Authentication & User Management

Steps

1. Navigate to the login page
2. Enter valid email and password
3. Click "Sign In"

Verify (6 checks)

• Login page loads without errors
• Form accepts email and password input
• Successful login redirects to dashboard
• User name/avatar appears in the top-right header
• Invalid credentials show an error message (not a 500 error)
• Empty fields show validation feedback

Steps

1. Navigate to the login page
2. Click "Sign in with Google"
3. Complete Google authentication flow

Verify (5 checks)

• Google sign-in button is visible
• Clicking redirects to Google's auth page
• After Google auth, user is redirected back to the dashboard
• User name and email from Google are displayed correctly
• Subsequent logins skip the Google selection screen (if already authorized)

Steps

1. Click the user avatar/icon in the top-right corner
2. Observe the dropdown menu
3. Click "Logout"

Verify (6 checks)

• User avatar displays correct initials or profile image
• Dropdown shows user name and email
• Dropdown shows "Settings" option
• Dropdown shows "Logout" button (red text with icon)
• Clicking "Logout" redirects to login page
• After logout, navigating to dashboard redirects to login (routes are protected)

Steps

1. While logged out, navigate directly to the dashboard URL
2. Try accessing /view/[any-id], /settings, /admin

Verify (5 checks)

• Dashboard URL redirects to login
• Document viewer URL redirects to login
• Settings URL redirects to login
• Admin URL redirects to login (or shows access denied for non-admins)
• No flash of protected content before redirect