[patrickbradley-cog]

Linear: COG-1141

Summary

This is the canonical Testcontainers MySQL harness: with it, mvn verify runs with only Docker and no local MySQL. Boot stays on 1.5.4 and Java on 8.

• New com.userFront.AbstractIntegrationTest, with javadoc marking it as the entry point for the smoke suite:

  @RunWith(SpringRunner.class)
  @SpringBootTest(classes = UserFrontApplication.class)
  @AutoConfigureMockMvc
  @ContextConfiguration(initializers = AbstractIntegrationTest.DataSourceInitializer.class)
  public abstract class AbstractIntegrationTest {
      protected static final MySQLContainer<?> MYSQL = new MySQLContainer<>("mysql:5.7.44")
              .withDatabaseName("onlinebanking").withUrlParam("useSSL", "false"); // started once per JVM
      @Autowired protected MockMvc mockMvc;
      // DataSourceInitializer -> spring.datasource.{url,username,password,driver-class-name} from MYSQL,
      //                          spring.jpa.hibernate.ddl-auto=update
  }

• UserFrontApplicationTests now simply extends AbstractIntegrationTest.
• This class is a superset of the ad-hoc copies in feature(COG-1143): W0 smoke suite for deposit, withdraw, between-accounts and recipient transfer #106, COG-1144: W0 smoke suite for appointment create/list/confirm #108 and COG-1142: W0 smoke suite — signup, login, logout, remember-me (MockMvc) #109. It keeps the same class name and package, @AutoConfigureMockMvc, the inherited protected MockMvc mockMvc, and spring-security-test on the test classpath. Those PRs can rebase by deleting their own AbstractIntegrationTest and pom entries.
• The initializer overrides every spring.datasource.* property, so it also satisfies COG-1158 (COG-1158: Move datasource credentials to DB_USER/DB_PASSWORD env vars #333) spring.datasource.password=${DB_PASSWORD} and its fail-fast check.

Non-obvious choices

• Image is mysql:5.7.44, not the ticket's 8.0 default. The Boot 1.5 BOM ships Connector/J 5.1.42, which fails against MySQL 8 (Unknown system variable 'query_cache_size') and cannot do caching_sha2_password. Move to 8.0 together with the W3 Connector/J bump (COG-1148 owns the version decision). This PR does not touch runtime dependencies. You can override the image without a code change: -Dtest.mysql.image=....
• useSSL=false is appended to the JDBC URL. Current Temurin 8 builds disable TLSv1/1.1, and that is what Connector/J 5.1 negotiates.
• Docker API version: the docker-java shaded into Testcontainers 1.19.x defaults to API 1.32, which Docker Engine 25+ rejects (client version 1.32 is too old). When neither api.version nor DOCKER_API_VERSION is set, the base class sets api.version = min(1.44, daemon max). The daemon max comes from docker [--context default] version --format {{.Server.APIVersion}}. --context default is only added when DOCKER_HOST is unset, so the CLI queries the same endpoint Testcontainers uses. If there is no CLI, it falls back to 1.44. Docker 24 (API 1.43) keeps working.
• org.testcontainers:junit does not exist on Maven Central (404). JUnit 4 support ships in the core org.testcontainers:testcontainers artifact, so that is what the pom declares, with an explicit 1.19.7 like org.testcontainers:mysql.

Verification (Temurin 8u504, Docker only, nothing listening on :3306)

$ mvn -B -f UserFront/pom.xml clean verify
INFO tc.mysql:5.7.44 - Container mysql:5.7.44 started in PT6.707S
INFO tc.mysql:5.7.44 - Container is started (JDBC URL: jdbc:mysql://localhost:32787/onlinebanking?useSSL=false)
Tests run: 1, Failures: 0, Errors: 0, Skipped: 0 - in com.userFront.UserFrontApplicationTests
[INFO] BUILD SUCCESS

• With COG-1149's CI workflow (COG-1149: W0 · GitHub Actions workflow running mvn verify on every PR #329) and COG-1158 (COG-1158: Move datasource credentials to DB_USER/DB_PASSWORD env vars #333) merged on top locally, the same command gives Tests run: 1, Failures: 0, BUILD SUCCESS. The GitHub Actions run of COG-1149: W0 · GitHub Actions workflow running mvn verify on every PR #329's Temurin 8 workflow is on the throwaway draft [throwaway, do not merge] COG-1141 harness x COG-1149 CI workflow probe #342, which will be closed and not merged.
• Docker 24 was simulated with a fake docker CLI that prints 1.43: every request went to GET /v1.43/... and the build passed.

Sibling compatibility check: I copied the smoke tests from #106 (MoneyMovementSmokeTest), #108 (AppointmentSmokeTest) and #109 (AuthSmokeTest) unchanged onto this branch, without their AbstractIntegrationTest copies. All three compile against this harness.

Tests run: 9, Failures: 0 - MoneyMovementSmokeTest
Tests run: 4, Failures: 0 - AppointmentSmokeTest
Tests run: 1, Failures: 0 - UserFrontApplicationTests
Tests run: 5, Failures: 5 - AuthSmokeTest   <- only when run in the same JVM as AppointmentSmokeTest
$ mvn verify -Dtest=AuthSmokeTest  ->  Tests run: 5, Failures: 0

The AuthSmokeTest failures come from test data, not the harness. All classes share one container and one cached context. #108 commits a user smokeuser, and #109 then tries to sign up the same username. /signup returns 200 ("user exists") where the test expects a redirect. One of those PRs needs to use unique usernames when it rebases.

Link to Devin session: https://app.devin.ai/sessions/4e949844d05d4a1a92421b67076d0628
Open in Devin Desktop: https://app.devin.ai/desktop/session/4e949844d05d4a1a92421b67076d0628?variant=devin
Requested by: @patrickbradley-cog

---

Devin Review

Status	Commit
⚪ Not started	—

Run Devin Review

---

[devin-ai-integration]

I'll fix CI failures and address comments from users with write access. I'll skip comments containing "(aside)".

• Disable automatic comment, CI, and merge conflict monitoring

[devin-ai-integration]

Devin Review found 1 new potential issue.

[devin-ai-integration]

GitHub Actions CI evidence (COG-1149 workflow from #329). The throwaway draft #342 was this branch plus #329's .github/workflows/userfront-ci.yml (Temurin 8, mvn -B -f UserFront/pom.xml verify). It ran green and has been closed without merging.

Job UserFront · mvn verify (109984506124):

tc.mysql:5.7.44 - Container is started (JDBC URL: jdbc:mysql://localhost:32769/onlinebanking?useSSL=false)
Tests run: 1, Failures: 0, Errors: 0, Skipped: 0 - in com.userFront.UserFrontApplicationTests
[INFO] BUILD SUCCESS

AdminPortal · ng build (non-blocking) also passed.