mockupAWS/testing/TESTING_GUIDE.md

Testing Execution Guide

mockupAWS v1.0.0

This guide provides step-by-step instructions for executing all QA tests for mockupAWS v1.0.0.

Prerequisites

Required Tools

• Node.js 20+
• Python 3.11+
• Docker & Docker Compose
• k6 (for performance testing)
• Trivy (for container scanning)
• GitLeaks (for secrets scanning)

Optional Tools

• Snyk CLI (for dependency scanning)
• SonarScanner (for SAST)
• OWASP ZAP (for DAST)

Quick Start

# 1. Start the application
docker-compose up -d

# 2. Wait for services to be ready
sleep 30

# 3. Run all tests
./testing/run-all-tests.sh

Individual Test Suites

1. Performance Tests

cd testing/performance

# Run smoke test
k6 run scripts/smoke-test.js

# Run load tests (100, 500, 1000 users)
k6 run scripts/load-test.js

# Run stress test
k6 run scripts/stress-test.js

# Run benchmark test
k6 run scripts/benchmark-test.js

# Or use the test runner
./scripts/run-tests.sh all

2. E2E Tests

cd frontend

# Install dependencies
npm install

# Run all E2E tests
npm run test:e2e:ci

# Run with specific browsers
npx playwright test --project=chromium
npx playwright test --project=firefox
npx playwright test --project=webkit

# Run visual regression tests
npx playwright test --config=playwright.v100.config.ts --project=visual-regression

# Run with UI mode for debugging
npm run test:e2e:ui

3. Security Tests

cd testing/security

# Run all security scans
./scripts/run-security-tests.sh

# Individual scans:

# Snyk (requires SNYK_TOKEN)
snyk test --file=../../pyproject.toml
snyk test --file=../../frontend/package.json

# Trivy
trivy fs --severity HIGH,CRITICAL ../../
trivy config ../../Dockerfile

# GitLeaks
gitleaks detect --source ../../ --verbose

# OWASP ZAP (requires running application)
docker run -t ghcr.io/zaproxy/zaproxy:stable zap-baseline.py -t http://host.docker.internal:8000

4. Unit & Integration Tests

# Backend tests
cd /home/google/Sources/LucaSacchiNet/mockupAWS
uv run pytest -v

# Frontend tests
cd frontend
npm test

Test Environments

Local Development

# Use local URLs
export TEST_BASE_URL=http://localhost:5173
export API_BASE_URL=http://localhost:8000

Staging

export TEST_BASE_URL=https://staging.mockupaws.com
export API_BASE_URL=https://api-staging.mockupaws.com

Production

export TEST_BASE_URL=https://app.mockupaws.com
export API_BASE_URL=https://api.mockupaws.com

Test Reports

After running tests, reports are generated in:

• Performance: testing/performance/reports/
• E2E: frontend/e2e-v100-report/
• Security: testing/security/reports/

CI/CD Integration

GitHub Actions

name: QA Tests
on: [push, pull_request]

jobs:
  performance:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Run Performance Tests
        run: |
          docker-compose up -d
          sleep 30
          cd testing/performance
          ./scripts/run-tests.sh smoke

  e2e:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Run E2E Tests
        run: |
          cd frontend
          npm ci
          npx playwright install
          npm run test:e2e:ci

  security:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Run Security Tests
        run: |
          cd testing/security
          ./scripts/run-security-tests.sh

Troubleshooting

Performance Tests

• Issue: Connection refused

  • Solution: Ensure application is running on port 8000

• Issue: High memory usage

  • Solution: Reduce VUs or run tests sequentially

E2E Tests

• Issue: Tests timeout

  • Solution: Increase timeout in playwright config

• Issue: Flaky tests

  • Solution: Use retry logic, improve selectors

Security Tests

• Issue: Tool not found

  • Solution: Install tool or use Docker version

• Issue: Permission denied

  • Solution: Make scripts executable with chmod +x

Test Data Management

Test data is automatically created and cleaned up during E2E tests. To manually manage:

# Clean all test data
./testing/scripts/cleanup-test-data.sh

# Seed test data
./testing/scripts/seed-test-data.sh

Support

For issues or questions:

• Performance tests: QA Team
• E2E tests: QA Team
• Security tests: Security Team
• General: DevOps Team

---

Document Version: 1.0.0
Last Updated: 2026-04-07