Security: stop echoing rejected passwords, check the policy before sending, and let access be withdrawn by Aman-Mittal · Pull Request #817 · apache/fineract-backoffice-ui

Aman-Mittal · 2026-10-19T09:17:35Z

Three issues on the Security screens, all measured against a running Fineract: #752, #753 and #755.

1. A rejected password was printed in the toast (#752)

Fineract returns the value it rejected in the error's args, and the toast formatter appends them. For a password that is a disclosure — measured, POST /users with a password the policy refuses answers:

{ "parameterName": "password",
  "userMessageGlobalisationCode": "validation.msg.user.password.does.not.match.regexp",
  "args": [ { "value": "" }, { "value": "^(?!.*(.)\\1)…" } ] }

and the repeatPassword entry beside it carries both values. The field is masked precisely so the value is not readable on screen, over a shoulder, in a screenshot or in a support ticket.

Args are now dropped for any parameter whose name contains password, secret, pin, token, credential or otp — a substring test, so repeatPassword and clientSecret are covered without enumerating spellings. Dropped entirely rather than filtered for the value: the only other thing in them is the policy regex, which no operator can act on. The rules still reach the user, and a non-sensitive parameter keeps its args — a refused amount or date is what that detail is for.

2. The password is now checked before it is sent (#753)

Create User validated both password fields for presence only: with different values in them Save stayed enabled and the only feedback was the 400 above.

The rules are the tenant's own. GET /passwordpreferences answers the active policy and /passwordpreferences/template all three (simple, secure, strong), each with the platform's own description — shown as the field's helper text rather than restated. What that endpoint does not answer is the regex it enforces: that appears only in the args of a rejected password, which carry the password with it, so core/security/password-policy.ts mirrors the rules by key. The fallback honours the one obligation that creates — an unrecognised key gets the loosest rules, so a policy this code has not heard of cannot refuse a password the platform would have accepted.

The form names the rules a password still fails (repeat no character twice in a row for one refused on its ss alone, which the platform's message never says), reports a mismatch under the confirmation field, and holds Save until both are right. The profile screen's change-password form shares the same rules through the same adapter operation, so the two cannot drift.

The password pair also moved into signals: [(ngModel)]="user().password" mutates the object a signal holds without notifying it, so nothing derived from it would recompute — the trap that emptied the floating-rate editor in #815.

3. Access can be withdrawn (#755)

Roles and Users offered create and edit only, so cutting a leaver's access meant editing their roles down to nothing, and a role created by mistake stayed in every picker.

a role can be disabled, re-enabled and deleted. GET /roles has always carried disabled — the stock Self Service User role answers true — and the list now shows it as a status and acts on it. GET /users/template already filters disabled roles out of the options for a new user, so switching one off is enough to stop it being assigned.
a user can be deleted, the only withdrawal the platform offers for an account. Never the signed-in one: the platform allows that, and it would lock the administrator out of the instance.

All four actions are gated on DISABLE_ROLE, ENABLE_ROLE, DELETE_ROLE and DELETE_USER, and confirmed first (destructively for the deletes). DELETE /roles/{id} while a user holds the role answers 403 error.msg.role.associated.with.users.deleted, and that reaches the user as "Role with identifier 34 associated with users" — errorInterceptor already reports a domain-rule 403 in the platform's own words.

Checks

unit tests: 314 files, 2589 tests green. New specs for the policy rules (11 cases), the two new adapter operations each, the roles list's lifecycle, a users list spec that did not exist, the Create User password gate, and the profile form's shared rules. The password-echo test fails without its fix.
one existing e2e spec changed with it. list-pagination.spec.ts's profile change-password test mocked GET /passwordpreferences as key: 'strong' but described it as "At least eight characters with mixed case and a number", and typed an eight-character password — a fixture that contradicted itself, and that the new gate correctly refused. It now carries the platform's own strong description and a password that satisfies it, and on the way through it asserts what the gate is for: the short password names the rule it breaks and Save stays disabled, so nothing reaches /users/1/pwd until the password would be accepted.
driven in the browser against a running Fineract: the policy hint reads the tenant's description; typing passsword1A!x reports This password must still: repeat no character twice in a row and nothing else; a mismatch shows under the confirmation and Save is disabled; the probe role went ACTIVE → DISABLED → ACTIVE and was then deleted; a probe user was deleted; the signed-in account offers no Delete; and deleting an assigned role was refused with the platform's own reason.
lint 0 errors (lint:prune leaves eslint-suppressions.json unchanged), api:surface re-recorded for the three new operations, tsconfig.app.json and tsconfig.e2e.json both type-clean, i18n:check, format:check, check:permission-codes, check:template-text, check:a11y-names, check:ui-primitives, check:icons, check:route-permissions, check:responsive, check:nav-ids, check:internal-endpoints all clean.

Note on #492

Closed by earlier work, not by this PR: /profile already has a Change Password form. What it was missing is the rule-level validation above, which it now shares with Create User.

🤖 Generated with Claude Code

Fineract returns the value it rejected in the error's `args`, and this formatter appends them to the message so a user can see what the platform objected to. For a password that is a disclosure. Measured against a running Fineract, `POST /users` with a password the policy refuses answers { "parameterName": "password", "userMessageGlobalisationCode": "validation.msg.user.password.does.not.match.regexp", "args": [ { "value": "<the submitted password>" }, { "value": "^(?!.*(.)\1)…" } ] } and the `repeatPassword` entry beside it carries **both** values. The field is masked precisely so the value is not readable on screen, over a shoulder, in a screenshot or in a support ticket, and the toast undid all of that. Issue apache#752. Args are now dropped for any parameter whose name contains `password`, `secret`, `pin`, `token`, `credential` or `otp` — a substring test, so `repeatPassword` and `clientSecret` are covered without enumerating the spellings the platform might use. Dropped entirely rather than filtered for the value: the only other thing in them is the policy regex, which no operator can act on, and the message beside it already states the rule in words. The rules themselves still reach the user, and a non-sensitive parameter still carries its args — a refused amount or date is exactly what that detail is for.

… users be withdrawn Two gaps on the Security screens, both measured against a running Fineract. ## The password is checked before it is sent (apache#753) Create User validated its two password fields for presence and nothing else: with different values in them Save stayed enabled, and the only feedback was a 400 in a toast — the same toast that printed the password in clear text until the previous commit. The rules are the tenant's own. `GET /passwordpreferences` answers the active policy and `/passwordpreferences/template` all three — `simple`, `secure` and `strong`, each with the description the platform words itself — so the description is shown as the field's helper text rather than restated here. What that endpoint does *not* answer is the regex it enforces: that appears only in the `args` of a rejected password, which carry the submitted password with them, so `core/security/password-policy.ts` mirrors the rules by `key`. Mirroring carries one obligation, and the fallback honours it: an unrecognised key gets the loosest rules, so a policy this code has not heard of cannot refuse a password the platform would have accepted. The form now names the rules a password still fails — "repeat no character twice in a row" for a password refused on its `ss` alone, which the platform's own message never says — reports a mismatch under the confirmation field, and holds Save until both are right. The profile screen's change-password form shares the same rules through the same adapter operation, so the two cannot drift. The password pair also moved out of the form model into signals. `[(ngModel)]="user().password"` mutates the object a signal holds without notifying it, so nothing derived from it would ever recompute — the trap that emptied the floating-rate editor in apache#815. The fields are hidden entirely when the platform is to mail a generated password, which it refuses to do if the request carries one. ## Access can be withdrawn (apache#755) Roles and Users offered create and edit only, so a departed officer's access could be cut only by editing their roles down to nothing, and a role created by mistake stayed in every picker for good. - a role can be disabled, re-enabled and deleted. `GET /roles` has always carried `disabled` — the stock `Self Service User` role answers `true` — and the screen now shows it as a status and acts on it. `GET /users/template` already filters disabled roles out of the options a new user can be given, so switching one off is enough to stop it being assigned again. - a user can be deleted, which is the only withdrawal the platform offers for an account. Never on the signed-in one: the platform allows that, and an administrator who deletes the account they are signed in with locks themselves out. Every action is gated on its permission (`DISABLE_ROLE`, `ENABLE_ROLE`, `DELETE_ROLE`, `DELETE_USER`) and confirmed first, destructively for the two deletes. Deleting a role the platform still refuses — `DELETE /roles/{id}` answers 403 `error.msg.role.associated.with.users.deleted` while any user holds it — reaches the user as "Role with identifier 34 associated with users", because `errorInterceptor` reports a domain-rule 403 in the platform's own words. Verified in the browser against a running instance, along with the status going ACTIVE → DISABLED → ACTIVE and both deletes.

github-actions · 2026-10-19T18:01:58Z

E2E — mocked backend

🎭 E2E Tests

✅ All green — 427 passed · 0 failed · 1 skipped, across 40 spec files in 9m 25s.

