feat: implement full CRUD support and database schema for multi-tenant architecture

feat: implement tenant update request validation and add feature tests for domain bootstrapping
feat: implement tenant management system with attachment support and bootstrap controller
2026-06-26 16:57:59 -03:00 · 2026-06-26 16:23:14 -03:00 · 2026-06-26 13:17:48 -03:00
14 changed files with 784 additions and 102 deletions
--- a/Tenant_CRUD_Postman_Collection.json
+++ b/Tenant_CRUD_Postman_Collection.json
@@ -0,0 +1,357 @@
+{
+	"info": {
+		"_postman_id": "76df1733-a3d8-4f2b-9ffb-7c70e3032549",
+		"name": "ShopIt - Tenant CRUD",
+		"schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
+	},
+	"item": [
+		{
+			"name": "List Tenants",
+			"request": {
+				"method": "GET",
+				"header": [
+					{
+						"key": "Accept",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"url": {
+					"raw": "{{base_url}}/api/tenants",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"api",
+						"tenants"
+					]
+				}
+			},
+			"response": []
+		},
+		{
+			"name": "Bootstrap Tenant",
+			"request": {
+				"method": "GET",
+				"header": [
+					{
+						"key": "Accept",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"url": {
+					"raw": "{{base_url}}/api/tenants/bootstrap/acme.com",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"api",
+						"tenants",
+						"bootstrap",
+						"acme.com"
+					]
+				}
+			},
+			"response": []
+		},
+		{
+			"name": "Create Tenant (JSON)",
+			"request": {
+				"method": "POST",
+				"header": [
+					{
+						"key": "Accept",
+						"value": "application/json",
+						"type": "text"
+					},
+					{
+						"key": "Content-Type",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"body": {
+					"mode": "raw",
+					"raw": "{\n    \"codigo\": \"acme\",\n    \"nombre\": \"Acme Corporation\",\n    \"dominio\": \"acme.com\",\n    \"primary_color\": \"#111111\",\n    \"secondary_color\": \"#222222\",\n    \"danger_color\": \"#333333\",\n    \"header_footer_bg_color\": \"#444444\",\n    \"header_logo\": \"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNk+M9QDwADhgGAWjR9awAAAABJRU5ErkJggg==\",\n    \"footer_logo\": \"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNk+M9QDwADhgGAWjR9awAAAABJRU5ErkJggg==\"\n}"
+				},
+				"url": {
+					"raw": "{{base_url}}/api/tenants",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"api",
+						"tenants"
+					]
+				}
+			},
+			"response": []
+		},
+		{
+			"name": "Create Tenant (Form Data)",
+			"request": {
+				"method": "POST",
+				"header": [
+					{
+						"key": "Accept",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"body": {
+					"mode": "formdata",
+					"formdata": [
+						{
+							"key": "codigo",
+							"value": "acme",
+							"type": "text"
+						},
+						{
+							"key": "nombre",
+							"value": "Acme Corporation",
+							"type": "text"
+						},
+						{
+							"key": "dominio",
+							"value": "acme.com",
+							"type": "text"
+						},
+						{
+							"key": "primary_color",
+							"value": "#111111",
+							"type": "text"
+						},
+						{
+							"key": "secondary_color",
+							"value": "#222222",
+							"type": "text"
+						},
+						{
+							"key": "danger_color",
+							"value": "#333333",
+							"type": "text"
+						},
+						{
+							"key": "header_footer_bg_color",
+							"value": "#444444",
+							"type": "text"
+						},
+						{
+							"key": "header_logo",
+							"type": "file",
+							"src": []
+						},
+						{
+							"key": "footer_logo",
+							"type": "file",
+							"src": []
+						}
+					]
+				},
+				"url": {
+					"raw": "{{base_url}}/api/tenants",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"api",
+						"tenants"
+					]
+				}
+			},
+			"response": []
+		},
+		{
+			"name": "Show Tenant",
+			"request": {
+				"method": "GET",
+				"header": [
+					{
+						"key": "Accept",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"url": {
+					"raw": "{{base_url}}/api/tenants/acme",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"api",
+						"tenants",
+						"acme"
+					]
+				}
+			},
+			"response": []
+		},
+		{
+			"name": "Update Tenant (JSON)",
+			"request": {
+				"method": "PUT",
+				"header": [
+					{
+						"key": "Accept",
+						"value": "application/json",
+						"type": "text"
+					},
+					{
+						"key": "Content-Type",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"body": {
+					"mode": "raw",
+					"raw": "{\n    \"codigo\": \"acme\",\n    \"nombre\": \"Acme Corporation Updated\",\n    \"dominio\": \"acme.com\",\n    \"primary_color\": \"#555555\",\n    \"secondary_color\": \"#666666\",\n    \"danger_color\": \"#777777\",\n    \"header_footer_bg_color\": \"#888888\"\n}"
+				},
+				"url": {
+					"raw": "{{base_url}}/api/tenants/acme",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"api",
+						"tenants",
+						"acme"
+					]
+				}
+			},
+			"response": []
+		},
+		{
+			"name": "Update Tenant (Form Data)",
+			"request": {
+				"method": "POST",
+				"header": [
+					{
+						"key": "Accept",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"body": {
+					"mode": "formdata",
+					"formdata": [
+						{
+							"key": "_method",
+							"value": "PUT",
+							"type": "text"
+						},
+						{
+							"key": "codigo",
+							"value": "acme",
+							"type": "text"
+						},
+						{
+							"key": "nombre",
+							"value": "Acme Corporation Updated",
+							"type": "text"
+						},
+						{
+							"key": "dominio",
+							"value": "acme.com",
+							"type": "text"
+						},
+						{
+							"key": "primary_color",
+							"value": "#555555",
+							"type": "text"
+						},
+						{
+							"key": "secondary_color",
+							"value": "#666666",
+							"type": "text"
+						},
+						{
+							"key": "danger_color",
+							"value": "#777777",
+							"type": "text"
+						},
+						{
+							"key": "header_footer_bg_color",
+							"value": "#888888",
+							"type": "text"
+						},
+						{
+							"key": "header_logo",
+							"type": "file",
+							"src": []
+						},
+						{
+							"key": "footer_logo",
+							"type": "file",
+							"src": []
+						}
+					]
+				},
+				"url": {
+					"raw": "{{base_url}}/api/tenants/acme",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"api",
+						"tenants",
+						"acme"
+					]
+				}
+			},
+			"response": []
+		},
+		{
+			"name": "Delete Tenant",
+			"request": {
+				"method": "DELETE",
+				"header": [
+					{
+						"key": "Accept",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"url": {
+					"raw": "{{base_url}}/api/tenants/acme",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"api",
+						"tenants",
+						"acme"
+					]
+				}
+			},
+			"response": []
+		}
+	],
+	"event": [
+		{
+			"listen": "prerequest",
+			"script": {
+				"type": "text/javascript",
+				"exec": [
+					""
+				]
+			}
+		},
+		{
+			"listen": "test",
+			"script": {
+				"type": "text/javascript",
+				"exec": [
+					""
+				]
+			}
+		}
+	],
+	"variable": [
+		{
+			"key": "base_url",
+			"value": "http://localhost:8000",
+			"type": "string"
+		}
+	]
+}
--- a/app/Domains/Attachable/Models/Attachment.php
+++ b/app/Domains/Attachable/Models/Attachment.php
@@ -48,4 +48,15 @@ class Attachment extends Model
    {
        return $this->hasMany(AttachableAttachment::class, 'attachment_id');
    }
+
+    /**
+     * Get the pre-signed temporary S3 URL for this attachment.
+     */
+    public function getTemporaryUrl(int $expiresInMinutes = 10): string
+    {
+        return \Illuminate\Support\Facades\Storage::disk('s3')->temporaryUrl(
+            $this->path,
+            now()->addMinutes($expiresInMinutes)
+        );
+    }
 }
--- a/app/Domains/Tenant/Controllers/BootstrapTenantController.php
+++ b/app/Domains/Tenant/Controllers/BootstrapTenantController.php
@@ -15,7 +15,7 @@ class BootstrapTenantController extends Controller
        $dominio = $request->validated('dominio');

