Add filament resource for tokens; Ignore non-personal tokens in API token endpoints

tests/Unit/Endpoint/Api/V1/ApiTokenEndpointTest.php

@@ -19,10 +19,14 @@ class ApiTokenEndpointTest extends ApiEndpointTestAbstract
     {
         // Arrange
         $data = $this->createUserWithPermission([]);
-        $client = $this->createPersonalAccessClient();
-        $token = Token::factory()->forUser($data->user)->forClient($client)->create();
+        $personalAccessClient = $this->createPersonalAccessClient();
+        Config::set('passport.personal_access_client.id', $personalAccessClient->id);
+        Config::set('passport.personal_access_client.secret', $personalAccessClient->secret);
+        $client = $this->createClient();
+        $token = Token::factory()->forUser($data->user)->forClient($personalAccessClient)->create();
+        $otherTokenType = Token::factory()->forUser($data->user)->forClient($client)->create();
         $otherData = $this->createUserWithPermission([]);
-        $otherToken = Token::factory()->forUser($otherData->user)->forClient($client)->create();
+        $otherToken = Token::factory()->forUser($otherData->user)->forClient($personalAccessClient)->create();
         Passport::actingAs($data->user);
 
         // Act
@@ -48,9 +52,9 @@ class ApiTokenEndpointTest extends ApiEndpointTestAbstract
     {
         // Arrange
         $data = $this->createUserWithPermission([]);
-        $client = $this->createPersonalAccessClient();
-        Config::set('passport.personal_access_client.id', $client->id);
-        Config::set('passport.personal_access_client.secret', $client->secret);
+        $personalAccessClient = $this->createPersonalAccessClient();
+        Config::set('passport.personal_access_client.id', $personalAccessClient->id);
+        Config::set('passport.personal_access_client.secret', $personalAccessClient->secret);
         Passport::actingAs($data->user);
 
         // Act
@@ -73,11 +77,33 @@ class ApiTokenEndpointTest extends ApiEndpointTestAbstract
         ]);
     }
 
+    public function test_store_fails_if_personal_access_client_is_not_configured(): void
+    {
+        // Arrange
+        $data = $this->createUserWithPermission([]);
+        Passport::actingAs($data->user);
+
+        // Act
+        $response = $this->postJson(route('api.v1.api-tokens.store'), [
+            'name' => 'Test Token',
+        ]);
+
+        // Assert
+        $this->assertResponseCode($response, 400);
+        $response->assertExactJson([
+            'error' => true,
+            'key' => 'personal_access_client_is_not_configured',
+            'message' => 'Personal access client is not configured',
+        ]);
+    }
+
     public function test_revoke_endpoint_revokes_api_token(): void
     {
         // Arrange
         $data = $this->createUserWithPermission([]);
         $client = $this->createPersonalAccessClient();
+        Config::set('passport.personal_access_client.id', $client->id);
+        Config::set('passport.personal_access_client.secret', $client->secret);
         $token = Token::factory()->forUser($data->user)->forClient($client)->create();
         Passport::actingAs($data->user);
 
@@ -92,6 +118,28 @@ class ApiTokenEndpointTest extends ApiEndpointTestAbstract
         ]);
     }
 
+    public function test_revoke_fails_if_token_is_not_personal_access_token(): void
+    {
+        // Arrange
+        $data = $this->createUserWithPermission([]);
+        $personalAccessClient = $this->createPersonalAccessClient();
+        Config::set('passport.personal_access_client.id', $personalAccessClient->id);
+        Config::set('passport.personal_access_client.secret', $personalAccessClient->secret);
+        $client = $this->createClient();
+        $token = Token::factory()->forUser($data->user)->forClient($client)->create();
+        Passport::actingAs($data->user);
+
+        // Act
+        $response = $this->postJson(route('api.v1.api-tokens.revoke', $token->id));
+
+        // Assert
+        $this->assertResponseCode($response, 403);
+        $this->assertDatabaseHas(Token::class, [
+            'id' => $token->id,
+            'revoked' => false,
+        ]);
+    }
+
     public function test_revoke_fails_if_token_with_id_does_not_exist(): void
     {
         // Arrange
@@ -105,12 +153,34 @@ class ApiTokenEndpointTest extends ApiEndpointTestAbstract
         $this->assertResponseCode($response, 404);
     }
 