By spec file

Spec	✅	⏭️	Time
accessibility.spec.ts	5	0	22.8s
all-functions-read-shortcut.spec.ts	5	0	10.3s
branded-deployment.spec.ts	9	0	19.1s
breadcrumb.spec.ts	2	0	5.9s
client-date-picker-revisit.spec.ts	1	0	8.4s
client-servicing-gaps.spec.ts	14	0	1m 1s
client.spec.ts	1	0	4.3s
collateral-currency-search.spec.ts	5	0	19.2s
date-picker-revisit.spec.ts	6	0	27.3s
deployment-customization.spec.ts	19	0	41.3s
deposit-product-edit.spec.ts	2	0	7.4s
e2e-journey.spec.ts	81	0	2m 43s
feature-coverage.spec.ts	49	0	1m 23s
functional-coverage.spec.ts	42	0	1m 51s
global-search-nav-shortcuts.spec.ts	4	0	10.2s
global-search-navigation.spec.ts	8	0	21.2s
group-detail.spec.ts	8	0	34.9s
guidance-tour.spec.ts	5	1	14.9s
keyboard-shortcuts.spec.ts	5	0	11.0s
list-load-failure.spec.ts	5	0	17.9s
list-pagination.spec.ts	17	0	1m 9s
loan-delinquency-actions.spec.ts	11	0	44.6s
loan-portfolio-summary.spec.ts	4	0	15.5s
loan-product-down-payment.spec.ts	13	0	60.0s
charge-refund.spec.ts	1	0	5.7s
client-accounts.spec.ts	2	0	8.9s
client-load-error.spec.ts	2	0	6.5s
contract-termination.spec.ts	1	0	8.0s
loan-schedule-type-gating.spec.ts	6	0	17.7s
loan-servicing-gaps.spec.ts	18	0	59.5s
logout-reason-notice.spec.ts	4	0	2.9s
oidc-login.spec.ts	8	0	10.4s
rbac-feature-flag.spec.ts	11	0	16.5s
rbac-route-protection.spec.ts	18	0	1m 28s
report-enhancements.spec.ts	2	0	6.3s
reporting.spec.ts	2	0	3.9s
scheduler-jobs.spec.ts	3	0	9.3s
sidebar-active-state.spec.ts	1	0	1m 5s
two-factor-authentication.spec.ts	10	0	15.0s
working-capital-loan-actions.spec.ts	17	0	59.7s

All 428 tests — click to expand

accessibility.spec.ts

✅ Runtime accessibility › client list has no blocking violations — 4.1s
✅ Runtime accessibility › client list links meet color contrast in dark mode — 4.6s
✅ Runtime accessibility › client form has no blocking violations — 5.5s
✅ Runtime accessibility › banner and dashboard content have no blocking violations — 3.9s
✅ Runtime accessibility › create office dialog has no blocking violations — 4.7s

all-functions-read-shortcut.spec.ts

✅ ALL_FUNCTIONS_READ shortcut › grants read access to the Clients list without any explicit READ_CLIENT permission — 2.1s
✅ ALL_FUNCTIONS_READ shortcut › does not grant the Create Client action — 2.2s
✅ ALL_FUNCTIONS_READ shortcut › does not grant Create Client even combined with an explicit READ_CLIENT permission — 1.9s
✅ ALL_FUNCTIONS_READ shortcut › a user with the real CREATE_CLIENT permission still sees the button — 1.9s
✅ ALL_FUNCTIONS_READ shortcut › ALL_FUNCTIONS (full superuser) still sees the Create Client button — 2.2s

branded-deployment.spec.ts

✅ a fully branded deployment › wears the institution’s name and mark, not Fineract’s — 2.0s
✅ a fully branded deployment › carries the institution’s palette into its own chrome and into Ionic — 2.1s
✅ a fully branded deployment › drops the sections the institution does not run — 2.1s
✅ a fully branded deployment › renames and reorders entries to the institution’s vocabulary — 1.9s
✅ a fully branded deployment › offers the institution’s own systems beside Fineract’s screens — 1.9s
✅ a fully branded deployment › restates the labels the institution words differently — 2.0s
✅ a fully branded deployment › keeps a readable palette in dark mode, with a label colour to match — 2.1s
✅ a fully branded deployment › does not leak a light colour into the dark palette — 1.6s
✅ a fully branded deployment › reports no configuration defects for the published example — 3.2s

breadcrumb.spec.ts

✅ a single-crumb page shows no breadcrumb trail — 2.2s
✅ a nested page shows a trail, and the ancestor crumb navigates back — 3.7s

client-date-picker-revisit.spec.ts

✅ Client form date pickers › stay usable on a second visit to the create form — 8.4s

client-servicing-gaps.spec.ts

✅ Client transfers › proposing a transfer sends the destination, the date and the format that parses it — 5.2s
✅ Client transfers › a one-step transfer omits the date the platform refuses — 4.6s
✅ Client transfers › the client’s own office is not offered as a destination — 4.5s
✅ Client transfers › accepting a transfer sends a note and nothing else — 4.5s
✅ Client transfers › accepting with no note sends an empty body — 4.4s
✅ Client transfers › rejecting a transfer is offered while one is pending — 4.6s
✅ Client transfers › withdrawing is offered from on hold, which is the only way back — 4.4s
✅ Client transfers › answers to a transfer are not offered when none is pending — 3.5s
✅ Client staff and default savings account › assigning a member of staff sends the staff id — 4.6s
✅ Client staff and default savings account › unassigning echoes the current holder back, which the platform requires — 4.3s
✅ Client staff and default savings account › unassigning is not offered when nobody is assigned — 3.7s
✅ Client staff and default savings account › the assigned officer is shown on the header — 3.9s
✅ Client staff and default savings account › setting the default savings account sends the account id — 4.6s
✅ Undoing a rejection › posts the command name the platform recognises, not the menu identifier — 4.4s

client.spec.ts

✅ Client Management › should create a new client — 4.3s

collateral-currency-search.spec.ts

✅ Collateral product currency — searchable select (#626) › the field is closed with no option list until it is opened — 3.7s
✅ Collateral product currency — searchable select (#626) › typing narrows a long, alphabetical list to the matching currency — 4.0s
✅ Collateral product currency — searchable select (#626) › matches by currency code as well as by name — 3.6s
✅ Collateral product currency — searchable select (#626) › shows a "no results" message rather than an empty panel — 3.8s
✅ Collateral product currency — searchable select (#626) › Cancel closes the picker without changing the selection — 4.2s

date-picker-revisit.spec.ts

✅ Date pickers on revisited forms › office form keeps its pickers usable on every visit — 4.5s
✅ Date pickers on revisited forms › staff form keeps its pickers usable on every visit — 4.5s
✅ Date pickers on revisited forms › holiday form keeps its pickers usable on every visit — 4.6s
✅ Date pickers on revisited forms › teller form keeps its pickers usable on every visit — 4.8s
✅ Date pickers on revisited forms › accounting closure form keeps its pickers usable on every visit — 4.3s
✅ Date pickers on revisited forms › floating rate form keeps its pickers usable on every visit — 4.7s

deployment-customization.spec.ts

✅ with no overlay mounted › boots, keeps the shipped branding, and shows the full menu — 2.1s
✅ with no overlay mounted › does not ask for an overlay this deployment has not declared — 2.4s
✅ with no overlay mounted › logs no federation parse error on load — 2.0s
✅ branding › applies colour and density tokens to the document — 2.1s
✅ branding › recolours Ionic through the same tokens — 2.0s
✅ branding › renames the product in the header and the tab title — 3.6s
✅ branding › serves the deployment logo and names it after the deployment — 2.0s
✅ branding › refuses a fill that cannot carry the white text baked into the stylesheet — 2.1s
✅ branding › accepts a light accent and derives a dark label for it — 2.2s
✅ branding › ignores a token outside the published allow-list, and says so — 1.9s
✅ navigation › hides an entry named by its id — 2.0s
✅ navigation › does not hide an entry named by its labelKey — 2.2s
✅ navigation › renames and reorders entries — 2.1s
✅ navigation › adds an external entry that opens in a new tab — 1.9s
✅ navigation › nests an added entry under an existing group — 2.1s
✅ navigation › gates an added entry on permissions like any built-in one — 2.0s
✅ navigation › drops an external entry with no usable url rather than rendering a dead link — 2.1s
✅ layering › merges over config.json instead of replacing it — 2.4s
✅ layering › a malformed overlay leaves the application usable — 2.1s

deposit-product-edit.spec.ts

✅ Editing a deposit product keeps what it was not asked to change › a fixed deposit product keeps its deposit amount, accounting and rate chart on save — 3.7s
✅ Editing a deposit product keeps what it was not asked to change › a recurring deposit product keeps its deposit amount, accounting and rate chart on save — 3.7s

