keycloak · edewit · Jul 17, 2026 · Jul 28, 2026 · Aug 3, 2026 · Aug 3, 2026
@@ -51,6 +51,16 @@ backend: {
 ```
 to the `i18next` config object.
 
+## Playwright Test Environment
+
+The Playwright tests under `js/apps/admin-ui/test` accept these environment variables:
+
+- `KEYCLOAK_SERVER_URL` (default: `http://localhost:8080`)
+- `KEYCLOAK_ADMIN_USER` and `KEYCLOAK_ADMIN_PASSWORD` (default: `admin` / `admin`)
+- `KEYCLOAK_REQUIRE_OID4VCI=true` to fail OID4VCI tests when the server feature is missing instead of skipping them
+
+These test-only variables are different from server bootstrap variables such as `KC_BOOTSTRAP_ADMIN_USERNAME` and `KC_BOOTSTRAP_ADMIN_PASSWORD`.
+
 ## Building
 
 To build a library instead of an app you need to add the `LIB=true` environment variable.

@@ -1,4 +1,4 @@
-import { type Page, expect } from "@playwright/test";
+import { type Locator, type Page, expect } from "@playwright/test";
 import { selectItem } from "../utils/form.ts";
 import { confirmModal } from "../utils/modal.ts";
 
@@ -145,3 +145,157 @@ export async function fillCreateForm(
   await selectItem(page, page.getByLabel("Flow type"), type);
   await page.getByTestId("create").click();
 }
+
+export async function dragExecutionAboveExecution(
+  page: Page,
+  sourceExecution: string,
+  targetExecution: string,
+) {
+  const treeGrid = page.getByRole("treegrid", { name: "Flows" });
+  const sourceRow = treeGrid
+    .getByRole("row")
+    .filter({ hasText: sourceExecution })
+    .first();
+  const targetRow = treeGrid
+    .getByRole("row")
+    .filter({ hasText: targetExecution })
+    .first();
+  const getDragHandle = (row: Locator) =>
+    row.getByRole("button", { name: /draggable row/i }).first();
+  const sourceHandle = getDragHandle(sourceRow);
+  const targetHandle = getDragHandle(targetRow);
+
+  await expect(sourceRow).toBeVisible({ timeout: 5_000 });
+  await expect(targetRow).toBeVisible({ timeout: 5_000 });
+  await expect(sourceHandle).toBeVisible({ timeout: 5_000 });
+  await expect(targetHandle).toBeVisible({ timeout: 5_000 });
+  await sourceHandle.scrollIntoViewIfNeeded();
+  await targetHandle.scrollIntoViewIfNeeded();
+
+  const getRowOrder = async () => {
+    const rows = await treeGrid.getByRole("row").allInnerTexts();
+    return {
+      sourceIndex: rows.findIndex((row) => row.includes(sourceExecution)),
+      targetIndex: rows.findIndex((row) => row.includes(targetExecution)),
+    };
+  };
+
+  const initialOrder = await getRowOrder();
+  // Guard against upstream flow-order changes that could turn this test into a no-op.
+  expect(
+    initialOrder.sourceIndex,
+    `Expected "${sourceExecution}" to start below "${targetExecution}" so drag can be verified`,
+  ).toBeGreaterThan(initialOrder.targetIndex);
+
+  const hasMoved = async () => {
+    const { sourceIndex, targetIndex } = await getRowOrder();
+    return (
+      sourceIndex !== -1 &&
+      targetIndex !== -1 &&
+      sourceIndex < targetIndex &&
+      sourceIndex !== initialOrder.sourceIndex
+    );
+  };
+
+  const waitForMove = async () => {
+    try {
+      await expect.poll(hasMoved, { timeout: 4_000 }).toBe(true);
+      return true;
+    } catch {
+      return false;
+    }
+  };
+
+  let moved = false;
+
+  // Legacy pointer drag path works more reliably with some CI/browser combos.