        return TenantResource::make(
-            Tenant::query()->where('dominio', $dominio)->firstOrFail()
+            Tenant::query()->with(['headerLogo', 'footerLogo'])->where('dominio', $dominio)->firstOrFail()
        );
    }
 }
--- a/app/Domains/Tenant/Controllers/TenantController.php
+++ b/app/Domains/Tenant/Controllers/TenantController.php
@@ -19,26 +19,26 @@ class TenantController extends Controller

    public function index(): JsonResponse
    {
-        return TenantResource::collection(Tenant::query()->latest()->get())->response();
+        return TenantResource::collection(Tenant::query()->with(['headerLogo', 'footerLogo'])->latest()->get())->response();
    }

    public function store(StoreTenantRequest $request): JsonResponse
    {
        $tenant = $this->tenantService->create($request->validated());

-        return TenantResource::make($tenant)->response()->setStatusCode(201);
+        return TenantResource::make($tenant->loadMissing(['headerLogo', 'footerLogo']))->response()->setStatusCode(201);
    }

    public function show(Tenant $tenant): TenantResource
    {
-        return TenantResource::make($tenant);
+        return TenantResource::make($tenant->loadMissing(['headerLogo', 'footerLogo']));
    }

    public function update(UpdateTenantRequest $request, Tenant $tenant): TenantResource
    {
        $tenant = $this->tenantService->update($tenant, $request->validated());

-        return TenantResource::make($tenant);
+        return TenantResource::make($tenant->loadMissing(['headerLogo', 'footerLogo']));
    }

    public function destroy(Tenant $tenant): Response
--- a/app/Domains/Tenant/Models/Tenant.php
+++ b/app/Domains/Tenant/Models/Tenant.php
@@ -2,11 +2,13 @@

 namespace App\Domains\Tenant\Models;

+use App\Domains\Attachable\Models\Attachment;
 use App\Domains\Attachable\Models\Concerns\HasAttachments;
 use App\Domains\Catalog\Models\Product;
 use Illuminate\Database\Eloquent\Attributes\Fillable;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
 use Illuminate\Database\Eloquent\Relations\HasMany;

 #[Fillable([
@@ -17,14 +19,35 @@ use Illuminate\Database\Eloquent\Relations\HasMany;
    'secondary_color',
    'danger_color',
    'header_footer_bg_color',
-    'header_logo',
-    'footer_logo',
+    'header_logo_id',
+    'footer_logo_id',
 ])]
 class Tenant extends Model
 {
    use HasAttachments;
    use HasFactory;

