snapshot of https://github.com/twentyhq/twenty.git (main, 2026-09-17; blobs > 131072B omitted)

packages/twenty-e2e-testing/lib/requests/backend.ts

@@ -0,0 +1,9 @@
+export const backendGraphQLUrl = new URL(
+  '/graphql',
+  process.env.BACKEND_BASE_URL,
+).toString();
+
+// Mirrors the baseURL default in playwright.config.ts.
+export const frontendOrigin = new URL(
+  process.env.FRONTEND_BASE_URL || 'http://localhost:3001',
+).origin;

packages/twenty-e2e-testing/lib/requests/create-workflow.ts

@@ -0,0 +1,27 @@
+import { type Page } from '@playwright/test';
+import { postBackendGraphQL } from './post-backend-graphql';
+
+export const createWorkflow = async ({
+  page,
+  workflowId,
+  workflowName,
+}: {
+  page: Page;
+  workflowId: string;
+  workflowName: string;
+}) => {
+  return postBackendGraphQL({
+    page,
+    data: {
+      operationName: 'CreateOneWorkflow',
+      query:
+        'mutation CreateOneWorkflow($input: WorkflowCreateInput!) {  createWorkflow(data: $input) { __typename id } }',
+      variables: {
+        input: {
+          id: workflowId,
+          name: workflowName,
+        },
+      },
+    },
+  });
+};

packages/twenty-e2e-testing/lib/requests/delete-workflow.ts

@@ -0,0 +1,20 @@
+import { type Page } from '@playwright/test';
+import { postBackendGraphQL } from './post-backend-graphql';
+
+export const deleteWorkflow = async ({
+  page,
+  workflowId,
+}: {
+  page: Page;
+  workflowId: string;
+}) => {
+  return postBackendGraphQL({
+    page,
+    data: {
+      operationName: 'DeleteOneWorkflow',
+      variables: { idToDelete: workflowId },
+      query:
+        'mutation DeleteOneWorkflow($idToDelete: UUID!) {\n  deleteWorkflow(id: $idToDelete) {\n    __typename\n    deletedAt\n    id\n  }\n}',
+    },
+  });
+};

packages/twenty-e2e-testing/lib/requests/destroy-workflow.ts

@@ -0,0 +1,20 @@
+import { type Page } from '@playwright/test';
+import { postBackendGraphQL } from './post-backend-graphql';
+
+export const destroyWorkflow = async ({
+  page,
+  workflowId,
+}: {
+  page: Page;
+  workflowId: string;
+}) => {
+  return postBackendGraphQL({
+    page,
+    data: {
+      operationName: 'DestroyOneWorkflow',
+      variables: { idToDestroy: workflowId },
+      query:
+        'mutation DestroyOneWorkflow($idToDestroy: UUID!) {\n  destroyWorkflow(id: $idToDestroy) {\n    id\n    __typename\n  }\n}',
+    },
+  });
+};

packages/twenty-e2e-testing/lib/requests/post-backend-graphql.ts

@@ -0,0 +1,20 @@
+import { type APIResponse, type Page } from '@playwright/test';
+import { backendGraphQLUrl, frontendOrigin } from './backend';
+
+// Authenticates by session cookie: page.request shares the browser context's
+// cookie jar, which is the only place an httpOnly session cookie exists.
+// CookieSessionCsrfMiddleware fails closed on a missing Origin for a
+// cookie-authenticated write, and page.request sends none on its own.
+export const postBackendGraphQL = ({
+  page,
+  data,
+}: {
+  page: Page;
+  data: Record<string, unknown>;
+}): Promise<APIResponse> =>
+  page.request.post(backendGraphQLUrl, {
+    headers: {
+      Origin: frontendOrigin,
+    },
+    data,
+  });