185 lines
10 KiB
PHP
185 lines
10 KiB
PHP
<?php
|
|
|
|
namespace Tests\Feature;
|
|
|
|
use App\Http\Middleware\HandleInertiaRequests;
|
|
use App\Models\Sector;
|
|
use App\Models\User;
|
|
use App\Services\PartnershipExchange;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\DB;
|
|
use Illuminate\Support\Facades\Http;
|
|
use Illuminate\Support\Facades\Mail;
|
|
use Illuminate\Support\Facades\Queue;
|
|
use Illuminate\Support\Str;
|
|
use Tests\TestCase;
|
|
|
|
final class PartnershipDraftRecoveryTest extends TestCase
|
|
{
|
|
use RefreshDatabase;
|
|
|
|
private User $owner;
|
|
|
|
private object $record;
|
|
|
|
protected function setUp(): void
|
|
{
|
|
parent::setUp();
|
|
$this->withoutVite();
|
|
Http::fake();
|
|
Mail::fake();
|
|
Queue::fake();
|
|
$this->owner = User::factory()->create();
|
|
$this->actingAs($this->owner);
|
|
$this->record = app(PartnershipExchange::class)->save($this->owner, ['client_key' => (string) Str::uuid(), 'title' => 'SYNTHETIC original draft', 'kind' => 'seeking', 'partnership_type' => 'joint_venture', 'offer' => 'SYNTHETIC offer', 'payload' => ['consent' => true, 'mandatory' => ['capacity']]]);
|
|
}
|
|
|
|
private function command(array $changes = []): array
|
|
{
|
|
return ['operation_key' => (string) Str::uuid(), 'version' => $this->record->version, 'kind' => 'seeking', 'title' => 'SYNTHETIC saved revision', 'partnership_type' => 'joint_venture', 'payload' => ['mandatory' => ['capacity']], ...$changes];
|
|
}
|
|
|
|
private function url(): string
|
|
{
|
|
return '/parcerias/'.$this->record->id;
|
|
}
|
|
|
|
public function test_repeating_a_committed_edit_preserves_a_later_state_and_does_not_create_another_revision(): void
|
|
{
|
|
$data = $this->command();
|
|
$this->putJson($this->url(), $data)->assertOk();
|
|
$current = app(PartnershipExchange::class)->find($this->record->id);
|
|
app(PartnershipExchange::class)->transition($this->owner, $current->id, $current->version, 'submit', 'SYNTHETIC submit after edit');
|
|
$events = DB::table('partnership_events')->count();
|
|
$audits = DB::table('audit_events')->count();
|
|
$notices = DB::table('partnership_notifications')->count();
|
|
$this->putJson($this->url(), $data)->assertOk()->assertJsonPath('replayed', true)->assertJsonPath('saved_version', $data['version'] + 1)->assertJsonPath('status', 'submitted');
|
|
$this->assertSame($events, DB::table('partnership_events')->count());
|
|
$this->assertSame($audits, DB::table('audit_events')->count());
|
|
$this->assertSame($notices, DB::table('partnership_notifications')->count());
|
|
}
|
|
|
|
public function test_replay_does_not_revalidate_retired_type_or_criteria_as_a_new_write(): void
|
|
{
|
|
$data = $this->command();
|
|
$this->putJson($this->url(), $data)->assertOk();
|
|
config(['partnerships.types' => [], 'partnerships.criteria' => []]);
|
|
$this->putJson($this->url(), $data)->assertOk()->assertJsonPath('replayed', true);
|
|
}
|
|
|
|
public function test_changed_payload_with_the_same_operation_key_is_a_conflict_without_new_events(): void
|
|
{
|
|
$data = $this->command();
|
|
$this->putJson($this->url(), $data)->assertOk();
|
|
$events = DB::table('partnership_events')->count();
|
|
$this->putJson($this->url(), [...$data, 'title' => 'SYNTHETIC changed content'])->assertConflict();
|
|
$this->assertSame($events, DB::table('partnership_events')->count());
|
|
$this->assertSame('SYNTHETIC saved revision', DB::table('portal_partnerships')->where('id', $this->record->id)->value('title'));
