added tests, bug fixes and cleanup
This commit is contained in:
@@ -3,7 +3,7 @@ use Illuminate\Foundation\Testing\RefreshDatabase;
|
||||
use Tests\TestCase;
|
||||
use App\Models\User;
|
||||
|
||||
class AuthEndpointTest extends TestCase
|
||||
class AuthApiTest extends TestCase
|
||||
{
|
||||
use RefreshDatabase;
|
||||
|
||||
136
tests/Feature/EventsApiTest.php
Normal file
136
tests/Feature/EventsApiTest.php
Normal file
@@ -0,0 +1,136 @@
|
||||
<?php
|
||||
use Illuminate\Foundation\Testing\RefreshDatabase;
|
||||
use Tests\TestCase;
|
||||
use App\Models\User;
|
||||
use App\Models\Event;
|
||||
use App\Models\Media;
|
||||
use Carbon\Carbon;
|
||||
use Faker\Factory as FakerFactory;
|
||||
|
||||
class EventsApiTest extends TestCase
|
||||
{
|
||||
use RefreshDatabase;
|
||||
|
||||
protected $faker;
|
||||
|
||||
public function setUp(): void
|
||||
{
|
||||
parent::setUp();
|
||||
$this->faker = FakerFactory::create();
|
||||
}
|
||||
|
||||
public function testAnyUserCanViewEvent()
|
||||
{
|
||||
// Create an event
|
||||
$event = Event::factory()->create([
|
||||
'publish_at' => Carbon::parse($this->faker->dateTimeBetween('-2 months', '-1 month')),
|
||||
]);
|
||||
|
||||
// Create a future event
|
||||
$futureEvent = Event::factory()->create([
|
||||
'publish_at' => Carbon::parse($this->faker->dateTimeBetween('+1 month', '+2 months')),
|
||||
]);
|
||||
|
||||
// Send GET request to the /api/events endpoint
|
||||
$response = $this->getJson('/api/events');
|
||||
$response->assertStatus(200);
|
||||
|
||||
// Assert that the event is in the response data
|
||||
$response->assertJsonCount(1, 'events');
|
||||
$response->assertJsonFragment([
|
||||
'id' => $event->id,
|
||||
'title' => $event->title,
|
||||
]);
|
||||
|
||||
$response->assertJsonMissing([
|
||||
'id' => $futureEvent->id,
|
||||
'title' => $futureEvent->title,
|
||||
]);
|
||||
}
|
||||
|
||||
public function testAdminCanCreateUpdateDeleteEvent()
|
||||
{
|
||||
// Create a user with the admin/events permission
|
||||
$adminUser = User::factory()->create();
|
||||
$adminUser->givePermission('admin/events');
|
||||
|
||||
// Create media data
|
||||
$media = Media::factory()->create(['user_id' => $adminUser->id]);
|
||||
|
||||
// Create event data
|
||||
$eventData = Event::factory()->make([
|
||||
'start_at' => now()->addDays(7),
|
||||
'end_at' => now()->addDays(7)->addHours(2),
|
||||
'hero' => $media->id,
|
||||
])->toArray();
|
||||
|
||||
// Test creating event
|
||||
$response = $this->actingAs($adminUser)->postJson('/api/events', $eventData);
|
||||
$response->assertStatus(201);
|
||||
$this->assertDatabaseHas('events', [
|
||||
'title' => $eventData['title'],
|
||||
'content' => $eventData['content'],
|
||||
]);
|
||||
|
||||
// Test viewing event
|
||||
$event = Event::where('title', $eventData['title'])->first();
|
||||
$response = $this->get("/api/events/$event->id");
|
||||
$response->assertStatus(200);
|
||||
$response->assertJsonStructure([
|
||||
'event' => [
|
||||
'id',
|
||||
'title',
|
||||
'content',
|
||||
'start_at',
|
||||
'end_at',
|
||||
]
|
||||
]);
|
||||
|
||||
// Test updating event
|
||||
