[ ] Obtaining authn tokens (e.g. logging in) in tests (or mechanisms to bypass authn in tests 😬 but would prefer not to).
[ ] Test fixtures for groups and users, and how to deal with concurrency (e.g. multiple instances of the tests running at the same time). Most tractable way is likely to create groups and users at test start up with names that combine a meaningful part and a unique part, and then parameterize the tests by the names.
Comprehensive automated tests for these endpoints/functions would be quite helpful and reassuring.
It's possible now that we have a testing environment (https://github.com/nextstrain/nextstrain.org/pull/598, https://github.com/nextstrain/nextstrain.org/pull/656, https://github.com/nextstrain/nextstrain.org/pull/657), but there are some crucial test/development pieces still missing which we need to address:
see more context