e2e-journey.spec.ts

✅ E2E: Login Flow › should display login page with all required fields — 2.0s
✅ E2E: Login Flow › should have Sign In button disabled when fields are empty — 1.8s
✅ E2E: Login Flow › should enable Sign In when credentials are entered — 1.5s
✅ E2E: Login Flow › should redirect to dashboard after successful login — 2.2s
✅ E2E: Login Flow › should display language selector on login page — 1.3s
✅ E2E: Login Flow › should display API endpoint selector with value — 1.7s
✅ E2E: Dashboard › should display dashboard summary cards — 2.2s
✅ E2E: Dashboard › should display system health as Online — 2.1s
✅ E2E: Dashboard › should display pending approvals section — 2.0s
✅ E2E: Dashboard › should display loan and savings status distribution charts — 2.2s
✅ E2E: Dashboard › should display system operational status — 2.0s
✅ E2E: Dashboard › should have header with business date, render time, and logout — 2.2s
✅ E2E: Dashboard › should have sidebar toggle button — 2.1s
✅ E2E: Dashboard › should have global search bar in header — 2.2s
✅ E2E: Dashboard › should have Guide button in header — 1.9s
✅ E2E: Dashboard › should have dark mode toggle button — 2.0s
✅ E2E: Sidebar Navigation › should have all main navigation links — 2.2s
✅ E2E: Sidebar Navigation › should have Products section with sub-links — 2.2s
✅ E2E: Sidebar Navigation › should have Transfers section with sub-links — 2.5s
✅ E2E: Sidebar Navigation › should have Accounting section with sub-links — 2.1s
✅ E2E: Sidebar Navigation › should have Security section — 2.0s
✅ E2E: Sidebar Navigation › should have Settings section — 2.1s
✅ E2E: Sidebar Navigation › should have Organization section — 2.1s
✅ E2E: Sidebar Navigation › should have System section — 2.1s
✅ E2E: Sidebar Navigation › should navigate to all major pages via sidebar — 4.5s
✅ E2E: Offices › should display offices list with table — 2.3s
✅ E2E: Offices › should have Create Office button — 2.2s
✅ E2E: Offices › should navigate to office create form — 2.6s
✅ E2E: Offices › should validate office create form - save disabled when empty — 2.5s
✅ E2E: Offices › should fill office create form and enable save — 3.1s
✅ E2E: Offices › should cancel office creation and return to list — 2.6s
✅ E2E: Offices › should have search input on offices page — 2.4s
✅ E2E: Offices › should show edit button for each office — 2.3s
✅ E2E: Offices › should have pagination controls — 2.4s
✅ E2E: Clients › should display clients list page — 2.3s
✅ E2E: Clients › should display client data in table — 2.5s
✅ E2E: Clients › should show ACTIVE status badge — 2.4s
✅ E2E: Clients › should have Create Client button — 2.3s
✅ E2E: Clients › should show empty state when no clients exist — 1.6s
✅ E2E: Clients › should have search input and status filter — 1.5s
✅ E2E: Clients › should have pagination controls — 1.5s
✅ E2E: Client Creation › should navigate to client create form — 1.8s
✅ E2E: Client Creation › should display all required client form fields, across the wizard steps — 2.9s
✅ E2E: Client Creation › should display optional client form fields, across the wizard steps — 2.5s
✅ E2E: Client Creation › should have Next disabled until the current step is valid — 2.3s
✅ E2E: Client Creation › should populate office dropdown from API — 1.9s
✅ E2E: Client Creation › should fill client form and enable save on the last step — 3.0s
✅ E2E: Client Creation › should submit client and redirect to the new client view — 3.6s
✅ E2E: Client Creation › should cancel client creation and return to clients list — 1.9s
✅ E2E: Client Creation › should have add office quick-action button — 1.7s
✅ E2E: Client Creation › should have help icons for form fields — 1.5s
✅ E2E: Client Creation › should have calendar buttons for date fields — 2.3s
✅ E2E: Client Creation › should have pre-filled dates in Submitted On and Activation Date — 2.3s
✅ E2E: Client Creation › should have Active checkbox checked by default — 2.3s
✅ E2E: Client Creation › should handle Entity legal form showing fullname field — 2.8s
✅ E2E: Loan Products Page › should display loan products list page — 1.6s
✅ E2E: Loan Products Page › should have Create Loan Product button — 1.6s
✅ E2E: Loan Products Page › should display table with correct headers — 1.6s
✅ E2E: Loan Products Page › should show empty state when no products exist — 1.6s
✅ E2E: Loan Products Page › should have search input — 2.1s
✅ E2E: Loan Products Page › should navigate to loan product create form — 1.8s
✅ E2E: Savings Products Page › should display savings products list page — 1.6s
✅ E2E: Other Products Pages › Fixed Deposit Products page loads — 1.6s
✅ E2E: Other Products Pages › Recurring Deposit Products page loads — 1.5s
✅ E2E: Other Products Pages › Share Products page loads — 1.5s
✅ E2E: Other Products Pages › Tax Components page loads — 2.0s
✅ E2E: Other Products Pages › Tax Groups page loads — 1.6s
✅ E2E: Other Products Pages › Floating Rates page loads — 1.5s
✅ E2E: Loans Portfolio › should display loans portfolio page — 1.5s
✅ E2E: Loans Portfolio › should have Create Loan Account button — 1.5s
✅ E2E: Loans Portfolio › should display table with correct headers — 1.5s
✅ E2E: Loans Portfolio › should show empty state when no loans exist — 2.0s
✅ E2E: Loans Portfolio › should have search input — 1.6s
✅ E2E: Loans Portfolio › should have pagination controls — 1.5s
✅ E2E: Header & Global Elements › should display Fineract logo and title in header — 1.3s
✅ E2E: Header & Global Elements › should display logged-in username — 1.4s
✅ E2E: Header & Global Elements › should display office name for user — 1.4s
✅ E2E: Header & Global Elements › should have Logout button — 1.8s
✅ E2E: Header & Global Elements › should have language selector in header — 1.4s
✅ E2E: Header & Global Elements › should display render time — 1.4s
✅ E2E: Header & Global Elements › should display business date — 1.4s

feature-coverage.spec.ts

✅ Navigation & Sidebar › all main navigation links are visible in sidebar — 1.7s
✅ Navigation & Sidebar › sidebar navigation routes to correct pages — 2.3s
✅ Navigation & Sidebar › navigating to /accounting redirects to /accounting/chart-of-accounts — 2.9s
✅ Navigation & Sidebar › navigating to /organization redirects to /organization/offices — 2.3s
✅ Navigation & Sidebar › navigating to /system redirects to /system/data-tables — 2.3s
✅ Navigation & Sidebar › an unknown route keeps its URL and offers recovery actions — 3.1s
✅ Navigation & Sidebar › header shows logged-in user info — 1.4s
✅ Navigation & Sidebar › help tour button is visible and interactive — 1.4s
✅ Navigation & Sidebar › logout button is visible — 1.3s
✅ Navigation & Sidebar › language selector is present — 1.3s
✅ Dashboard › dashboard shows key metrics cards — 1.6s
✅ Dashboard › dashboard shows pending approvals section — 1.3s
✅ Dashboard › dashboard shows loan and savings status distribution — 1.3s
✅ Dashboard › dashboard shows system operational status — 1.4s
✅ Groups › groups page renders with title — 1.5s
✅ Groups › groups page has create button — 1.5s
✅ Centers › centers page renders with title — 1.9s
✅ Centers › centers page has create button — 1.5s
✅ Organization › offices page loads with list — 1.5s
✅ Organization › staff page loads — 1.5s
✅ Organization › funds page loads — 1.5s
✅ Organization › payment types page loads — 1.5s
✅ Accounting › chart of accounts loads — 2.0s
✅ Accounting › journal entries page loads — 1.7s
✅ Accounting › accounting closures loads — 1.5s
✅ Accounting › accounting rules loads — 1.5s
✅ Accounting › financial activity mappings loads — 1.5s
✅ Accounting › charges page loads — 1.5s
✅ Security › users page loads — 2.1s
✅ Security › roles page loads — 1.5s
✅ Security › audit logs page loads — 1.6s
✅ Security › leftover audit trails path lands on audits, not the dashboard — 2.4s
✅ Products - Loan & Savings › loan products page loads — 1.5s
✅ Products - Loan & Savings › savings products page loads — 2.1s
✅ Products - Loan & Savings › tax components page loads — 1.5s
✅ Products - Loan & Savings › tax groups page loads — 1.5s
✅ Products - Loan & Savings › floating rates page loads — 1.5s
✅ Products - Loan & Savings › savings accounts page loads — 1.6s
✅ Settings › global configurations page loads — 1.5s
✅ Settings › holidays page loads — 2.0s
✅ Settings › working days page loads — 1.5s
✅ System › data tables page loads — 1.5s
✅ System › bulk import page loads — 1.5s
✅ System › delinquency page loads — 1.5s
✅ Tellers › tellers page loads with create button — 1.5s
✅ Transfers › account transfer page loads — 2.0s
✅ Transfers › standing instructions page loads — 1.5s
✅ Transfers › SI history page loads — 1.5s
✅ Embedded Fintech › asset owners page loads — 1.5s

functional-coverage.spec.ts

✅ Client CRUD Workflow › should complete full client creation flow — Person — 3.3s
✅ Client CRUD Workflow › should complete full client creation flow — Entity — 2.9s
✅ Client CRUD Workflow › should cancel client creation and return to list — 2.3s
✅ Client CRUD Workflow › should disable office and legal form in edit mode — 2.5s
✅ Client View & Status Transitions › should display client view with correct details — 2.5s
✅ Client View & Status Transitions › should show actions menu for pending client (status 100) — 2.9s
✅ Client View & Status Transitions › should show actions menu for active client (status 300) — 2.9s
✅ Client View & Status Transitions › should show actions menu for closed client (status 600) — 3.0s
✅ Client View & Status Transitions › should show New Account menu for active client — 2.9s
✅ Client View & Status Transitions › should navigate from client view to client list via breadcrumb — 2.6s
✅ Client View & Status Transitions › should navigate back from client view — 3.0s
✅ Client View Tabs › should display all expected tabs on client view — 3.2s
✅ Client View Tabs › should switch between client view tabs — 2.6s
✅ Search & Filter Interactions › should have search input on clients page and accept input — 1.5s
✅ Search & Filter Interactions › should have office filter on groups page — 1.6s
✅ Search & Filter Interactions › should have office filter on loans page — 2.4s
✅ Search & Filter Interactions › should have search input on charges page — 2.3s
✅ Navigation Flow Verification › should navigate full client lifecycle: list → create → back → list — 3.0s
✅ Navigation Flow Verification › should navigate from dashboard to all top-level pages via sidebar — 5.2s
✅ Navigation Flow Verification › should go from loan products → create → back — 3.3s
✅ Office CRUD › should validate office create form — save disabled when empty — 2.7s
✅ Office CRUD › should validate office create form — save enabled when filled — 2.8s
✅ Office CRUD › should cancel office creation — 2.7s
✅ Organization Create Flows › staff create form loads — 2.5s
✅ Organization Create Flows › funds create form loads — 2.5s
✅ Organization Create Flows › payment types create form loads — 2.3s
✅ Accounting CRUD › accounting closure create form loads — 2.1s
✅ Accounting CRUD › accounting rule create form loads — 2.5s
✅ Accounting CRUD › financial activity mapping create form loads — 2.3s
✅ Accounting CRUD › charge create form loads — 2.3s
✅ Accounting CRUD › chart of accounts create form loads — 2.3s
✅ Settings CRUD › global configurations page has editable toggle — 2.4s
✅ Settings CRUD › holiday create form loads — 2.3s
✅ Settings CRUD › working days page has save button — 2.3s
✅ System CRUD › data table create form loads — 2.6s
✅ System CRUD › delinquency page has create buttons for ranges and buckets — 2.4s
✅ Security CRUD › role create form loads — 2.5s
✅ Security CRUD › audit logs search form has date range — 2.7s
✅ Security CRUD › audit logs list exports the loaded page as CSV — 2.5s
✅ Reporting — Run Report Flow › should navigate to report and verify report parameters — 3.3s
✅ Teller CRUD › teller create form loads — 2.6s
✅ Create Office Dialog from Client Form › should open create office dialog from client create form — 2.8s

global-search-nav-shortcuts.spec.ts

✅ Global search navigation shortcuts › offers a settings page the entity search cannot return — 2.4s
✅ Global search navigation shortcuts › navigates to the page behind a shortcut — 2.4s
✅ Global search navigation shortcuts › keeps the results open across the mousedown that starts a click, so a slow render cannot race the dropdown closed — 2.7s
✅ Global search navigation shortcuts › withholds a shortcut the user has no permission to reach — 2.7s