$eventData['title'] = 'Updated Event';
|
||||
$response = $this->actingAs($adminUser)->putJson("/api/events/$event->id", $eventData);
|
||||
$response->assertStatus(200);
|
||||
$this->assertDatabaseHas('events', [
|
||||
'title' => 'Updated Event',
|
||||
]);
|
||||
|
||||
// Test deleting event
|
||||
$response = $this->actingAs($adminUser)->delete("/api/events/$event->id");
|
||||
$response->assertStatus(204);
|
||||
$this->assertDatabaseMissing('events', [
|
||||
'title' => 'Updated Event',
|
||||
]);
|
||||
}
|
||||
|
||||
public function testNonAdminCannotCreateUpdateDeleteEvent()
|
||||
{
|
||||
// Create a user without admin/events permission
|
||||
$user = User::factory()->create();
|
||||
|
||||
// Authenticate as the user
|
||||
$this->actingAs($user);
|
||||
|
||||
// Try to create a new event
|
||||
$media = Media::factory()->create(['user_id' => $user->id]);
|
||||
|
||||
$newEventData = Event::factory()->make(['hero' => $media->id])->toArray();
|
||||
|
||||
$response = $this->postJson('/api/events', $newEventData);
|
||||
$response->assertStatus(403);
|
||||
|
||||
// Try to update an event
|
||||
$event = Event::factory()->create();
|
||||
$updatedEventData = [
|
||||
'title' => 'Updated Event',
|
||||
'content' => 'This is an updated event.',
|
||||
// Add more fields as needed
|
||||
];
|
||||
$response = $this->putJson('/api/events/' . $event->id, $updatedEventData);
|
||||
$response->assertStatus(403);
|
||||
|
||||
// Try to delete an event
|
||||
$event = Event::factory()->create();
|
||||
$response = $this->deleteJson('/api/events/' . $event->id);
|
||||
$response->assertStatus(403);
|
||||
}
|
||||
}
|
||||
134
tests/Feature/PostsApiTest.php
Normal file
134
tests/Feature/PostsApiTest.php
Normal file
@@ -0,0 +1,134 @@
|
||||
<?php
|
||||
use Illuminate\Foundation\Testing\RefreshDatabase;
|
||||
use Tests\TestCase;
|
||||
use App\Models\User;
|
||||
use App\Models\Media;
|
||||
use App\Models\Post;
|
||||
use Faker\Factory as FakerFactory;
|
||||
|
||||
class PostsApiTest extends TestCase
|
||||
{
|
||||
use RefreshDatabase;
|
||||
|
||||
protected $faker;
|
||||
|
||||
public function setUp(): void
|
||||
{
|
||||
parent::setUp();
|
||||
$this->faker = FakerFactory::create();
|
||||
}
|
||||
|
||||
public function testAnyUserCanViewPost()
|
||||
{
|
||||
// Create an event
|
||||
$post = Post::factory()->create([
|
||||
'publish_at' => $this->faker->dateTimeBetween('-2 months', '-1 month'),
|
||||
]);
|
||||
|
||||
// Create a future event
|
||||
$futurePost = Post::factory()->create([
|
||||
'publish_at' => $this->faker->dateTimeBetween('+1 month', '+2 months'),
|
||||
]);
|
||||
|
||||
// Send GET request to the /api/posts endpoint
|
||||
$response = $this->getJson('/api/posts');
|
||||
$response->assertStatus(200);
|
||||
|
||||
// Assert that the event is in the response data
|
||||
$response->assertJsonCount(1, 'posts');
|
||||
$response->assertJsonFragment([
|
||||
'id' => $post->id,
|
||||
'title' => $post->title,
|
||||
'content' => $post->content,
|
||||
]);
|
||||
|
||||
$response->assertJsonMissing([
|
||||
'id' => $futurePost->id,
|
||||
'title' => $futurePost->title,
|
||||
