mirror of
https://github.com/coollabsio/coolify.git
synced 2026-11-04 10:42:23 +00:00
Andras BacsaiandClaude Opus 5.5
a79ee909c6
- Delete Blade components, component classes, Livewire components and views that nothing uses after the redesign. - Delete tests that only compare Blade/CSS source text; keep the source checks for authorization gates, stable wire:key values and escaping. - Update stale tests to the current UI and behaviour. - Update DESIGN.md to the current navigation and layout. - Add a lesson: test behaviour, not source markup. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
106 lines
3.7 KiB
PHP
106 lines
3.7 KiB
PHP
<?php
|
|
|
|
use App\Models\Application;
|
|
use App\Models\Environment;
|
|
use App\Models\InstanceSettings;
|
|
use App\Models\Project;
|
|
use App\Models\Server;
|
|
use App\Models\Service;
|
|
use App\Models\StandaloneDocker;
|
|
use App\Models\Team;
|
|
use App\Models\User;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
|
|
uses(RefreshDatabase::class);
|
|
|
|
beforeEach(function () {
|
|
InstanceSettings::forceCreate(['id' => 0]);
|
|
|
|
// Attacker: Team A
|
|
$this->userA = User::factory()->create();
|
|
$this->teamA = Team::factory()->create();
|
|
$this->userA->teams()->attach($this->teamA, ['role' => 'owner']);
|
|
|
|
$this->serverA = Server::factory()->create(['team_id' => $this->teamA->id]);
|
|
$this->destinationA = StandaloneDocker::where('server_id', $this->serverA->id)->firstOrFail();
|
|
$this->projectA = Project::factory()->create(['team_id' => $this->teamA->id]);
|
|
$this->environmentA = Environment::factory()->create(['project_id' => $this->projectA->id]);
|
|
|
|
// Victim: Team B
|
|
$this->teamB = Team::factory()->create();
|
|
$this->serverB = Server::factory()->create(['team_id' => $this->teamB->id]);
|
|
$this->destinationB = StandaloneDocker::where('server_id', $this->serverB->id)->firstOrFail();
|
|
$this->projectB = Project::factory()->create(['team_id' => $this->teamB->id]);
|
|
$this->environmentB = Environment::factory()->create(['project_id' => $this->projectB->id]);
|
|
|
|
$this->victimApplication = Application::factory()->create([
|
|
'environment_id' => $this->environmentB->id,
|
|
'destination_id' => $this->destinationB->id,
|
|
'destination_type' => $this->destinationB->getMorphClass(),
|
|
]);
|
|
|
|
$this->victimService = Service::factory()->create([
|
|
'environment_id' => $this->environmentB->id,
|
|
'destination_id' => $this->destinationB->id,
|
|
'destination_type' => StandaloneDocker::class,
|
|
'server_id' => $this->serverB->id,
|
|
]);
|
|
|
|
// Act as attacker
|
|
$this->actingAs($this->userA);
|
|
session(['currentTeam' => $this->teamA]);
|
|
});
|
|
|
|
test('cannot access logs of application from another team', function () {
|
|
$response = $this->get(route('project.application.logs', [
|
|
'project_uuid' => $this->projectA->uuid,
|
|
'environment_uuid' => $this->environmentA->uuid,
|
|
'application_uuid' => $this->victimApplication->uuid,
|
|
]));
|
|
|
|
$response->assertStatus(404);
|
|
});
|
|
|
|
test('cannot access logs of service from another team', function () {
|
|
$response = $this->get(route('project.service.logs', [
|
|
'project_uuid' => $this->projectA->uuid,
|
|
'environment_uuid' => $this->environmentA->uuid,
|
|
'service_uuid' => $this->victimService->uuid,
|
|
]));
|
|
|
|
$response->assertStatus(404);
|
|
});
|
|
|
|
test('can access logs of own application', function () {
|
|
$ownApplication = Application::factory()->create([
|
|
'environment_id' => $this->environmentA->id,
|
|
'destination_id' => $this->destinationA->id,
|
|
'destination_type' => $this->destinationA->getMorphClass(),
|
|
]);
|
|
|
|
$response = $this->get(route('project.application.logs', [
|
|
'project_uuid' => $this->projectA->uuid,
|
|
'environment_uuid' => $this->environmentA->uuid,
|
|
'application_uuid' => $ownApplication->uuid,
|
|
]));
|
|
|
|
$response->assertStatus(200);
|
|
});
|
|
|
|
test('can access logs of own service', function () {
|
|
$ownService = Service::factory()->create([
|
|
'environment_id' => $this->environmentA->id,
|
|
'destination_id' => $this->destinationA->id,
|
|
'destination_type' => StandaloneDocker::class,
|
|
'server_id' => $this->serverA->id,
|
|
]);
|
|
|
|
$response = $this->get(route('project.service.logs', [
|
|
'project_uuid' => $this->projectA->uuid,
|
|
'environment_uuid' => $this->environmentA->uuid,
|
|
'service_uuid' => $ownService->uuid,
|
|
]));
|
|
|
|
$response->assertStatus(200);
|
|
});
|