root
117 lines
3.6 KiB
PHP
117 lines
3.6 KiB
PHP
<?php
|
|
|
|
namespace Tests\Feature\Api;
|
|
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
use Tests\Concerns\CreatesApiTestUsers;
|
|
use Tests\TestCase;
|
|
|
|
class ApiPreferencesFeatureTest extends TestCase
|
|
{
|
|
use CreatesApiTestUsers;
|
|
use RefreshDatabase;
|
|
|
|
public function test_authenticated_user_can_create_read_update_and_delete_preferences(): void
|
|
{
|
|
$user = $this->createApiUserWithRole('teacher');
|
|
$this->actingAs($user, 'api');
|
|
|
|
$this->postJson('/api/v1/preferences', [
|
|
'theme' => 'dark',
|
|
'language' => 'en',
|
|
'receive_email_notifications' => true,
|
|
'receive_sms_notifications' => false,
|
|
])
|
|
->assertStatus(201)
|
|
->assertJsonPath('status', true);
|
|
|
|
$this->getJson('/api/v1/preferences')
|
|
->assertOk()
|
|
->assertJsonPath('status', true)
|
|
->assertJsonPath('data.preferences.theme', 'dark');
|
|
|
|
$this->putJson("/api/v1/preferences/{$user->id}", [
|
|
'theme' => 'light',
|
|
'language' => 'es',
|
|
])
|
|
->assertOk()
|
|
->assertJsonPath('status', true);
|
|
|
|
$this->getJson("/api/v1/preferences/{$user->id}")
|
|
->assertOk()
|
|
->assertJsonPath('data.preferences.theme', 'light')
|
|
->assertJsonPath('data.preferences.language', 'es');
|
|
|
|
$this->deleteJson("/api/v1/preferences/{$user->id}")
|
|
->assertOk()
|
|
->assertJsonPath('status', true);
|
|
}
|
|
|
|
|
|
public function test_non_admin_cannot_list_or_manage_another_users_preferences(): void
|
|
{
|
|
$owner = $this->createApiUserWithRole('teacher');
|
|
$other = $this->createApiUserWithRole('parent');
|
|
|
|
$this->actingAs($owner, 'api');
|
|
$this->postJson('/api/v1/preferences', [
|
|
'theme' => 'dark',
|
|
'language' => 'en',
|
|
])->assertStatus(201);
|
|
|
|
$this->actingAs($other, 'api');
|
|
$this->postJson('/api/v1/preferences', [
|
|
'theme' => 'light',
|
|
'language' => 'en',
|
|
])->assertStatus(201);
|
|
|
|
$this->getJson('/api/v1/preferences/list')
|
|
->assertForbidden();
|
|
|
|
$this->getJson("/api/v1/preferences/{$owner->id}")
|
|
->assertForbidden();
|
|
|
|
$this->putJson("/api/v1/preferences/{$owner->id}", [
|
|
'theme' => 'light',
|
|
'language' => 'es',
|
|
])->assertForbidden();
|
|
|
|
$this->deleteJson("/api/v1/preferences/{$owner->id}")
|
|
->assertForbidden();
|
|
}
|
|
|
|
public function test_admin_can_list_and_delete_any_users_preferences(): void
|
|
{
|
|
$owner = $this->createApiUserWithRole('teacher');
|
|
$admin = $this->createApiUserWithRole('administrator');
|
|
|
|
$this->actingAs($owner, 'api');
|
|
$this->postJson('/api/v1/preferences', [
|
|
'theme' => 'dark',
|
|
'language' => 'en',
|
|
])->assertStatus(201);
|
|
|
|
$this->actingAs($admin, 'api');
|
|
$this->getJson('/api/v1/preferences/list')
|
|
->assertOk()
|
|
->assertJsonPath('status', true);
|
|
|
|
$this->deleteJson("/api/v1/preferences/{$owner->id}")
|
|
->assertOk()
|
|
->assertJsonPath('status', true);
|
|
}
|
|
|
|
public function test_preferences_validation_rejects_invalid_options(): void
|
|
{
|
|
$user = $this->createApiUserWithRole('teacher');
|
|
$this->actingAs($user, 'api');
|
|
|
|
$this->postJson('/api/v1/preferences', [
|
|
'theme' => 'neon-chaos',
|
|
'language' => 'klingon',
|
|
])
|
|
->assertStatus(422)
|
|
->assertJsonValidationErrors(['theme', 'language']);
|
|
}
|
|
}
|