mag/WMS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Updated Tests

Browse Source
This commit is contained in:
Mark Gregory
2026-06-11 12:41:01 +01:00
parent 99e4bba178
commit 8b9de7426a
5 changed files with 103 additions and 213 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/Feature/Platform/PlatformAdministrationTest.php
+37 -25
View File
@@ -18,17 +18,6 @@ class PlatformAdministrationTest extends TestCase
{
use RefreshDatabase;
/**
* Disable only CSRF for controller behaviour tests; auth/tenant/licence middleware still runs.
*/
protected function setUp(): void
{
parent::setUp();
$this->withoutMiddleware(\Illuminate\Foundation\Http\Middleware\ValidateCsrfToken::class);
$this->withoutMiddleware(\Illuminate\Foundation\Http\Middleware\VerifyCsrfToken::class);
}
/**
* Ensure guests are redirected away from platform administration.
*/
@@ -80,11 +69,11 @@ class PlatformAdministrationTest extends TestCase
{
$admin = User::factory()->mpbaPlatformAdmin()->create();
$this->actingAs($admin)->post(route('platform.companies.store'), [
$this->actingAs($admin)->withSession(['_token' => 'test-token'])->post(route('platform.companies.store'), $this->csrfPayload([
'name' => 'Abbott Logistics Limited',
'billing_email' => 'billing@abbott.example',
'status' => 'active',
])->assertRedirect();
]))->assertRedirect();
$this->assertDatabaseHas('companies', [
'name' => 'Abbott Logistics Limited',
@@ -104,11 +93,12 @@ class PlatformAdministrationTest extends TestCase
$this->actingAs($admin)
->from(route('platform.companies.index'))
->post(route('platform.companies.store'), [
->withSession(['_token' => 'test-token'])
->post(route('platform.companies.store'), $this->csrfPayload([
'name' => '',
'billing_email' => 'not-an-email',
'status' => 'unknown',
])
]))
->assertRedirect(route('platform.companies.index'))
->assertSessionHasErrors(['name', 'billing_email', 'status']);
}
@@ -121,12 +111,12 @@ class PlatformAdministrationTest extends TestCase
$admin = User::factory()->mpbaPlatformAdmin()->create();
$company = Company::create(['name' => 'Tenant A', 'slug' => 'tenant-a']);
$response = $this->actingAs($admin)->post(route('platform.licenses.store'), [
$response = $this->actingAs($admin)->withSession(['_token' => 'test-token'])->post(route('platform.licenses.store'), $this->csrfPayload([
'company_id' => $company->id,
'label' => 'Production licence',
'plan' => 'enterprise',
'max_users' => 500,
]);
]));
$response->assertRedirect()->assertSessionHas('plain_license_key');
@@ -148,12 +138,13 @@ class PlatformAdministrationTest extends TestCase
$this->actingAs($admin)
->from(route('platform.licenses.index'))
->post(route('platform.licenses.store'), [
->withSession(['_token' => 'test-token'])
->post(route('platform.licenses.store'), $this->csrfPayload([
'company_id' => 999,
'label' => '',
'plan' => 'ultimate',
'max_users' => 0,
])
]))
->assertRedirect(route('platform.licenses.index'))
->assertSessionHasErrors(['company_id', 'label', 'plan', 'max_users']);
}
@@ -166,13 +157,13 @@ class PlatformAdministrationTest extends TestCase
$admin = User::factory()->mpbaPlatformAdmin()->create();
$company = Company::create(['name' => 'Tenant Payment', 'slug' => 'tenant-payment']);
$this->actingAs($admin)->post(route('platform.payments.store'), [
$this->actingAs($admin)->withSession(['_token' => 'test-token'])->post(route('platform.payments.store'), $this->csrfPayload([
'company_id' => $company->id,
'amount' => 12345,
'currency' => 'gbp',
'status' => 'paid',
'description' => 'Manual bank transfer',
])->assertRedirect();
]))->assertRedirect();
$payment = Payment::firstOrFail();
@@ -190,13 +181,13 @@ class PlatformAdministrationTest extends TestCase
$admin = User::factory()->mpbaPlatformAdmin()->create();
$company = Company::create(['name' => 'Tenant Pending', 'slug' => 'tenant-pending']);
$this->actingAs($admin)->post(route('platform.payments.store'), [
$this->actingAs($admin)->withSession(['_token' => 'test-token'])->post(route('platform.payments.store'), $this->csrfPayload([
'company_id' => $company->id,
'amount' => 5000,
'currency' => 'gbp',
'status' => 'pending',
'description' => 'Awaiting payment',
])->assertRedirect();
]))->assertRedirect();
$this->assertNull(Payment::firstOrFail()->paid_at);
}
@@ -224,7 +215,7 @@ class PlatformAdministrationTest extends TestCase
],
];
$this->postJson(route('stripe.webhook'), $payload)
$this->withSession(['_token' => 'test-token'])->withHeader('X-CSRF-TOKEN', 'test-token')->postJson(route('stripe.webhook'), $payload)
->assertOk()
->assertJson(['received' => true]);
@@ -242,7 +233,7 @@ class PlatformAdministrationTest extends TestCase
*/
public function test_stripe_webhook_ignores_unhandled_events(): void
{
$this->postJson(route('stripe.webhook'), ['type' => 'customer.created'])
$this->withSession(['_token' => 'test-token'])->withHeader('X-CSRF-TOKEN', 'test-token')->postJson(route('stripe.webhook'), ['type' => 'customer.created'])
->assertOk()
->assertJson(['received' => true]);
@@ -271,4 +262,25 @@ class PlatformAdministrationTest extends TestCase
...$overrides,
];
}
/**
* Return payload with a valid test CSRF token.
*
* @param array<string, mixed> $payload
* @return array<string, mixed>
*/
private function csrfPayload(array $payload = []): array
{
return ['_token' => 'test-token'] + $payload;
}
/**
* Seed the test session with the matching CSRF token.
*/
private function withCsrfSession(): self
{
$this->withSession(['_token' => 'test-token']);
return $this;
}
}