274 lines
10 KiB
PHP
274 lines
10 KiB
PHP
<?php
|
|
|
|
namespace Tests\Feature\Staff;
|
|
|
|
use App\Domains\Attachable\Enums\AttachmentType;
|
|
use App\Domains\Attachable\Models\Attachment;
|
|
use App\Domains\Auth\Models\ResetPasswordAttempt;
|
|
use App\Domains\Auth\Models\User;
|
|
use App\Domains\Authorization\Enums\RoleCode;
|
|
use App\Domains\Catalog\Models\Category;
|
|
use App\Domains\Notification\Events\PasswordResetRequested;
|
|
use App\Domains\Tenant\Models\Tenant;
|
|
use App\Domains\Tenant\Models\WebsiteType;
|
|
use App\Domains\Ticket\Models\Ticket;
|
|
use Database\Seeders\AuthorizationSeeder;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
use Illuminate\Support\Facades\Event;
|
|
use Illuminate\Support\Str;
|
|
use Laravel\Sanctum\Sanctum;
|
|
use Tests\TestCase;
|
|
|
|
class StaffControllerTest extends TestCase
|
|
{
|
|
use RefreshDatabase;
|
|
|
|
private Tenant $tenant;
|
|
|
|
private User $admin;
|
|
|
|
protected function setUp(): void
|
|
{
|
|
parent::setUp();
|
|
|
|
Event::fake([PasswordResetRequested::class]);
|
|
$this->seed(AuthorizationSeeder::class);
|
|
WebsiteType::query()->create(['codigo' => 'onticket', 'nombre' => 'OnTicket']);
|
|
$headerLogo = $this->createAttachment('header.png');
|
|
$footerLogo = $this->createAttachment('footer.png');
|
|
$this->tenant = Tenant::query()->create([
|
|
'codigo' => 'acme',
|
|
'nombre' => 'Acme',
|
|
'dominio' => 'acme.test',
|
|
'website_type_code' => 'onticket',
|
|
'primary_color' => '#111111',
|
|
'secondary_color' => '#222222',
|
|
'danger_color' => '#cc0000',
|
|
'success_color' => '#008800',
|
|
'header_bg_color' => '#ffffff',
|
|
'footer_bg_color' => '#ffffff',
|
|
'header_logo_id' => $headerLogo->id,
|
|
'footer_logo_id' => $footerLogo->id,
|
|
]);
|
|
$this->admin = User::factory()->create([
|
|
'rol_codigo' => RoleCode::AdminApp->value,
|
|
'tenant_codigo' => $this->tenant->codigo,
|
|
]);
|
|
}
|
|
|
|
public function test_adminapp_can_create_update_list_and_delete_staff_with_categories(): void
|
|
{
|
|
Sanctum::actingAs($this->admin);
|
|
$firstCategory = $this->createCategory('Bebidas');
|
|
$secondCategory = $this->createCategory('Comidas');
|
|
|
|
$response = $this->postJson('/api/v1/adminapp/tenant/staff', [
|
|
'nombre_apellido' => 'Ada Lovelace',
|
|
'dni' => '12345678',
|
|
'email' => 'ADA@example.test',
|
|
'category_ids' => [$firstCategory->id],
|
|
])->assertSuccessful()
|
|
->assertJsonPath('data.email', 'ada@example.test')
|
|
->assertJsonPath('data.role.codigo', RoleCode::Scanner->value)
|
|
->assertJsonPath('data.categories.0.id', $firstCategory->id);
|
|
|
|
$staffId = $response->json('data.id');
|
|
$this->assertDatabaseHas('category_scanners', [
|
|
'user_id' => $staffId,
|
|
'categoria_id' => $firstCategory->id,
|
|
]);
|
|
$this->assertDatabaseHas('reset_password_attempts', [
|
|
'user_id' => $staffId,
|
|
'reason' => ResetPasswordAttempt::REASON_STAFF_CREATED,
|
|
'status' => ResetPasswordAttempt::STATUS_PENDING,
|
|
]);
|
|
Event::assertDispatched(
|
|
PasswordResetRequested::class,
|
|
