| name | console |
|---|---|
| description | Navigate and interact with the Thunder Console UI. Use when exploring the Thunder admin console, testing UI changes, creating users/applications/roles, or debugging the frontend. |
| allowed-tools | Bash(playwright-cli:*) Bash(npx:*) |
Before running any commands, determine the console base URL. Do NOT hardcode a URL — resolve it from project configuration:
- Check
deployment.yamlatbackend/cmd/server/repository/conf/deployment.yamlfor theserver.hostnameandserver.port. If the backend is serving the console (production mode), the URL ishttps://{hostname}:{port}/console. - Check
vite.config.tsatfrontend/apps/console/vite.config.tsfor the development serverPORT(default5191) andHOST(defaultlocalhost). If the frontend development server is running separately, the URL ishttps://{HOST}:{PORT}/console. - Check environment variables:
PORT,HOST, orBASE_URLmay override the defaults. - If unable to resolve, ask the user for the Thunder Console URL.
Use the resolved URL as {CONSOLE_URL} in all commands below (e.g., {CONSOLE_URL}).
# Open Console (redirects to sign-in gate)
playwright-cli open {CONSOLE_URL} -s=thunder
# After authenticating (see below), navigate directly
playwright-cli goto {CONSOLE_URL}/users -s=thunder
# Snapshot the page to see element refs
playwright-cli snapshot -s=thunder
# Interact with elements using refs from snapshot
playwright-cli click e15 -s=thunder
# Take a screenshot
playwright-cli screenshot -s=thunder
# Close the browser
playwright-cli close -s=thunderIf playwright-cli is not installed:
npm install -g @playwright/cli@latestAll commands use the named session -s=thunder so the browser persists across commands.
Thunder Console requires authentication. The sign-in form is dynamically rendered by the Asgardeo SDK, so always use snapshot to get element refs before interacting.
Default credentials: admin / admin
# 0. Accept self-signed certs first (see Troubleshooting for details)
# Open blank session, navigate to each origin, click through cert warnings
playwright-cli open -s=thunder
# Accept backend cert, then console cert, then gate cert (see Troubleshooting)
# 1. Navigate to the console (auto-redirects to /gate/signin)
playwright-cli goto {CONSOLE_URL} -s=thunder
# 2. Snapshot to see the login form elements
playwright-cli snapshot -s=thunder
# 3. Fill username (use the ref from snapshot for the username input)
playwright-cli fill <username-ref> "admin" -s=thunder
# 4. Fill password (use the ref from snapshot for the password input)
playwright-cli fill <password-ref> "admin" -s=thunder
# 5. Click Sign In (use the ref from snapshot for the submit button)
playwright-cli click <submit-ref> -s=thunder
# 6. Verify redirect to console home
playwright-cli snapshot -s=thunder
# 7. Save auth state for reuse
playwright-cli state-save thunder-auth -s=thunderplaywright-cli open -s=thunder
playwright-cli state-load thunder-auth -s=thunder
playwright-cli goto {CONSOLE_URL} -s=thunderThe Thunder Console base path is /console. Append routes below to the resolved {CONSOLE_URL}. The sidebar is organized into categories.
| Category | Page | Path |
|---|---|---|
| - | Home | /console/home |
| Resources | Applications | /console/applications |
| Identities | Users | /console/users |
| Identities | Groups | /console/groups |
| Identities | Roles | /console/roles |
| Identities | User Types | /console/user-types |
| Configure | Organization Units | /console/organization-units |
| Configure | Flows | /console/flows |
| Configure | Integrations | /console/integrations |
| Customize | Design | /console/design |
| Customize | Translations | /console/translations |
| Resource | Path |
|---|---|
| Application | /console/applications/create |
| User | /console/users/create |
| Invite User | /console/users/invite |
| Group | /console/groups/create |
| Role | /console/roles/create |
| User Type | /console/user-types/create |
| Organization Unit | /console/organization-units/create |
| Theme | /console/design/themes/create |
| Translation | /console/translations/create |
| Resource | Path |
|---|---|
| Application | /console/applications/:applicationId |
| User | /console/users/:userId |
| Group | /console/groups/:groupId |
| Role | /console/roles/:roleId |
| User Type | /console/user-types/:id |
| Organization Unit | /console/organization-units/:id |
| Theme Builder | /console/design/themes/:themeId |
| Layout Builder | /console/design/layouts/:layoutId |
| Login Flow | /console/flows/signin or /console/flows/signin/:flowId |
| Translation | /console/translations/:language |
playwright-cli goto {CONSOLE_URL}/users -s=thunder
playwright-cli snapshot -s=thunder# Snapshot to see sidebar element refs
playwright-cli snapshot -s=thunder
# Click a sidebar item by its ref
playwright-cli click <sidebar-item-ref> -s=thunder# Navigate to users list
playwright-cli goto {CONSOLE_URL}/users -s=thunder
playwright-cli snapshot -s=thunder
# Click the "Add User" or create button
playwright-cli click <create-button-ref> -s=thunder
playwright-cli snapshot -s=thunder
# Fill the creation form fields using refs from snapshot
playwright-cli fill <field-ref> "value" -s=thunder
# Submit
playwright-cli click <submit-ref> -s=thunder
playwright-cli snapshot -s=thunderplaywright-cli goto {CONSOLE_URL}/users -s=thunder
playwright-cli snapshot -s=thunder
playwright-cli fill <search-input-ref> "john" -s=thunder
playwright-cli snapshot -s=thunderplaywright-cli eval "el => el.getAttribute('data-testid')" <ref> -s=thunder
playwright-cli eval "el => el.textContent" <ref> -s=thunderplaywright-cli screenshot -s=thunder
playwright-cli screenshot --filename=console-users.png -s=thunder-
Redirected to
/gate/signin: Auth expired. Re-authenticate or runplaywright-cli state-load thunder-auth -s=thunder. -
Elements not found in snapshot: Page may still be loading. Wait a moment and run
playwright-cli snapshot -s=thunderagain. -
HTTPS certificate errors: Thunder uses self-signed certificates on multiple origins (gate, console, backend). The browser will block navigation with
ERR_CERT_AUTHORITY_INVALID. To bypass, open a blank session first, then navigate via JSevalto trigger Chrome's interstitial error page, and click through it:# 1. Open a blank browser session playwright-cli open -s=thunder # 2. Navigate to the target URL (triggers cert error page) playwright-cli eval "window.location.assign('{CONSOLE_URL}')" -s=thunder # 3. Click through the cert warning playwright-cli snapshot -s=thunder # find the "Advanced" button ref playwright-cli click <advanced-ref> -s=thunder playwright-cli snapshot -s=thunder # find the "Proceed to localhost (unsafe)" link ref playwright-cli click <proceed-ref> -s=thunder
Important: You must accept certs for each origin the console talks to. The console redirects to the gate for auth, which calls the backend. If the backend cert is not accepted in the same browser session, API calls will silently fail. Resolve the backend port from
deployment.yaml(server.port) and the gate port from the console's runtime config. Accept certs for each origin before proceeding. -
Login form not visible: The Asgardeo SDK renders the form dynamically. Take a snapshot after a brief wait. If you see a loading spinner, snapshot again after a few seconds.
-
Session lost: Run
playwright-cli listto check active sessions. Start a new one withplaywright-cli open -s=thunder.