QA

Intermediate

Auth Flow QA

Dedicated auth testing: signup, login, sessions, guards, reset, and the edge cases that expose fake auth.

5 steps15 verify checks45-75 minutesWorks with: emergent · chatgpt · claude · cursor

Start Guided Walkthrough

#auth #qa #sessions #security #login

The Route

0/5 verified

Test the signup surface

Account creation is the front door - test it including the ugly inputs.

Test the login surface

Login must pass friends and stop strangers - test both.

Test the session lifecycle

Sessions are where fake auth dies - test persistence hard.

Test guards at both layers

Routes and APIs must both reject the logged-out - verify by attack.

Test recovery and close

Reset flows and the final edge sweep complete the audit.

Every step ends at a Verify Gate. Do not continue until every check passes.

Context Pack

Paste this first. It briefs the AI on requirements, constraints, and the Definition of Done before your first build prompt.

Context Pack

PROJECT CONTEXT:
My app has authentication and I want it properly QA'd: every path, every edge, every guard.

GOAL:
Verify the complete auth surface with executed tests: creation, credentials, sessions, protection, and recovery.

REQUIREMENTS:
- Signup path testing including duplicates and validation
- Login testing with wrong/right credentials
- Session lifecycle verification (persist, restore, logout)
- Guard testing on routes and APIs from a logged-out state
- Password reset verification if present

CONSTRAINTS:
- Test from clean states (fresh accounts, cleared sessions)
- API-level checks are mandatory, not just UI clicks

DEFINITION OF DONE:
- All auth paths pass with observed evidence
- No guard leaks on routes or endpoints
- Sessions behave correctly through refresh, logout, and expiry
- Errors are visible and never leak sensitive detail

COMMON FAILURES TO AVOID:
- Testing login only with the correct password
- Skipping direct-API guard checks
- Ignoring the back button after logout
- Reset flows that were never actually completed

Paste this into your AI builder first. It teaches the AI what you want before you give it the build prompt.

Related routes

More QA flows that share ground with this one.

QA

Security Basics Review

The essential security pass for AI-built apps: secrets, auth enforcement, input handling, and data exposure.

01Hunt exposed secrets

02Attack the auth enforcement

03Harden input handling

+2 more steps to Done

Best forproduction-grade builds with strict verification

5 steps60-90 minutesAdvanced

Start Route Details

QA

Evidence Checklist

Prove your app works with evidence: build a claim-by-claim verification pack with receipts.

01Inventory every claim

02Define verification procedures

03Execute and collect evidence

+2 more steps to Done

Best foryour first pass at this - no prior setup assumed

5 steps45-60 minutesBeginner

Start Route Details

QA

Mobile QA Checklist

A rigorous mobile QA pass: layouts, touch, keyboards, and the full core journey on phone-sized screens.

01Layout pass at phone widths

02Fix layout breaks

03Touch and gesture pass

+2 more steps to Done

Best foryour first pass at this - no prior setup assumed

5 steps45-60 minutesBeginner

Start Route Details

Made with Emergent