fn (PasswordResetRequested $event): bool => $event->tenantCode === $this->tenant->codigo
|
|
&& $event->channel === PasswordResetRequested::CHANNEL_SCANNER,
|
|
);
|
|
|
|
$this->getJson('/api/v1/adminapp/tenant/staff?search=ada')
|
|
->assertOk()
|
|
->assertJsonCount(1, 'data');
|
|
|
|
$this->putJson("/api/v1/adminapp/tenant/staff/{$staffId}", [
|
|
'nombre_apellido' => 'Ada Byron',
|
|
'dni' => '12345678',
|
|
'email' => 'ada@example.test',
|
|
'category_ids' => [$secondCategory->id],
|
|
])->assertOk()
|
|
->assertJsonPath('data.nombre_apellido', 'Ada Byron')
|
|
->assertJsonPath('data.categories.0.id', $secondCategory->id);
|
|
|
|
$this->assertDatabaseMissing('category_scanners', [
|
|
'user_id' => $staffId,
|
|
'categoria_id' => $firstCategory->id,
|
|
]);
|
|
|
|
$ticket = Ticket::query()->create([
|
|
'tenant_code' => $this->tenant->codigo,
|
|
'ticket' => (string) Str::uuid(),
|
|
'user_id' => $this->admin->id,
|
|
'used_at' => now(),
|
|
'scanner_user_id' => $staffId,
|
|
]);
|
|
$accessTokenId = User::query()
|
|
->findOrFail($staffId)
|
|
->createToken('scanner', ['scanner'])
|
|
->accessToken
|
|
->getKey();
|
|
|
|
$this->deleteJson("/api/v1/adminapp/tenant/staff/{$staffId}")->assertNoContent();
|
|
$this->assertSoftDeleted('users', ['id' => $staffId]);
|
|
$this->assertDatabaseHas('users', [
|
|
'id' => $staffId,
|
|
'email' => 'ada@example.test',
|
|
'active_email' => null,
|
|
]);
|
|
$this->assertDatabaseMissing('personal_access_tokens', ['id' => $accessTokenId]);
|
|
$this->assertDatabaseHas('category_scanners', [
|
|
'user_id' => $staffId,
|
|
'categoria_id' => $secondCategory->id,
|
|
]);
|
|
$this->assertSame($staffId, $ticket->fresh()->scanner_user_id);
|
|
$this->assertSame('Ada Byron', $ticket->fresh()->scannerUser?->nombre_apellido);
|
|
|
|
$this->getJson('/api/v1/adminapp/tenant/staff')
|
|
->assertOk()
|
|
->assertJsonCount(0, 'data');
|
|
|
|
$replacementResponse = $this->postJson('/api/v1/adminapp/tenant/staff', [
|
|
'nombre_apellido' => 'Nueva Ada',
|
|
'dni' => '11223344',
|
|
'email' => 'ADA@example.test',
|
|
'category_ids' => [$firstCategory->id],
|
|
])->assertSuccessful()
|
|
->assertJsonPath('data.email', 'ada@example.test');
|
|
|
|
$replacementStaffId = $replacementResponse->json('data.id');
|
|
$this->assertNotSame($staffId, $replacementStaffId);
|
|
$this->assertSame('Ada Byron', $ticket->fresh()->scannerUser?->nombre_apellido);
|
|
$this->assertDatabaseHas('users', [
|
|
'id' => $replacementStaffId,
|
|
'email' => 'ada@example.test',
|
|
'active_email' => 'ada@example.test',
|
|
'deleted_at' => null,
|
|
]);
|
|
|
|
}
|
|
|
|
public function test_admin_cannot_assign_another_tenants_category(): void
|
|
{
|
|
Sanctum::actingAs($this->admin);
|
|
$otherTenant = Tenant::query()->create([
|
|
'codigo' => 'other',
|
|
'nombre' => 'Other',
|
|
'dominio' => 'other.test',
|
|
'website_type_code' => 'onticket',
|
|
'primary_color' => '#111111',
|
|
'secondary_color' => '#222222',
|
|
'danger_color' => '#cc0000',
|
|
'success_color' => '#008800',
|
|
'header_bg_color' => '#ffffff',
|
|
