neuro-shopify-testing

Mock the ~/shopify.server module with vi.mock so authenticate.admin resolves a mock admin GraphQL client and session. Then call the loader or action directly with a constructed Request object and assert on the JSON response and mock call counts.

Use vi.mock on your shopify.server module and return an object where authenticate.admin resolves to mock admin, session, and cors values. Export the mockAdmin so individual tests can set GraphQL responses per test case.

Build the request body as a JSON string, compute an HMAC-SHA256 digest with your test API secret using Node crypto, and set it in the X-Shopify-Hmac-Sha256 header. Send the request to your webhook action and assert a 200 status, or 401 for invalid signatures.

Yes, by creating a Playwright fixture that signs a JWT session token with jose using your API secret and injects it as an Authorization header. Intercept redirects to the Shopify admin domain and rewrite them to your local base URL.

Wrap your render function in a custom wrapper that provides AppProvider with Polaris locale translations. Export this custom render alongside all Testing Library utilities so every component test has the required Polaris context.

A 401 means HMAC validation failed, usually because the signature was computed over a parsed object instead of the raw body string, or the wrong secret was used. Sign the exact JSON string you send and use the same secret your app reads from the environment.