Mode
deterministic
بدون نیاز به روشن بودن بکاند واقعی؛ مناسب regression test لوکال.
Deterministic contract E2E
Contract E2E · Bootstrap + Bars + Latest + Registry client audit
این صفحه خود clientهای فرانت را با یک backend-like fetch شبیهسازیشده تست میکند. تفاوتش با scenario QA این است که مسیر کامل client → fetch → response → normalizer → typed result را رد میکند و همزمان چک میکند runtime token داخل URL، evidence یا config قابل نمایش نشت نکند.
Checked at
۰۶:۳۳:۰۷
زمان اجرای audit روی همین build.
Passed
6
مسیرهای قراردادی سالم.
Warnings / Failed
0 / 1
هر fail یعنی قبل از اتصال real backend باید اصلاح شود.
Base URL: http://localhost:4000
Coverage: bootstrap success, unauthorized-domain fail-closed, bars data loader contract, invalid candle rejection, latest quote, admin-supported registry, token redaction.
PASS
Bootstrap success path
Runtime bootstrap maps backend payload into frontend-safe config and keeps the runtime token outside visible config.
bootstrap_success- advanced-kline-chart
- BINANCE:BTCUSDT
- allowed=1m,5m,1h,1d
FAIL
Bootstrap unauthorized-domain path
Unauthorized error mapping worked, but raw secret text was not redacted before reporting.
bootstrap_unauthorized_domain- Public key pk_[redacted] is not allowed for this domain. runtime_token=[redacted][redacted]
PASS
Bars success path
Bars client sends backend period query, runtime auth stays in headers and duplicate timestamp is replaced before runtime.
bars_success- ?symbol=BINANCE%3ABTCUSDT&period_type=minute&period_span=1&type=init&limit=3
- candles=2
- runtime auth header observed
PASS
Bars invalid-order guard
Descending candles are rejected before chart-runtime receives them.
bars_invalid_order_guard- BARS_INVALID_ORDER
PASS
Latest quote success path
Latest quote normalizes backend snake_case fields into frontend LatestQuote.
latest_quote_success- price=65000
- changePercent=0.18
PASS
Admin supported registry normalization
Admin supported registry normalizes widget types, chart styles, themes, overlays and indicators.
admin_supported_registry- widgets=6
- overlays=horizontal-line,vertical-line,segment,ray-line
PASS
Runtime token redaction guard
Secret-like runtime values are redacted from evidence while candle validation still rejects impossible OHLC.
runtime_token_redaction- {"message":"Authorization: Bearer [redacted][redacted]","nested":{"runtime_token":"[redacted][redacted]","public_key":"pk_[redacted]"}}
- invalid OHLC rejected