feat(auth): implement AdminAppMeController and AdminAppMeResource; add routes and tests for user context retrieval
This commit is contained in:
26
app/Domains/Auth/Controllers/AdminAppMeController.php
Normal file
26
app/Domains/Auth/Controllers/AdminAppMeController.php
Normal file
@@ -0,0 +1,26 @@
|
|||||||
|
<?php
|
||||||
|
|
||||||
|
namespace App\Domains\Auth\Controllers;
|
||||||
|
|
||||||
|
use App\Domains\Auth\Models\User;
|
||||||
|
use App\Domains\Auth\Resources\AdminAppMeResource;
|
||||||
|
use App\Domains\Auth\Services\AdminAppContextService;
|
||||||
|
use App\Http\Controllers\Controller;
|
||||||
|
use Illuminate\Http\Request;
|
||||||
|
|
||||||
|
class AdminAppMeController extends Controller
|
||||||
|
{
|
||||||
|
public function __construct(
|
||||||
|
private readonly AdminAppContextService $adminAppContextService,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
public function __invoke(Request $request): AdminAppMeResource
|
||||||
|
{
|
||||||
|
/** @var User $user */
|
||||||
|
$user = $request->user();
|
||||||
|
|
||||||
|
return AdminAppMeResource::make(
|
||||||
|
$this->adminAppContextService->load($user)
|
||||||
|
);
|
||||||
|
}
|
||||||
|
}
|
||||||
25
app/Domains/Auth/Resources/AdminAppMeResource.php
Normal file
25
app/Domains/Auth/Resources/AdminAppMeResource.php
Normal file
@@ -0,0 +1,25 @@
|
|||||||
|
<?php
|
||||||
|
|
||||||
|
namespace App\Domains\Auth\Resources;
|
||||||
|
|
||||||
|
use App\Domains\Auth\Models\User;
|
||||||
|
use App\Domains\Tenant\Resources\TenantResource;
|
||||||
|
use Illuminate\Http\Request;
|
||||||
|
use Illuminate\Http\Resources\Json\JsonResource;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* @mixin User
|
||||||
|
*/
|
||||||
|
class AdminAppMeResource extends JsonResource
|
||||||
|
{
|
||||||
|
/**
|
||||||
|
* @return array<string, mixed>
|
||||||
|
*/
|
||||||
|
public function toArray(Request $request): array
|
||||||
|
{
|
||||||
|
return [
|
||||||
|
'user' => UserResource::make($this->resource),
|
||||||
|
'tenant' => TenantResource::make($this->tenant),
|
||||||
|
];
|
||||||
|
}
|
||||||
|
}
|
||||||
26
app/Domains/Auth/Services/AdminAppContextService.php
Normal file
26
app/Domains/Auth/Services/AdminAppContextService.php
Normal file
@@ -0,0 +1,26 @@
|
|||||||
|
<?php
|
||||||
|
|
||||||
|
namespace App\Domains\Auth\Services;
|
||||||
|
|
||||||
|
use App\Domains\Auth\Models\User;
|
||||||
|
use App\Domains\Authorization\Enums\RoleCode;
|
||||||
|
|
||||||
|
class AdminAppContextService
|
||||||
|
{
|
||||||
|
public function load(User $user): User
|
||||||
|
{
|
||||||
|
$tenant = $user->tenant()
|
||||||
|
->with([
|
||||||
|
'menues' => fn ($query) => $query
|
||||||
|
->whereHas(
|
||||||
|
'roles',
|
||||||
|
fn ($query) => $query->where('codigo', RoleCode::AdminApp->value)
|
||||||
|
),
|
||||||
|
])
|
||||||
|
->firstOrFail();
|
||||||
|
|
||||||
|
$user->setRelation('tenant', $tenant);
|
||||||
|
|
||||||
|
return $user;
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -1,8 +1,11 @@
|
|||||||
<?php
|
<?php
|
||||||
|
|
||||||
use App\Domains\Auth\Controllers\AdminAppLoginController;
|
use App\Domains\Auth\Controllers\AdminAppLoginController;
|