|
|
}
|
|
|
|
public function test_updates_use_distinct_operation_keys_without_changing_the_creation_identity(): void
|
|
{
|
|
$first = $this->command(['client_key' => (string) Str::uuid()]);
|
|
$this->putJson($this->url(), $first)->assertOk()->assertJsonPath('replayed', false);
|
|
$second = $this->command(['version' => $first['version'] + 1, 'title' => 'SYNTHETIC second revision', 'client_key' => $first['client_key']]);
|
|
$this->putJson($this->url(), $second)->assertOk()->assertJsonPath('saved_version', $second['version'] + 1);
|
|
$this->assertNotSame($first['operation_key'], $second['operation_key']);
|
|
$this->assertSame($this->record->client_key, DB::table('portal_partnerships')->where('id', $this->record->id)->value('client_key'));
|
|
}
|
|
|
|
public function test_authority_is_required_for_recovery_even_for_a_revoked_original_author(): void
|
|
{
|
|
$org = (string) Str::uuid();
|
|
DB::table('organizations')->insert(['id' => $org, 'name' => 'SYNTHETIC editing organization', 'organization_type' => 'private']);
|
|
DB::table('memberships')->insert(['user_id' => $this->owner->id, 'organization_id' => $org, 'role' => 'officer']);
|
|
DB::table('portal_partnerships')->where('id', $this->record->id)->update(['organization_id' => $org]);
|
|
$data = $this->command();
|
|
$this->putJson($this->url(), $data)->assertOk();
|
|
DB::table('memberships')->where('user_id', $this->owner->id)->where('organization_id', $org)->update(['role' => 'viewer']);
|
|
$this->putJson($this->url(), $data)->assertForbidden();
|
|
$this->get($this->url().'/editar')->assertForbidden();
|
|
DB::table('memberships')->where('user_id', $this->owner->id)->where('organization_id', $org)->update(['deleted_at' => now()]);
|
|
$this->putJson($this->url(), $data)->assertForbidden();
|
|
}
|
|
|
|
public function test_editor_exposes_only_the_current_actors_save_keys_and_not_private_hashes(): void
|
|
{
|
|
$data = $this->command();
|
|
$this->putJson($this->url(), $data)->assertOk();
|
|
$url = $this->url().'/editar';
|
|
$version = app(HandleInertiaRequests::class)->version(Request::create($url));
|
|
$response = $this->get($url, ['X-Inertia' => 'true', 'X-Inertia-Version' => $version ?? ''])->assertOk()->assertJsonPath('props.editorActorId', $this->owner->id)->assertJsonPath('props.saveCommands.0.key', $data['operation_key'])->assertJsonPath('props.saveCommands.0.version', $data['version'] + 1);
|
|
foreach (['operation_hash', 'command_hash', '_creation_hash', '_notification_context'] as $private) {
|
|
$this->assertStringNotContainsString($private, $response->getContent());
|
|
}
|
|
$org = (string) Str::uuid();
|
|
$other = User::factory()->create();
|
|
DB::table('organizations')->insert(['id' => $org, 'name' => 'SYNTHETIC shared draft', 'organization_type' => 'private']);
|
|
DB::table('memberships')->insert([['user_id' => $this->owner->id, 'organization_id' => $org, 'role' => 'officer'], ['user_id' => $other->id, 'organization_id' => $org, 'role' => 'officer']]);
|
|
DB::table('portal_partnerships')->where('id', $this->record->id)->update(['organization_id' => $org]);
|
|
$this->actingAs($other)->get($url, ['X-Inertia' => 'true', 'X-Inertia-Version' => $version ?? ''])->assertOk()->assertJsonPath('props.saveCommands', [])->assertJsonPath('props.editorActorId', $other->id);
|
|
}
|
|
|
|
public function test_retired_sector_blocks_a_new_edit_but_not_a_read_only_replay(): void
|
|
{
|
|
