fix(tests): pass WAF header to passwordless API calls

[vbudhram]

Because

• All 7 passwordless functional tests fail on stage with SyntaxError: Unexpected end of JSON input

This pull request

• Passes target.ciHeader to all direct API calls in signinPasswordless.spec.ts
• Passes this.target.ciHeader in testAccountTracker.ts for signUpPasswordless() and setupPasswordForPasswordlessAccount() (used by test setup and cleanup)

Issue that this pull request solves

Closes: https://mozilla-hub.atlassian.net/browse/FXA-13413

Checklis

• My commit is GPG signed.
• If applicable, I have modified or added tests which pass locally.
• I have added necessary documentation (if appropriate).
• I have verified that my changes render correctly in RTL (if appropriate).
• I have manually reviewed all AI generated code.

Other information

How to test:

CI_WAF_TOKEN=<token> yarn test-stage --grep "Passwordless API"

All 7 previously failing tests now pass. The CI_WAF_TOKEN is already set in CircleCI.

[StaberindeZA]

r+

[Copilot]

Pull request overview

This PR updates the functional test suite’s passwordless flows to include the CI WAF-bypass header (target.ciHeader) on direct auth-server API calls, addressing stage failures caused by WAF responses that aren’t valid JSON.

Changes:

• Pass target.ciHeader to passwordlessSendCode / passwordlessConfirmCode (and passwordlessResendCode where used) in passwordless specs.
• Update TestAccountTracker passwordless helpers to also forward this.target.ciHeader for passwordless signup and password setup flows.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File	Description
packages/functional-tests/tests/passwordless/signinPasswordless.spec.ts	Adds target.ciHeader to passwordless send/confirm API calls used within sign-in and cleanup flows.
packages/functional-tests/tests/passwordless/passwordlessApi.spec.ts	Adds target.ciHeader to passwordless send/confirm/resend API calls in the passwordless API functional tests.
packages/functional-tests/lib/testAccountTracker.ts	Ensures passwordless helper methods pass this.target.ciHeader to passwordless send/confirm calls used by setup/cleanup.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.