global-search-navigation.spec.ts

✅ Global search navigation › does not query the backend for a single character — 2.6s
✅ Global search navigation › sends one request for a phrase typed straight through — 3.4s
✅ Global search navigation › opens the client behind a client result — 2.4s
✅ Global search navigation › opens the loan behind a loan result — 2.8s
✅ Global search navigation › opens the savings account behind a savings result — 2.6s
✅ Global search navigation › clears the query and closes the dropdown after a selection — 2.4s
✅ Global search navigation › closes the dropdown when focus leaves without a selection — 2.4s
✅ Global search navigation › shows nothing rather than an empty dropdown when there are no matches — 2.5s

group-detail.spec.ts

✅ Group detail › custom field tabs expose the app keyboard and panel contract at 1280px — 4.5s
✅ Group detail › custom field tabs expose the app keyboard and panel contract at 390px — 4.1s
✅ Group detail › asks for the associations, and shows every member rather than only the active ones — 3.8s
✅ Group detail › closes a group with the reason id and a Fineract-formatted date — 5.3s
✅ Group detail › does not offer a client who is already a member, and associates the one it does — 4.6s
✅ Group detail › unassigns a committee role by the assignment id, not the role id — 4.1s
✅ Group detail › offers a retry when the group cannot be loaded — 3.9s
✅ Group detail › says so when no closure reason has been defined — 4.7s

guidance-tour.spec.ts

✅ the guided tour › highlights the System Status card, not the sidebar, on the dashboard tour — 2.6s
✅ the guided tour › presents the card as a dialog named and described by its own copy — 2.2s
✅ the guided tour › announces the step counter as a polite live region — 2.5s
✅ the guided tour › closes on Escape and hands focus back to the Guide button — 2.2s
✅ the guided tour › names an unmatched route after itself instead of handing it the dashboard tour — 3.5s
⏭️ the guided tour at a phone viewport › opens from the overflow menu as a full-width bottom sheet — 2.0s

keyboard-shortcuts.spec.ts

✅ Alt+C jumps straight to Create Client from anywhere — 2.4s
✅ Alt+G jumps to Create Group — 2.2s
✅ Alt+E jumps to Create Center — 2.4s
✅ Alt+H opens the guidance tour for the current page — 1.9s
✅ typing in the global search box does not trigger the Create Client shortcut — 2.1s

list-load-failure.spec.ts

✅ entity-to-entity mapping › renders the rows the endpoint returns, rather than claiming there are none — 3.4s
✅ entity-to-entity mapping › shows a failure state, not an empty one, when the payload cannot be read — 3.7s
✅ entity-to-entity mapping › retries and recovers — 3.6s
✅ report mailing jobs › reads rows out of the paged envelope the endpoint returns — 3.7s
✅ report mailing jobs › shows a failure state when the request errors — 3.6s

list-pagination.spec.ts

✅ Server total modes › shows an exact loan count of 1 without opting in — 3.8s
✅ Server total modes › shows an exact loan count of 11 without opting in — 3.8s
✅ Server total modes › shows an exact loan count of 21 without opting in — 3.7s
✅ Server total modes › keeps the unknown total for a full audit page — 3.9s
✅ List pagination › advances through pages and back again — 4.1s
✅ List pagination › jumps to the last page — 4.1s
✅ List pagination › returns to the first page when a filter changes — 4.3s
✅ List pagination › keeps search text when paging and shows the v2 account number — 4.5s
✅ List pagination › redirects the old search page and exposes only one client navigation item — 5.3s
✅ List pagination › keeps an account-number search broad and disables unsupported Office sorting — 4.6s
✅ List pagination › returns to the first page when searching — 4.6s
✅ Profile › renders the signed-in user rather than hanging on a spinner — 3.2s
✅ Profile › changes the signed-in user password from the profile screen — 4.0s
✅ Profile › shows an error when the profile cannot be loaded — 3.9s
✅ List load failure › reports the failure and reloads when the user retries — 3.6s
✅ List load failure › calendars: reports the failure and reloads when the user retries — 3.8s
✅ List load failure › accounting rules: reports the failure and reloads when the user retries — 4.0s

loan-delinquency-actions.spec.ts

✅ Delinquency pause and resume on a regular loan › shows the dates as dates, and the pause periods under their real fields — 3.8s
✅ Delinquency pause and resume on a regular loan › pauses delinquency for a period, from the business date — 4.5s
✅ Delinquency pause and resume on a regular loan › will not take a pause that ends before, or when, it starts — 4.0s
✅ Delinquency pause and resume on a regular loan › sends nothing when the pause dialog is cancelled — 4.5s
✅ Delinquency pause and resume on a regular loan › shows the platform’s own reason when it refuses a pause, and stays usable — 4.4s
✅ Delinquency pause and resume on a regular loan › resumes a pause that is in effect, dated the business date and with no end date — 4.6s
✅ Delinquency pause and resume on a regular loan › stops offering resume once the pause has been ended — 4.2s
✅ Delinquency pause and resume on a regular loan › does not offer resume when no pause is in effect — 3.8s
✅ Delinquency pause and resume on a regular loan › offers neither action without the permission to create a delinquency action — 3.5s
✅ Delinquency pause and resume on a regular loan › offers the permitted user the actions that permission opens, and no others — 3.6s
✅ Delinquency pause and resume on a regular loan › offers neither action on a loan that is not active — 3.7s

loan-portfolio-summary.spec.ts

✅ Loan Portfolio Summary › searching sends entities: loans and shows the grouped results — 3.6s
✅ Loan Portfolio Summary › Edit Parameters returns from the results view to the filter form — 3.6s
✅ Loan Portfolio Summary › checking the outstanding-amount filter sends the between min/max values — 3.6s
✅ Loan Portfolio Summary › switching to a single-value comparison condition sends one value — 4.8s

loan-product-down-payment.spec.ts

✅ Loan product down payment and tranches › down payment is offered only for a progressive product — 4.6s
✅ Loan product down payment and tranches › the percentage and auto-repayment appear only once down payment is on — 4.8s
✅ Loan product down payment and tranches › multi-tranche disbursement reveals its tranche count, on either engine — 4.0s
✅ Loan product down payment and tranches › submits the down payment and tranche settings it was given — 5.1s
✅ Loan product down payment and tranches › does not send a down payment on a cumulative product — 5.7s
✅ Loan product down payment and tranches › income recognition is offered only for a progressive product — 4.6s
✅ Loan product down payment and tranches › the capitalisation details appear only once it is on — 4.7s
✅ Loan product down payment and tranches › submits the income recognition settings it was given — 4.9s
✅ Loan product down payment and tranches › does not send income recognition on a cumulative product — 5.9s
✅ Loan product down payment and tranches › interest recalculation reveals its mandatory settings only once it is on — 3.9s
✅ Loan product down payment and tranches › the rest interval appears only when the frequency is not the repayment period — 4.6s
✅ Loan product down payment and tranches › submits the interest recalculation settings it was given — 4.0s
✅ Loan product down payment and tranches › does not send recalculation settings once it is switched back off — 3.0s

charge-refund.spec.ts

✅ refunds the remaining balance of a collected loan charge — 5.7s

client-accounts.spec.ts

✅ loan account rows show the principal returned by the accounts endpoint — 3.6s
✅ empty account tabs offer the matching creation action — 5.2s

client-load-error.spec.ts

✅ shows a not-found state and returns to the list, without an error toast — 3.2s
✅ offers a retry for a transient failure, and recovers on success — 3.3s

contract-termination.spec.ts

✅ terminates and undoes a progressive loan contract — 8.0s

loan-schedule-type-gating.spec.ts

✅ Loan schedule type gating › a cumulative loan offers neither progressive-only tab, and fetches neither — 3.0s
✅ Loan schedule type gating › a progressive loan shows only the capabilities it actually has — 3.0s
✅ Loan schedule type gating › fetches buy-down fees for a progressive loan that has no external id — 2.5s
✅ Loan schedule type gating › a progressive loan with both capabilities shows both — 3.3s
✅ Loan schedule type gating › a charged-off loan says so and offers the reversal instead — 2.7s
✅ Loan schedule type gating › a healthy loan offers charge-off and no marker — 3.1s

loan-servicing-gaps.spec.ts

✅ Loan servicing gaps › edits an interest pause through PUT while preserving its existing dates — 3.2s
✅ Loan servicing gaps › undo approval sends an empty body, without the locale the platform refuses — 3.7s
✅ Loan servicing gaps › undo approval carries the reason when one was given — 3.8s
✅ Loan servicing gaps › undo approval is offered only while the loan is approved — 3.0s
✅ Loan servicing gaps › the delinquency tab shows the summary the loan carries and the tags it fetches — 3.0s
✅ Loan servicing gaps › the data-only tabs stay hidden when the loan carries nothing for them — 2.5s
✅ Loan servicing gaps › each data-only tab appears and renders once the loan carries its data — 3.2s
✅ Loan servicing gaps › disburse to savings sends the date and amount, with the platform date format — 3.9s
✅ Loan servicing gaps › disburse to savings is offered only on an approved loan — 3.0s
✅ Loan servicing gaps › unassign loan officer sends the date, and appears only when one is assigned — 3.8s
✅ Loan servicing gaps › unassign loan officer is hidden on a loan with no officer — 3.0s
✅ Loan servicing gaps › undo last disbursal appears only on a multi-disbursal loan, and sends an empty body — 3.9s
✅ Loan servicing gaps › undo last disbursal is hidden on a single-disbursal loan — 2.9s
✅ Loan servicing gaps › close as rescheduled is offered on an active loan — 3.0s
✅ Loan servicing gaps › revising the amounts is offered on an approved loan — 3.1s
✅ Loan servicing gaps › revising the amounts is hidden before approval — 2.9s
✅ Loan servicing gaps › revising the approved amount sends the new amount and locale — 3.8s
✅ Loan servicing gaps › revising the available disbursement amount sends the new amount, including zero — 3.9s

logout-reason-notice.spec.ts

✅ explains an inactivity sign-out — 1.3s
✅ explains an expired session, with different wording — 1.3s
✅ stays silent when the user came to sign in of their own accord — 161ms
✅ stays silent for a reason it does not recognise, rather than showing a blank notice — 150ms

