test(ci): verify hosted SCIM with the production artifact

Author: waleedlatif1

.github/scripts/http-e2e.sh

@@ -33,6 +33,7 @@ realtime_pid=''
 realtime_tag=''
 realtime_log=''
 browsers_pid=''
+local_app_url=''
 # `dev` or `start`; a group sets it before start_app.
 app_server=${E2E_APP_SERVER:-dev}
 
@@ -78,7 +79,8 @@ start_app() {
     status_log="$report_dir/$name-http-status.log"
   fi
   app_tag="$name-$GITHUB_RUN_ID-$GITHUB_RUN_ATTEMPT-$$"
-  export NEXT_PUBLIC_APP_URL="http://127.0.0.1:$port"
+  local_app_url="http://127.0.0.1:$port"
+  export NEXT_PUBLIC_APP_URL="${E2E_APP_PUBLIC_URL:-$local_app_url}"
   export BETTER_AUTH_URL="$NEXT_PUBLIC_APP_URL"
   export DISABLE_TELEMETRY=true NEXT_TELEMETRY_DISABLED=1
   if [ "$app_server" = start ]; then
@@ -96,7 +98,7 @@ start_app() {
       --port "$port" > "$server_log" 2>&1 &
   fi
   server_pid=$!
-  wait_ready "$server_pid" "$NEXT_PUBLIC_APP_URL/api/health" "$label app"
+  wait_ready "$server_pid" "$local_app_url/api/health" "$label app"
 }
 
 # start_realtime <name> <port>: the Socket.IO server the app's browser clients connect to, so pages
@@ -143,12 +145,12 @@ case "$group" in
     export DB_TX_TRIPWIRE=throw
     export NEXT_PUBLIC_CHAT_DISABLED=true
     start_app scim 3017 SCIM record-http-status
-    SCIM_E2E_BASE_URL="$NEXT_PUBLIC_APP_URL" \
+    SCIM_E2E_BASE_URL="$local_app_url" \
     SCIM_E2E_DATABASE_URL="$DATABASE_URL" \
     SCIM_E2E_AUTH_SECRET="$BETTER_AUTH_SECRET" \
     SCIM_E2E_REPORT_PATH="$report_dir/scim-e2e-report.json" \
       bun run test:scim:e2e
-    VERSION_COMPARE_E2E_BASE_URL="$NEXT_PUBLIC_APP_URL" \
+    VERSION_COMPARE_E2E_BASE_URL="$local_app_url" \
     VERSION_COMPARE_E2E_DATABASE_URL="$DATABASE_URL" \
     VERSION_COMPARE_E2E_AUTH_SECRET="$BETTER_AUTH_SECRET" \
     VERSION_COMPARE_E2E_REPORT_PATH="$report_dir/version-compare-http-report.json" \

.github/workflows/checks.yml

@@ -41,6 +41,9 @@ jobs:
       DATABASE_URL: postgresql://postgres:postgres@127.0.0.1:5432/sim_test
       BETTER_AUTH_SECRET: http-e2e-ci-secret-at-least-32-characters
       E2E_APP_SERVER: start
+      E2E_APP_PUBLIC_URL: ${{ matrix.group == 'scim' && 'http://scim-e2e.sim.ai:3017' || '' }}
+      INTERNAL_API_BASE_URL: ${{ matrix.group == 'scim' && 'http://127.0.0.1:3017' || '' }}
+      TRUSTED_ORIGINS: ${{ matrix.group == 'scim' && 'http://127.0.0.1:3017' || '' }}
       PROJECT_FILES_E2E_APP_SERVER: start
       ENCRYPTION_KEY: '0000000000000000000000000000000000000000000000000000000000000000'
 
@@ -88,6 +91,10 @@ jobs:
           cd "$addon_dir"
           bun run install
 
+      - name: Map the hosted SCIM fixture to loopback
+        if: matrix.group == 'scim'
+        run: printf '127.0.0.1 scim-e2e.sim.ai\n' | sudo tee -a /etc/hosts
+
       # No step timeout: the job's bound covers a hang without cutting a slow but healthy suite
       # short of writing its report.
       - name: Run end-to-end suites