feat(auth): implement permission-based access for scanner functionality and update related tests

tests/Feature/Auth/ScannerLoginControllerTest.php

@@ -3,7 +3,9 @@
 namespace Tests\Feature\Auth;
 
 use App\Domains\Auth\Models\User;
+use App\Domains\Authorization\Enums\PermissionCode;
 use App\Domains\Authorization\Enums\RoleCode;
+use App\Domains\Authorization\Models\Permission;
 use App\Domains\Authorization\Models\Role;
 use App\Domains\Tenant\Models\Tenant;
 use Illuminate\Foundation\Testing\RefreshDatabase;
@@ -14,12 +16,17 @@ class ScannerLoginControllerTest extends TestCase
 {
     use RefreshDatabase;
 
-    public function test_it_logs_in_a_tenant_bound_scanner(): void
+    public function test_it_logs_in_a_tenant_bound_user_with_scan_permission(): void
     {
         $role = Role::query()->create([
-            'codigo' => RoleCode::Scanner->value,
-            'nombre' => 'Scanner',
+            'codigo' => RoleCode::AdminApp->value,
+            'nombre' => 'Operador',
         ]);
+        $permission = Permission::query()->create([
+            'codigo' => PermissionCode::ScanTickets->value,
+            'nombre' => 'Escanear tickets',
+        ]);
+        $role->permissions()->attach($permission->codigo);
         $tenant = Tenant::query()->create([
             'codigo' => 'acme',
             'nombre' => 'Acme',
@@ -40,22 +47,28 @@ class ScannerLoginControllerTest extends TestCase
         $response
             ->assertOk()
             ->assertJsonPath('user.id', $user->id)
-            ->assertJsonPath('user.rol_codigo', RoleCode::Scanner->value)
+            ->assertJsonPath('user.rol_codigo', RoleCode::AdminApp->value)
             ->assertJsonPath('token_type', 'Bearer');
 
         $this->assertSame(['scanner'], $user->tokens()->sole()->abilities);
     }
 
-    public function test_it_rejects_a_non_scanner_user(): void
+    public function test_it_rejects_a_user_without_scan_permission(): void
     {
         $role = Role::query()->create([
-            'codigo' => RoleCode::User->value,
-            'nombre' => 'Usuario',
+            'codigo' => RoleCode::Scanner->value,
+            'nombre' => 'Scanner sin permiso',
+        ]);
+        $tenant = Tenant::query()->create([
+            'codigo' => 'acme',
+            'nombre' => 'Acme',
+            'dominio' => 'acme.test',
         ]);
         $user = User::factory()->create([
             'email' => 'customer@example.com',
             'password' => Hash::make('secret123'),
             'rol_codigo' => $role->codigo,
+            'tenant_codigo' => $tenant->codigo,
         ]);
 
         $this->postJson('/api/v1/scanner/login', [