+    public function getRouteKeyName(): string
+    {
+        return 'codigo';
+    }
+
+    /**
+     * @return BelongsTo<Attachment, $this>
+     */
+    public function headerLogo(): BelongsTo
+    {
+        return $this->belongsTo(Attachment::class, 'header_logo_id');
+    }
+
+    /**
+     * @return BelongsTo<Attachment, $this>
+     */
+    public function footerLogo(): BelongsTo
+    {
+        return $this->belongsTo(Attachment::class, 'footer_logo_id');
+    }
+
    /**
     * @return HasMany<Product, $this>
     */
--- a/app/Domains/Tenant/Requests/StoreTenantRequest.php
+++ b/app/Domains/Tenant/Requests/StoreTenantRequest.php
@@ -37,7 +37,7 @@ class StoreTenantRequest extends FormRequest
    public function rules(): array
    {
        $logoRule = [
-            'nullable',
+            'required',
            static function (string $attribute, mixed $value, Closure $fail): void {
                if ($value instanceof UploadedFile) {
                    $mime = $value->getMimeType();
@@ -92,15 +92,15 @@ class StoreTenantRequest extends FormRequest
                        $fail("The {$attribute} field must contain a valid domain or URL.");
                    }
                },
-                'nullable',
+                'required',
                'string',
                'max:255',
                Rule::unique('tenants', 'dominio'),
            ],
-            'primary_color' => ['nullable', 'string', 'regex:/^#([a-fA-F0-9]{3,4}|[a-fA-F0-9]{6}|[a-fA-F0-9]{8})$/'],
-            'secondary_color' => ['nullable', 'string', 'regex:/^#([a-fA-F0-9]{3,4}|[a-fA-F0-9]{6}|[a-fA-F0-9]{8})$/'],
-            'danger_color' => ['nullable', 'string', 'regex:/^#([a-fA-F0-9]{3,4}|[a-fA-F0-9]{6}|[a-fA-F0-9]{8})$/'],
-            'header_footer_bg_color' => ['nullable', 'string', 'regex:/^#([a-fA-F0-9]{3,4}|[a-fA-F0-9]{6}|[a-fA-F0-9]{8})$/'],
+            'primary_color' => ['required', 'string', 'regex:/^#([a-fA-F0-9]{3,4}|[a-fA-F0-9]{6}|[a-fA-F0-9]{8})$/'],
+            'secondary_color' => ['required', 'string', 'regex:/^#([a-fA-F0-9]{3,4}|[a-fA-F0-9]{6}|[a-fA-F0-9]{8})$/'],
+            'danger_color' => ['required', 'string', 'regex:/^#([a-fA-F0-9]{3,4}|[a-fA-F0-9]{6}|[a-fA-F0-9]{8})$/'],
+            'header_footer_bg_color' => ['required', 'string', 'regex:/^#([a-fA-F0-9]{3,4}|[a-fA-F0-9]{6}|[a-fA-F0-9]{8})$/'],
            'header_logo' => $logoRule,
            'footer_logo' => $logoRule,
        ];
--- a/app/Domains/Tenant/Requests/UpdateTenantRequest.php
+++ b/app/Domains/Tenant/Requests/UpdateTenantRequest.php
@@ -21,15 +21,17 @@ class UpdateTenantRequest extends FormRequest

    protected function prepareForValidation(): void
    {
-        $rawDomain = $this->input('dominio');
-        $normalizedDomain = TenantDomainNormalizer::normalize($rawDomain);
+        if ($this->has('dominio')) {
+            $rawDomain = $this->input('dominio');
+            $normalizedDomain = TenantDomainNormalizer::normalize($rawDomain);

-        $this->hasInvalidDomain = TenantDomainNormalizer::hasValue($rawDomain)
-            && $normalizedDomain === null;
+            $this->hasInvalidDomain = TenantDomainNormalizer::hasValue($rawDomain)
+                && $normalizedDomain === null;

-        $this->merge([
-            'dominio' => $normalizedDomain,
-        ]);
+            $this->merge([
+                'dominio' => $normalizedDomain,
+            ]);
+        }
    }

    /**
@@ -88,12 +90,12 @@ class UpdateTenantRequest extends FormRequest

        return [
            'codigo' => [
-                'required',
+                'nullable',
                'string',
                'max:255',
                Rule::unique('tenants', 'codigo')->ignore($tenant?->id),
            ],
-            'nombre' => ['required', 'string', 'max:255'],
+            'nombre' => ['nullable', 'string', 'max:255'],
            'dominio' => [
                'bail',
                function (string $attribute, mixed $value, Closure $fail): void {
--- a/app/Domains/Tenant/Resources/TenantResource.php
+++ b/app/Domains/Tenant/Resources/TenantResource.php
@@ -24,8 +24,9 @@ class TenantResource extends JsonResource
            'secondary_color' => $this->secondary_color,
            'danger_color' => $this->danger_color,
            'header_footer_bg_color' => $this->header_footer_bg_color,
-            'header_logo' => $this->header_logo,
-            'footer_logo' => $this->footer_logo,
+            // 1 day
+            'header_logo' => $this->headerLogo?->getTemporaryUrl(1440),
+            'footer_logo' => $this->footerLogo?->getTemporaryUrl(1440 ),
        ];
    }
 }
--- a/app/Domains/Tenant/Services/TenantService.php
+++ b/app/Domains/Tenant/Services/TenantService.php
@@ -27,23 +27,40 @@ class TenantService

            unset($data['header_logo'], $data['footer_logo']);

+            $headerAttachmentId = null;
+            if ($headerLogo) {
+                $attachment = Str::isUuid($headerLogo)
+                    ? \App\Domains\Attachable\Models\Attachment::query()->where('key', $headerLogo)->first()
+                    : $this->attachmentService->store($headerLogo, 'tenants');
+
+                if ($attachment) {
+                    $headerAttachmentId = $attachment->id;
+                }
+            }
+
+            $footerAttachmentId = null;
+            if ($footerLogo) {
+                $attachment = Str::isUuid($footerLogo)
+                    ? \App\Domains\Attachable\Models\Attachment::query()->where('key', $footerLogo)->first()
+                    : $this->attachmentService->store($footerLogo, 'tenants');
+
+                if ($attachment) {
+                    $footerAttachmentId = $attachment->id;
+                }
+            }
+
+            $data['header_logo_id'] = $headerAttachmentId;
+            $data['footer_logo_id'] = $footerAttachmentId;
+
            /** @var Tenant $tenant */
            $tenant = Tenant::query()->create($data);

-            if ($headerLogo) {
-                $attachment = $this->attachmentService->store($headerLogo, 'tenants');
-                $tenant->header_logo = $attachment->key;
-                $tenant->attachments()->attach($attachment->id);
+            if ($headerAttachmentId) {
+                $tenant->attachments()->attach($headerAttachmentId);
            }