oidc-login.spec.ts

✅ identity-provider route on the login page › a deployment that never set the flag sees the screen it always saw — 1.3s
✅ identity-provider route on the login page › does not offer the route when the flag is false — 1.1s
✅ identity-provider route on the login page › does not offer the route when the flag is "true" — 1.3s
✅ identity-provider route on the login page › does not offer the route when the flag is 1 — 1.1s
✅ identity-provider route on the login page › offers the route above the password form, which stays in place — 1.3s
✅ identity-provider route on the login page › says plainly that it is not available yet, and goes nowhere — 1.6s
✅ identity-provider route on the login page › username and password still sign in when the route is offered — 1.5s
✅ identity-provider route on the login page › is not offered while a second factor is being asked for — 1.2s

rbac-feature-flag.spec.ts

✅ RBAC permission gating (rbacEnabled = true) › a limited user does not see permission-gated nav groups — 1.3s
✅ RBAC permission gating (rbacEnabled = true) › a user with READ_USER sees only the Security entries that permission covers — 1.3s
✅ RBAC permission gating (rbacEnabled = true) › the Security group fills in as the user is granted each of its permissions — 1.3s
✅ RBAC permission gating (rbacEnabled = true) › a superuser (ALL_FUNCTIONS) sees all permission-gated groups — 1.9s
✅ RBAC institution-feature gating (rbacEnabled = true) › universal institution shows Groups, Centers and Collection Sheet — 1.4s
✅ RBAC institution-feature gating (rbacEnabled = true) › commercial bank (cb) hides all group-lending features — 1.4s
✅ RBAC institution-feature gating (rbacEnabled = true) › credit union (cu) shows Groups but hides Centers and Collection Sheet — 1.4s
✅ rbacEnabled = false › restores the pre-RBAC behaviour of showing everything — 1.5s
✅ deployment navigation overrides › removes the entries the deployment names by id, leaving the rest alone — 1.5s
✅ deployment navigation overrides › ignores a labelKey where an id is required — 1.9s
✅ deployment navigation overrides › removes them even where RBAC is off — 1.5s

rbac-route-protection.spec.ts

✅ route authorization › a superuser reaches every sampled route and sees the full navigation — 11.4s
✅ route authorization › a single-module user is confined to that module — 8.2s
✅ route authorization › a read-only user gets the lists and not the forms — 10.0s
✅ route authorization › a user with an empty permission list is refused everywhere and the app still works — 8.3s
✅ route authorization › a session carrying no permissions field is treated as carrying none — 4.6s
✅ route authorization › an unrecognised permission code grants nothing — 5.0s
✅ route authorization › an unauthenticated visitor is asked to sign in, not told they are forbidden — 4.9s
✅ route authorization › a deployment with RBAC turned off behaves as it did before the guard — 6.8s
✅ the Access Denied page › says what happened, under a single heading — 2.9s
✅ the Access Denied page › moves focus to the heading, since the user did not ask to come here — 2.9s
✅ the Access Denied page › announces itself politely — 3.4s
✅ the Access Denied page › names the permissions the screen wanted, so the user can ask for them — 2.9s
✅ the Access Denied page › offers a way back that the user is allowed to take — 3.0s
✅ the Access Denied page › is reachable by keyboard alone — 3.4s
✅ permission feedback › a visible nav entry says what the user can do in that module — 1.3s
✅ permission feedback › a nav entry carries no hint when there is nothing specific to say — 1.4s
✅ navigation and routes agree › a hidden menu entry is also refused by URL, and a shown one is not — 5.0s
✅ navigation and routes agree › the create button is withheld from a user whose create route would refuse them — 2.9s

report-enhancements.spec.ts

✅ Report Enhancements, Pagination, and Help Tour › should run report, show paginated data, and download CSV — 3.5s
✅ Report Enhancements, Pagination, and Help Tour › should trigger guidance help tour and navigate steps — 2.8s

reporting.spec.ts

✅ Reporting › should display list of reports — 1.5s
✅ Reporting › should navigate to run report page — 2.4s

scheduler-jobs.spec.ts

✅ Scheduler Jobs bulk run › Run Selected is disabled until a job is checked — 3.0s
✅ Scheduler Jobs bulk run › Select All checks every job, and running confirms then triggers each one — 3.0s
✅ Scheduler Jobs bulk run › declining the confirmation runs nothing — 3.3s

sidebar-active-state.spec.ts

✅ Sidebar active route matching › does not mark a parent sidebar link active on nested routes — 1m 5s

two-factor-authentication.spec.ts

✅ two-step verification › asks for a code and lets the user in once it is accepted — 1.4s
✅ two-step verification › sends the token on every later request — 1.4s
✅ two-step verification › keeps the user on the step when the code is wrong, and says why — 1.3s
✅ two-step verification › accepts a correct code after a wrong one — 1.5s
✅ two-step verification › offers the choice when there is more than one channel — 1.2s
✅ two-step verification › says so when the account has no channel configured — 1.7s
✅ two-step verification › returns to the choice when the code could not be sent — 1.2s
✅ two-step verification › does not let a half-finished session reach the application — 2.8s
✅ two-step verification › backing out returns to the password form — 1.2s
✅ two-step verification › a deployment without a second factor signs in exactly as before — 1.4s

working-capital-loan-actions.spec.ts

✅ Working Capital loan delinquency, breach and near-breach actions, and originators › shows delinquency action history and submits a new one — 4.3s
✅ Working Capital loan delinquency, breach and near-breach actions, and originators › shows breach action history and submits a new one — 4.3s
✅ Working Capital loan delinquency, breach and near-breach actions, and originators › shows near-breach action history and submits a new one — 3.5s
✅ Working Capital loan delinquency, breach and near-breach actions, and originators › attaches and detaches a loan originator — 3.7s
✅ Working Capital loan delinquency, breach and near-breach actions, and originators › adds a new charge and waives an existing one — 3.7s
✅ Working Capital loan delinquency, breach and near-breach actions, and originators › shows rate-change history, amortization schedule, and delinquency range tags — 2.7s
✅ Working Capital loan delinquency, breach and near-breach actions, and originators › marks the loan as fraud, applies a discount, and changes the payment rate — 5.0s
✅ Working Capital loan transactions, loss actions and modification › credits the borrower through a goodwill credit — 3.7s
✅ Working Capital loan transactions, loss actions and modification › refunds a merchant payout — 3.2s
✅ Working Capital loan transactions, loss actions and modification › refunds a credit balance only on an overpaid loan — 4.0s
✅ Working Capital loan transactions, loss actions and modification › charges off an active loan — 3.5s
✅ Working Capital loan transactions, loss actions and modification › swaps charge-off for its undo once the loan is charged off — 2.6s
✅ Working Capital loan transactions, loss actions and modification › writes off an active loan — 3.8s
✅ Working Capital loan transactions, loss actions and modification › offers recovery and undo on a written-off loan, but not a second write-off — 2.5s
✅ Working Capital loan transactions, loss actions and modification › withholds undo write-off once a recovery has been collected — 2.6s
✅ Working Capital loan transactions, loss actions and modification › modifies a submitted application through the edit route — 4.1s
✅ Working Capital loan transactions, loss actions and modification › disables the actions a read-only role may not perform — 2.4s

Slowest 10 — what the shard counts should be tuned against

Test	Spec	Time
Sidebar active route matching › does not mark a parent sidebar link active on nested routes	`sidebar-active-state.spec.ts`	1m 5s
route authorization › a superuser reaches every sampled route and sees the full navigation	`rbac-route-protection.spec.ts`	11.4s
route authorization › a read-only user gets the lists and not the forms	`rbac-route-protection.spec.ts`	10.0s
Client form date pickers › stay usable on a second visit to the create form	`client-date-picker-revisit.spec.ts`	8.4s
route authorization › a user with an empty permission list is refused everywhere and the app still works	`rbac-route-protection.spec.ts`	8.3s
route authorization › a single-module user is confined to that module	`rbac-route-protection.spec.ts`	8.2s
terminates and undoes a progressive loan contract	`contract-termination.spec.ts`	8.0s
route authorization › a deployment with RBAC turned off behaves as it did before the guard	`rbac-route-protection.spec.ts`	6.8s
Loan product down payment and tranches › does not send income recognition on a cumulative product	`loan-product-down-payment.spec.ts`	5.9s
Loan product down payment and tranches › does not send a down payment on a cumulative product	`loan-product-down-payment.spec.ts`	5.7s

📼 Download the HTML report, videos and traces — see the playwright-report-mocked artifact.

_{Generated by run 39260395538 from 41201a0. The run executed a fork branch, so treat its contents as unverified.}

github-actions · 2026-10-19T18:01:59Z

E2E — real Fineract

🎭 E2E Tests

✅ All green — 171 passed · 0 failed · 0 skipped · 2 flaky, across 50 spec files in 14m 24s.

⚠️ Passed on retry

Green overall, but these needed more than one attempt — the shape a flake takes.

Accounting closures against Fineract › a closed period reads as Closed, and the platform refuses a posting inside it — accounting-closure-backend.spec.ts (1 retry/retries)
Batch API enclosingTransaction semantics against Fineract › rolls back the earlier steps when enclosingTransaction is true and a later step fails — batch-api-operations.spec.ts (2 retry/retries)

