Add integration testing with testcontainers and Playwright

.github/actions/setup-integration-test-env/action.yml

@@ -0,0 +1,74 @@
+name: Setup integration test environment
+description: Prepare toolchains, Viceroy, and Docker images for integration test jobs.
+
+inputs:
+  origin-port:
+    description: Fixed origin port baked into the WASM binary for integration tests.
+    required: true
+
+outputs:
+  node-version:
+    description: Node.js version read from .tool-versions.
+    value: ${{ steps.node-version.outputs.node-version }}
+
+runs:
+  using: composite
+  steps:
+    - name: Check shared dependency versions
+      shell: bash
+      run: ./scripts/check-integration-dependency-versions.sh
+
+    - name: Retrieve Rust version
+      id: rust-version
+      shell: bash
+      run: echo "rust-version=$(grep '^rust ' .tool-versions | awk '{print $2}')" >> "$GITHUB_OUTPUT"
+
+    - name: Retrieve Node.js version
+      id: node-version
+      shell: bash
+      run: echo "node-version=$(grep '^nodejs ' .tool-versions | awk '{print $2}')" >> "$GITHUB_OUTPUT"
+
+    - name: Set up Rust toolchain
+      uses: actions-rust-lang/setup-rust-toolchain@v1
+      with:
+        toolchain: ${{ steps.rust-version.outputs.rust-version }}
+        target: wasm32-wasip1
+        cache-shared-key: cargo-${{ runner.os }}
+
+    - name: Get Viceroy cache key
+      id: viceroy-rev
+      shell: bash
+      run: echo "sha=$(git ls-remote https://github.com/fastly/Viceroy HEAD | cut -f1)" >> "$GITHUB_OUTPUT"
+
+    - name: Cache Viceroy binary
+      id: cache-viceroy
+      uses: actions/cache@v4
+      with:
+        path: ~/.cargo/bin/viceroy
+        key: viceroy-${{ runner.os }}-${{ steps.viceroy-rev.outputs.sha }}
+
+    - name: Install Viceroy
+      if: steps.cache-viceroy.outputs.cache-hit != 'true'
+      shell: bash
+      run: cargo install --git https://github.com/fastly/Viceroy viceroy
+
+    - name: Build WASM binary
+      shell: bash
+      env:
+        TRUSTED_SERVER__PUBLISHER__ORIGIN_URL: http://127.0.0.1:${{ inputs.origin-port }}
+        TRUSTED_SERVER__PROXY__CERTIFICATE_CHECK: "false"
+      run: cargo build --bin trusted-server-fastly --release --target wasm32-wasip1
+
+    - name: Build WordPress test container
+      shell: bash
+      run: |
+        docker build -t test-wordpress:latest \
+          crates/integration-tests/fixtures/frameworks/wordpress/
+
+    - name: Build Next.js test container
+      shell: bash
+      run: |
+        docker build \
+          --build-arg NODE_VERSION=${{ steps.node-version.outputs.node-version }} \
+          -t test-nextjs:latest \
+          crates/integration-tests/fixtures/frameworks/nextjs/

