withGuard & loginAs methods not working in API tests

[CristalT]

I need help testing API responses with an authenticated user. None of my tests work; I cannot make the loginAs client method work.

In my project, I have two guards: customer and admin. Having several route groups under those guards, I can't make the API tests work properly. I'll explain my issue with a simplified example.

Route

router.group(() => {
  router.resource('/cart-items', CartItemController)
}).use(middleware.auth({ guards: ['customer', 'admin'] }))

auth.ts - Guards configuration

import { defineConfig } from '@adonisjs/auth'
import { InferAuthEvents, Authenticators } from '@adonisjs/auth/types'
import { sessionGuard, sessionUserProvider } from '@adonisjs/auth/session'

const authConfig = defineConfig({
  default: 'customer',
  guards: {
    customer: sessionGuard({
      useRememberMeTokens: false,
      provider: sessionUserProvider({
        model: () => import('#models/customer_user'),
      }),
    }),
    admin: sessionGuard({
      useRememberMeTokens: false,
      provider: sessionUserProvider({
        model: () => import('#models/admin_user'),
      }),
    }),
  },
})

export default authConfig

/**
 * Inferring types from the configured auth
 * guards.
 */
declare module '@adonisjs/auth/types' {
  interface Authenticators extends InferAuthenticators<typeof authConfig> {}
}

declare module '@adonisjs/core/types' {
  interface EventsList extends InferAuthEvents<Authenticators> {}
}

tests/bootstrap.ts

export const plugins: Config['plugins'] = [
  assert(),
  apiClient(),
  authApiClient(app),
  pluginAdonisJS(app),
  sessionApiClient(app),
  inertiaApiClient(app),
]
...

My test

test.group('Cart item create', () => {
  test('customer user adds an item to their cart', async ({ client }) => {
    const customer = await CustomerUserFactory.create()
    const product = await ProductFactory.create()
    
    const response = await client
      .post('/cart-items')
      .withGuard('customer')
      .loginAs(customer)
      .form({
        id: product.id,
        quantity: 1,
      })
      
    response.assertCreated()
  })
})

While debugging, I realized that the Auth Middleware cannot perform the authentication and then automatically redirects to the login page, so the response object in the test cannot assert the proper API response (201).

[thetutlage]

Hey, can you share this setup as part of a repo that I can use to reproduce the issue?