UNIT3D/tests/Feature/Http/Controllers/User/ApikeyControllerTest.php

<?php

declare(strict_types=1);

/**
 * NOTICE OF LICENSE.
 *
 * UNIT3D Community Edition is open-sourced software licensed under the GNU Affero General Public License v3.0
 * The details is bundled with this project in the file LICENSE.txt.
 *
 * @project    UNIT3D Community Edition
 *
 * @author     HDVinnie <hdinnovations@protonmail.com>
 * @license    https://www.gnu.org/licenses/agpl-3.0.en.html/ GNU Affero General Public License v3.0
 */

use App\Enums\UserGroup;
use App\Models\User;
use Database\Seeders\GroupSeeder;
use Illuminate\Support\Str;

test('edit returns an ok response', function (): void {
    $user = User::factory()->create();

    $response = $this->actingAs($user)->get(route('users.apikeys.index', [$user]));

    $response->assertOk();
    $response->assertViewIs('user.apikey.index');
    $response->assertViewHas('user', $user);
});

test('edit aborts with a 403', function (): void {
    $this->seed(GroupSeeder::class);

    $staffUser = User::factory()->create([
        'group_id' => UserGroup::MODERATOR->value,
    ]);

    $user = User::factory()->create([
        'group_id' => UserGroup::USER->value,
    ]);

    $response = $this->actingAs($user)->get(route('users.apikeys.index', [$staffUser]));

    $response->assertForbidden();
});

test('update returns an ok response', function (): void {
    $user = User::factory()->create();

    $response = $this->actingAs($user)->patch(route('users.apikeys.update', [$user]), [
        'api_token' => Str::random(100),
    ]);

    $response->assertRedirect(route('users.apikeys.index', ['user' => $user]))
        ->assertSessionHas('success', 'Your API key was changed successfully.');
});

test('update aborts with a 403', function (): void {
    $this->seed(GroupSeeder::class);

    $staffUser = User::factory()->create([
        'group_id' => UserGroup::MODERATOR->value,
    ]);

    $user = User::factory()->create([
        'group_id' => UserGroup::USER->value,
    ]);

    $response = $this->actingAs($user)->patch(route('users.apikeys.update', [$staffUser]));

    $response->assertForbidden();
});