feat(auth): implement AdminAppMeController and AdminAppMeResource; add routes and tests for user context retrieval

This commit is contained in:
2026-07-31 16:11:47 -03:00
parent dd76d5d951
commit dbeaf19513
9 changed files with 104 additions and 60 deletions

View File

@@ -1,6 +1,6 @@
<?php
namespace Tests\Feature\Tenant;
namespace Tests\Feature\Auth;
use App\Domains\Auth\Models\User;
use App\Domains\Authorization\Enums\RoleCode;
@@ -11,31 +11,28 @@ use Illuminate\Foundation\Testing\RefreshDatabase;
use Laravel\Sanctum\Sanctum;
use Tests\TestCase;
class AdminAppBootstrapTenantControllerTest extends TestCase
class AdminAppMeControllerTest extends TestCase
{
use RefreshDatabase;
public function test_authentication_is_required(): void
{
$this->getJson('/api/v1/adminapp/tenant/bootstrap')
->assertUnauthorized();
$this->getJson('/api/v1/adminapp/me')->assertUnauthorized();
}
public function test_a_customer_cannot_bootstrap_adminapp(): void
public function test_a_customer_cannot_access_the_adminapp_context(): void
{
$userRole = $this->createRole(RoleCode::User);
$customer = User::factory()->create([
'rol_codigo' => $userRole->codigo,
'rol_codigo' => $this->createRole(RoleCode::User)->codigo,
'tenant_codigo' => null,
]);
Sanctum::actingAs($customer);
$this->getJson('/api/v1/adminapp/tenant/bootstrap')
->assertForbidden();
$this->getJson('/api/v1/adminapp/me')->assertForbidden();
}
public function test_it_returns_the_authenticated_users_tenant_and_admin_menus(): void
public function test_it_returns_the_user_tenant_and_authorized_admin_menus(): void
{
$adminAppRole = $this->createRole(RoleCode::AdminApp);
$tenant = $this->createTenant('acme');
@@ -49,18 +46,23 @@ class AdminAppBootstrapTenantControllerTest extends TestCase
$tenant->menues()->sync([$catalog->code, $staff->code, $storefront->code]);
$otherTenant->menues()->sync([$staff->code]);
Sanctum::actingAs(User::factory()->create([
$user = User::factory()->create([
'nombre_apellido' => 'Admin Acme',
'email' => 'admin@acme.test',
'rol_codigo' => $adminAppRole->codigo,
'tenant_codigo' => $tenant->codigo,
]));
]);
Sanctum::actingAs($user);
$this->getJson('/api/v1/adminapp/tenant/bootstrap')
$this->getJson('/api/v1/adminapp/me')
->assertOk()
->assertJsonPath('data.codigo', 'acme')
->assertJsonCount(1, 'data.menues')
->assertJsonPath('data.menues.0.code', 'admin.catalog')
->assertJsonPath('data.menues.0.label', 'Catálogo')
->assertJsonPath('data.menues.0.route', '/admin/catalog')
->assertJsonPath('data.user.id', $user->id)
->assertJsonPath('data.user.email', 'admin@acme.test')
->assertJsonPath('data.tenant.codigo', 'acme')
->assertJsonCount(1, 'data.tenant.menues')
->assertJsonPath('data.tenant.menues.0.code', 'admin.catalog')
->assertJsonPath('data.tenant.menues.0.label', 'Catálogo')
->assertJsonPath('data.tenant.menues.0.route', '/admin/catalog')
->assertJsonMissing(['code' => 'admin.staff'])
->assertJsonMissing(['code' => 'index']);
}

View File

@@ -35,14 +35,15 @@ class BootstrapAdminAppControllerTest extends TestCase
$this->getJson('/api/v1/adminapp/bootstrap/ADMIN.SHOPIT.TEST')
->assertOk()
->assertJsonPath('data.codigo', 'shopit')
->assertJsonPath('data.website_type_code', 'shopit')
->assertJsonPath('data.dominio', 'admin.shopit.test')
->assertJsonPath('data.primary_color', '#112233')
->assertJsonPath('data.warning_color', '#ffaa00')
->assertJsonPath('data.login_header_footer_color', '#313131')
->assertJsonPath('data.site_logo', null)
->assertJsonPath('data.footer_logo', $footerLogo->getTemporaryUrl(1440));
->assertJsonPath('data.footer_logo', $footerLogo->getTemporaryUrl(1440))
->assertJsonMissingPath('data.codigo')
->assertJsonMissingPath('data.nombre')
->assertJsonMissingPath('data.dominio');
}
public function test_it_returns_not_found_for_an_unknown_domain(): void