Bypass Passwordless Login for Automated Tests
Feb 20, 2026
Overview
This article explains if it is possible to use a passwordless flow for most users but bypass the flow for test accounts.
Applies To
Resource Owner Password Grant (ROPG)
Solution
For accounts used to perform tests, a database connection with test users and credentials should be used.
- Configure the automated tests to fetch tokens using the Resource Owner Password Grant (ROPG), which involves one HTTP request to the
/oauth/tokenendpoint. - The remainder of the automated tests can be performed as an authenticated user.
- Imitating the flow of the actual connection type is not necessary (and in some cases is not possible) since all successful auth flows end with the application receiving tokens for the authenticated user.
Related References