test(mosaic): clear authentication cookies when test iframes unload

Author: austincalvelage

.github/workflows/ci.yml

@@ -426,10 +426,6 @@ jobs:
         run: pnpm turbo build $TURBO_ARGS --filter=@clerk/mosaic...
 
       - name: Run feature tests
-        env:
-          VITEST_BROWSER_DEBUG: 'true'
-          VITEST_PW_DEBUG: '1'
-          DEBUG: 'vitest:browser:gc'
         run: pnpm --filter @clerk/mosaic test:feature
 
       - name: Run browser tests

packages/mosaic/src/__tests__/feature/fake-fapi-isolation.feature.test.tsx

@@ -44,4 +44,17 @@ describe('fake FAPI isolation between tests', () => {
     expect(await clerk.session?.getToken()).toEqual(expect.any(String));
     expect(document.cookie).not.toMatch(/(?:^|; )__session/);
   });
+
+  it('clears authentication cookies when the test iframe leaves the page', async () => {
+    const user = fapiUser({ id: 'user_1' });
+    serveFapi({ client: fapiClient([fapiSession({ id: 'sess_1', user })]) });
+    await renderWithClerk(<div />, { standardBrowser: true });
+    window.dispatchEvent(new Event('focus'));
+    await new Promise(resolve => setTimeout(resolve, 0));
+    expect(document.cookie).toContain('__session=');
+
+    window.dispatchEvent(new PageTransitionEvent('pagehide'));
+
+    expect(document.cookie).toBe('');
+  });
 });

packages/mosaic/vitest.setup.browser.mts

@@ -64,15 +64,21 @@ beforeEach(() => {
   window.focus();
 });
 
+function clearCookies() {
+  for (const cookie of document.cookie.split('; ').filter(Boolean)) {
+    document.cookie = `${cookie.split('=')[0]}=; max-age=0; path=/`;
+  }
+}
+
+window.addEventListener('pagehide', clearCookies);
+
 afterEach(() => {
   cleanup();
   __resetClerkQueryClientForTest();
   for (const channel of [...openChannels]) {
     channel.close();
   }
-  for (const cookie of document.cookie.split('; ').filter(Boolean)) {
-    document.cookie = `${cookie.split('=')[0]}=; max-age=0; path=/`;
-  }
+  clearCookies();
   localStorage.clear();
   sessionStorage.clear();
   worker.resetHandlers();