mirror of
https://github.com/coollabsio/coolify.git
synced 2026-11-04 10:42:23 +00:00
Andras BacsaiandClaude Opus 5.5
a79ee909c6
- Delete Blade components, component classes, Livewire components and views that nothing uses after the redesign. - Delete tests that only compare Blade/CSS source text; keep the source checks for authorization gates, stable wire:key values and escaping. - Update stale tests to the current UI and behaviour. - Update DESIGN.md to the current navigation and layout. - Add a lesson: test behaviour, not source markup. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
104 lines
3.3 KiB
PHP
104 lines
3.3 KiB
PHP
<?php
|
|
|
|
use App\Models\InstanceSettings;
|
|
use App\Models\Team;
|
|
use App\Models\User;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
|
|
uses(RefreshDatabase::class);
|
|
|
|
beforeEach(function () {
|
|
InstanceSettings::forceCreate(['id' => 0, 'is_api_enabled' => true]);
|
|
|
|
$this->team = Team::factory()->create();
|
|
$this->user = User::factory()->create();
|
|
$this->team->members()->attach($this->user->id, ['role' => 'owner']);
|
|
|
|
session(['currentTeam' => $this->team]);
|
|
});
|
|
|
|
describe('POST /api/v1/projects', function () {
|
|
test('read-only token cannot create a project', function () {
|
|
$token = $this->user->createToken('read-only', ['read']);
|
|
|
|
$response = $this->withHeaders([
|
|
'Authorization' => 'Bearer '.$token->plainTextToken,
|
|
'Content-Type' => 'application/json',
|
|
])->postJson('/api/v1/projects', [
|
|
'name' => 'Test Project',
|
|
]);
|
|
|
|
$response->assertStatus(403);
|
|
});
|
|
|
|
test('write token can create a project', function () {
|
|
$token = $this->user->createToken('write-token', ['write']);
|
|
|
|
$response = $this->withHeaders([
|
|
'Authorization' => 'Bearer '.$token->plainTextToken,
|
|
'Content-Type' => 'application/json',
|
|
])->postJson('/api/v1/projects', [
|
|
'name' => 'Test Project',
|
|
]);
|
|
|
|
$response->assertStatus(201);
|
|
$response->assertJsonStructure(['uuid']);
|
|
});
|
|
|
|
test('root token can create a project', function () {
|
|
$token = $this->user->createToken('root-token', ['root']);
|
|
|
|
$response = $this->withHeaders([
|
|
'Authorization' => 'Bearer '.$token->plainTextToken,
|
|
'Content-Type' => 'application/json',
|
|
])->postJson('/api/v1/projects', [
|
|
'name' => 'Test Project',
|
|
]);
|
|
|
|
$response->assertStatus(201);
|
|
$response->assertJsonStructure(['uuid']);
|
|
});
|
|
});
|
|
|
|
describe('POST /api/v1/servers', function () {
|
|
test('read-only token cannot create a server', function () {
|
|
$token = $this->user->createToken('read-only', ['read']);
|
|
|
|
$response = $this->withHeaders([
|
|
'Authorization' => 'Bearer '.$token->plainTextToken,
|
|
'Content-Type' => 'application/json',
|
|
])->postJson('/api/v1/servers', [
|
|
'name' => 'Test Server',
|
|
'ip' => '1.2.3.4',
|
|
'private_key_uuid' => 'fake-uuid',
|
|
]);
|
|
|
|
$response->assertStatus(403);
|
|
});
|
|
});
|
|
|
|
describe('POST /api/v1/servers/{uuid}/validate', function () {
|
|
test('read-only token cannot trigger server validation', function () {
|
|
$token = $this->user->createToken('read-only', ['read']);
|
|
|
|
$response = $this->withHeaders([
|
|
'Authorization' => 'Bearer '.$token->plainTextToken,
|
|
])->postJson('/api/v1/servers/fake-uuid/validate');
|
|
|
|
$response->assertStatus(403);
|
|
});
|
|
});
|
|
|
|
describe('POST /api/v1/cloud-tokens/{uuid}/validate', function () {
|
|
test('read-only token cannot validate cloud provider token', function () {
|
|
$token = $this->user->createToken('read-only', ['read']);
|
|
|
|
$response = $this->withHeaders([
|
|
'Authorization' => 'Bearer '.$token->plainTextToken,
|
|
'Content-Type' => 'application/json',
|
|
])->postJson('/api/v1/cloud-tokens/fake-uuid/validate');
|
|
|
|
$response->assertStatus(403);
|
|
});
|
|
});
|