||||||
|
use App\Domains\Auth\Controllers\AdminAppMeController;
|
||||||
use Illuminate\Support\Facades\Route;
|
use Illuminate\Support\Facades\Route;
|
||||||
|
|
||||||
Route::prefix('v1/adminapp')->group(function (): void {
|
Route::prefix('v1/adminapp')->group(function (): void {
|
||||||
Route::post('login', AdminAppLoginController::class)->middleware('throttle:login');
|
Route::post('login', AdminAppLoginController::class)->middleware('throttle:login');
|
||||||
|
Route::middleware(['auth:sanctum', 'adminapp.tenant'])
|
||||||
|
->get('me', AdminAppMeController::class);
|
||||||
});
|
});
|
||||||
|
|||||||
@@ -1,34 +0,0 @@
|
|||||||
<?php
|
|
||||||
|
|
||||||
namespace App\Domains\Tenant\Controllers\AdminApp;
|
|
||||||
|
|
||||||
use App\Domains\Auth\Models\User;
|
|
||||||
use App\Domains\Tenant\Resources\TenantResource;
|
|
||||||
use App\Domains\Tenant\Services\TenantInformationService;
|
|
||||||
use App\Http\Controllers\Controller;
|
|
||||||
use Illuminate\Http\Request;
|
|
||||||
|
|
||||||
class BootstrapTenantController extends Controller
|
|
||||||
{
|
|
||||||
public function __construct(
|
|
||||||
protected TenantInformationService $tenantInformationService
|
|
||||||
) {}
|
|
||||||
|
|
||||||
public function __invoke(Request $request): TenantResource
|
|
||||||
{
|
|
||||||
/** @var User $user */
|
|
||||||
$user = $request->user();
|
|
||||||
$tenant = $user->tenant()->firstOrFail();
|
|
||||||
|
|
||||||
return TenantResource::make(
|
|
||||||
$this->tenantInformationService->load($tenant, [
|
|
||||||
'menues' => fn ($query) => $query
|
|
||||||
->where('code', 'like', 'admin.%')
|
|
||||||
->whereHas(
|
|
||||||
'roles',
|
|
||||||
fn ($query) => $query->where('codigo', $user->rol_codigo)
|
|
||||||
),
|
|
||||||
])
|
|
||||||
);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -17,10 +17,7 @@ class BootstrapAdminAppResource extends JsonResource
|
|||||||
public function toArray(Request $request): array
|
public function toArray(Request $request): array
|
||||||
{
|
{
|
||||||
return [
|
return [
|
||||||
'codigo' => $this->codigo,
|
|
||||||
'website_type_code' => $this->codigo,
|
'website_type_code' => $this->codigo,
|
||||||
'nombre' => $this->nombre,
|
|
||||||
'dominio' => $this->dominio,
|
|
||||||
'primary_color' => $this->primary_color,
|
'primary_color' => $this->primary_color,
|
||||||
'secondary_color' => $this->secondary_color,
|
'secondary_color' => $this->secondary_color,
|
||||||
'danger_color' => $this->danger_color,
|
'danger_color' => $this->danger_color,
|
||||||
|
|||||||
@@ -1,7 +1,6 @@
|
|||||||
<?php
|
<?php
|
||||||
|
|
||||||
use App\Domains\Tenant\Controllers\AdminApp\BootstrapAdminAppController;
|
use App\Domains\Tenant\Controllers\AdminApp\BootstrapAdminAppController;
|
||||||
use App\Domains\Tenant\Controllers\AdminApp\BootstrapTenantController;
|
|
||||||
use App\Domains\Tenant\Controllers\AdminApp\WebsiteExtraController;
|
use App\Domains\Tenant\Controllers\AdminApp\WebsiteExtraController;
|
||||||
use Illuminate\Support\Facades\Route;
|
use Illuminate\Support\Facades\Route;
|
||||||
|
|
||||||
@@ -13,7 +12,6 @@ Route::get(
|
|||||||
Route::prefix('v1/adminapp/tenant')
|
