I have been using Istanbul to provide code coverage to VueJS, which works well. We have recenlty introduced Keycloak which provides a login via an Iframe to another domain for SSO. This means that I have to trun off web security for it to work. Testing works just fine, but Istanbul code coverage does not work, I think because of the Iframe but I can't be sure. Basicly, any code that is run after being returned to main site after logging via keycloak, is shown as having no test coverage.