Writing Test Cases
Writing Test Cases for User Authentication Flows
This prompt helps engineering and QA teams create detailed test cases to validate user authentication flows, such as login, signup, and password reset. It focuses on ensuring secure, reliable, and user-friendly functionality across all scenarios.
Responsible:
Engineering/IT
Accountable, Informed or Consulted:
Engineering, QA
THE PREP
Creating effective prompts involves tailoring them with detailed, relevant information and uploading documents that provide the best context. Prompts act as a framework to guide the response, but specificity and customization ensure the most accurate and helpful results. Use these prep tips to get the most out of this prompt:
Collect detailed documentation of authentication workflows, including edge cases.
Identify security requirements, such as password policies and MFA protocols.
Set up environments for testing both frontend and backend components of authentication.
THE PROMPT
Help write comprehensive test cases for validating the user authentication flow in [specific software application]. Focus on:
Login Validation: Recommending test cases, such as, ‘Verify successful login with valid credentials, handling invalid inputs (e.g., incorrect password), and account lockouts after repeated failed attempts.’
Signup Functionality: Suggesting scenarios, like, ‘Test new user registration with valid and invalid data, including checking for duplicate email prevention and proper email verification workflows.’
Password Management: Including recovery and security checks, such as, ‘Validate password reset flows by testing email triggers, secure token expiration, and the strength of new passwords.’
Multi-Factor Authentication (MFA): Proposing tests, like, ‘Check that MFA setup and validation processes work correctly, including handling edge cases such as invalid or expired codes.’
Session Management: Recommending session tests, such as, ‘Ensure proper session handling for login, logout, session expiration, and attempts to reuse expired tokens.’
Provide a complete set of test cases that ensures all aspects of user authentication are secure, functional, and user-friendly. If additional details about authentication mechanisms or user roles are needed, ask clarifying questions to refine the test cases.
Bonus Add-On Prompts
Propose strategies for automating authentication test cases using tools like Selenium or Playwright.
Suggest methods for testing authentication flows across different devices and browsers.
Highlight techniques for validating compliance with security standards, such as OAuth or OpenID.
Use AI responsibly by verifying its outputs, as it may occasionally generate inaccurate or incomplete information. Treat AI as a tool to support your decision-making, ensuring human oversight and professional judgment for critical or sensitive use cases.
SUGGESTIONS TO IMPROVE
Focus on specific authentication methods, such as biometric or social logins.
Include tips for testing authentication flows in localized environments (e.g., multi-language support).
Propose ways to integrate authentication test cases into CI/CD pipelines for continuous validation.
Highlight tools like Postman or Burp Suite for testing API-based authentication endpoints.
Add suggestions for validating access control rules associated with authentication flows.
WHEN TO USE
During feature development or updates to authentication systems.
When testing critical user flows for login, signup, or password reset.
To ensure compliance with security standards or regulations like GDPR or CCPA.
WHEN NOT TO USE
For simple, unsecured systems without user authentication.
If authentication flow designs are incomplete or undefined.