Route::prefix('v1/adminapp/tenant')
|
||||||
->middleware(['auth:sanctum', 'adminapp.tenant'])
|
->middleware(['auth:sanctum', 'adminapp.tenant'])
|
||||||
->group(function (): void {
|
->group(function (): void {
|
||||||
Route::get('bootstrap', BootstrapTenantController::class);
|
|
||||||
Route::get('website-extras', [WebsiteExtraController::class, 'show']);
|
Route::get('website-extras', [WebsiteExtraController::class, 'show']);
|
||||||
Route::get('website-extras/{websiteExtraCode}', [WebsiteExtraController::class, 'showExtra']);
|
Route::get('website-extras/{websiteExtraCode}', [WebsiteExtraController::class, 'showExtra']);
|
||||||
Route::put('website-extras/{websiteExtraCode}', [WebsiteExtraController::class, 'update']);
|
Route::put('website-extras/{websiteExtraCode}', [WebsiteExtraController::class, 'update']);
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
<?php
|
<?php
|
||||||
|
|
||||||
namespace Tests\Feature\Tenant;
|
namespace Tests\Feature\Auth;
|
||||||
|
|
||||||
use App\Domains\Auth\Models\User;
|
use App\Domains\Auth\Models\User;
|
||||||
use App\Domains\Authorization\Enums\RoleCode;
|
use App\Domains\Authorization\Enums\RoleCode;
|
||||||
@@ -11,31 +11,28 @@ use Illuminate\Foundation\Testing\RefreshDatabase;
|
|||||||
use Laravel\Sanctum\Sanctum;
|
use Laravel\Sanctum\Sanctum;
|
||||||
use Tests\TestCase;
|
use Tests\TestCase;
|
||||||
|
|
||||||
class AdminAppBootstrapTenantControllerTest extends TestCase
|
class AdminAppMeControllerTest extends TestCase
|
||||||
{
|
{
|
||||||
use RefreshDatabase;
|
use RefreshDatabase;
|
||||||
|
|
||||||
public function test_authentication_is_required(): void
|
public function test_authentication_is_required(): void
|
||||||
{
|
{
|
||||||
$this->getJson('/api/v1/adminapp/tenant/bootstrap')
|
$this->getJson('/api/v1/adminapp/me')->assertUnauthorized();
|
||||||
->assertUnauthorized();
|
|
||||||
}
|
}
|
||||||
|
|
||||||
public function test_a_customer_cannot_bootstrap_adminapp(): void
|
public function test_a_customer_cannot_access_the_adminapp_context(): void
|
||||||
{
|
{
|
||||||
$userRole = $this->createRole(RoleCode::User);
|
|
||||||
$customer = User::factory()->create([
|
$customer = User::factory()->create([
|
||||||
'rol_codigo' => $userRole->codigo,
|
'rol_codigo' => $this->createRole(RoleCode::User)->codigo,
|
||||||
'tenant_codigo' => null,
|
'tenant_codigo' => null,
|
||||||
]);
|
]);
|
||||||
|
|
||||||
Sanctum::actingAs($customer);
|
Sanctum::actingAs($customer);
|
||||||
|
|
||||||
$this->getJson('/api/v1/adminapp/tenant/bootstrap')
|
$this->getJson('/api/v1/adminapp/me')->assertForbidden();
|
||||||
->assertForbidden();
|
|
||||||
}
|
}
|
||||||
|
|
||||||
public function test_it_returns_the_authenticated_users_tenant_and_admin_menus(): void
|
public function test_it_returns_the_user_tenant_and_authorized_admin_menus(): void
|
||||||
{
|
{
|
||||||
$adminAppRole = $this->createRole(RoleCode::AdminApp);
|
$adminAppRole = $this->createRole(RoleCode::AdminApp);
|
||||||
$tenant = $this->createTenant('acme');
|
$tenant = $this->createTenant('acme');
|
||||||
@@ -49,18 +46,23 @@ class AdminAppBootstrapTenantControllerTest extends TestCase
|
|||||||
