added tests, bug fixes and cleanup

2023-03-13 16:03:32 +10:00
parent 44b123307a
commit 2cea90c2c8
21 changed files with 443 additions and 40 deletions
--- a/tests/Feature/PostsApiTest.php
+++ b/tests/Feature/PostsApiTest.php
@@ -0,0 +1,134 @@
+<?php
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Tests\TestCase;
+use App\Models\User;
+use App\Models\Media;
+use App\Models\Post;
+use Faker\Factory as FakerFactory;
+
+class PostsApiTest extends TestCase
+{
+    use RefreshDatabase;
+
+    protected $faker;
+
+    public function setUp(): void
+    {
+        parent::setUp();
+        $this->faker = FakerFactory::create();
+    }
+    
+    public function testAnyUserCanViewPost()
+    {
+        // Create an event
+        $post = Post::factory()->create([
+            'publish_at' => $this->faker->dateTimeBetween('-2 months', '-1 month'),
+        ]);
+
+        // Create a future event
+        $futurePost = Post::factory()->create([
+            'publish_at' => $this->faker->dateTimeBetween('+1 month', '+2 months'),
+        ]);
+
+        // Send GET request to the /api/posts endpoint
+        $response = $this->getJson('/api/posts');
+        $response->assertStatus(200);
+
+        // Assert that the event is in the response data
+        $response->assertJsonCount(1, 'posts');
+        $response->assertJsonFragment([
+            'id' => $post->id,
+            'title' => $post->title,
+            'content' => $post->content,
+        ]);
+
+        $response->assertJsonMissing([
+            'id' => $futurePost->id,
+            'title' => $futurePost->title,
+            'content' => $futurePost->content,
+        ]);
+    }
+
+    public function testAdminCanCreateUpdateDeletePost()
+    {
+        // Create a user with the admin/events permission
+        $adminUser = User::factory()->create();
+        $adminUser->givePermission('admin/posts');
+    
+        // Create media data
+        $media = Media::factory()->create(['user_id' => $adminUser->id]);
+
+        // Create event data
+        $postData = Post::factory()->make([
+            'user_id' => $adminUser->id,
+            'hero' => $media->id,
+        ])->toArray();
+
+        // Test creating event
+        $response = $this->actingAs($adminUser)->postJson('/api/posts', $postData);
+        $response->assertStatus(201);
+        $this->assertDatabaseHas('posts', [
+            'title' => $postData['title'],
+            'content' => $postData['content'],
+        ]);
+    
+        // Test viewing event
+        $post = Post::where('title', $postData['title'])->first();
+        $response = $this->get("/api/posts/$post->id");
+        $response->assertStatus(200);
+        $response->assertJsonStructure([
+            'post' => [
+            'id',
+            'title',
+            'content',
+            ]
+        ]);
+    
+        // Test updating event
+        $postData['title'] = 'Updated Post';
+        $response = $this->actingAs($adminUser)->putJson("/api/posts/$post->id", $postData);
+        $response->assertStatus(200);
+        $this->assertDatabaseHas('posts', [
+            'title' => 'Updated Post',
+        ]);
+    
+        // Test deleting event
+        $response = $this->actingAs($adminUser)->delete("/api/posts/$post->id");
+        $response->assertStatus(204);
+        $this->assertDatabaseMissing('posts', [
+            'title' => 'Updated Post',
+        ]);
+    }
+
+    public function testNonAdminCannotCreateUpdateDeletePost()
+    {
+        // Create a user without admin/events permission
+        $user = User::factory()->create();
+
+        // Authenticate as the user
+        $this->actingAs($user);
+
+        // Try to create a new post
+        $media = Media::factory()->create(['user_id' => $user->id]);
+
+        $newPostData = Post::factory()->make(['user_id' => $user->id, 'hero' => $media->id])->toArray();
+
+        $response = $this->postJson('/api/posts', $newPostData);
+        $response->assertStatus(403);
+
+        // Try to update an event
+        $post = Post::factory()->create();
+        $updatedPostData = [
+            'title' => 'Updated Event',
+            'content' => 'This is an updated event.',
+            // Add more fields as needed
+        ];
+        $response = $this->putJson('/api/posts/' . $post->id, $updatedPostData);
+        $response->assertStatus(403);
+
+        // Try to delete an event
+        $post = Post::factory()->create();
+        $response = $this->deleteJson('/api/posts/' . $post->id);
+        $response->assertStatus(403);
+    }
+}