'footer_bg_color' => '#ffffff',
|
|
'header_logo_id' => $this->tenant->header_logo_id,
|
|
'footer_logo_id' => $this->tenant->footer_logo_id,
|
|
]);
|
|
$foreignCategory = Category::query()->create([
|
|
'tenant_code' => $otherTenant->codigo,
|
|
'nombre' => 'Privada',
|
|
]);
|
|
$payload = [
|
|
'nombre_apellido' => 'Grace Hopper',
|
|
'dni' => '87654321',
|
|
'email' => 'grace@example.test',
|
|
'category_ids' => [$foreignCategory->id],
|
|
];
|
|
|
|
$this->postJson('/api/v1/adminapp/tenant/staff', $payload)
|
|
->assertUnprocessable()
|
|
->assertJsonValidationErrors('category_ids');
|
|
|
|
$parent = $this->createCategory('Local');
|
|
$child = Category::query()->create([
|
|
'tenant_code' => $this->tenant->codigo,
|
|
'categoria_id' => $parent->id,
|
|
'nombre' => 'Subcategoría',
|
|
]);
|
|
$payload['category_ids'] = [$child->id];
|
|
|
|
$this->postJson('/api/v1/adminapp/tenant/staff', $payload)
|
|
->assertUnprocessable()
|
|
->assertJsonValidationErrors('category_ids');
|
|
}
|
|
|
|
public function test_categories_are_required_by_default_for_scanner_staff(): void
|
|
{
|
|
Sanctum::actingAs($this->admin);
|
|
|
|
$this->postJson('/api/v1/adminapp/tenant/staff', [
|
|
'nombre_apellido' => 'Grace Hopper',
|
|
'dni' => '87654321',
|
|
'email' => 'grace@example.test',
|
|
'category_ids' => [],
|
|
])->assertUnprocessable()
|
|
->assertJsonValidationErrors('category_ids');
|
|
}
|
|
|
|
public function test_admin_can_manage_staff_without_categories_when_tenant_disables_validation(): void
|
|
{
|
|
$this->tenant->update(['scanner_category_validation_enabled' => false]);
|
|
Sanctum::actingAs($this->admin);
|
|
|
|
$response = $this->postJson('/api/v1/adminapp/tenant/staff', [
|
|
'nombre_apellido' => 'Grace Hopper',
|
|
'dni' => '87654321',
|
|
'email' => 'grace@example.test',
|
|
])->assertCreated()
|
|
->assertJsonCount(0, 'data.categories');
|
|
|
|
$staffId = $response->json('data.id');
|
|
$category = $this->createCategory('Entradas');
|
|
|
|
$this->putJson("/api/v1/adminapp/tenant/staff/{$staffId}", [
|
|
'nombre_apellido' => 'Grace Murray Hopper',
|
|
'dni' => '87654321',
|
|
'email' => 'grace@example.test',
|
|
'category_ids' => [$category->id],
|
|
])->assertOk()
|
|
->assertJsonCount(0, 'data.categories');
|
|
|
|
$this->assertDatabaseMissing('category_scanners', [
|
|
'user_id' => $staffId,
|
|
]);
|
|
}
|
|
|
|
public function test_customer_cannot_manage_staff(): void
|
|
{
|
|
Sanctum::actingAs(User::factory()->create([
|
|
'rol_codigo' => RoleCode::User->value,
|
|
]));
|
|
|
|
$this->getJson('/api/v1/adminapp/tenant/staff')->assertForbidden();
|
|
}
|
|
|
|
private function createAttachment(string $filename): Attachment
|
|
{
|
|
return Attachment::query()->create([
|
|
'path' => "test/{$filename}",
|
|
'filename' => $filename,
|
|
'type' => AttachmentType::Image,
|
|
'mime_type' => 'image/png',
|
|
]);
|
|
}
|
|
|
|
private function createCategory(string $name): Category
|
|
{
|
|
return Category::query()->create([
|
|
'tenant_code' => $this->tenant->codigo,
|
|
'nombre' => $name,
|
|
]);
|
|
}
|
|
}
|