test(api) : add comprehensive API test suite (161 tests)

- Add AbstractApiTestCase with auth helpers and entity factories - Add tests for all entities: Machine, Piece, Composant, Product, Site, ModelType, Constructeur, CustomField, CustomFieldValue, Document, MachineComponentLink, MachinePieceLink, MachineProductLink, Profile - Add controller tests: CommentController, EntityHistory - Add HealthCheck, Filter, Pagination, Validation, Session tests - Test auth (401), authorization (403), CRUD, and edge cases Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-08 13:42:56 +01:00
parent b342d0e50a
commit efc6ec5691
22 changed files with 2843 additions and 0 deletions
--- a/tests/Api/Entity/ProfileTest.php
+++ b/tests/Api/Entity/ProfileTest.php
@@ -0,0 +1,125 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Tests\Api\Entity;
+
+use App\Tests\AbstractApiTestCase;
+
+/**
+ * @internal
+ */
+class ProfileTest extends AbstractApiTestCase
+{
+    public function testGetCollectionAsAdmin(): void
+    {
+        $this->createProfile(firstName: 'Alice', lastName: 'Dupont');
+
+        $client = $this->createAdminClient();
+        $client->request('GET', '/api/profiles');
+
+        $this->assertResponseIsSuccessful();
+        $this->assertJsonContainsHydraCollection();
+    }
+
+    public function testGetCollectionForbiddenForViewer(): void
+    {
+        $client = $this->createViewerClient();
+        $client->request('GET', '/api/profiles');
+
+        $this->assertResponseStatusCodeSame(403);
+    }
+
+    public function testGetItemForbiddenForViewer(): void
+    {
+        $profile = $this->createProfile(firstName: 'Alice', lastName: 'Dupont');
+
+        $client = $this->createViewerClient();
+        $client->request('GET', self::iri('profiles', $profile->getId()));
+
+        $this->assertResponseStatusCodeSame(403);
+    }
+
+    public function testGetItemAsAdmin(): void
+    {
+        $profile = $this->createProfile(firstName: 'Alice', lastName: 'Dupont');
+
+        $client = $this->createAdminClient();
+        $client->request('GET', self::iri('profiles', $profile->getId()));
+
+        $this->assertResponseIsSuccessful();
+        $this->assertJsonContains([
+            'firstName' => 'Alice',
+            'lastName'  => 'Dupont',
+        ]);
+    }
+
+    public function testPostAsAdmin(): void
+    {
+        $client = $this->createAdminClient();
+        $client->request('POST', '/api/profiles', [
+            'headers' => ['Content-Type' => 'application/ld+json'],
+            'json'    => [
+                'firstName'     => 'Nouveau',
+                'lastName'      => 'Profil',
+                'email'         => 'new@test.local',
+                'plainPassword' => 'secret123',
+                'roles'         => ['ROLE_VIEWER'],
+            ],
+        ]);
+
+        $this->assertResponseStatusCodeSame(201);
+        $this->assertJsonContains([
+            'firstName' => 'Nouveau',
+            'lastName'  => 'Profil',
+        ]);
+    }
+
+    public function testPostForbiddenForGestionnaire(): void
+    {
+        $client = $this->createGestionnaireClient();
+        $client->request('POST', '/api/profiles', [
+            'headers' => ['Content-Type' => 'application/ld+json'],
+            'json'    => [
+                'firstName' => 'Blocked',
+                'lastName'  => 'User',
+            ],
+        ]);
+
+        $this->assertResponseStatusCodeSame(403);
+    }
+
+    public function testPatchAsAdmin(): void
+    {
+        $profile = $this->createProfile(firstName: 'Alice', lastName: 'Dupont');
+
+        $client = $this->createAdminClient();
+        $client->request('PATCH', self::iri('profiles', $profile->getId()), [
+            'headers' => ['Content-Type' => 'application/merge-patch+json'],
+            'json'    => ['firstName' => 'Alice modifiée'],
+        ]);
+
+        $this->assertResponseIsSuccessful();
+        $this->assertJsonContains(['firstName' => 'Alice modifiée']);
+    }
+
+    public function testDeleteAsAdmin(): void
+    {
+        $profile = $this->createProfile(firstName: 'ToDelete', lastName: 'User');
+
+        $client = $this->createAdminClient();
+        $client->request('DELETE', self::iri('profiles', $profile->getId()));
+
+        $this->assertResponseStatusCodeSame(204);
+    }
+
+    public function testUnauthenticatedAccess(): void
+    {
+        $profile = $this->createProfile();
+
+        $client = $this->createUnauthenticatedClient();
+        $client->request('GET', self::iri('profiles', $profile->getId()));
+
+        $this->assertResponseStatusCodeSame(401);
+    }
+}