By spec file

Spec	✅	Time
backend.setup.ts	3	5.8s
accounting-closure-backend.spec.ts	2	15.8s
batch-api-operations.spec.ts	5	27.1s
center-servicing.spec.ts	2	17.2s
charge-servicing-backend.spec.ts	6	29.2s
client-legal-form-search.spec.ts	1	4.7s
client-transfer.spec.ts	4	47.2s
collection-sheet.spec.ts	1	6.3s
deposit-account-servicing.spec.ts	3	26.5s
deposit-lifecycle-backend.spec.ts	4	23.2s
deposit-product-configuration.spec.ts	3	16.6s
double-submit-backend.spec.ts	2	11.6s
form-layout-reflow.spec.ts	6	33.7s
group-membership.spec.ts	3	49.8s
loan-account-actions.spec.ts	3	24.0s
loan-approved-amount-revision.spec.ts	3	19.6s
loan-charge-off.spec.ts	2	20.9s
loan-flows-non-admin-roles.spec.ts	8	1m 47s
loan-product-accounting.spec.ts	1	33.8s
loan-repayment-gating.spec.ts	2	10.3s
loan-servicing-rbac-backend.spec.ts	4	11.2s
loan-servicing.spec.ts	2	19.2s
login.spec.ts	4	5.8s
oidc-login-backend.spec.ts	2	5.5s
parity-screens.spec.ts	8	44.1s
rbac-backend-restricted-user.spec.ts	7	35.2s
rbac-dead-end-controls.spec.ts	7	34.7s
rbac-disabled-flag-backend.spec.ts	6	28.5s
rbac-multi-permission.spec.ts	9	58.7s
rbac-office-scoped-user.spec.ts	6	26.6s
bulk-import-entity-types.spec.ts	1	10.2s
delinquency-configuration.spec.ts	2	17.1s
full-demo.spec.ts	1	58.4s
interest-rate-charts.spec.ts	1	7.3s
loan-lifecycle.spec.ts	4	1m 58s
loan-schedule-type.spec.ts	3	33.7s
rbac-permissionless-user.spec.ts	4	21.2s
report-mailing-job.spec.ts	3	19.0s
report-parameter-backend.spec.ts	4	22.8s
savings-flows-non-admin-roles.spec.ts	7	1m 36s
savings-transaction-correction.spec.ts	1	6.1s
savings-transaction-gating.spec.ts	2	5.8s
share-account-servicing.spec.ts	2	18.9s
share-product-accounting.spec.ts	1	25.1s
teller-cash-management.spec.ts	2	36.8s
tenant-date-defaults-backend.spec.ts	1	6.0s
working-capital-loan-actions-backend.spec.ts	3	22.1s
working-capital-product-accounting-backend.spec.ts	2	20.8s
working-capital-rbac-backend.spec.ts	2	7.6s
working-capital-servicing-backend.spec.ts	6	35.5s

All 171 tests — click to expand

backend.setup.ts

✅ seed backend reference data — 1.8s
✅ seed backend reference data — 2.1s
✅ seed backend reference data — 1.9s

accounting-closure-backend.spec.ts

✅ Accounting closures against Fineract › a closed period reads as Closed, and the platform refuses a posting inside it — 10.6s (retried 1×)
✅ Accounting closures against Fineract › the form keeps the user on the page and names the reason when Fineract refuses — 5.2s

batch-api-operations.spec.ts

✅ Batch API Operations against Fineract › runs the sample batch scenario — create client, create loan, add and read back a charge — 5.6s
✅ Batch API Operations against Fineract › shows a parse error instead of submitting when the batch input is not valid JSON — 6.9s
✅ Batch API enclosingTransaction semantics against Fineract › rolls back the earlier steps when enclosingTransaction is true and a later step fails — 4.7s (retried 2×)
✅ Batch API enclosingTransaction semantics against Fineract › does not roll back the earlier steps when enclosingTransaction is false and a later step fails — 5.0s
✅ Batch API Operations on a mobile viewport against Fineract › the sample batch scenario is reachable and works by touch at mobile width — 4.8s

center-servicing.spec.ts

✅ Center servicing › a center is activated, staffed and given a group — 12.2s
✅ Center servicing › notes are recorded against the center — 5.0s

charge-servicing-backend.spec.ts

✅ loan charge servicing › waives a loan charge, and the platform records the waiver — 6.0s
✅ loan charge servicing › cannot reverse a waiver: the platform answers 500, not a business rule — 622ms
✅ loan charge servicing › offers no Pay on a charge the platform will not let be paid — 5.1s
✅ loan charge servicing › adjusts a loan charge to a smaller amount — 6.4s
✅ savings charge servicing › pays a savings charge with the amount and due date the platform demands — 5.4s
✅ savings charge servicing › carries an active flag, which is what gates Inactivate — 5.6s

client-legal-form-search.spec.ts

✅ Client list: legal form filtering › an entity client appears in the main client list — 4.7s

client-transfer.spec.ts

✅ Client transfer between offices › a proposed transfer is held until the destination accepts, and then the client moves — 11.8s
✅ Client transfer between offices › a rejected transfer leaves the client on hold, and withdrawing is the way back — 12.2s
✅ Client transfer between offices › a client can be transferred in one step when the user may act for both offices — 10.8s
✅ Client staff assignment › an officer can be assigned and then removed — 12.3s

collection-sheet.spec.ts

✅ Collection Sheet › scopes staff to the office, sends the choice, and reports an empty sheet — 6.3s

deposit-account-servicing.spec.ts

✅ Term deposit account servicing › an account is approved, activated and closed before maturity — 11.3s
✅ Term deposit account servicing › a deposit is recorded, listed, and reversed without leaving the list — 9.2s
✅ Term deposit account servicing › an application can be rejected instead of approved — 6.0s

deposit-lifecycle-backend.spec.ts

✅ fixed deposit products › carry the rate the user typed, not a hidden default — 5.6s
✅ an active fixed deposit account › shows its balance and maturity figures — 5.0s
✅ an active fixed deposit account › can be closed into the client savings account — 7.4s
✅ an active fixed deposit account › can have a charge added to it — 5.2s

deposit-product-configuration.spec.ts

✅ Deposit product configuration › a fixed deposit product survives being edited — 6.0s
✅ Deposit product configuration › a recurring deposit product can be created at all — 4.7s
✅ Deposit product configuration › a savings product carries its accounting configuration — 5.9s

double-submit-backend.spec.ts

✅ A double-click submits once › a repayment is recorded once, not twice — 5.1s
✅ A double-click submits once › a client is created once, not twice — 6.5s

form-layout-reflow.spec.ts

✅ form layout at the narrow viewport › Create GL Account gives every field a usable width at 320px — 4.8s
✅ form layout at the narrow viewport › Create Loan gives every field a usable width at 320px — 4.5s
✅ form layout at the narrow viewport › Create Office gives every field a usable width at 320px — 5.1s
✅ form layout at the narrow viewport › Create Staff gives every field a usable width at 320px — 4.7s
✅ form layout at the narrow viewport › no page-level horizontal scroll at 320px — 9.2s
✅ form layout at the wide viewport › Create GL Account still uses more than one column at 1280px — 5.4s

group-membership.spec.ts

✅ Group membership and lifecycle › a group is activated, staffed, given members and a committee, then emptied — 21.1s
✅ Group membership and lifecycle › notes are recorded against the group and can be removed again — 8.9s
✅ Group membership and lifecycle › an empty group is closed with a reason, and a group with members is refused — 19.9s

loan-account-actions.spec.ts

✅ Loan account lifecycle actions › new action menu items appear only for active loans — 7.1s
✅ Loan account lifecycle actions › undo disbursal shows a confirm dialog and reverts the loan to Approved — 8.9s
✅ Loan account lifecycle actions › write off requires confirmation and moves the loan out of Active status — 7.9s

loan-approved-amount-revision.spec.ts

✅ Loan approved and available-disbursement amount revision › revises the approved amount on an active, partially-disbursed loan — 7.2s
✅ Loan approved and available-disbursement amount revision › revises the available disbursement amount, which also changes the approved amount — 6.8s
✅ Loan approved and available-disbursement amount revision › shows the platform’s own refusal, not a generic validation message — 5.7s

loan-charge-off.spec.ts

✅ Loan servicing commands › charges a loan off through the UI and reverses it — 10.5s
✅ Loan servicing commands › records a goodwill credit through the shared transaction form — 10.4s

loan-flows-non-admin-roles.spec.ts

✅ a loan taken through four separated duties, every account built in the UI › an administrator builds the four roles and accounts through the forms — 41.0s
✅ a loan taken through four separated duties, every account built in the UI › the officer books the application and is not offered approval of their own loan — 15.3s
✅ a loan taken through four separated duties, every account built in the UI › the approver, differing from the officer in one code, is offered it and approves — 5.9s
✅ a loan taken through four separated duties, every account built in the UI › the approver is not offered disbursement of the loan they just approved — 5.0s
✅ a loan taken through four separated duties, every account built in the UI › the disburser, holding only DISBURSE_LOAN, completes the payout end to end — 6.9s
✅ a loan taken through four separated duties, every account built in the UI › and the same route now refuses an UPDATE_LOAN holder, as the platform does — 7.9s
✅ a loan taken through four separated duties, every account built in the UI › a command with no mapped code is left to the platform rather than guessed at — 5.6s
✅ a loan taken through four separated duties, every account built in the UI › a repayment duty reaches its own form, and records a repayment — 18.8s

loan-product-accounting.spec.ts

✅ Loan product accounting › a cash-accounting product is configured, round-trips on edit, and posts to the ledger — 33.8s

loan-repayment-gating.spec.ts

✅ Repayment is offered only where the platform allows it › withheld on a loan awaiting approval, offered once it is active — 10.0s
✅ Repayment is offered only where the platform allows it › the platform refuses a repayment on a loan awaiting approval — 363ms

loan-servicing-rbac-backend.spec.ts

✅ loan servicing and charge command permissions, on the platform › each command is authorised by the code the UI declares for it — 5.2s
✅ loan servicing and charge command permissions, on the platform › no portfolio write code authorises any of its entity commands — 5.6s
✅ loan servicing and charge command permissions, on the platform › the deferred-income adjustments are not commands at loan level — 163ms
✅ loan servicing and charge command permissions, on the platform › the deferred-income adjustments are commands on one transaction — 194ms

loan-servicing.spec.ts

✅ Loan servicing: notes and transaction adjustment › notes can be added and removed, with a confirm dialog on delete — 8.7s
✅ Loan servicing: notes and transaction adjustment › a repayment transaction can be viewed and adjusted with a corrected amount — 10.5s

login.spec.ts

✅ Login › login page displays correctly — 1.4s
✅ Login › login form has required fields — 1.4s
✅ Login › submit button is disabled when form is empty — 1.3s
✅ Login › submit button is enabled when form is filled — 1.7s

oidc-login-backend.spec.ts

✅ identity-provider route against a real Fineract › is offered beside the password form, and pressing it sends nothing to Fineract — 1.8s
✅ identity-provider route against a real Fineract › a real password sign-in still gets a session with the route offered — 3.7s

parity-screens.spec.ts

✅ Screens added for platform parity › a manual journal entry can be read whole and reversed — 5.5s
✅ Screens added for platform parity › an entry that is already reversed is not offered again — 4.9s
✅ Screens added for platform parity › a report definition can be created, edited and deleted; a core one cannot — 5.5s
✅ Screens added for platform parity › a core report opens read-only with only its in-use setting — 5.0s
✅ Screens added for platform parity › a pending loan is approved from the queue, in a batch — 6.2s
✅ Screens added for platform parity › a fixed deposit is listed as a deposit, not as a savings account — 5.4s
✅ Screens added for platform parity › an office has a screen, and it carries its custom fields — 4.8s
✅ Screens added for platform parity › a savings account carries notes, and the note survives a reload — 6.8s

