test: cover @requestScope isolation in multi-user tests

Author: totally-not-ai[bot]

spring/src/test/java/com/testapp/sessionscope/RequestPrefs.java

@@ -0,0 +1,37 @@
+/*
+ * Copyright 2000-2026 Vaadin Ltd.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License"); you may not
+ * use this file except in compliance with the License. You may obtain a copy of
+ * the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+ * License for the specific language governing permissions and limitations under
+ * the License.
+ */
+package com.testapp.sessionscope;
+
+import org.springframework.stereotype.Component;
+import org.springframework.web.context.annotation.RequestScope;
+
+import com.vaadin.flow.signals.local.ValueSignal;
+
+/**
+ * A Spring request-scoped bean holding a per-request local signal, used to
+ * reproduce
+ * <a href="https://github.com/vaadin/browserless-test/issues/110">#110</a> for
+ * {@code @RequestScope}.
+ */
+@Component
+@RequestScope
+public class RequestPrefs {
+    private final ValueSignal<String> color = new ValueSignal<>("white");
+
+    public ValueSignal<String> color() {
+        return color;
+    }
+}

spring/src/test/java/com/testapp/sessionscope/RequestScopeView.java

@@ -0,0 +1,47 @@
+/*
+ * Copyright 2000-2026 Vaadin Ltd.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License"); you may not
+ * use this file except in compliance with the License. You may obtain a copy of
+ * the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+ * License for the specific language governing permissions and limitations under
+ * the License.
+ */
+package com.testapp.sessionscope;
+
+import com.vaadin.flow.component.html.Div;
+import com.vaadin.flow.router.Route;
+import com.vaadin.flow.signals.local.ValueSignal;
+
+/**
+ * View that binds a request-scoped local signal, used to reproduce
+ * <a href="https://github.com/vaadin/browserless-test/issues/110">#110</a> for
+ * {@code @RequestScope}.
+ */
+@Route("repro-request")
+public class RequestScopeView extends Div {
+
+    private final ValueSignal<String> boundSignal;
+
+    public RequestScopeView(RequestPrefs prefs) {
+        // Resolve the request-scoped signal once. With per-user request-context
+        // binding this is the active user's own request signal; without it the
+        // second user reuses the first user's signal and the binding below
+        // throws a cross-session IllegalStateException.
+        this.boundSignal = prefs.color();
+        getStyle().bind("background-color", boundSignal);
+    }
+
+    /**
+     * The request-scoped {@link ValueSignal} resolved for this view's user.
+     */
+    public ValueSignal<String> boundSignal() {
+        return boundSignal;
+    }
+}

spring/src/test/java/com/vaadin/browserless/MultiUserSessionScopeReproTest.java

@@ -17,6 +17,7 @@
 
 import com.testapp.sessionscope.Prefs;
 import com.testapp.sessionscope.ReproView;
+import com.testapp.sessionscope.RequestScopeView;
 import org.junit.jupiter.api.AfterEach;
 import org.junit.jupiter.api.Assertions;
 import org.junit.jupiter.api.BeforeEach;
@@ -89,6 +90,28 @@ void twoUsersEachGetOwnSessionScopedBean() {
                 "Each user must resolve its own session-scoped signal instance");
     }
 
+    @Test
+    void twoUsersEachGetOwnRequestScopedBean() {
+        var alice = app.newUser("alice", "USER");
+        var bob = app.newUser("bob", "USER");
+
+        var aliceWindow = alice.newWindow();
+        aliceWindow.navigate(RequestScopeView.class);
+        RequestScopeView aliceView = (RequestScopeView) aliceWindow
+                .getCurrentView();
+
+        // Navigating bob would throw a cross-session IllegalStateException if
+        // bob reused alice's request-scoped bean (and therefore alice's
+        // signal).
+        var bobWindow = bob.newWindow();
+        bobWindow.navigate(RequestScopeView.class);
+        RequestScopeView bobView = (RequestScopeView) bobWindow
+                .getCurrentView();
+
+        Assertions.assertNotSame(aliceView.boundSignal(), bobView.boundSignal(),
+                "Each user must resolve its own request-scoped signal instance");
+    }
+
     @Configuration
     @ComponentScan(basePackageClasses = Prefs.class)
     static class TestConfig {