+  const sourceText = sourceRow.getByText(sourceExecution).first();
+  const targetText = targetRow.getByText(targetExecution).first();
+  const sourceTextBox = await sourceText.boundingBox();
+  const targetTextBox = await targetText.boundingBox();
+  if (sourceTextBox && targetTextBox) {
+    await page.mouse.move(
+      sourceTextBox.x + sourceTextBox.width / 2,
+      sourceTextBox.y + sourceTextBox.height / 2,
+    );
+    await page.mouse.down();
+    await page.mouse.move(
+      targetTextBox.x + targetTextBox.width / 2,
+      targetTextBox.y + targetTextBox.height / 2,
+      { steps: 20 },
+    );
+    await page.mouse.up();
+    moved = await waitForMove();
+  }
+
+  try {
+    if (!moved) {
+      await sourceHandle.dragTo(targetHandle, { timeout: 3_000 });
+      moved = await waitForMove();
+    }
+  } catch {
+    // Fall back to pointer/keyboard paths when dnd-kit does not trigger drag events in CI.
+  }
+
+  if (!moved) {
+    const sourceBox =
+      (await sourceHandle.boundingBox()) ?? (await sourceRow.boundingBox());
+    const targetBox =
+      (await targetHandle.boundingBox()) ?? (await targetRow.boundingBox());
+
+    if (sourceBox && targetBox) {
+      await page.mouse.move(
+        sourceBox.x + sourceBox.width / 2,
+        sourceBox.y + sourceBox.height / 2,
+      );
+      await page.mouse.down();
+      await page.mouse.move(
+        targetBox.x + targetBox.width / 2,
+        targetBox.y + Math.min(8, Math.max(2, targetBox.height / 4)),
+        { steps: 20 },
+      );
+      await page.mouse.up();
+      moved = await waitForMove();
+    }
+  }
+
+  if (!moved) {
+    try {
+      await sourceRow.dragTo(targetRow, { timeout: 3_000 });
+      moved = await waitForMove();
+    } catch {
+      // Keep trying keyboard fallback below.
+    }
+  }
+
+  if (!moved) {
+    try {
+      await sourceHandle.focus({ timeout: 2_000 });
+      await page.keyboard.press("Space");
+      const rows = await treeGrid.getByRole("row").allInnerTexts();
+      const sourceIndex = rows.findIndex((row) =>
+        row.includes(sourceExecution),
+      );
+      const targetIndex = rows.findIndex((row) =>
+        row.includes(targetExecution),
+      );
+      const steps =
+        sourceIndex !== -1 && targetIndex !== -1 && sourceIndex > targetIndex
+          ? sourceIndex - targetIndex
+          : 1;
+      for (let step = 0; step < steps; step++) {
+        await page.keyboard.press("ArrowUp");
+      }
+      await page.keyboard.press("Space");
+      moved = await waitForMove();
+    } catch {
+      // Keep "moved" false and let the caller assert/fail with context.
+    }
+  }
+
+  if (!moved) {
+    moved = await waitForMove();
+  }
+
+  return moved;
+}
@@ -29,6 +29,7 @@ import {
   clickDefaultSwitchPolicy,
   clickDeleteRow,
   clickSwitchPolicy,
+  dragExecutionAboveExecution,
   fillBindFlowModal,
   fillCreateForm,
   fillDuplicateFlowModal,
@@ -187,29 +188,21 @@ test.describe("Authentication flow details", () => {
   });
 
   test("drags and drops execution", async ({ page }) => {
+    test.setTimeout(60_000);
     await using testBed = await createTestBed();
 
     await adminClient.copyFlow("browser", flowName, testBed.realm);
     await login(page, { to: toAuthentication({ realm: testBed.realm }) });
 
     await clickTableRowItem(page, flowName);
-
-    const sourceBox = await page
-      .getByText("Identity Provider Redirector")
-      .boundingBox();
-    const targetBox = await page.getByText("Kerberos").boundingBox();
-
-    await page.mouse.move(
-      sourceBox!.x + sourceBox!.width / 2,
-      sourceBox!.y + sourceBox!.height / 2,
+    const moved = await dragExecutionAboveExecution(
+      page,
+      "Identity Provider Redirector",
+      "Kerberos",
     );
-    await page.mouse.down();
-    await page.mouse.move(
-      targetBox!.x + targetBox!.width / 2,
-      targetBox!.y + targetBox!.height / 2,
-      { steps: 10 },
+    expect(moved, "Expected drag interaction to reorder execution rows").toBe(
+      true,
     );
-    await page.mouse.up();
 
     await assertNotificationMessage(page, "Flow successfully updated");
   });