.github/workflows/integration-tests.yml

@@ -0,0 +1,105 @@
+name: "Integration Tests"
+
+permissions:
+  contents: read
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  pull_request_review:
+    types: [submitted]
+  workflow_dispatch:
+
+env:
+  ORIGIN_PORT: 8888
+
+jobs:
+  integration-tests:
+    name: integration tests
+    runs-on: ubuntu-latest
+    if: >-
+      github.event_name == 'push' ||
+      github.event_name == 'pull_request' ||
+      github.event_name == 'workflow_dispatch' ||
+      (github.event_name == 'pull_request_review' && github.event.review.state == 'approved')
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up shared integration test environment
+        id: shared-setup
+        uses: ./.github/actions/setup-integration-test-env
+        with:
+          origin-port: ${{ env.ORIGIN_PORT }}
+
+      - name: Run integration tests
+        run: >-
+          cargo test
+          --manifest-path crates/integration-tests/Cargo.toml
+          --target x86_64-unknown-linux-gnu
+          -- --include-ignored --skip test_wordpress_fastly --skip test_nextjs_fastly --test-threads=1
+        env:
+          INTEGRATION_ORIGIN_PORT: ${{ env.ORIGIN_PORT }}
+          RUST_LOG: info
+
+  browser-tests:
+    name: browser integration tests
+    runs-on: ubuntu-latest
+    if: >-
+      github.event_name == 'push' ||
+      github.event_name == 'pull_request' ||
+      github.event_name == 'workflow_dispatch' ||
+      (github.event_name == 'pull_request_review' && github.event.review.state == 'approved')
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up shared integration test environment
+        id: shared-setup
+        uses: ./.github/actions/setup-integration-test-env
+        with:
+          origin-port: ${{ env.ORIGIN_PORT }}
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ steps.shared-setup.outputs.node-version }}
+
+      - name: Install Playwright
+        working-directory: crates/integration-tests/browser
+        run: |
+          npm ci
+          npx playwright install --with-deps chromium
+
+      - name: Run browser tests (Next.js)
+        working-directory: crates/integration-tests/browser
+        env:
+          WASM_BINARY_PATH: ${{ github.workspace }}/target/wasm32-wasip1/release/trusted-server-fastly.wasm
+          INTEGRATION_ORIGIN_PORT: ${{ env.ORIGIN_PORT }}
+          VICEROY_CONFIG_PATH: ${{ github.workspace }}/crates/integration-tests/fixtures/configs/viceroy-template.toml
+          TEST_FRAMEWORK: nextjs
+        run: npx playwright test
+
+      - name: Run browser tests (WordPress)
+        working-directory: crates/integration-tests/browser
+        env:
+          WASM_BINARY_PATH: ${{ github.workspace }}/target/wasm32-wasip1/release/trusted-server-fastly.wasm
+          INTEGRATION_ORIGIN_PORT: ${{ env.ORIGIN_PORT }}
+          VICEROY_CONFIG_PATH: ${{ github.workspace }}/crates/integration-tests/fixtures/configs/viceroy-template.toml
+          TEST_FRAMEWORK: wordpress
+        run: npx playwright test
+
+      - name: Upload Playwright HTML report
+        uses: actions/upload-artifact@v4
+        if: failure()
+        with:
+          name: playwright-report
+          path: crates/integration-tests/browser/playwright-report/
+          retention-days: 7
+
+      - name: Upload Playwright traces and screenshots
+        uses: actions/upload-artifact@v4
+        if: failure()
+        with:
+          name: playwright-traces
+          path: crates/integration-tests/browser/test-results/
+          retention-days: 7

.github/workflows/test.yml

@@ -44,7 +44,7 @@ jobs:
         run: cargo install --git https://github.com/fastly/Viceroy viceroy
 
       - name: Run tests
-        run: cargo test
+        run: cargo test --workspace
 
   test-typescript:
     name: vitest

.gitignore

@@ -2,6 +2,7 @@
 /bin
 /pkg
 /target
+/crates/integration-tests/target
 
 # env
 .env*
@@ -28,4 +29,10 @@ src/*.html
 *.pem
 
 /guest-profiles
-/benchmark-results/**
+/benchmark-results/**
+
+# Playwright browser tests
+/crates/integration-tests/browser/node_modules/
+/crates/integration-tests/browser/test-results/
+/crates/integration-tests/browser/playwright-report/
+/crates/integration-tests/browser/.browser-test-state.json

Cargo.toml

@@ -2,11 +2,16 @@
 resolver = "2"
 members = [
     "crates/common",
-    "crates/fastly", 
+    "crates/fastly",
     "crates/js",
 ]
+# integration-tests is intentionally excluded from workspace members because it
+# requires a native target (testcontainers, reqwest) while the workspace default
+# is wasm32-wasip1. Run it via: ./scripts/integration-tests.sh
+exclude = [
+    "crates/integration-tests",
+]
 
-# Build defaults exclude the web-only tsjs crate, which is compiled via wasm-pack.
 default-members = [
     "crates/common",
     "crates/fastly",

crates/fastly/src/main.rs

@@ -176,7 +176,7 @@ fn init_logger() {
         .echo_stdout(true)
         .max_level(log::LevelFilter::Debug)
         .build()
-        .expect("Failed to build Logger");
+        .expect("should build Logger");
 
     fern::Dispatch::new()
         .format(|out, message, record| {
@@ -194,5 +194,5 @@ fn init_logger() {
         })
         .chain(Box::new(logger) as Box<dyn log::Log>)
         .apply()
-        .expect("Failed to initialize logger");
+        .expect("should initialize logger");
 }

crates/integration-tests/.dockerignore

@@ -0,0 +1,6 @@
+target/
+*.rs
+Cargo.toml
+Cargo.lock
+tests/
+README.md