$tenant->menues()->sync([$catalog->code, $staff->code, $storefront->code]);
|
$tenant->menues()->sync([$catalog->code, $staff->code, $storefront->code]);
|
||||||
$otherTenant->menues()->sync([$staff->code]);
|
$otherTenant->menues()->sync([$staff->code]);
|
||||||
|
|
||||||
Sanctum::actingAs(User::factory()->create([
|
$user = User::factory()->create([
|
||||||
|
'nombre_apellido' => 'Admin Acme',
|
||||||
|
'email' => 'admin@acme.test',
|
||||||
'rol_codigo' => $adminAppRole->codigo,
|
'rol_codigo' => $adminAppRole->codigo,
|
||||||
'tenant_codigo' => $tenant->codigo,
|
'tenant_codigo' => $tenant->codigo,
|
||||||
]));
|
]);
|
||||||
|
Sanctum::actingAs($user);
|
||||||
|
|
||||||
$this->getJson('/api/v1/adminapp/tenant/bootstrap')
|
$this->getJson('/api/v1/adminapp/me')
|
||||||
->assertOk()
|
->assertOk()
|
||||||
->assertJsonPath('data.codigo', 'acme')
|
->assertJsonPath('data.user.id', $user->id)
|
||||||
->assertJsonCount(1, 'data.menues')
|
->assertJsonPath('data.user.email', 'admin@acme.test')
|
||||||
->assertJsonPath('data.menues.0.code', 'admin.catalog')
|
->assertJsonPath('data.tenant.codigo', 'acme')
|
||||||
->assertJsonPath('data.menues.0.label', 'Catálogo')
|
->assertJsonCount(1, 'data.tenant.menues')
|
||||||
->assertJsonPath('data.menues.0.route', '/admin/catalog')
|
->assertJsonPath('data.tenant.menues.0.code', 'admin.catalog')
|
||||||
|
->assertJsonPath('data.tenant.menues.0.label', 'Catálogo')
|
||||||
|
->assertJsonPath('data.tenant.menues.0.route', '/admin/catalog')
|
||||||
->assertJsonMissing(['code' => 'admin.staff'])
|
->assertJsonMissing(['code' => 'admin.staff'])
|
||||||
->assertJsonMissing(['code' => 'index']);
|
->assertJsonMissing(['code' => 'index']);
|
||||||
}
|
}
|
||||||
@@ -35,14 +35,15 @@ class BootstrapAdminAppControllerTest extends TestCase
|
|||||||
|
|
||||||
$this->getJson('/api/v1/adminapp/bootstrap/ADMIN.SHOPIT.TEST')
|
$this->getJson('/api/v1/adminapp/bootstrap/ADMIN.SHOPIT.TEST')
|
||||||
->assertOk()
|
->assertOk()
|
||||||
->assertJsonPath('data.codigo', 'shopit')
|
|
||||||
->assertJsonPath('data.website_type_code', 'shopit')
|
->assertJsonPath('data.website_type_code', 'shopit')
|
||||||
->assertJsonPath('data.dominio', 'admin.shopit.test')
|
|
||||||
->assertJsonPath('data.primary_color', '#112233')
|
->assertJsonPath('data.primary_color', '#112233')
|
||||||
->assertJsonPath('data.warning_color', '#ffaa00')
|
->assertJsonPath('data.warning_color', '#ffaa00')
|
||||||
->assertJsonPath('data.login_header_footer_color', '#313131')
|
->assertJsonPath('data.login_header_footer_color', '#313131')
|
||||||
->assertJsonPath('data.site_logo', null)
|
->assertJsonPath('data.site_logo', null)
|
||||||
->assertJsonPath('data.footer_logo', $footerLogo->getTemporaryUrl(1440));
|
->assertJsonPath('data.footer_logo', $footerLogo->getTemporaryUrl(1440))
|
||||||
|
->assertJsonMissingPath('data.codigo')
|
||||||
|
->assertJsonMissingPath('data.nombre')
|
||||||
|
->assertJsonMissingPath('data.dominio');
|
||||||
}
|
}
|
||||||
|
|
||||||
public function test_it_returns_not_found_for_an_unknown_domain(): void
|
public function test_it_returns_not_found_for_an_unknown_domain(): void
|
||||||
|
|||||||
Reference in New Issue
Block a user