What is the recommended solution for enabling testing of pages protected by Next Auth in a CI/CD pipeline?

[andersr]

Hi, I am trying to test restricted pages in a NextJS application using Cypress. According to your docs, you recommend using cypress-social-logins for testing with Cypress. However, the maintainers of that package state that use of their package doesn't work well in a CI env. Other solutions that have been suggested are to use the Credentials provider for this purpose. That may work, but it seems you disable db persistence when using the Credentials provider so basically not possible to use eg with a prisma adapter.

Is there a recommended solution for testing apps that use next auth in a CI/CD pipeline? Thanks for any tips or insights!

[andersr]

In a related discussion, it was suggested to mock the requests that NextAuth makes, which makes sense. If you could provide some details on the specifics of what should be mocked, that could be super helpful. Sure, we'd definitely want to mock a response to /api/auth/session and that one is easy.
But additionally, it seems one would need to write a cookie as well(?) and what about the CSRF token? So far, all the attempts I have made have resulted in failed tests when run in Github actions even though many test pass when run locally.