+    public function test_revoke_fails_if_personal_access_client_is_not_configured(): void
+    {
+        // Arrange
+        $data = $this->createUserWithPermission([]);
+        $client = $this->createPersonalAccessClient();
+        $token = Token::factory()->forUser($data->user)->forClient($client)->create();
+        Passport::actingAs($data->user);
+
+        // Act
+        $response = $this->postJson(route('api.v1.api-tokens.revoke', $token->id));
+
+        // Assert
+        $this->assertResponseCode($response, 400);
+        $response->assertExactJson([
+            'error' => true,
+            'key' => 'personal_access_client_is_not_configured',
+            'message' => 'Personal access client is not configured',
+        ]);
+    }
+
     public function test_revoke_fails_if_the_token_does_not_belong_to_the_user(): void
     {
         // Arrange
         $data = $this->createUserWithPermission([]);
         $otherData = $this->createUserWithPermission([]);
         $client = $this->createPersonalAccessClient();
+        Config::set('passport.personal_access_client.id', $client->id);
+        Config::set('passport.personal_access_client.secret', $client->secret);
         $token = Token::factory()->forUser($otherData->user)->forClient($client)->create();
         Passport::actingAs($data->user);
 
@@ -130,6 +200,8 @@ class ApiTokenEndpointTest extends ApiEndpointTestAbstract
         // Arrange
         $data = $this->createUserWithPermission([]);
         $client = $this->createPersonalAccessClient();
+        Config::set('passport.personal_access_client.id', $client->id);
+        Config::set('passport.personal_access_client.secret', $client->secret);
         $token = Token::factory()->forUser($data->user)->forClient($client)->create();
         Passport::actingAs($data->user);
 
@@ -141,6 +213,47 @@ class ApiTokenEndpointTest extends ApiEndpointTestAbstract
         $this->assertDatabaseMissing(Token::class, ['id' => $token->id]);
     }
 
+    public function test_destroy_fails_if_personal_access_client_is_not_configured(): void
+    {
+        // Arrange
+        $data = $this->createUserWithPermission([]);
+        $client = $this->createPersonalAccessClient();
+        $token = Token::factory()->forUser($data->user)->forClient($client)->create();
+        Passport::actingAs($data->user);
+
+        // Act
+        $response = $this->deleteJson(route('api.v1.api-tokens.destroy', $token->id));
+
+        // Assert
+        $this->assertResponseCode($response, 400);
+        $response->assertExactJson([
+            'error' => true,
+            'key' => 'personal_access_client_is_not_configured',
+            'message' => 'Personal access client is not configured',
+        ]);
+    }
+
+    public function test_destroy_fails_if_token_is_not_personal_access_token(): void
+    {
+        // Arrange
+        $data = $this->createUserWithPermission([]);
+        $personalAccessClient = $this->createPersonalAccessClient();
+        Config::set('passport.personal_access_client.id', $personalAccessClient->id);
+        Config::set('passport.personal_access_client.secret', $personalAccessClient->secret);
+        $client = $this->createClient();
+        $token = Token::factory()->forUser($data->user)->forClient($client)->create();
+        Passport::actingAs($data->user);
+
+        // Act
+        $response = $this->deleteJson(route('api.v1.api-tokens.destroy', $token->id));
+
+        // Assert
+        $this->assertResponseCode($response, 403);
+        $this->assertDatabaseHas(Token::class, [
+            'id' => $token->id,
+        ]);
+    }
+
     public function test_destroy_fails_if_token_with_id_does_not_exist(): void
     {
         // Arrange
@@ -160,6 +273,8 @@ class ApiTokenEndpointTest extends ApiEndpointTestAbstract
         $data = $this->createUserWithPermission([]);
         $otherData = $this->createUserWithPermission([]);
         $client = $this->createPersonalAccessClient();
+        Config::set('passport.personal_access_client.id', $client->id);
+        Config::set('passport.personal_access_client.secret', $client->secret);
         $token = Token::factory()->forUser($otherData->user)->forClient($client)->create();
         Passport::actingAs($data->user);
 
