Matthieu
80 lines
2.4 KiB
PHP
80 lines
2.4 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Tests\Functional\Module\Core;
|
|
|
|
use App\Module\Core\Domain\Entity\Role;
|
|
use App\Module\Core\Domain\Entity\User;
|
|
use Doctrine\ORM\EntityManagerInterface;
|
|
use Symfony\Bundle\FrameworkBundle\KernelBrowser;
|
|
use Symfony\Bundle\FrameworkBundle\Test\WebTestCase;
|
|
|
|
/**
|
|
* @internal
|
|
*/
|
|
final class RoleApiTest extends WebTestCase
|
|
{
|
|
public function testGetCollectionRequiresAuthentication(): void
|
|
{
|
|
$client = self::createClient();
|
|
$client->request('GET', '/api/roles');
|
|
|
|
self::assertResponseStatusCodeSame(401);
|
|
}
|
|
|
|
public function testAdminCanListRoles(): void
|
|
{
|
|
$client = self::createClient();
|
|
$this->loginAdmin($client);
|
|
|
|
$client->request('GET', '/api/roles');
|
|
|
|
self::assertResponseIsSuccessful();
|
|
$data = json_decode($client->getResponse()->getContent(), true);
|
|
self::assertArrayHasKey('member', $data);
|
|
}
|
|
|
|
public function testAdminCanCreateRole(): void
|
|
{
|
|
$client = self::createClient();
|
|
$this->loginAdmin($client);
|
|
|
|
$code = 'bureau_'.uniqid();
|
|
$client->request('POST', '/api/roles', server: [
|
|
'CONTENT_TYPE' => 'application/ld+json',
|
|
], content: json_encode(['code' => $code, 'label' => 'Bureau']));
|
|
|
|
self::assertResponseStatusCodeSame(201);
|
|
$data = json_decode($client->getResponse()->getContent(), true);
|
|
self::assertSame($code, $data['code']);
|
|
self::assertSame('Bureau', $data['label']);
|
|
self::assertFalse($data['isSystem']);
|
|
}
|
|
|
|
public function testDeletingSystemRoleIsForbidden(): void
|
|
{
|
|
$client = self::createClient();
|
|
$em = self::getContainer()->get(EntityManagerInterface::class);
|
|
|
|
$systemRole = new Role('sys_'.uniqid(), 'System role', 'Rôle système', true);
|
|
$em->persist($systemRole);
|
|
$em->flush();
|
|
$id = $systemRole->getId();
|
|
|
|
$this->loginAdmin($client);
|
|
|
|
$client->request('DELETE', '/api/roles/'.$id);
|
|
|
|
self::assertResponseStatusCodeSame(403);
|
|
}
|
|
|
|
private function loginAdmin(KernelBrowser $client): void
|
|
{
|
|
$em = self::getContainer()->get(EntityManagerInterface::class);
|
|
$user = $em->getRepository(User::class)->findOneBy(['username' => 'admin']);
|
|
self::assertInstanceOf(User::class, $user);
|
|
$client->loginUser($user);
|
|
}
|
|
}
|