tbianchini/shopit-back
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(auth): implement AdminAppMeController and AdminAppMeResource; add routes and tests for user context retrieval

Browse Source
This commit is contained in:
ncoronel
2026-07-31 16:11:47 -03:00
parent dd76d5d951
commit dbeaf19513
9 changed files with 104 additions and 60 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
app/Domains/Auth/Controllers/AdminAppMeController.php Normal file
View File

@@ -0,0 +1,26 @@
<?php
namespace App\Domains\Auth\Controllers;
use App\Domains\Auth\Models\User;
use App\Domains\Auth\Resources\AdminAppMeResource;
use App\Domains\Auth\Services\AdminAppContextService;
use App\Http\Controllers\Controller;
use Illuminate\Http\Request;
class AdminAppMeController extends Controller
{
public function __construct(
private readonly AdminAppContextService $adminAppContextService,
) {}
public function __invoke(Request $request): AdminAppMeResource
{
/** @var User $user */
$user = $request->user();
return AdminAppMeResource::make(
$this->adminAppContextService->load($user)
);
}
}

25
app/Domains/Auth/Resources/AdminAppMeResource.php Normal file
View File

@@ -0,0 +1,25 @@
<?php
namespace App\Domains\Auth\Resources;
use App\Domains\Auth\Models\User;
use App\Domains\Tenant\Resources\TenantResource;
use Illuminate\Http\Request;
use Illuminate\Http\Resources\Json\JsonResource;
/**
* @mixin User
*/
class AdminAppMeResource extends JsonResource
{
/**
* @return array<string, mixed>
*/
public function toArray(Request $request): array
{
return [
'user' => UserResource::make($this->resource),
'tenant' => TenantResource::make($this->tenant),
];
}
}

26
app/Domains/Auth/Services/AdminAppContextService.php Normal file
View File

@@ -0,0 +1,26 @@
<?php
namespace App\Domains\Auth\Services;
use App\Domains\Auth\Models\User;
use App\Domains\Authorization\Enums\RoleCode;
class AdminAppContextService
{
public function load(User $user): User
{
$tenant = $user->tenant()
->with([
'menues' => fn ($query) => $query
->whereHas(
'roles',
fn ($query) => $query->where('codigo', RoleCode::AdminApp->value)
),
])
->firstOrFail();
$user->setRelation('tenant', $tenant);
return $user;
}
}

3
app/Domains/Auth/routes/adminapp.php
View File

@@ -1,8 +1,11 @@
<?php
use App\Domains\Auth\Controllers\AdminAppLoginController;
use App\Domains\Auth\Controllers\AdminAppMeController;
use Illuminate\Support\Facades\Route;
Route::prefix('v1/adminapp')->group(function (): void {
Route::post('login', AdminAppLoginController::class)->middleware('throttle:login');
Route::middleware(['auth:sanctum', 'adminapp.tenant'])
->get('me', AdminAppMeController::class);
});

34
app/Domains/Tenant/Controllers/AdminApp/BootstrapTenantController.php
View File

@@ -1,34 +0,0 @@
<?php
namespace App\Domains\Tenant\Controllers\AdminApp;
use App\Domains\Auth\Models\User;
use App\Domains\Tenant\Resources\TenantResource;
use App\Domains\Tenant\Services\TenantInformationService;
use App\Http\Controllers\Controller;
use Illuminate\Http\Request;
class BootstrapTenantController extends Controller
{
public function __construct(
protected TenantInformationService $tenantInformationService
) {}
public function __invoke(Request $request): TenantResource
{
/** @var User $user */
$user = $request->user();
$tenant = $user->tenant()->firstOrFail();
return TenantResource::make(
$this->tenantInformationService->load($tenant, [
'menues' => fn ($query) => $query
->where('code', 'like', 'admin.%')
->whereHas(
'roles',
fn ($query) => $query->where('codigo', $user->rol_codigo)
),
])
);
}
}

3
app/Domains/Tenant/Resources/AdminApp/BootstrapAdminAppResource.php
View File

@@ -17,10 +17,7 @@ class BootstrapAdminAppResource extends JsonResource
public function toArray(Request $request): array
{
return [
'codigo' => $this->codigo,
'website_type_code' => $this->codigo,
'nombre' => $this->nombre,
'dominio' => $this->dominio,
'primary_color' => $this->primary_color,
'secondary_color' => $this->secondary_color,
'danger_color' => $this->danger_color,

2
app/Domains/Tenant/routes/adminapp.php
View File

@@ -1,7 +1,6 @@
<?php
use App\Domains\Tenant\Controllers\AdminApp\BootstrapAdminAppController;
use App\Domains\Tenant\Controllers\AdminApp\BootstrapTenantController;
use App\Domains\Tenant\Controllers\AdminApp\WebsiteExtraController;
use Illuminate\Support\Facades\Route;
@@ -13,7 +12,6 @@ Route::get(
Route::prefix('v1/adminapp/tenant')
->middleware(['auth:sanctum', 'adminapp.tenant'])
->group(function (): void {
Route::get('bootstrap', BootstrapTenantController::class);
Route::get('website-extras', [WebsiteExtraController::class, 'show']);
Route::get('website-extras/{websiteExtraCode}', [WebsiteExtraController::class, 'showExtra']);
Route::put('website-extras/{websiteExtraCode}', [WebsiteExtraController::class, 'update']);

