auth.md

QA: Authentication — Claude Agent SDK (Python)

Prerequisites

• Demo is deployed and accessible
• Agent backend is healthy (check /api/health)
• ANTHROPIC_API_KEY is set on the deployment

Test Steps

1. Basic Functionality (happy path — start signed in)

• Navigate to /demos/auth
• Verify the auth banner renders with data-authenticated="true"
• Verify the status reads "✓ Signed in as demo user"
• Verify the "Sign out" button is visible
• Send "Hello" and verify Claude responds

2. Sign-out path

• Click "Sign out"
• Verify the banner flips to amber with data-authenticated="false"
• Verify the button now reads "Sign in"
• Attempt to send a message
• Verify the error banner (data-testid="auth-demo-error") renders with "401 Unauthorized" text
• Verify no white-screen and no uncaught React errors (the ChatErrorBoundary catches any render-time crash from chat internals in the unauth state and renders data-testid="auth-demo-chat-boundary")

3. Sign-in recovery

• Click "Sign in"
• Verify the banner flips back to green
• Verify the error banner clears
• Send a message and verify Claude replies again

4. Error Handling

• No console errors during normal usage.

Expected Results

• Runtime rejects un-bearer'd requests with HTTP 401.
• Page never white-screens, even during auth transitions.