docs: add danger note to auth guide (#35409)

This commit is contained in:
Ross Wollman 2025-04-14 15:04:22 -04:00 committed by GitHub
parent 00336e98ed
commit ac2d9e62da
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 5 additions and 0 deletions

View File

@ -13,6 +13,11 @@ Regardless of the authentication strategy you choose, you are likely to store au
We recommend to create `playwright/.auth` directory and add it to your `.gitignore`. Your authentication routine will produce authenticated browser state and save it to a file in this `playwright/.auth` directory. Later on, tests will reuse this state and start already authenticated.
:::danger
The browser state file may contain sensitive cookies and headers that could be used to impersonate you or your test account.
We strongly discourage checking them into private or public repositories.
:::
```bash tab=bash-bash
mkdir -p playwright/.auth
echo $'\nplaywright/.auth' >> .gitignore