38
tests/Feature/Tenant/AdminAppBootstrapTenantControllerTest.php → tests/Feature/Auth/AdminAppMeControllerTest.php
View File

@@ -1,6 +1,6 @@
<?php
namespace Tests\Feature\Tenant;
namespace Tests\Feature\Auth;
use App\Domains\Auth\Models\User;
use App\Domains\Authorization\Enums\RoleCode;
@@ -11,31 +11,28 @@ use Illuminate\Foundation\Testing\RefreshDatabase;
use Laravel\Sanctum\Sanctum;
use Tests\TestCase;
class AdminAppBootstrapTenantControllerTest extends TestCase
class AdminAppMeControllerTest extends TestCase
{
use RefreshDatabase;
public function test_authentication_is_required(): void
{
$this->getJson('/api/v1/adminapp/tenant/bootstrap')
->assertUnauthorized();
$this->getJson('/api/v1/adminapp/me')->assertUnauthorized();
}
public function test_a_customer_cannot_bootstrap_adminapp(): void
public function test_a_customer_cannot_access_the_adminapp_context(): void
{
$userRole = $this->createRole(RoleCode::User);
$customer = User::factory()->create([
'rol_codigo' => $userRole->codigo,
'rol_codigo' => $this->createRole(RoleCode::User)->codigo,
'tenant_codigo' => null,
]);
Sanctum::actingAs($customer);
$this->getJson('/api/v1/adminapp/tenant/bootstrap')
->assertForbidden();
$this->getJson('/api/v1/adminapp/me')->assertForbidden();
}
public function test_it_returns_the_authenticated_users_tenant_and_admin_menus(): void
public function test_it_returns_the_user_tenant_and_authorized_admin_menus(): void
{
$adminAppRole = $this->createRole(RoleCode::AdminApp);
$tenant = $this->createTenant('acme');
@@ -49,18 +46,23 @@ class AdminAppBootstrapTenantControllerTest extends TestCase
$tenant->menues()->sync([$catalog->code, $staff->code, $storefront->code]);
$otherTenant->menues()->sync([$staff->code]);
Sanctum::actingAs(User::factory()->create([
$user = User::factory()->create([
'nombre_apellido' => 'Admin Acme',
'email' => 'admin@acme.test',
'rol_codigo' => $adminAppRole->codigo,
'tenant_codigo' => $tenant->codigo,
]));
]);
Sanctum::actingAs($user);
$this->getJson('/api/v1/adminapp/tenant/bootstrap')
$this->getJson('/api/v1/adminapp/me')
->assertOk()
->assertJsonPath('data.codigo', 'acme')
->assertJsonCount(1, 'data.menues')
->assertJsonPath('data.menues.0.code', 'admin.catalog')
->assertJsonPath('data.menues.0.label', 'Catálogo')
->assertJsonPath('data.menues.0.route', '/admin/catalog')
->assertJsonPath('data.user.id', $user->id)
->assertJsonPath('data.user.email', 'admin@acme.test')
->assertJsonPath('data.tenant.codigo', 'acme')
->assertJsonCount(1, 'data.tenant.menues')
->assertJsonPath('data.tenant.menues.0.code', 'admin.catalog')
->assertJsonPath('data.tenant.menues.0.label', 'Catálogo')
->assertJsonPath('data.tenant.menues.0.route', '/admin/catalog')
->assertJsonMissing(['code' => 'admin.staff'])
->assertJsonMissing(['code' => 'index']);
}

7
tests/Feature/Tenant/BootstrapAdminAppControllerTest.php
View File

@@ -35,14 +35,15 @@ class BootstrapAdminAppControllerTest extends TestCase
$this->getJson('/api/v1/adminapp/bootstrap/ADMIN.SHOPIT.TEST')
->assertOk()
->assertJsonPath('data.codigo', 'shopit')
->assertJsonPath('data.website_type_code', 'shopit')
->assertJsonPath('data.dominio', 'admin.shopit.test')
->assertJsonPath('data.primary_color', '#112233')
->assertJsonPath('data.warning_color', '#ffaa00')
->assertJsonPath('data.login_header_footer_color', '#313131')
->assertJsonPath('data.site_logo', null)
->assertJsonPath('data.footer_logo', $footerLogo->getTemporaryUrl(1440));
->assertJsonPath('data.footer_logo', $footerLogo->getTemporaryUrl(1440))
->assertJsonMissingPath('data.codigo')
->assertJsonMissingPath('data.nombre')
->assertJsonMissingPath('data.dominio');
}
public function test_it_returns_not_found_for_an_unknown_domain(): void