rbac-backend-restricted-user.spec.ts

✅ a genuinely restricted Fineract user › holds exactly the permissions their role was granted — 161ms
✅ a genuinely restricted Fineract user › reaches the screen their permission covers — 4.3s
✅ a genuinely restricted Fineract user › is refused a screen their permission does not cover, by URL and by the backend — 4.7s
✅ a genuinely restricted Fineract user › is refused a write screen they can read the list for, and the write itself — 6.9s
✅ a genuinely restricted Fineract user › is not offered the actions it would be refused for — 4.4s
✅ a genuinely restricted Fineract user › is shown an action it cannot take, disabled and saying what it needs — 6.1s
✅ a genuinely restricted Fineract user › the superuser the rest of the suite uses is unaffected — 8.7s

rbac-dead-end-controls.spec.ts

✅ a client's account tables › withhold the link, but not the number, from a user who cannot open the account — 5.0s
✅ a client's account tables › keep the link for a user who holds READ_LOAN — 5.2s
✅ the office transactions list › withholds Create from a reader, and the route refuses it too — 5.8s
✅ the office transactions list › offers Create to an administrator — 4.3s
✅ the office transactions list › refuses the list at the door for the code the platform does not check — 4.6s
✅ a group's member list › names the member without linking when the reader cannot open clients — 4.5s
✅ a group's member list › keeps the link for a reader who holds READ_CLIENT — 5.3s

rbac-disabled-flag-backend.spec.ts

✅ rbacEnabled: false, with a user who holds only READ_CLIENT › is shown the whole navigation, including modules their role does not cover — 3.3s
✅ rbacEnabled: false, with a user who holds only READ_CLIENT › is admitted by the route guard to a screen their role does not cover — 8.0s
✅ rbacEnabled: false, with a user who holds only READ_CLIENT › is still refused by Fineract, which the flag does not reach — 613ms
✅ rbacEnabled: false, with a user who holds only READ_CLIENT › is told the list is beyond their role, and not offered a retry that cannot succeed — 5.4s
✅ rbacEnabled: false, with a user who holds only READ_CLIENT › gets the same treatment on a second refused list, not a one-screen fix — 5.9s
✅ rbacEnabled: false, with a user who holds only READ_CLIENT › still loads the list their role does cover, with no failure state at all — 5.3s

rbac-multi-permission.spec.ts

✅ a route declaring more than one permission code (OR semantics) › is admitted by either declared code alone — 5.1s
✅ a route declaring more than one permission code (OR semantics) › is admitted by the other declared code alone — 4.9s
✅ a route declaring more than one permission code (OR semantics) › is refused when holding neither declared code, by the router and by the backend — 5.4s
✅ ALL_FUNCTIONS_READ, against the real Fineract permission catalogue › reaches read screens across modules it holds no specific code for — 9.4s
✅ ALL_FUNCTIONS_READ, against the real Fineract permission catalogue › is refused every write screen, and the writes themselves — 6.9s
✅ a restricted session across a real page reload › keeps the same permission boundary after reloading, not just after a fresh login — 10.0s
✅ a second real action-level gate, distinct from loan repayment › is shown the Approve action disabled and naming what it needs, refused by the backend too — 5.6s
✅ Security module writes (users, roles), against the real backend › reaches the list screens but is refused the write screens — 11.2s
✅ Security module writes (users, roles), against the real backend › is refused creating a user and modifying a role, by the backend itself — 249ms

rbac-office-scoped-user.spec.ts

✅ an account scoped to a branch office › differs from a head-office account in office alone, not in permissions — 401ms
✅ an account scoped to a branch office › is shown only its own office in the client list, and told which office it is in — 4.7s
✅ an account scoped to a branch office › sees a shorter list than an identically-permissioned head-office account — 4.5s
✅ an account scoped to a branch office › is refused another office’s client by the platform, and told so once — 5.1s
✅ an account scoped to a branch office › can still open the record that is in its own office — 4.9s
✅ an account scoped to a branch office › is not offered an edit it would be refused for on the Offices screen — 7.0s

bulk-import-entity-types.spec.ts

✅ every offered entity type is one the platform accepts — 10.2s

delinquency-configuration.spec.ts

✅ creates a delinquency range, then edits it — 8.5s
✅ creates a delinquency bucket from the ranges the template offers — 8.6s

full-demo.spec.ts

✅ Full feature demo recording › walk through loan schedule type, lifecycle, custom fields, collateral, and disbursement — 58.4s

interest-rate-charts.spec.ts

✅ lists charts without a server error — 7.3s

loan-lifecycle.spec.ts

✅ Loan lifecycle: creation, approval, disbursement › create, approve, and disburse a Cumulative loan — 30.9s
✅ Loan lifecycle: creation, approval, disbursement › create, approve, and disburse a Progressive loan — 30.8s
✅ Loan lifecycle: creation, approval, disbursement › an approved loan can be returned to pending approval — 28.5s
✅ Loan lifecycle: creation, approval, disbursement › the delinquency tab reads a real loan, and the empty data tabs stay hidden — 27.9s

loan-schedule-type.spec.ts

✅ Loan Schedule Type (Cumulative vs Progressive) › loan products list shows a schedule type chip per product — 9.2s
✅ Loan Schedule Type (Cumulative vs Progressive) › create a Progressive loan product end-to-end and verify it round-trips — 14.3s
✅ Loan Schedule Type (Cumulative vs Progressive) › loan creation shows the schedule type badge for a Progressive product — 10.1s

rbac-permissionless-user.spec.ts

✅ an account whose role grants nothing › is authenticated by Fineract and authorized by it for nothing — 713ms
✅ an account whose role grants nothing › is signed in and landed on a screen rather than stranded at the login form — 4.8s
✅ an account whose role grants nothing › is offered no permission-gated module, and refused each one by URL and by Fineract — 10.5s
✅ an account whose role grants nothing › is left a navigation whose entries actually work — 5.2s

report-mailing-job.spec.ts

✅ report mailing job creation › is no longer refused for a missing parameter — 5.8s
✅ report mailing job creation › the payload carries the locale and the schedule — 5.2s
✅ report mailing job creation at the narrow viewport › every field is reachable and the job still saves at 320px — 8.1s

report-parameter-backend.spec.ts

✅ Dynamic report parameters against Fineract › keeps the parameter form available when a report has cascading lookups — 4.4s
✅ Dynamic report parameters against Fineract › changing Office changes the Client Listing row set — 6.5s
✅ Cascading report parameters against Fineract › sends the parent value to the child lookup and clears the child when it changes — 6.9s
✅ Chart reports against Fineract › renders a chart report as a chart rather than a table — 5.0s

savings-flows-non-admin-roles.spec.ts

✅ a savings account taken through four separated duties, every account built in the UI › an administrator builds the five roles and accounts through the forms — 47.0s
✅ a savings account taken through four separated duties, every account built in the UI › the officer books the application and is not offered approval of it — 8.3s
✅ a savings account taken through four separated duties, every account built in the UI › the approver, differing in one code, is offered it and approves — 5.0s
✅ a savings account taken through four separated duties, every account built in the UI › the activator activates, and cannot take a deposit — 5.4s
✅ a savings account taken through four separated duties, every account built in the UI › the teller, holding only the transaction codes, records a deposit end to end — 5.3s
✅ a savings account taken through four separated duties, every account built in the UI › the cash-withdrawal control asks for the cash code, not the application one — 18.3s
✅ a savings account taken through four separated duties, every account built in the UI › the transaction route refuses an UPDATE_SAVINGSACCOUNT holder, as the platform does — 6.5s

savings-transaction-correction.spec.ts

✅ Savings transaction correction › a deposit is reversed and a hold is released — 6.1s

savings-transaction-gating.spec.ts

✅ Savings transactions are offered only on an active account › withheld while awaiting approval, offered once active — 5.6s
✅ Savings transactions are offered only on an active account › the platform refuses a deposit on an account awaiting approval — 224ms

share-account-servicing.spec.ts

✅ Share account servicing › an account is approved, activated, traded and closed — 12.9s
✅ Share account servicing › an application can be rejected — 6.0s

share-product-accounting.spec.ts

✅ Share product accounting › a share product is mapped to equity and round-trips on edit — 25.1s

teller-cash-management.spec.ts

✅ Teller cash management › a cashier is listed, receives an allocation, and settles cash back — 25.1s
✅ Teller cash management › settling more than the cashier holds is refused and the form stays usable — 11.7s

tenant-date-defaults-backend.spec.ts

✅ Date defaults come from the platform, not the browser › a client can be created while the browser is a day ahead — 6.0s

working-capital-loan-actions-backend.spec.ts

✅ Working Capital loan actions, against a real Fineract › charges off an active loan, and then offers only the undo — 8.1s
✅ Working Capital loan actions, against a real Fineract › credits the borrower with a goodwill credit, and the balance falls — 6.4s
✅ Working Capital loan actions, against a real Fineract › writes the loan off, which closes it and opens the recovery path — 7.5s

working-capital-product-accounting-backend.spec.ts

✅ Working Capital product accounting, on the platform › configures the accrual rule and its twelve accounts, and the platform accepts it — 15.7s
✅ Working Capital product accounting, on the platform › prefills a configured product and re-saves it without blanking anything — 5.2s

working-capital-rbac-backend.spec.ts

✅ Working Capital command permissions, on the platform › each command is authorised by the code the UI declares for it — 5.4s
✅ Working Capital command permissions, on the platform › UPDATE_WORKINGCAPITALLOAN authorises none of them — 2.2s

working-capital-servicing-backend.spec.ts

✅ transaction corrections › undoes a repayment, and the platform marks it reversed — 6.5s
✅ transaction corrections › offers no correction on the disbursement, which the platform refuses by type — 4.6s
✅ transaction corrections › adjusts a repayment, which reverses it and books the new amount — 5.3s
✅ charge adjustment › adjusts a charge, and the outstanding amount follows — 5.0s
✅ custom datatables › adds, edits and deletes a row of a multi-row table on the loan — 7.0s
✅ custom datatables › creates a loan that a create-time check would otherwise refuse — 7.0s

