Check the live sign-in pages after each deploy (#4)
Claude-Session: https://claude.ai/code/session_01AizKXSsengXZRegJxRATkL Co-authored-by: Claude <noreply@anthropic.com>
Canberk Demirci authored · GitHub committed signed1 parent 7146dbecommit 08ae34841f72ce6672e167bec6a304a098c0f318Browse files
1 file changed+10−0
modified.github/workflows/deploy.yml+10−0View file
| @@ -65,3 +65,13 @@ | ||
| 65 | 65 | sleep 10 |
| 66 | 66 | done |
| 67 | 67 | echo "::error::https://diffinery.com/healthz did not return 200 (last: $code). Check that the diffinery.com DNS record is proxied (orange cloud)."; exit 1 |
| 68 | + | |
| 69 | + - name: Check sign-in pages | |
| 70 | + run: | | |
| 71 | + set -u | |
| 72 | + page=$(curl -sS https://diffinery.com/login) | |
| 73 | + grep -q "Sign in with a passkey" <<<"$page" || { echo "::error::/login is not the Diffinery sign-in page"; exit 1; } | |
| 74 | + echo "/login serves the passkey sign-in page" | |
| 75 | + loc=$(curl -sS -o /dev/null -w '%{http_code} %{redirect_url}' https://diffinery.com/auth/access) | |
| 76 | + echo "/auth/access -> $loc" | |
| 77 | + [[ "$loc" == 302\ https://*.cloudflareaccess.com/* ]] || echo "::warning::/auth/access is not behind Cloudflare Access yet, so email recovery and first admin sign-in will not work" |