content().string(containsString("src=\"/assets/theme.js\""))); + } + @Controller public static class TemplateController { @@ -81,5 +94,10 @@ class AccountTemplateIntegrationTest { String login() { return "accounts/login"; } + + @GetMapping("/template-contract/bootstrap") + String bootstrap() { + return "bootstrap/form"; + } } }