Auth & Security

Dual-Mode Session Sandboxing

Playground API supports dual session isolation modes: automatic browser cookies for interactive web apps, and explicit X-Playground-Identity headers for headless CI/CD test runners. Seamlessly bridge anonymous session data with authenticated user personas.

Interactive Identity Mode Tester

Select an isolation mode below to test header precedence and session overlay routing:

Execute: CI/CD Worker Identity Header

GET

response.json

{

// Click "Send" above to execute this request against the live server.

}

Identity Resolution Precedence Hierarchy

How the API determines session routing when multiple identifiers are present:

Priority 1 (Highest)

X-Playground-Identity

Explicit header passed by CI/CD runners or headless scripts. Overrides all cookies.

Priority 2

?_sandbox=uuid

Query parameter for QR code mobile syncing, manual browser debugging, and bookmarkable sandboxes.

Priority 3

pg_identity (Cookie)

Cryptographically signed HttpOnly cookie automatically issued to standard browser clients.

Priority 4 (Fallback)

Auto-Provisioning

If no identity is detected, the server automatically provisions a fresh sandbox and sets the cookie.

Testing & CI/CD Integration Recipes

How to configure parallel test runners with isolated sandbox states:

sandboxClient.ts

// Playwright E2E Parallel Worker Fixture (Zero Test Pollution)

import { test as base, expect } from '@playwright/test';

// Extend base test to inject a unique sandbox identity per test worker

export const test = base.extend<{ sandboxId: string }>({

sandboxId: async ({}, use, testInfo) => {

// Unique identity per worker and test title

const id = e2e-${testInfo.workerIndex}-${testInfo.testId};

await use(id);

// Automatically attach X-Playground-Identity to all page requests

page: async ({ page, sandboxId }, use) => {

await page.setExtraHTTPHeaders({

'X-Playground-Identity': sandboxId,

});

await use(page);

});

test('isolated user creation and mutation', async ({ page }) => {

await page.goto('/dashboard');

// Mutations execute inside this worker's private overlay

});

PreviousPassword Recovery Loop

NextGraphiQL IDE