Jeffrey Smith
b1a8568bff
Some checks failed
CI/CD / detect-changes (pull_request) Successful in 4s
CI/CD / test-frontend (pull_request) Successful in 5s
CI/CD / e2e-smoke (pull_request) Failing after 1m31s
CI/CD / test-runners (pull_request) Failing after 2m40s
CI/CD / test-go-pg (pull_request) Successful in 3m17s
CI/CD / test-sqlite (pull_request) Successful in 3m27s
CI/CD / build-and-deploy (pull_request) Has been skipped
Playwright's addCookies (both domain-based and url-based) fails to send SameSite=Strict cookies in Docker DNS environments. The server middleware reads arm_token from cookies, but the cookie is originally set by client-side JS (document.cookie with SameSite=Strict). New approach: navigate to /login first, then inject the token into localStorage (key: arm_auth) and set the cookie via document.cookie in page context — exactly how the real login flow works. This ensures the cookie attributes match what the server expects. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>