test public and protected routes

frontend/website/cypress.config.ts

@@ -3,6 +3,7 @@ import { defineConfig } from 'cypress'
 const frontendPort = process.env.VITE_PORT ?? '5173'
 
 export default defineConfig({
+  allowCypressEnv: false,
   e2e: {
     baseUrl: `http://127.0.0.1:${frontendPort}`,
     supportFile: false,

frontend/website/cypress/e2e/guest-auth.cy.ts

@@ -1,8 +1,18 @@
 describe('guest authentication pages', () => {
-  it('redirects the root route to login', () => {
+  it('shows a public home route to guests', () => {
     cy.visit('/')
 
+    cy.location('pathname').should('equal', '/')
+    cy.get('h1').should('have.text', 'Make big goals feel possible.')
+    cy.contains('a', 'Log in').should('have.attr', 'href', '/login')
+    cy.contains('a', 'Get started').should('have.attr', 'href', '/signup')
+  })
+
+  it('redirects guests away from the protected dashboard', () => {
+    cy.visit('/dashboard')
+
     cy.location('pathname').should('equal', '/login')
+    cy.location('search').should('include', 'redirect=/dashboard')
   })
 
   it('shows the login form and links to signup', () => {