add api tests

2026-06-08 02:08:04 -04:00
parent 8ca24ef03f
commit 79024235ef
28 changed files with 1446 additions and 130 deletions
@@ -0,0 +1,116 @@
+<?php
+
+namespace Tests\Feature\Api;
+
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Tests\Concerns\CreatesApiTestUsers;
+use Tests\TestCase;
+
+class ApiPreferencesFeatureTest extends TestCase
+{
+    use CreatesApiTestUsers;
+    use RefreshDatabase;
+
+    public function test_authenticated_user_can_create_read_update_and_delete_preferences(): void
+    {
+        $user = $this->createApiUserWithRole('teacher');
+        $this->actingAs($user, 'api');
+
+        $this->postJson('/api/v1/preferences', [
+            'theme' => 'dark',
+            'language' => 'en',
+            'receive_email_notifications' => true,
+            'receive_sms_notifications' => false,
+        ])
+            ->assertStatus(201)
+            ->assertJsonPath('status', true);
+
+        $this->getJson('/api/v1/preferences')
+            ->assertOk()
+            ->assertJsonPath('status', true)
+            ->assertJsonPath('data.preferences.theme', 'dark');
+
+        $this->putJson("/api/v1/preferences/{$user->id}", [
+            'theme' => 'light',
+            'language' => 'es',
+        ])
+            ->assertOk()
+            ->assertJsonPath('status', true);
+
+        $this->getJson("/api/v1/preferences/{$user->id}")
+            ->assertOk()
+            ->assertJsonPath('data.preferences.theme', 'light')
+            ->assertJsonPath('data.preferences.language', 'es');
+
+        $this->deleteJson("/api/v1/preferences/{$user->id}")
+            ->assertOk()
+            ->assertJsonPath('status', true);
+    }
+
+
+    public function test_non_admin_cannot_list_or_manage_another_users_preferences(): void
+    {
+        $owner = $this->createApiUserWithRole('teacher');
+        $other = $this->createApiUserWithRole('parent');
+
+        $this->actingAs($owner, 'api');
+        $this->postJson('/api/v1/preferences', [
+            'theme' => 'dark',
+            'language' => 'en',
+        ])->assertStatus(201);
+
+        $this->actingAs($other, 'api');
+        $this->postJson('/api/v1/preferences', [
+            'theme' => 'light',
+            'language' => 'en',
+        ])->assertStatus(201);
+
+        $this->getJson('/api/v1/preferences/list')
+            ->assertForbidden();
+
+        $this->getJson("/api/v1/preferences/{$owner->id}")
+            ->assertForbidden();
+
+        $this->putJson("/api/v1/preferences/{$owner->id}", [
+            'theme' => 'light',
+            'language' => 'es',
+        ])->assertForbidden();
+
+        $this->deleteJson("/api/v1/preferences/{$owner->id}")
+            ->assertForbidden();
+    }
+
+    public function test_admin_can_list_and_delete_any_users_preferences(): void
+    {
+        $owner = $this->createApiUserWithRole('teacher');
+        $admin = $this->createApiUserWithRole('administrator');
+
+        $this->actingAs($owner, 'api');
+        $this->postJson('/api/v1/preferences', [
+            'theme' => 'dark',
+            'language' => 'en',
+        ])->assertStatus(201);
+
+        $this->actingAs($admin, 'api');
+        $this->getJson('/api/v1/preferences/list')
+            ->assertOk()
+            ->assertJsonPath('status', true);
+
+        $this->deleteJson("/api/v1/preferences/{$owner->id}")
+            ->assertOk()
+            ->assertJsonPath('status', true);
+    }
+
+    public function test_preferences_validation_rejects_invalid_options(): void
+    {
+        $user = $this->createApiUserWithRole('teacher');
+        $this->actingAs($user, 'api');
+
+        $this->postJson('/api/v1/preferences', [
+            'theme' => 'neon-chaos',
+            'language' => 'klingon',
+        ])
+            ->assertStatus(422)
+            ->assertJsonValidationErrors(['theme', 'language']);
+    }
+}