feat(authorization): add role and tenant codes to users, implement validation logic, and create tests

app/Domains/Auth/Models/User.php

@@ -2,27 +2,49 @@
 
 namespace App\Domains\Auth\Models;
 
+use App\Domains\Authorization\Models\Role;
+use App\Domains\Tenant\Models\Tenant;
 use Database\Factories\UserFactory;
 use Illuminate\Database\Eloquent\Attributes\Fillable;
 use Illuminate\Database\Eloquent\Attributes\Hidden;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
 use Illuminate\Database\Eloquent\Relations\HasMany;
 use Illuminate\Foundation\Auth\User as Authenticatable;
 use Illuminate\Notifications\Notifiable;
 use Laravel\Sanctum\HasApiTokens;
+use LogicException;
 
-#[Fillable(['nombre_apellido', 'email', 'password', 'dni', 'telefono', 'google_id'])]
+#[Fillable(['nombre_apellido', 'email', 'password', 'dni', 'telefono', 'google_id', 'rol_codigo', 'tenant_codigo'])]
 #[Hidden(['password', 'remember_token'])]
 class User extends Authenticatable
 {
     /** @use HasFactory<UserFactory> */
     use HasApiTokens, HasFactory, Notifiable;
 
+    protected $attributes = [
+        'rol_codigo' => 'user',
+    ];
+
     protected static function newFactory(): UserFactory
     {
         return UserFactory::new();
     }
 
+    protected static function booted(): void
+    {
+        static::saving(function (User $user): void {
+            $hasTenant = $user->tenant_codigo !== null;
+            $isTenantAdmin = $user->rol_codigo === 'tenant_admin';
+
+            if ($hasTenant !== $isTenantAdmin) {
+                throw new LogicException(
+                    'tenant_codigo debe estar informado únicamente para usuarios con rol tenant_admin.'
+                );
+            }
+        });
+    }
+
     /** @return HasMany<ResetPasswordAttempt, $this> */
     public function resetPasswordAttempts(): HasMany
     {
@@ -35,6 +57,22 @@ class User extends Authenticatable
         return $this->hasMany(LoginAttempt::class);
     }
 
+    /**
+     * @return BelongsTo<Role, $this>
+     */
+    public function role(): BelongsTo
+    {
+        return $this->belongsTo(Role::class, 'rol_codigo', 'codigo');
+    }
+
+    /**
+     * @return BelongsTo<Tenant, $this>
+     */
+    public function tenant(): BelongsTo
+    {
+        return $this->belongsTo(Tenant::class, 'tenant_codigo', 'codigo');
+    }
+
     /**
      * @return array<string, string>
      */