-            if ($footerLogo) {
-                $attachment = $this->attachmentService->store($footerLogo, 'tenants');
-                $tenant->footer_logo = $attachment->key;
-                $tenant->attachments()->attach($attachment->id);
-            }
-
-            if ($headerLogo || $footerLogo) {
-                $tenant->save();
+            if ($footerAttachmentId) {
+                $tenant->attachments()->attach($footerAttachmentId);
            }

            return $tenant;
@@ -71,29 +88,35 @@ class TenantService

            if ($hasHeaderLogoKey) {
                if ($headerLogo) {
-                    if (! Str::isUuid($headerLogo)) {
-                        $attachment = $this->attachmentService->store($headerLogo, 'tenants');
-                        $tenant->header_logo = $attachment->key;
+                    $attachment = Str::isUuid($headerLogo)
+                        ? \App\Domains\Attachable\Models\Attachment::query()->where('key', $headerLogo)->first()
+                        : $this->attachmentService->store($headerLogo, 'tenants');
+
+                    if ($attachment) {
+                        $tenant->header_logo_id = $attachment->id;
                        $tenant->attachments()->attach($attachment->id);
                    } else {
-                        $tenant->header_logo = $headerLogo;
+                        $tenant->header_logo_id = null;
                    }
                } else {
-                    $tenant->header_logo = null;
+                    $tenant->header_logo_id = null;
                }
            }

            if ($hasFooterLogoKey) {
                if ($footerLogo) {
-                    if (! Str::isUuid($footerLogo)) {
-                        $attachment = $this->attachmentService->store($footerLogo, 'tenants');
-                        $tenant->footer_logo = $attachment->key;
+                    $attachment = Str::isUuid($footerLogo)
+                        ? \App\Domains\Attachable\Models\Attachment::query()->where('key', $footerLogo)->first()
+                        : $this->attachmentService->store($footerLogo, 'tenants');
+
+                    if ($attachment) {
+                        $tenant->footer_logo_id = $attachment->id;
                        $tenant->attachments()->attach($attachment->id);
                    } else {
-                        $tenant->footer_logo = $footerLogo;
+                        $tenant->footer_logo_id = null;
                    }
                } else {
-                    $tenant->footer_logo = null;
+                    $tenant->footer_logo_id = null;
                }
            }

--- a/database/migrations/2026_06_18_135000_create_tenants_table.php
+++ b/database/migrations/2026_06_18_135000_create_tenants_table.php
@@ -15,13 +15,13 @@ return new class extends Migration
            $table->id();
            $table->string('codigo')->unique();
            $table->string('nombre');
-            $table->string('dominio')->nullable();
-            $table->string('primary_color')->nullable();
-            $table->string('secondary_color')->nullable();
-            $table->string('danger_color')->nullable();
-            $table->string('header_footer_bg_color')->nullable();
-            $table->string('header_logo')->nullable();
-            $table->string('footer_logo')->nullable();
+            $table->string('dominio');
+            $table->string('primary_color');
+            $table->string('secondary_color');
+            $table->string('danger_color');
+            $table->string('header_footer_bg_color');
+            $table->unsignedBigInteger('header_logo_id');
+            $table->unsignedBigInteger('footer_logo_id');
            $table->timestamps();
        });
    }
--- a/database/migrations/2026_06_25_000500_create_attachments_table.php
+++ b/database/migrations/2026_06_25_000500_create_attachments_table.php
@@ -28,6 +28,18 @@ return new class extends Migration
            $table->index('type');
            $table->index('mime_type');
        });
+
+        Schema::table('tenants', function (Blueprint $table) {
+            $table->foreign('header_logo_id')
+                ->references('id')
+                ->on('attachments')
+                ->cascadeOnDelete();
+
+            $table->foreign('footer_logo_id')
+                ->references('id')
+                ->on('attachments')
+                ->cascadeOnDelete();
+        });
    }

    /**
@@ -35,6 +47,11 @@ return new class extends Migration
     */
    public function down(): void
    {
+        Schema::table('tenants', function (Blueprint $table) {
+            $table->dropForeign(['header_logo_id']);
+            $table->dropForeign(['footer_logo_id']);
+        });
+
        Schema::dropIfExists('attachments');
    }
 };
--- a/tests/Feature/Cart/CartControllerTest.php
+++ b/tests/Feature/Cart/CartControllerTest.php
@@ -17,11 +17,7 @@ class CartControllerTest extends TestCase

    public function test_it_returns_an_empty_guest_cart_when_cart_does_not_exist(): void
    {
-        Tenant::create([
-            'codigo' => 'acme',
-            'nombre' => 'Acme',
-            'dominio' => 'acme.com',
-        ]);
+        $this->createTenant('acme', 'Acme', 'acme.com');

        $this->getJson('/api/tenants/acme/cart')
            ->assertOk()
@@ -272,10 +268,10 @@ class CartControllerTest extends TestCase
        string $price,
        string $slugPrefix = 'shirt',
    ): ProductVariant {
-        Tenant::query()->firstOrCreate(
-            ['codigo' => $tenantCode],
-            ['nombre' => ucfirst($tenantCode), 'dominio' => "{$tenantCode}.com"],
-        );
+        $tenant = Tenant::query()->where('codigo', $tenantCode)->first();
+        if (! $tenant) {
+            $this->createTenant($tenantCode, ucfirst($tenantCode), "{$tenantCode}.com");
+        }