$sector = Sector::create(['name' => 'SYNTHETIC edit sector', 'slug' => 'synthetic-'.Str::uuid(), 'is_active' => true]);
|
|
$data = $this->command(['sector_id' => $sector->id]);
|
|
$this->putJson($this->url(), $data)->assertOk();
|
|
$sector->update(['is_active' => false]);
|
|
$this->putJson($this->url(), $data)->assertOk()->assertJsonPath('replayed', true);
|
|
$this->putJson($this->url(), [...$data, 'operation_key' => (string) Str::uuid(), 'version' => $data['version'] + 1])->assertUnprocessable();
|
|
}
|
|
|
|
public function test_invalid_or_stale_uncommitted_attempts_do_not_consume_a_key(): void
|
|
{
|
|
$data = $this->command();
|
|
$events = DB::table('partnership_events')->count();
|
|
$this->putJson($this->url(), [...$data, 'operation_key' => 'invalid'])->assertUnprocessable();
|
|
$this->putJson($this->url(), [...$data, 'version' => $data['version'] + 9])->assertConflict();
|
|
$this->assertSame($events, DB::table('partnership_events')->count());
|
|
$this->putJson($this->url(), $data)->assertOk()->assertJsonPath('replayed', false);
|
|
}
|
|
|
|
public function test_operation_uuid_case_and_unused_creation_key_do_not_change_the_committed_edit(): void
|
|
{
|
|
$data = $this->command();
|
|
$this->putJson($this->url(), $data)->assertOk();
|
|
$this->putJson($this->url(), [...$data, 'operation_key' => strtoupper($data['operation_key']), 'client_key' => (string) Str::uuid()])->assertOk()->assertJsonPath('replayed', true);
|
|
}
|
|
|
|
public function test_omitted_organization_and_payload_are_preserved_and_explicit_removal_is_a_new_command(): void
|
|
{
|
|
$org = (string) Str::uuid();
|
|
DB::table('organizations')->insert(['id' => $org, 'name' => 'SYNTHETIC source organization', 'organization_type' => 'private']);
|
|
DB::table('memberships')->insert(['user_id' => $this->owner->id, 'organization_id' => $org, 'role' => 'officer']);
|
|
DB::table('portal_partnerships')->where('id', $this->record->id)->update(['organization_id' => $org]);
|
|
$data = $this->command();
|
|
$this->putJson($this->url(), $data)->assertOk();
|
|
$saved = app(PartnershipExchange::class)->find($this->record->id);
|
|
$this->assertSame($org, $saved->organization_id);
|
|
$this->assertTrue(json_decode($saved->payload, true)['consent']);
|
|
$this->putJson($this->url(), [...$data, 'organization_id' => null])->assertConflict();
|
|
$this->putJson($this->url(), [...$data, 'operation_key' => (string) Str::uuid(), 'version' => $saved->version, 'organization_id' => null])->assertOk();
|
|
$this->assertNull(app(PartnershipExchange::class)->find($saved->id)->organization_id);
|
|
}
|
|
|
|
public function test_legacy_edits_without_operation_keys_keep_version_conflicts_instead_of_a_false_replay(): void
|
|
{
|
|
$data = $this->command();
|
|
unset($data['operation_key']);
|
|
$this->putJson($this->url(), $data)->assertOk()->assertJsonPath('replayed', false)->assertJsonPath('saved_version', null);
|
|
$this->putJson($this->url(), $data)->assertConflict();
|
|
}
|
|
|
|
public function test_operation_keys_are_scoped_to_the_actor_and_partnership(): void
|
|
{
|
|
$data = $this->command();
|
|
$this->putJson($this->url(), $data)->assertOk();
|
|
$other = User::factory()->create();
|
|
$record = app(PartnershipExchange::class)->save($other, ['client_key' => (string) Str::uuid(), 'kind' => 'seeking']);
|
|
$this->actingAs($other)->putJson('/parcerias/'.$record->id,[...$data, 'version' => $record->version])->assertOk()->assertJsonPath('replayed',false);
|
|
$this->putJson($this->url(),$data)->assertForbidden();
|
|
}
|
|
}
|