How to Handle CAPTCHA and Rate Limits for Automated Testing in FusionAuth

[wesley]

We are developing our automatic frontend tests for our application that integrates FusionAuth. Currently, we are encountering a captcha that is preventing our tests from running on developers' computers. Based on FusionAuth documentation, we can obtain a whitelist for our static IP; however, some developers work remotely, and we plan to integrate tests into our CI/CD pipeline in the future.

We are searching for a solution; at the moment, the whitelist for static IPs is the only available option. Are there alternative solutions? Our instance is on the older infrastructure, we could update it and set a custom domain but in the current setup it will be a subdomain which would not enable the use of the same cookies because it will not be the same origin.

[wesley]

Thanks for the question. Updating your instance wouldn't change your situation. Currently, the only options are what you found outlined in the documentation you mentioned.

• https://fusionauth.io/docs/get-started/run-in-the-cloud/cloud#captcha-and-rate-limits

As we build out our Cloud Offerings there may be other options, but this is what is currently available. Oftentimes, we find that people will use a local copy of FusionAuth to complete their automated testing if they cannot locate an IP address that meets our allowlisting requirements.