        $category = \App\Domains\Catalog\Models\Category::query()->create([
            'tenant_code' => $tenantCode,
@@ -300,4 +296,37 @@ class CartControllerTest extends TestCase
            'precio' => $price,
        ])->load('product');
    }
+
+    protected function createTenant(string $codigo, string $nombre, string $dominio): Tenant
+    {
+        $hdrKey = (string) \Illuminate\Support\Str::uuid();
+        $ftrKey = (string) \Illuminate\Support\Str::uuid();
+
+        $headerAttachment = \App\Domains\Attachable\Models\Attachment::create([
+            'key' => $hdrKey,
+            'path' => 'tenants/' . $hdrKey . '.png',
+            'filename' => 'logo_header.png',
+            'type' => \App\Domains\Attachable\Enums\AttachmentType::Image,
+            'mime_type' => 'image/png',
+        ]);
+        $footerAttachment = \App\Domains\Attachable\Models\Attachment::create([
+            'key' => $ftrKey,
+            'path' => 'tenants/' . $ftrKey . '.png',
+            'filename' => 'logo_footer.png',
+            'type' => \App\Domains\Attachable\Enums\AttachmentType::Image,
+            'mime_type' => 'image/png',
+        ]);
+
+        return Tenant::create([
+            'codigo' => $codigo,
+            'nombre' => $nombre,
+            'dominio' => $dominio,
+            'primary_color' => '#111111',
+            'secondary_color' => '#222222',
+            'danger_color' => '#333333',
+            'header_footer_bg_color' => '#444444',
+            'header_logo_id' => $headerAttachment->id,
+            'footer_logo_id' => $footerAttachment->id,
+        ]);
+    }
 }
--- a/tests/Feature/Catalog/ProductAttributeControllerTest.php
+++ b/tests/Feature/Catalog/ProductAttributeControllerTest.php
@@ -12,11 +12,7 @@ class ProductAttributeControllerTest extends TestCase

    public function test_it_creates_a_select_attribute_with_options(): void
    {
-        Tenant::create([
-            'codigo' => 'acme',
-            'nombre' => 'Acme',
-            'dominio' => 'acme.com',
-        ]);
+        $this->createTenant('acme', 'Acme', 'acme.com');

        $response = $this->postJson('/api/tenants/acme/product-attributes', [
            'codigo' => 'color',
@@ -62,11 +58,7 @@ class ProductAttributeControllerTest extends TestCase

    public function test_it_rejects_options_for_string_attributes(): void
    {
-        Tenant::create([
-            'codigo' => 'acme',
-            'nombre' => 'Acme',
-            'dominio' => 'acme.com',
-        ]);
+        $this->createTenant('acme', 'Acme', 'acme.com');

        $response = $this->postJson('/api/tenants/acme/product-attributes', [
            'codigo' => 'material',
@@ -81,4 +73,37 @@ class ProductAttributeControllerTest extends TestCase
            ->assertUnprocessable()
            ->assertJsonValidationErrors(['options']);
    }
+
+    protected function createTenant(string $codigo, string $nombre, string $dominio): Tenant
+    {
+        $hdrKey = (string) \Illuminate\Support\Str::uuid();
+        $ftrKey = (string) \Illuminate\Support\Str::uuid();
+
+        $headerAttachment = \App\Domains\Attachable\Models\Attachment::create([
+            'key' => $hdrKey,
+            'path' => 'tenants/' . $hdrKey . '.png',
+            'filename' => 'logo_header.png',
+            'type' => \App\Domains\Attachable\Enums\AttachmentType::Image,
+            'mime_type' => 'image/png',
+        ]);
+        $footerAttachment = \App\Domains\Attachable\Models\Attachment::create([
+            'key' => $ftrKey,
+            'path' => 'tenants/' . $ftrKey . '.png',
+            'filename' => 'logo_footer.png',
+            'type' => \App\Domains\Attachable\Enums\AttachmentType::Image,
+            'mime_type' => 'image/png',
+        ]);
+
+        return Tenant::create([
+            'codigo' => $codigo,
+            'nombre' => $nombre,
+            'dominio' => $dominio,
+            'primary_color' => '#111111',
+            'secondary_color' => '#222222',
+            'danger_color' => '#333333',
+            'header_footer_bg_color' => '#444444',
+            'header_logo_id' => $headerAttachment->id,
+            'footer_logo_id' => $footerAttachment->id,
+        ]);
+    }
 }
--- a/tests/Feature/Tenant/BootstrapTenantControllerTest.php
+++ b/tests/Feature/Tenant/BootstrapTenantControllerTest.php
@@ -15,6 +15,24 @@ class BootstrapTenantControllerTest extends TestCase

    public function test_it_bootstraps_a_tenant_by_domain(): void
    {
+        $hdrKey = (string) Str::uuid();
+        $ftrKey = (string) Str::uuid();
+
+        $headerAttachment = \App\Domains\Attachable\Models\Attachment::create([
+            'key' => $hdrKey,
+            'path' => 'tenants/' . $hdrKey . '.png',
+            'filename' => 'logo_header.png',
+            'type' => \App\Domains\Attachable\Enums\AttachmentType::Image,
+            'mime_type' => 'image/png',
+        ]);
+        $footerAttachment = \App\Domains\Attachable\Models\Attachment::create([
+            'key' => $ftrKey,
+            'path' => 'tenants/' . $ftrKey . '.png',
+            'filename' => 'logo_footer.png',
+            'type' => \App\Domains\Attachable\Enums\AttachmentType::Image,
+            'mime_type' => 'image/png',
+        ]);
+
        $tenant = Tenant::create([
            'codigo' => 'acme',
            'nombre' => 'Acme',
@@ -23,8 +41,8 @@ class BootstrapTenantControllerTest extends TestCase
            'secondary_color' => '#00ff00',
            'danger_color' => '#0000ff',
            'header_footer_bg_color' => '#ffffff',
-            'header_logo' => 'logo_header.png',
-            'footer_logo' => 'logo_footer.png',
+            'header_logo_id' => $headerAttachment->id,
+            'footer_logo_id' => $footerAttachment->id,
        ]);