@@ -183,4 +298,15 @@ class ApiTokenEndpointTest extends ApiEndpointTestAbstract
 
         return $client;
     }
+
+    private function createClient(): Client
+    {
+        $clientRepository = new ClientRepository;
+        /** @var Client $client */
+        $client = $clientRepository->create(
+            null, 'Desktop App', 'http://localhost', null
+        );
+
+        return $client;
+    }
 }

tests/Unit/Filament/Resources/TokenResourceTest.php

@@ -0,0 +1,94 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Tests\Unit\Filament\Resources;
+
+use App\Filament\Resources\TokenResource;
+use App\Models\Passport\Client;
+use App\Models\Passport\Token;
+use App\Models\User;
+use Illuminate\Support\Facades\Config;
+use Livewire\Livewire;
+use PHPUnit\Framework\Attributes\UsesClass;
+use Tests\Unit\Filament\FilamentTestCase;
+
+#[UsesClass(TokenResource::class)]
+class TokenResourceTest extends FilamentTestCase
+{
+    protected function setUp(): void
+    {
+        parent::setUp();
+        Config::set('auth.super_admins', ['admin@example.com']);
+        $user = User::factory()->withPersonalOrganization()->create([
+            'email' => 'admin@example.com',
+        ]);
+
+        $this->actingAs($user);
+    }
+
+    public function test_can_list_tokens(): void
+    {
+        // Arrange
+        $client = Client::factory()->create();
+        $tokens = Token::factory()->forClient($client)->createMany(5);
+
+        // Act
+        $response = Livewire::test(TokenResource\Pages\ListTokens::class);
+
+        // Assert
+        $response->assertSuccessful();
+        $response->assertCanSeeTableRecords($tokens);
+    }
+
+    public function test_list_tokens_with_filter_is_personal_access_client_true(): void
+    {
+        // Arrange
+        $client = Client::factory()->create();
+        $personalAccessClient = Client::factory()->personalAccessClient()->create();
+        $tokens = Token::factory()->forClient($client)->createMany(5);
+        $personalAccessTokens = Token::factory()->forClient($personalAccessClient)->createMany(5);
+
+        // Act
+        $response = Livewire::test(TokenResource\Pages\ListTokens::class)
+            ->filterTable('is_personal_access_client', true);
+
+        // Assert
+        $response->assertSuccessful();
+        $response->assertCountTableRecords(5);
+        $response->assertCanSeeTableRecords($personalAccessTokens);
+        $response->assertCanNotSeeTableRecords($tokens);
+    }
+
+    public function test_list_tokens_with_filter_is_personal_access_client_false(): void
+    {
+        // Arrange
+        $client = Client::factory()->create();
+        $personalAccessClient = Client::factory()->personalAccessClient()->create();
+        $tokens = Token::factory()->forClient($client)->createMany(5);
+        $personalAccessTokens = Token::factory()->forClient($personalAccessClient)->createMany(5);
+
+        // Act
+        $response = Livewire::test(TokenResource\Pages\ListTokens::class)
+            ->filterTable('is_personal_access_client', false);
+
+        // Assert
+        $response->assertSuccessful();
+        $response->assertCountTableRecords(5);
+        $response->assertCanSeeTableRecords($tokens);
+        $response->assertCanNotSeeTableRecords($personalAccessTokens);
+    }
+
+    public function test_can_see_view_page_of_token(): void
+    {
+        // Arrange
+        $client = Client::factory()->create();
+        $token = Token::factory()->forClient($client)->create();
+
+        // Act
+        $response = Livewire::test(TokenResource\Pages\ViewToken::class, ['record' => $token->getKey()]);
+
+        // Assert
+        $response->assertSuccessful();
+    }
+}