'content' => $futurePost->content,
|
||||
]);
|
||||
}
|
||||
|
||||
public function testAdminCanCreateUpdateDeletePost()
|
||||
{
|
||||
// Create a user with the admin/events permission
|
||||
$adminUser = User::factory()->create();
|
||||
$adminUser->givePermission('admin/posts');
|
||||
|
||||
// Create media data
|
||||
$media = Media::factory()->create(['user_id' => $adminUser->id]);
|
||||
|
||||
// Create event data
|
||||
$postData = Post::factory()->make([
|
||||
'user_id' => $adminUser->id,
|
||||
'hero' => $media->id,
|
||||
])->toArray();
|
||||
|
||||
// Test creating event
|
||||
$response = $this->actingAs($adminUser)->postJson('/api/posts', $postData);
|
||||
$response->assertStatus(201);
|
||||
$this->assertDatabaseHas('posts', [
|
||||
'title' => $postData['title'],
|
||||
'content' => $postData['content'],
|
||||
]);
|
||||
|
||||
// Test viewing event
|
||||
$post = Post::where('title', $postData['title'])->first();
|
||||
$response = $this->get("/api/posts/$post->id");
|
||||
$response->assertStatus(200);
|
||||
$response->assertJsonStructure([
|
||||
'post' => [
|
||||
'id',
|
||||
'title',
|
||||
'content',
|
||||
]
|
||||
]);
|
||||
|
||||
// Test updating event
|
||||
$postData['title'] = 'Updated Post';
|
||||
$response = $this->actingAs($adminUser)->putJson("/api/posts/$post->id", $postData);
|
||||
$response->assertStatus(200);
|
||||
$this->assertDatabaseHas('posts', [
|
||||
'title' => 'Updated Post',
|
||||
]);
|
||||
|
||||
// Test deleting event
|
||||
$response = $this->actingAs($adminUser)->delete("/api/posts/$post->id");
|
||||
$response->assertStatus(204);
|
||||
$this->assertDatabaseMissing('posts', [
|
||||
'title' => 'Updated Post',
|
||||
]);
|
||||
}
|
||||
|
||||
public function testNonAdminCannotCreateUpdateDeletePost()
|
||||
{
|
||||
// Create a user without admin/events permission
|
||||
$user = User::factory()->create();
|
||||
|
||||
// Authenticate as the user
|
||||
$this->actingAs($user);
|
||||
|
||||
// Try to create a new post
|
||||
$media = Media::factory()->create(['user_id' => $user->id]);
|
||||
|
||||
$newPostData = Post::factory()->make(['user_id' => $user->id, 'hero' => $media->id])->toArray();
|
||||
|
||||
$response = $this->postJson('/api/posts', $newPostData);
|
||||
$response->assertStatus(403);
|
||||
|
||||
// Try to update an event
|
||||
$post = Post::factory()->create();
|
||||
$updatedPostData = [
|
||||
'title' => 'Updated Event',
|
||||
'content' => 'This is an updated event.',
|
||||
// Add more fields as needed
|
||||
];
|
||||
$response = $this->putJson('/api/posts/' . $post->id, $updatedPostData);
|
||||
$response->assertStatus(403);
|
||||
|
||||
// Try to delete an event
|
||||
$post = Post::factory()->create();
|
||||
$response = $this->deleteJson('/api/posts/' . $post->id);
|
||||
$response->assertStatus(403);
|
||||
}
|
||||
}
|
||||
@@ -4,7 +4,7 @@ use Illuminate\Foundation\Testing\WithFaker;
|
||||
use Tests\TestCase;
|
||||
use App\Models\User;
|
||||
|
||||
class UsersEndpointTest extends TestCase
|
||||
class UsersApiTest extends TestCase
|
||||
{
|
||||
use RefreshDatabase;
|
||||
|
||||
Reference in New Issue
Block a user