ci(e2e): add vercel protection bypass for integration tests

Configure Playwright integration tests to bypass Vercel's deployment
protection using the x-vercel-protection-bypass header. This enables
automated tests to access protected Vercel deployments without manual
intervention.

Changes include:
- Add extraHTTPHeaders to Playwright config with bypass secret
- Whitelist VERCEL_AUTOMATION_BYPASS_SECRET in turbo.json for all
  integration test tasks
- Pass bypass secret from GitHub secrets in CI workflow

Author: nikosdouvlis

.github/workflows/ci.yml

@@ -294,58 +294,59 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        test-name: [
-            'generic',
-            'express',
-            'ap-flows',
-            'elements',
-            'localhost',
-            'sessions',
-            'sessions:staging',
-            'handshake',
-            'handshake:staging',
-            'astro',
-            'expo-web',
-            'tanstack-react-start',
-            'vue',
-            'nuxt',
-            'react-router',
-            'custom',
+        test-name:
+          [
+            "generic",
+            "express",
+            "ap-flows",
+            "elements",
+            "localhost",
+            "sessions",
+            "sessions:staging",
+            "handshake",
+            "handshake:staging",
+            "astro",
+            "expo-web",
+            "tanstack-react-start",
+            "vue",
+            "nuxt",
+            "react-router",
+            "custom",
           ]
         test-project: ["chrome"]
         include:
-          - test-name: 'billing'
-            test-project: 'chrome'
-            clerk-use-rq: 'false'
-          - test-name: 'billing'
-            test-project: 'chrome'
-            clerk-use-rq: 'true'
-          - test-name: 'machine'
-            test-project: 'chrome'
-            clerk-use-rq: 'false'
-          - test-name: 'machine'
-            test-project: 'chrome'
-            clerk-use-rq: 'true'
-          - test-name: 'nextjs'
-            test-project: 'chrome'
-            next-version: '14'
-          - test-name: 'nextjs'
-            test-project: 'chrome'
-            next-version: '15'
-            clerk-use-rq: 'false'
-          - test-name: 'nextjs'
-            test-project: 'chrome'
-            next-version: '15'
-            clerk-use-rq: 'true'
-          - test-name: 'nextjs'
-            test-project: 'chrome'
-            next-version: '16'
-          - test-name: 'quickstart'
-            test-project: 'chrome'
-            next-version: '15'
-          - test-name: 'quickstart'
-            test-project: 'chrome'
-            next-version: '16'
+          - test-name: "billing"
+            test-project: "chrome"
+            clerk-use-rq: "false"
+          - test-name: "billing"
+            test-project: "chrome"
+            clerk-use-rq: "true"
+          - test-name: "machine"
+            test-project: "chrome"
+            clerk-use-rq: "false"
+          - test-name: "machine"
+            test-project: "chrome"
+            clerk-use-rq: "true"
+          - test-name: "nextjs"
+            test-project: "chrome"
+            next-version: "14"
+          - test-name: "nextjs"
+            test-project: "chrome"
+            next-version: "15"
+            clerk-use-rq: "false"
+          - test-name: "nextjs"
+            test-project: "chrome"
+            next-version: "15"
+            clerk-use-rq: "true"
+          - test-name: "nextjs"
+            test-project: "chrome"
+            next-version: "16"
+          - test-name: "quickstart"
+            test-project: "chrome"
+            next-version: "15"
+          - test-name: "quickstart"
+            test-project: "chrome"
+            next-version: "16"
 
     steps:
       - name: Checkout Repo
@@ -475,6 +476,7 @@ jobs:
           INTEGRATION_INSTANCE_KEYS: ${{ secrets.INTEGRATION_INSTANCE_KEYS }}
           MAILSAC_API_KEY: ${{ secrets.MAILSAC_API_KEY }}
           NODE_EXTRA_CA_CERTS: ${{ github.workspace }}/integration/certs/rootCA.pem
+          VERCEL_AUTOMATION_BYPASS_SECRET: ${{ secrets.VERCEL_AUTOMATION_BYPASS_SECRET }}
 
       - name: Upload test-results
         if: ${{ cancelled() || failure() }}

integration/tests/next-quickstart-keyless.test.ts

@@ -24,6 +24,13 @@ const mockClaimedInstanceEnvironmentCall = async (page: Page) => {
 
 test.describe('Keyless mode @quickstart', () => {
   test.describe.configure({ mode: 'serial' });
+
+  test.use({
+    extraHTTPHeaders: {
+      'x-vercel-protection-bypass': process.env.VERCEL_AUTOMATION_BYPASS_SECRET || '',
+    },
+  });
+
   let app: Application;
   let dashboardUrl = 'https://dashboard.clerk.com/';
 

integration/tests/react-router/library-mode.test.ts

@@ -7,6 +7,7 @@ import { createTestUtils } from '../../testUtils';
 
 test.describe('Library Mode basic tests for @react-router', () => {
   test.describe.configure({ mode: 'parallel' });
+
   let app: Application;
   let fakeUser: FakeUser;
   let fakeOrganization: FakeOrganization;

integration/tests/react-router/pre-middleware.test.ts

@@ -7,6 +7,7 @@ import { createTestUtils } from '../../testUtils';
 
 test.describe('basic tests for @react-router without middleware', () => {
   test.describe.configure({ mode: 'parallel' });
+
   let app: Application;
   let fakeUser: FakeUser;
 

turbo.json

@@ -32,7 +32,13 @@
     "VERCEL",
     "VITE_CLERK_*"
   ],
-  "globalPassThroughEnv": ["AWS_SECRET_KEY", "GITHUB_TOKEN", "ACTIONS_RUNNER_DEBUG", "ACTIONS_STEP_DEBUG"],
+  "globalPassThroughEnv": [
+    "AWS_SECRET_KEY",
+    "GITHUB_TOKEN",
+    "ACTIONS_RUNNER_DEBUG",
+    "ACTIONS_STEP_DEBUG",
+    "VERCEL_AUTOMATION_BYPASS_SECRET"
+  ],
   "tasks": {
     "build": {
       "dependsOn": ["^build"],
@@ -236,7 +242,7 @@
     },
     "//#test:integration:quickstart": {
       "dependsOn": ["@clerk/testing#build", "@clerk/clerk-js#build", "@clerk/backend#build", "@clerk/nextjs#build"],
-      "env": ["CLEANUP", "DEBUG", "E2E_*", "INTEGRATION_INSTANCE_KEYS"],
+      "env": ["CLEANUP", "DEBUG", "E2E_*", "INTEGRATION_INSTANCE_KEYS", "VERCEL_AUTOMATION_BYPASS_SECRET"],
       "inputs": ["integration/**"],
       "outputLogs": "new-only"
     },