19 of the 22 integration test files never point APIFY_UPSTREAM_API_BASE_URL anywhere, so every user creation in them sends a real request to https://api.apify.com/v2/users/me. Only api-fallback.test.ts, identity-resolution.test.ts and settings-console.test.ts redirect it.
This is invisible in a sandbox with blocked egress — the probe fails and the runtime falls back to local identity, so the suite passes either way. On a developer's own machine it is real, unthrottled outbound traffic to Apify's production API on every test run.
Pre-existing; predates the upstream-fallback work (#20). Found while reviewing that change.
A default in test/integration/helpers/test-server.ts pointing the variable at a dead address unless a test sets it otherwise would cover every file at once.
19 of the 22 integration test files never point
APIFY_UPSTREAM_API_BASE_URLanywhere, so every user creation in them sends a real request tohttps://api.apify.com/v2/users/me. Onlyapi-fallback.test.ts,identity-resolution.test.tsandsettings-console.test.tsredirect it.This is invisible in a sandbox with blocked egress — the probe fails and the runtime falls back to local identity, so the suite passes either way. On a developer's own machine it is real, unthrottled outbound traffic to Apify's production API on every test run.
Pre-existing; predates the upstream-fallback work (#20). Found while reviewing that change.
A default in
test/integration/helpers/test-server.tspointing the variable at a dead address unless a test sets it otherwise would cover every file at once.