root
32 lines
1.2 KiB
PHP
32 lines
1.2 KiB
PHP
<?php
|
|
|
|
namespace Tests\Feature\Api\V1\FullSurface;
|
|
|
|
use Tests\Feature\Api\V1\FullSurface\Support\FullSurfaceE2EContractCase;
|
|
|
|
class ApiAccountStatusLifecycleContractTest extends FullSurfaceE2EContractCase
|
|
{
|
|
public function test_suspended_disabled_and_pending_status_values_do_not_gain_access_through_profile_or_dashboard_routes(): void
|
|
{
|
|
$routes = array_slice($this->apiRoutesContainingAny(['auth/me', 'frontend', 'dashboard', 'profile', 'preferences', 'notifications']), 0, 80);
|
|
$statuses = ['suspended', 'disabled', 'inactive', 'pending', 'blocked'];
|
|
|
|
foreach ($statuses as $status) {
|
|
$actor = $this->createApiUserWithRole('parent', ['status' => $status]);
|
|
|
|
foreach ($routes as $route) {
|
|
$method = $this->primaryMethod($route);
|
|
if ($method !== 'GET') {
|
|
continue;
|
|
}
|
|
|
|
$uri = $route->uri();
|
|
$response = $this->requestAs($actor, 'GET', $uri);
|
|
|
|
$this->assertControlled($response, 'GET', $uri);
|
|
$this->assertNoServerError($response, 'account status '.$status.' at GET '.$uri);
|
|
}
|
|
}
|
|
}
|
|
}
|