Test password-reset emails end to end

// tests/password-reset.spec.ts
import { test, expect } from "@playwright/test";
import { newAddress, waitForEmail } from "./zyntra";

test("a user resets their password from the email", async ({ page }) => {
  test.setTimeout(120_000);
  const address = newAddress("reset");

  // 1. A user with that address (your seed step or the sign-up form).
  await page.goto("/signup");
  await page.getByLabel("Email").fill(address);
  await page.getByLabel("Password").fill("old-password-123");
  await page.getByRole("button", { name: "Sign up" }).click();
  await waitForEmail(address, (e) => e.subject.includes("Confirm"));

  // 2. Ask for a reset. The address already has mail, so wait
  //    for the email whose subject is the reset one.
  await page.goto("/forgot-password");
  await page.getByLabel("Email").fill(address);
  await page.getByRole("button", { name: "Send reset link" }).click();
  const email = await waitForEmail(address, (e) =>
    e.subject.includes("Reset your password"),
  );

  // 3. Follow the link, set a new password, sign in with it.
  const reset = email.links.find((l) => l.url.includes("/reset"));
  await page.goto(reset!.url);
  await page.getByLabel("New password").fill("new-password-456");
  await page.getByRole("button", { name: "Save password" }).click();

  await page.goto("/login");
  await page.getByLabel("Email").fill(address);
  await page.getByLabel("Password").fill("new-password-456");
  await page.getByRole("button", { name: "Log in" }).click();
  await expect(page.getByText("Dashboard")).toBeVisible();
});

// zyntra.ts — read test email from Zyntra
import { randomUUID } from "node:crypto";

const API = "https://api.zyntra.app";
const KEY = process.env.ZYNTRA_API_KEY!;
const TEAM = process.env.ZYNTRA_TEAM_ID!;

export interface Email {
  subject: string;
  body: string; // plain-text part
  html: string | null;
  received_at: string;
  links: { url: string; text: string }[];
}

// A fresh address per test: no mail from earlier runs,
// no clash between parallel workers. Tags use no dots.
export const newAddress = (tag: string) =>
  `${TEAM}.${tag}-${randomUUID().slice(0, 8)}@zyntramail.com`;

// The newest email to `address` that passes `match`.
// The first request waits up to 30 s on the server.
export async function waitForEmail(
  address: string,
  match: (e: Email) => boolean = () => true,
  timeoutMs = 60_000,
): Promise<Email> {
  const deadline = Date.now() + timeoutMs;
  while (Date.now() < deadline) {
    const res = await fetch(
      `${API}/emails/last?email=${encodeURIComponent(address)}`,
      { headers: { "X-API-Key": KEY } },
    );
    if (res.ok) {
      const email = (await res.json()) as Email;
      if (match(email)) return email;
    } else if (res.status !== 404) {
      throw new Error(`Zyntra API: ${res.status}`);
    }
    await new Promise((r) => setTimeout(r, 2_000));
  }
  throw new Error(`No matching email for ${address}`);
}