        $response = $this->getJson('/api/tenants/bootstrap/acme.com');
@@ -36,16 +54,26 @@ class BootstrapTenantControllerTest extends TestCase
            ->assertJsonPath('data.primary_color', '#ff0000')
            ->assertJsonPath('data.secondary_color', '#00ff00')
            ->assertJsonPath('data.danger_color', '#0000ff')
-            ->assertJsonPath('data.header_footer_bg_color', '#ffffff')
-            ->assertJsonPath('data.header_logo', 'logo_header.png')
-            ->assertJsonPath('data.footer_logo', 'logo_footer.png');
+            ->assertJsonPath('data.header_footer_bg_color', '#ffffff');
+
+        $headerUrl = $response->json('data.header_logo');
+        $footerUrl = $response->json('data.footer_logo');
+
+        $this->assertStringContainsString($headerAttachment->key, $headerUrl);
+        $this->assertStringContainsString($footerAttachment->key, $footerUrl);
+        $this->assertTrue(
+            str_contains($headerUrl, 'Expires=') || str_contains($headerUrl, 'expiration=') || str_contains($headerUrl, 'X-Amz-Expires=')
+        );
+        $this->assertTrue(
+            str_contains($footerUrl, 'Expires=') || str_contains($footerUrl, 'expiration=') || str_contains($footerUrl, 'X-Amz-Expires=')
+        );

        $this->assertArrayNotHasKey('props', $response->json('data'));
    }

    public function test_it_bootstraps_a_tenant_from_a_full_url(): void
    {
-        Tenant::create([
+        $this->createTenant([
            'codigo' => 'acme',
            'nombre' => 'Acme',
            'dominio' => 'acme.com',
@@ -92,11 +120,10 @@ class BootstrapTenantControllerTest extends TestCase
            ->assertJsonPath('data.danger_color', '#333333')
            ->assertJsonPath('data.header_footer_bg_color', '#444444');

-        $headerUuid = $firstResponse->json('data.header_logo');
-        $footerUuid = $firstResponse->json('data.footer_logo');
+        $tenant = Tenant::query()->with(['headerLogo', 'footerLogo'])->where('codigo', 'acme')->firstOrFail();

-        $this->assertTrue(Str::isUuid($headerUuid));
-        $this->assertTrue(Str::isUuid($footerUuid));
+        $this->assertNotNull($tenant->header_logo_id);
+        $this->assertNotNull($tenant->footer_logo_id);

        $this->assertDatabaseHas('tenants', [
            'codigo' => 'acme',
@@ -104,14 +131,32 @@ class BootstrapTenantControllerTest extends TestCase
            'secondary_color' => '#222222',
            'danger_color' => '#333333',
            'header_footer_bg_color' => '#444444',
-            'header_logo' => $headerUuid,
-            'footer_logo' => $footerUuid,
+            'header_logo_id' => $tenant->header_logo_id,
+            'footer_logo_id' => $tenant->footer_logo_id,
        ]);

+        $headerUrl = $firstResponse->json('data.header_logo');
+        $footerUrl = $firstResponse->json('data.footer_logo');
+
+        $this->assertStringContainsString($tenant->headerLogo->key, $headerUrl);
+        $this->assertStringContainsString($tenant->footerLogo->key, $footerUrl);
+        $this->assertTrue(
+            str_contains($headerUrl, 'Expires=') || str_contains($headerUrl, 'expiration=') || str_contains($headerUrl, 'X-Amz-Expires=')
+        );
+        $this->assertTrue(
+            str_contains($footerUrl, 'Expires=') || str_contains($footerUrl, 'expiration=') || str_contains($footerUrl, 'X-Amz-Expires=')
+        );
+
        $secondResponse = $this->postJson('/api/tenants', [
            'codigo' => 'globex',
            'nombre' => 'Globex',
            'dominio' => 'acme.com',
+            'primary_color' => '#111111',
+            'secondary_color' => '#222222',
+            'danger_color' => '#333333',
+            'header_footer_bg_color' => '#444444',
+            'header_logo' => (string) Str::uuid(),
+            'footer_logo' => (string) Str::uuid(),
        ]);

        $secondResponse
@@ -121,13 +166,13 @@ class BootstrapTenantControllerTest extends TestCase

    public function test_it_allows_keeping_the_same_domain_on_update_but_rejects_collisions(): void
    {
-        $tenant = Tenant::create([
+        $tenant = $this->createTenant([
            'codigo' => 'acme',
            'nombre' => 'Acme',
            'dominio' => 'acme.com',
        ]);

-        $otherTenant = Tenant::create([
+        $otherTenant = $this->createTenant([
            'codigo' => 'globex',
            'nombre' => 'Globex',
            'dominio' => 'globex.com',
@@ -136,7 +181,22 @@ class BootstrapTenantControllerTest extends TestCase
        $hdrUuid = (string) Str::uuid();
        $ftrUuid = (string) Str::uuid();

