feat(auth): implement AdminAppMeController and AdminAppMeResource; add routes and tests for user context retrieval
This commit is contained in:
@@ -1,6 +1,6 @@
|
||||
<?php
|
||||
|
||||
namespace Tests\Feature\Tenant;
|
||||
namespace Tests\Feature\Auth;
|
||||
|
||||
use App\Domains\Auth\Models\User;
|
||||
use App\Domains\Authorization\Enums\RoleCode;
|
||||
@@ -11,31 +11,28 @@ use Illuminate\Foundation\Testing\RefreshDatabase;
|
||||
use Laravel\Sanctum\Sanctum;
|
||||
use Tests\TestCase;
|
||||
|
||||
class AdminAppBootstrapTenantControllerTest extends TestCase
|
||||
class AdminAppMeControllerTest extends TestCase
|
||||
{
|
||||
use RefreshDatabase;
|
||||
|
||||
public function test_authentication_is_required(): void
|
||||
{
|
||||
$this->getJson('/api/v1/adminapp/tenant/bootstrap')
|
||||
->assertUnauthorized();
|
||||
$this->getJson('/api/v1/adminapp/me')->assertUnauthorized();
|
||||
}
|
||||
|
||||
public function test_a_customer_cannot_bootstrap_adminapp(): void
|
||||
public function test_a_customer_cannot_access_the_adminapp_context(): void
|
||||
{
|
||||
$userRole = $this->createRole(RoleCode::User);
|
||||
$customer = User::factory()->create([
|
||||
'rol_codigo' => $userRole->codigo,
|
||||
'rol_codigo' => $this->createRole(RoleCode::User)->codigo,
|
||||
'tenant_codigo' => null,
|
||||
]);
|
||||
|
||||
Sanctum::actingAs($customer);
|
||||
|
||||
$this->getJson('/api/v1/adminapp/tenant/bootstrap')
|
||||
->assertForbidden();
|
||||
$this->getJson('/api/v1/adminapp/me')->assertForbidden();
|
||||
}
|
||||
|
||||
public function test_it_returns_the_authenticated_users_tenant_and_admin_menus(): void
|
||||
public function test_it_returns_the_user_tenant_and_authorized_admin_menus(): void
|
||||
{
|
||||
$adminAppRole = $this->createRole(RoleCode::AdminApp);
|
||||
$tenant = $this->createTenant('acme');
|
||||
@@ -49,18 +46,23 @@ class AdminAppBootstrapTenantControllerTest extends TestCase
|
||||
$tenant->menues()->sync([$catalog->code, $staff->code, $storefront->code]);
|
||||
$otherTenant->menues()->sync([$staff->code]);
|
||||
|
||||
Sanctum::actingAs(User::factory()->create([
|
||||
$user = User::factory()->create([
|
||||
'nombre_apellido' => 'Admin Acme',
|
||||
'email' => 'admin@acme.test',
|
||||
'rol_codigo' => $adminAppRole->codigo,
|
||||
'tenant_codigo' => $tenant->codigo,
|
||||
]));
|
||||
]);
|
||||
Sanctum::actingAs($user);
|
||||
|
||||
$this->getJson('/api/v1/adminapp/tenant/bootstrap')
|
||||
$this->getJson('/api/v1/adminapp/me')
|
||||
->assertOk()
|
||||
->assertJsonPath('data.codigo', 'acme')
|
||||
->assertJsonCount(1, 'data.menues')
|
||||
->assertJsonPath('data.menues.0.code', 'admin.catalog')
|
||||
->assertJsonPath('data.menues.0.label', 'Catálogo')
|
||||
->assertJsonPath('data.menues.0.route', '/admin/catalog')
|
||||
->assertJsonPath('data.user.id', $user->id)
|
||||
->assertJsonPath('data.user.email', 'admin@acme.test')
|
||||
->assertJsonPath('data.tenant.codigo', 'acme')
|
||||
->assertJsonCount(1, 'data.tenant.menues')
|
||||
->assertJsonPath('data.tenant.menues.0.code', 'admin.catalog')
|
||||
->assertJsonPath('data.tenant.menues.0.label', 'Catálogo')
|
||||
->assertJsonPath('data.tenant.menues.0.route', '/admin/catalog')
|
||||
->assertJsonMissing(['code' => 'admin.staff'])
|
||||
->assertJsonMissing(['code' => 'index']);
|
||||
}
|
||||
@@ -35,14 +35,15 @@ class BootstrapAdminAppControllerTest extends TestCase
|
||||
|
||||
$this->getJson('/api/v1/adminapp/bootstrap/ADMIN.SHOPIT.TEST')
|
||||
->assertOk()
|
||||
->assertJsonPath('data.codigo', 'shopit')
|
||||
->assertJsonPath('data.website_type_code', 'shopit')
|
||||
->assertJsonPath('data.dominio', 'admin.shopit.test')
|
||||
->assertJsonPath('data.primary_color', '#112233')
|
||||
->assertJsonPath('data.warning_color', '#ffaa00')
|
||||
->assertJsonPath('data.login_header_footer_color', '#313131')
|
||||
->assertJsonPath('data.site_logo', null)
|
||||
->assertJsonPath('data.footer_logo', $footerLogo->getTemporaryUrl(1440));
|
||||
->assertJsonPath('data.footer_logo', $footerLogo->getTemporaryUrl(1440))
|
||||
->assertJsonMissingPath('data.codigo')
|
||||
->assertJsonMissingPath('data.nombre')
|
||||
->assertJsonMissingPath('data.dominio');
|
||||
}
|
||||
|
||||
public function test_it_returns_not_found_for_an_unknown_domain(): void
|
||||
|
||||
Reference in New Issue
Block a user