From fb353423d85a5bc9fbd43add8dcc35435325a83a Mon Sep 17 00:00:00 2001
From: Yuneng Jiang <yuneng@berri.ai>
Date: Tue, 4 Aug 2026 17:38:38 -0700
Subject: [PATCH] test(e2e): self-seed the ui suite's password-login users in
 global setup

---
 tests/e2e/ui/fixtures/users.ts |  8 +++++++-
 tests/e2e/ui/globalSetup.ts    | 20 ++++++++++++++++++++
 2 files changed, 27 insertions(+), 1 deletion(-)

diff --git a/tests/e2e/ui/fixtures/users.ts b/tests/e2e/ui/fixtures/users.ts
index 731234b5ea9..79ee237f334 100644
--- a/tests/e2e/ui/fixtures/users.ts
+++ b/tests/e2e/ui/fixtures/users.ts
@@ -14,7 +14,9 @@ export enum Role {
   TeamAdmin = "team_admin",
 }
 
-export const users: Record<Role, { email: string; password: string }> = {
+export type SeedApiRole = "proxy_admin_viewer" | "internal_user" | "internal_user_viewer";
+
+export const users: Record<Role, { email: string; password: string; seedApiRole?: SeedApiRole }> = {
   [Role.ProxyAdmin]: {
     email: "admin",
     password: process.env.LITELLM_MASTER_KEY || "sk-1234",
@@ -22,18 +24,22 @@ export const users: Record<Role, { email: string; password: string }> = {
   [Role.ProxyAdminViewer]: {
     email: "adminviewer@test.local",
     password: "test",
+    seedApiRole: "proxy_admin_viewer",
   },
   [Role.InternalUser]: {
     email: "internal@test.local",
     password: "test",
+    seedApiRole: "internal_user",
   },
   [Role.InternalUserViewer]: {
     email: "viewer@test.local",
     password: "test",
+    seedApiRole: "internal_user_viewer",
   },
   [Role.TeamAdmin]: {
     email: "teamadmin@test.local",
     password: "test",
+    seedApiRole: "internal_user",
   },
 };
 
diff --git a/tests/e2e/ui/globalSetup.ts b/tests/e2e/ui/globalSetup.ts
index 6068a51c88e..e7d1655380d 100644
--- a/tests/e2e/ui/globalSetup.ts
+++ b/tests/e2e/ui/globalSetup.ts
@@ -29,6 +29,26 @@ async function globalSetup() {
   if (!settingsRes.ok()) {
     throw new Error(`Enabling enable_projects_ui failed (${settingsRes.status()}): ${await settingsRes.text()}`);
   }
+
+  for (const { email, password, seedApiRole } of Object.values(users)) {
+    if (!seedApiRole) {
+      continue;
+    }
+    const createRes = await api.post(`${UI_BASE_URL}${rootPath}/user/new`, {
+      headers: { Authorization: `Bearer ${masterKey}` },
+      data: { user_email: email, user_role: seedApiRole, auto_create_key: false },
+    });
+    if (!createRes.ok() && createRes.status() !== 409) {
+      throw new Error(`Seeding user ${email} failed (${createRes.status()}): ${await createRes.text()}`);
+    }
+    const passwordRes = await api.post(`${UI_BASE_URL}${rootPath}/user/update`, {
+      headers: { Authorization: `Bearer ${masterKey}` },
+      data: { user_email: email, password },
+    });
+    if (!passwordRes.ok()) {
+      throw new Error(`Setting password for ${email} failed (${passwordRes.status()}): ${await passwordRes.text()}`);
+    }
+  }
   await api.dispose();
 
   for (const role of Object.values(Role)) {