-        $successfulResponse = $this->putJson("/api/tenants/{$tenant->id}", [
+        $hdrAttachment = \App\Domains\Attachable\Models\Attachment::create([
+            'key' => $hdrUuid,
+            'path' => 'tenants/' . $hdrUuid . '.png',
+            'filename' => 'hdr.png',
+            'type' => \App\Domains\Attachable\Enums\AttachmentType::Image,
+            'mime_type' => 'image/png',
+        ]);
+        $ftrAttachment = \App\Domains\Attachable\Models\Attachment::create([
+            'key' => $ftrUuid,
+            'path' => 'tenants/' . $ftrUuid . '.png',
+            'filename' => 'ftr.png',
+            'type' => \App\Domains\Attachable\Enums\AttachmentType::Image,
+            'mime_type' => 'image/png',
+        ]);
+
+        $successfulResponse = $this->putJson("/api/tenants/{$tenant->codigo}", [
            'codigo' => 'acme',
            'nombre' => 'Acme Updated',
            'dominio' => 'https://ACME.com:443/admin',
@@ -155,9 +215,19 @@ class BootstrapTenantControllerTest extends TestCase
            ->assertJsonPath('data.primary_color', '#555555')
            ->assertJsonPath('data.secondary_color', '#666666')
            ->assertJsonPath('data.danger_color', '#777777')
-            ->assertJsonPath('data.header_footer_bg_color', '#888888')
-            ->assertJsonPath('data.header_logo', $hdrUuid)
-            ->assertJsonPath('data.footer_logo', $ftrUuid);
+            ->assertJsonPath('data.header_footer_bg_color', '#888888');
+
+        $headerUrl = $successfulResponse->json('data.header_logo');
+        $footerUrl = $successfulResponse->json('data.footer_logo');
+
+        $this->assertStringContainsString($hdrUuid, $headerUrl);
+        $this->assertStringContainsString($ftrUuid, $footerUrl);
+        $this->assertTrue(
+            str_contains($headerUrl, 'Expires=') || str_contains($headerUrl, 'expiration=') || str_contains($headerUrl, 'X-Amz-Expires=')
+        );
+        $this->assertTrue(
+            str_contains($footerUrl, 'Expires=') || str_contains($footerUrl, 'expiration=') || str_contains($footerUrl, 'X-Amz-Expires=')
+        );

        $this->assertDatabaseHas('tenants', [
            'id' => $tenant->id,
@@ -165,11 +235,11 @@ class BootstrapTenantControllerTest extends TestCase
            'secondary_color' => '#666666',
            'danger_color' => '#777777',
            'header_footer_bg_color' => '#888888',
-            'header_logo' => $hdrUuid,
-            'footer_logo' => $ftrUuid,
+            'header_logo_id' => $hdrAttachment->id,
+            'footer_logo_id' => $ftrAttachment->id,
        ]);

-        $failingResponse = $this->putJson("/api/tenants/{$otherTenant->id}", [
+        $failingResponse = $this->putJson("/api/tenants/{$otherTenant->codigo}", [
            'codigo' => 'globex',
            'nombre' => 'Globex',
            'dominio' => 'https://ACME.com/storefront',
@@ -180,12 +250,45 @@ class BootstrapTenantControllerTest extends TestCase
            ->assertJsonValidationErrors(['dominio']);
    }

+    public function test_it_allows_partial_update_without_required_fields(): void
+    {
+        $tenant = $this->createTenant([
+            'codigo' => 'acme',
+            'nombre' => 'Acme',
+            'dominio' => 'acme.com',
+            'primary_color' => '#ffffff',
+        ]);
+
+        $response = $this->putJson("/api/tenants/{$tenant->codigo}", [
+            'primary_color' => '#000000',
+        ]);
+
+        $response
+            ->assertOk()
+            ->assertJsonPath('data.codigo', 'acme')
+            ->assertJsonPath('data.nombre', 'Acme')
+            ->assertJsonPath('data.primary_color', '#000000');
+
+        $this->assertDatabaseHas('tenants', [
+            'id' => $tenant->id,
+            'codigo' => 'acme',
+            'nombre' => 'Acme',
+            'primary_color' => '#000000',
+        ]);
+    }
+
    public function test_it_validates_aesthetic_colors(): void
    {
        $response = $this->postJson('/api/tenants', [
            'codigo' => 'acme',
            'nombre' => 'Acme',
+            'dominio' => 'acme.com',
            'primary_color' => 'invalid-color',
+            'secondary_color' => '#222222',
+            'danger_color' => '#333333',
+            'header_footer_bg_color' => '#444444',
+            'header_logo' => (string) Str::uuid(),
+            'footer_logo' => (string) Str::uuid(),
        ]);

        $response->assertJsonValidationErrors(['primary_color']);
@@ -193,7 +296,13 @@ class BootstrapTenantControllerTest extends TestCase
        $response2 = $this->postJson('/api/tenants', [
            'codigo' => 'acme',
            'nombre' => 'Acme',
+            'dominio' => 'acme.com',
            'primary_color' => '#12345',
+            'secondary_color' => '#222222',
+            'danger_color' => '#333333',
+            'header_footer_bg_color' => '#444444',
+            'header_logo' => (string) Str::uuid(),
+            'footer_logo' => (string) Str::uuid(),
        ]);

        $response2->assertJsonValidationErrors(['primary_color']);
@@ -206,7 +315,13 @@ class BootstrapTenantControllerTest extends TestCase
        $response = $this->postJson('/api/tenants', [
            'codigo' => 'acme',
            'nombre' => 'Acme',
+            'dominio' => 'acme.com',
+            'primary_color' => '#111111',
+            'secondary_color' => '#222222',
+            'danger_color' => '#333333',
+            'header_footer_bg_color' => '#444444',
            'header_logo' => UploadedFile::fake()->create('document.pdf', 10, 'application/pdf'),
+            'footer_logo' => (string) Str::uuid(),
        ]);

        $response->assertJsonValidationErrors(['header_logo']);
@@ -214,7 +329,13 @@ class BootstrapTenantControllerTest extends TestCase
        $response2 = $this->postJson('/api/tenants', [
            'codigo' => 'acme',
            'nombre' => 'Acme',
+            'dominio' => 'acme.com',
+            'primary_color' => '#111111',
+            'secondary_color' => '#222222',
+            'danger_color' => '#333333',
+            'header_footer_bg_color' => '#444444',
            'header_logo' => 'data:application/pdf;base64,JVBERi0xLjQKJdcfqksKMSAwIG9iagogIDw8IC9UeXBlIC9DYXRhbG9nCiAgICAvUGFnZXMgMiAwIFI...',
+            'footer_logo' => (string) Str::uuid(),
        ]);

