From 691459174ad9bd313b0f6492bc26a757b595e0ef Mon Sep 17 00:00:00 2001 From: Jakub Zych Date: Sat, 24 Oct 2026 00:31:27 +0200 Subject: [PATCH] test(19.7): complete UAT - 5 passed, 0 issues --- .../19.7-generic-mcp-module/19.7-UAT.md | 25 +++++++++---------- 1 file changed, 12 insertions(+), 13 deletions(-) diff --git a/.planning/phases/19.7-generic-mcp-module/19.7-UAT.md b/.planning/phases/19.7-generic-mcp-module/19.7-UAT.md index ec6098bd..28d4e61c 100644 --- a/.planning/phases/19.7-generic-mcp-module/19.7-UAT.md +++ b/.planning/phases/19.7-generic-mcp-module/19.7-UAT.md @@ -1,18 +1,14 @@ --- -status: testing +status: complete phase: 19.7-generic-mcp-module source: [19.7-VERIFICATION.md] started: 2026-10-23T20:05:22.930Z -updated: 2026-10-23T22:17:04Z +updated: 2026-10-23T22:31:27Z --- ## Current Test -number: 2 -name: Real MCP client against the local demo (DEPLOY.md, 'MCP endpoint', 'Locally'): add http://127.0.0.1:8097/mcp to Claude Code or Claude Desktop, sign in on /connect as a frontend user asking for backend, see only user_me; in the admin's My account start 'Link frontend account', finish on /link-admin with a fresh sign-in, reconnect (consent shows 'also act as admin '), see the journal_ tools, create a draft post and find it in the admin; unlink and see the journal_ tools disappear. -expected: | - One connector, one OAuth sign-in; journal_ tools appear only with a verified link plus the backend scope and disappear after unlinking (the session ends, a new session lists user_me only) -awaiting: user response +[testing complete] ## Tests @@ -23,27 +19,30 @@ note: override accepted in 19.7-VERIFICATION.md (SC-3 group-grant wording) ### 2. Real MCP client against the local demo (DEPLOY.md, 'MCP endpoint', 'Locally'): add http://127.0.0.1:8097/mcp to Claude Code or Claude Desktop, sign in on /connect as a frontend user asking for backend, see only user_me; in the admin's My account start 'Link frontend account', finish on /link-admin with a fresh sign-in, reconnect (consent shows 'also act as admin '), see the journal_ tools, create a draft post and find it in the admin; unlink and see the journal_ tools disappear. expected: One connector, one OAuth sign-in; journal_ tools appear only with a verified link plus the backend scope and disappear after unlinking (the session ends, a new session lists user_me only) -result: [pending] +result: pass +note: real client: Claude Code against the local demo on the Nuxt origin (127.0.0.1:3001, app.url and both MCP resources overridden as DEPLOY.md 'Locally' describes); frontend test user uat@example.test ### 3. Consent page with a changed link, in a browser: open /connect for a request asking for backend, then change the user's link to another administrator (Administrators screen) before clicking Allow. expected: The decision answers 409 backend_link_changed, the page reloads the request and shows the linkChanged notice naming the new administrator; no grant is issued for the old one -result: [pending] +result: pass ### 4. Link page 'Signed in as', in a browser: start 'Link frontend account' on My account, open the #code=... URL while signed in as a different frontend user than intended. expected: /link-admin shows the request and 'Signed in as ' before the confirm button, keeps the code across a sign-in (sessionStorage), and a session older than the request gets the stale-session message -result: [pending] +result: pass ### 5. RB-WR-01 in Firefox: in the admin, on a record form with a plugin field type that renders inside a shadow root (taglist or another widget), type into the inner input and press Ctrl+S (and Ctrl+Enter) with a pending taglist draft. expected: The pending draft is committed before the save; plain keys typed inside the shadow root (letters, Esc, /, ?) trigger no shortcut -result: [pending] +result: pass ## Summary total: 5 -passed: 1 +passed: 5 issues: 0 -pending: 4 +pending: 0 skipped: 0 blocked: 0 ## Gaps + +[none]