test(e2e): Add passkey/WebAuthn e2e tests

[tmilewski]

Description

• Add passkey e2e tests covering registration, sign-in, rename, and removal flows against the Tanstack React Start template
• Uses Chrome DevTools Protocol (CDP) virtual authenticators to simulate WebAuthn hardware without real devices
• Overrides navigator.webdriver to bypass Clerk's bot-detection check that blocks WebAuthn in automated browsers
• Exports/imports CDP credentials across test boundaries to enable separate register and sign-in tests

Checklist

• pnpm test runs as expected.
• pnpm build runs as expected.
• (If applicable) JSDoc comments have been added or updated for any package exports
• (If applicable) Documentation has been updated

Type of change

• 🐛 Bug fix
• 🌟 New feature
• 🔨 Breaking change
• 📖 Refactoring / dependency upgrade / documentation
• other: Test

Summary by CodeRabbit

• New Features
  • Added passkey authentication support, enabling users to register, sign in, rename, and remove passkeys for enhanced account security.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
clerk-js-sandbox	Ready	Preview, Comment	Mar 16, 2026 9:06pm

[changeset-bot]

🦋 Changeset detected

Latest commit: 98381a9

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 0 packages

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[coderabbitai]

📝 Walkthrough

Walkthrough

This pull request introduces passkey authentication support for a TanStack React Start application. Changes include: adding a new changeset file, creating a withPasskeys environment preset in the envs configuration, adding a corresponding long-running app entry for Tanstack React Start with Passkeys, and introducing a comprehensive integration test suite. The test suite covers passkey registration, sign-in via passkey, renaming passkeys, and passkey removal using virtual authenticator simulation.

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'test(e2e): Add passkey/WebAuthn e2e tests' directly matches the primary change—adding end-to-end tests for passkey/WebAuthn functionality. It is clear, specific, and accurately summarizes the main objective.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

📝 Coding Plan

• Generate coding plan for human review comments

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

Tip

You can customize the high-level summary generated by CodeRabbit.

Configure the reviews.high_level_summary_instructions setting to provide custom instructions for generating the high-level summary.

[pkg-pr-new]

Open in StackBlitz

@clerk/agent-toolkit

npm i https://pkg.pr.new/@clerk/agent-toolkit@8090

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@8090

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@8090

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@8090

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@8090

@clerk/dev-cli

npm i https://pkg.pr.new/@clerk/dev-cli@8090

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@8090

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@8090

@clerk/express

npm i https://pkg.pr.new/@clerk/express@8090

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@8090

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@8090

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@8090

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@8090

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@8090

@clerk/react

npm i https://pkg.pr.new/@clerk/react@8090

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@8090

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@8090

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@8090

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@8090

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@8090

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@8090

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@8090

commit: 98381a9

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@integration/presets/envs.ts`:
- Around line 217-221: The code assumes instanceKeys.get('with-passkeys') exists
when building withPasskeys; guard that lookup first (e.g., fetch const keys =
instanceKeys.get('with-passkeys')) and only call .sk/.pk if keys is defined,
otherwise handle the missing case (throw a clear error or skip creating
withPasskeys) so setEnvVariable('private', 'CLERK_SECRET_KEY', ...) and
setEnvVariable('public', 'CLERK_PUBLISHABLE_KEY', ...) never dereference
undefined; update the block that constructs withPasskeys (the base.clone()
chain) to use the guarded keys variable and appropriate fallback or explicit
failure.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: ASSERTIVE

Plan: Pro

Run ID: a08dfd39-1cd4-4a9a-b973-a2baf2b57ee5

📥 Commits

Reviewing files that changed from the base of the PR and between 291733c and 98381a9.

📒 Files selected for processing (4)

• .changeset/three-clowns-travel.md
• integration/presets/envs.ts
• integration/presets/longRunningApps.ts
• integration/tests/tanstack-start/passkeys.test.ts