        $response2->assertJsonValidationErrors(['header_logo']);
@@ -230,20 +351,69 @@ class BootstrapTenantControllerTest extends TestCase
        $response = $this->postJson('/api/tenants', [
            'codigo' => 'acme',
            'nombre' => 'Acme',
+            'dominio' => 'acme.com',
+            'primary_color' => '#111111',
+            'secondary_color' => '#222222',
+            'danger_color' => '#333333',
+            'header_footer_bg_color' => '#444444',
            'header_logo' => $header,
            'footer_logo' => $footer,
        ]);

        $response->assertCreated();

-        $headerUuid = $response->json('data.header_logo');
-        $footerUuid = $response->json('data.footer_logo');
+        $tenant = Tenant::query()->with(['headerLogo', 'footerLogo'])->where('codigo', 'acme')->firstOrFail();

-        $this->assertTrue(Str::isUuid($headerUuid));
-        $this->assertTrue(Str::isUuid($footerUuid));
+        $this->assertNotNull($tenant->header_logo_id);
+        $this->assertNotNull($tenant->footer_logo_id);

-        $this->assertDatabaseHas('attachments', ['key' => $headerUuid]);
-        $this->assertDatabaseHas('attachments', ['key' => $footerUuid]);
+        $headerUrl = $response->json('data.header_logo');
+        $footerUrl = $response->json('data.footer_logo');
+
+        $this->assertStringContainsString($tenant->headerLogo->key, $headerUrl);
+        $this->assertStringContainsString($tenant->footerLogo->key, $footerUrl);
+        $this->assertTrue(
+            str_contains($headerUrl, 'Expires=') || str_contains($headerUrl, 'expiration=') || str_contains($headerUrl, 'X-Amz-Expires=')
+        );
+        $this->assertTrue(
+            str_contains($footerUrl, 'Expires=') || str_contains($footerUrl, 'expiration=') || str_contains($footerUrl, 'X-Amz-Expires=')
+        );
+
+        $this->assertDatabaseHas('attachments', ['key' => $tenant->headerLogo->key]);
+        $this->assertDatabaseHas('attachments', ['key' => $tenant->footerLogo->key]);
+    }
+
+    private function createTenant(array $attributes = []): Tenant
+    {
+        $hdrKey = (string) Str::uuid();
+        $ftrKey = (string) Str::uuid();
+
+        $headerAttachment = \App\Domains\Attachable\Models\Attachment::create([
+            'key' => $hdrKey,
+            'path' => 'tenants/' . $hdrKey . '.png',
+            'filename' => 'logo_header.png',
+            'type' => \App\Domains\Attachable\Enums\AttachmentType::Image,
+            'mime_type' => 'image/png',
+        ]);
+        $footerAttachment = \App\Domains\Attachable\Models\Attachment::create([
+            'key' => $ftrKey,
+            'path' => 'tenants/' . $ftrKey . '.png',
+            'filename' => 'logo_footer.png',
+            'type' => \App\Domains\Attachable\Enums\AttachmentType::Image,
+            'mime_type' => 'image/png',
+        ]);
+
+        return Tenant::create(array_merge([
+            'codigo' => 'acme',
+            'nombre' => 'Acme',
+            'dominio' => 'acme.com',
+            'primary_color' => '#ff0000',
+            'secondary_color' => '#00ff00',
+            'danger_color' => '#0000ff',
+            'header_footer_bg_color' => '#ffffff',
+            'header_logo_id' => $headerAttachment->id,
+            'footer_logo_id' => $footerAttachment->id,
+        ], $attributes));
    }

    public function test_it_stores_base64_logos_in_tenants_directory(): void
@@ -252,16 +422,40 @@ class BootstrapTenantControllerTest extends TestCase

        $base64Image = 'data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNk+M9QDwADhgGAWjR9awAAAABJRU5ErkJggg==';

+        $ftrUuid = (string) Str::uuid();
+        $footerAttachment = \App\Domains\Attachable\Models\Attachment::create([
+            'key' => $ftrUuid,
+            'path' => 'tenants/' . $ftrUuid . '.png',
+            'filename' => 'logo_footer.png',
+            'type' => \App\Domains\Attachable\Enums\AttachmentType::Image,
+            'mime_type' => 'image/png',
+        ]);
+
        $response = $this->postJson('/api/tenants', [
            'codigo' => 'acme',
            'nombre' => 'Acme',
+            'dominio' => 'acme.com',
+            'primary_color' => '#111111',
+            'secondary_color' => '#222222',
+            'danger_color' => '#333333',
+            'header_footer_bg_color' => '#444444',
            'header_logo' => $base64Image,
+            'footer_logo' => $ftrUuid,
        ]);

        $response->assertCreated();

-        $headerUuid = $response->json('data.header_logo');
-        $this->assertTrue(Str::isUuid($headerUuid));
-        $this->assertDatabaseHas('attachments', ['key' => $headerUuid]);
+        $tenant = Tenant::query()->with('headerLogo')->where('codigo', 'acme')->firstOrFail();
+
+        $this->assertNotNull($tenant->header_logo_id);
+
+        $headerUrl = $response->json('data.header_logo');
+
+        $this->assertStringContainsString($tenant->headerLogo->key, $headerUrl);
+        $this->assertTrue(
+            str_contains($headerUrl, 'Expires=') || str_contains($headerUrl, 'expiration=') || str_contains($headerUrl, 'X-Amz-Expires=')
+        );
+
+        $this->assertDatabaseHas('attachments', ['key' => $tenant->headerLogo->key]);
    }
 }
Author	SHA1	Message	Date
ncoronel	31b65eb676	feat: implement full CRUD support and database schema for multi-tenant architecture	2026-06-26 16:57:59 -03:00
ncoronel	8708cea122	feat: implement tenant update request validation and add feature tests for domain bootstrapping	2026-06-26 16:23:14 -03:00
ncoronel	54aa696145	feat: implement tenant management system with attachment support and bootstrap controller	2026-06-26 13:17:48 -03:00