Slowest 10 — what the shard counts should be tuned against

Test	Spec	Time
Full feature demo recording › walk through loan schedule type, lifecycle, custom fields, collateral, and disbursement	`full-demo.spec.ts`	58.4s
a savings account taken through four separated duties, every account built in the UI › an administrator builds the five roles and accounts through the forms	`savings-flows-non-admin-roles.spec.ts`	47.0s
a loan taken through four separated duties, every account built in the UI › an administrator builds the four roles and accounts through the forms	`loan-flows-non-admin-roles.spec.ts`	41.0s
Loan product accounting › a cash-accounting product is configured, round-trips on edit, and posts to the ledger	`loan-product-accounting.spec.ts`	33.8s
Loan lifecycle: creation, approval, disbursement › create, approve, and disburse a Cumulative loan	`loan-lifecycle.spec.ts`	30.9s
Loan lifecycle: creation, approval, disbursement › create, approve, and disburse a Progressive loan	`loan-lifecycle.spec.ts`	30.8s
Loan lifecycle: creation, approval, disbursement › an approved loan can be returned to pending approval	`loan-lifecycle.spec.ts`	28.5s
Loan lifecycle: creation, approval, disbursement › the delinquency tab reads a real loan, and the empty data tabs stay hidden	`loan-lifecycle.spec.ts`	27.9s
Teller cash management › a cashier is listed, receives an allocation, and settles cash back	`teller-cash-management.spec.ts`	25.1s
Share product accounting › a share product is mapped to equity and round-trips on edit	`share-product-accounting.spec.ts`	25.1s

📼 Download the HTML report, videos and traces — see the playwright-report-backend artifact.

_{Generated by run 39260395538 from 41201a0. The run executed a fork branch, so treat its contents as unverified.}

github-actions · 2026-10-19T19:22:00Z

🔄 What this change talks to

From the 10 application TypeScript file(s) changed in this pull request.

sequenceDiagram
  autonumber
  participant FineractRoleApi as FineractRoleApi (Service)
  participant RolesService as RolesService (API client)
  participant Fineract as Fineract (REST API)
  participant FineractUserApi as FineractUserApi (Service)
  participant UsersService as UsersService (API client)
  participant PasswordPreferencesService as PasswordPreferencesService (API client)
  participant UserProfileComponent as UserProfileComponent (Component)
  participant AuthService as AuthService (Injected)
  participant USER_API as USER_API (Injected)
  participant NotificationService as NotificationService (Injected)
  participant I18N as I18N (Injected)
  participant RolesListComponent as RolesListComponent (Component)
  FineractRoleApi->>RolesService: getRoles()
  RolesService->>Fineract: getRoles()
  Fineract-->>RolesService: response
  FineractRoleApi->>RolesService: getRolesRoleId()
  RolesService->>Fineract: getRolesRoleId()
  Fineract-->>RolesService: response
  FineractRoleApi->>RolesService: getRolesRoleIdPermissions()
  RolesService->>Fineract: getRolesRoleIdPermissions()
  Fineract-->>RolesService: response
  FineractRoleApi->>RolesService: postRoles()
  RolesService->>Fineract: postRoles()
  Fineract-->>RolesService: response
  FineractRoleApi->>RolesService: putRolesRoleId()
  RolesService->>Fineract: putRolesRoleId()
  Fineract-->>RolesService: response
  FineractRoleApi->>RolesService: putRolesRoleIdPermissions()
  RolesService->>Fineract: putRolesRoleIdPermissions()
  Fineract-->>RolesService: response
  FineractRoleApi->>RolesService: postRolesRoleId()
  RolesService->>Fineract: postRolesRoleId()
  Fineract-->>RolesService: response
  FineractRoleApi->>RolesService: deleteRolesRoleId()
  RolesService->>Fineract: deleteRolesRoleId()
  Fineract-->>RolesService: response
  FineractUserApi->>UsersService: getUsers()
  UsersService->>Fineract: getUsers()
  Fineract-->>UsersService: response
  FineractUserApi->>UsersService: getUsersUserId()
  UsersService->>Fineract: getUsersUserId()
  Fineract-->>UsersService: response
  FineractUserApi->>UsersService: getUsersTemplate()
  UsersService->>Fineract: getUsersTemplate()
  Fineract-->>UsersService: response
  FineractUserApi->>UsersService: postUsers()
  UsersService->>Fineract: postUsers()
  Fineract-->>UsersService: response
  FineractUserApi->>UsersService: putUsersUserId()
  UsersService->>Fineract: putUsersUserId()
  Fineract-->>UsersService: response
  FineractUserApi->>PasswordPreferencesService: getPasswordpreferences()
  PasswordPreferencesService->>Fineract: getPasswordpreferences()
  Fineract-->>PasswordPreferencesService: response
  FineractUserApi->>UsersService: postUsersUserIdPwd()
  UsersService->>Fineract: postUsersUserIdPwd()
  Fineract-->>UsersService: response

Truncated for readability: 5 further participant(s) and 10 further call(s) not shown.

Static analysis of inject() fields and the calls made on them — not an execution trace. It cannot see dynamic dispatch, and generated API clients under src/app/api are collapsed into the single Fineract participant.

_{Generated by run 39260395579 from 41201a0. The run executed a fork branch, so treat its contents as unverified.}

`main` has been red on Translation Check since apache#819 merged, and neither apache#819 nor the change it landed beside was wrong on its own — both were green. apache#816 renamed `ON_HOLD_TRANSACTIONS.REASON` to `LOAN`, because the column shows the loan the funds are held against and never held a reason. apache#819 was authored before that and translated the key as it then stood. Git merged the two cleanly: they touch different keys in different files, so there was nothing to conflict. The result is a catalogue that disagrees with `en.json` in both directions at once: fr.json defines ON_HOLD_TRANSACTIONS.REASON, which en.json does not — remove it. fr.json covers 2746 keys, down from 2747. So `Motif` becomes `Prêt` — a retranslation rather than a rename, since the column means something else now. The same merge left the sixteen keys from apache#817's password and access work untranslated, for the same reason: that branch predated `fr.json` existing, so there was no French file for it to add them to. They are translated here, which takes `fr` to 2763/2763, and the coverage baseline is refreshed so the ratchet holds the gain rather than the old floor. `app.language.fr` is added to `hi.json` too. apache#819 registered French in the language pickers and gave `en` and `fr` a label for it, so a Hindi user was offered the new language under a raw translation key.

Unit Tests and two of the three real-Fineract E2E shards have been failing on `main`, and not because of anything that merged. They fail on the clock. Every run started before 17:45 UTC is green; both runs started after 18:26 UTC are red, with the same four jobs: 19:07Z apache#817 merge 4 failures 18:26Z apache#819 merge 4 failures 15:02Z all green 14:23Z apache#816 merge all green 12:46Z all green `Asia/Kolkata` is UTC+5:30, so its date turns over at 18:30 UTC. `AppConfig.tenantTimezone` defaults to it, which is the zone the dialog resolves today in — deliberately, because the platform validates `activate` against a date it stamped in the tenant's zone, not the browser's. Two cases here asserted `component.actionDate()` against `toIsoDate(new Date())`, the browser's today. For five and a half hours each evening those are different days, the component answers the tenant's and the assertion wants the browser's, and the job goes red: AssertionError: expected '2026-10-20' to be '2026-10-21' The spec's own header claimed these cases "hold whatever time it is". They now do, by pinning the platform's clock through `recordServerTime` instead of reading the real one. It is pinned inside the window that was breaking them — 20:00Z on the 15th, already the 16th in `Asia/Kolkata` — so the cases assert the tenant's date against a browser that would say the 15th, which is the disagreement they exist for. Verified green at `Asia/Kolkata`, `UTC`, `America/New_York`, `Etc/GMT-10`, `Etc/GMT+12` and `Pacific/Kiritimati`, and failing 4 of 5 when the component is reverted to the browser clock — before this it caught that regression only between 18:30 and midnight UTC. The relative dates move with it: `offsetFromToday` stepped the browser's clock with local getters, so the floor cases drifted on the same boundary. They are ISO arithmetic from the pinned date now, anchored at midday UTC so no offset can shift them. The two E2E shards are the same disagreement — shard 1 holds `group-membership.spec.ts` and shard 3 `tenant-date-defaults-backend.spec.ts`, both written for this window — but they are not addressed here. Reproducing them needs a live platform inside the window, and a guess at an E2E spec is not worth making.

Aman-Mittal added 2 commits October 19, 2026 18:45

Aman-Mittal force-pushed the feat/user-password-and-access-lifecycle branch from 9b356d9 to 41201a0 Compare October 19, 2026 13:27

Aman-Mittal merged commit 741b307 into apache:main Oct 19, 2026
31 checks passed

Aman-Mittal mentioned this pull request Oct 20, 2026

Fix main: the French catalogue, the evening clock flake, and the router advisory #825

Merged

Navigation Menu

Repository navigation

Security: stop echoing rejected passwords, check the policy before sending, and let access be withdrawn - #817

Security: stop echoing rejected passwords, check the policy before sending, and let access be withdrawn#817
Aman-Mittal merged 2 commits into
apache:mainfrom
Aman-Mittal:feat/user-password-and-access-lifecycle

Aman-Mittal commented Oct 19, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 19, 2026

Uh oh!

github-actions Bot commented Oct 19, 2026

Uh oh!

Uh oh!

github-actions Bot commented Oct 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

Aman-Mittal commented Oct 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

1. A rejected password was printed in the toast (#752)

2. The password is now checked before it is sent (#753)

3. Access can be withdrawn (#755)

Checks

Note on #492

Uh oh!

github-actions Bot commented Oct 19, 2026

E2E — mocked backend

🎭 E2E Tests

By spec file

Uh oh!

github-actions Bot commented Oct 19, 2026

E2E — real Fineract

🎭 E2E Tests

⚠️ Passed on retry

By spec file

Uh oh!

Uh oh!

github-actions Bot commented Oct 19, 2026

🔄 What this change talks to

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Aman-Mittal commented Oct 19, 2026 •

edited

Loading