solidtime/tests/Unit/Endpoint/Api/V1/ClientEndpointTest.php

<?php

declare(strict_types=1);

namespace Tests\Unit\Endpoint\Api\V1;

use App\Models\Client;
use App\Models\Organization;
use Illuminate\Testing\Fluent\AssertableJson;
use Laravel\Passport\Passport;

class ClientEndpointTest extends ApiEndpointTestAbstract
{
    public function test_index_endpoint_fails_if_user_has_no_permission_to_view_clients(): void
    {
        // Arrange
        $data = $this->createUserWithPermission([
        ]);
        $clients = Client::factory()->forOrganization($data->organization)->createMany(4);
        Passport::actingAs($data->user);

        // Act
        $response = $this->getJson(route('api.v1.clients.index', [$data->organization->getKey()]));

        // Assert
        $response->assertForbidden();
    }

    public function test_index_endpoint_returns_list_of_all_clients_of_organization_ordered_by_created_at_desc_per_default(): void
    {
        // Arrange
        $data = $this->createUserWithPermission([
            'clients:view',
        ]);
        $clients = Client::factory()->forOrganization($data->organization)->createMany(4);
        Passport::actingAs($data->user);

        // Act
        $response = $this->getJson(route('api.v1.clients.index', [$data->organization->getKey()]));

        // Assert
        $response->assertStatus(200);
        $response->assertJsonCount(4, 'data');
        $response->assertJson(fn (AssertableJson $json) => $json
            ->has('data')
            ->has('links')
            ->has('meta')
            ->count('data', 4)
            ->where('data.0.id', $clients->sortByDesc('created_at')->get(0)->getKey())
            ->where('data.1.id', $clients->sortByDesc('created_at')->get(1)->getKey())
            ->where('data.2.id', $clients->sortByDesc('created_at')->get(2)->getKey())
            ->where('data.3.id', $clients->sortByDesc('created_at')->get(3)->getKey())
        );
    }

    public function test_store_endpoint_fails_if_user_has_no_permission_to_create_clients(): void
    {
        // Arrange
        $data = $this->createUserWithPermission([
        ]);
        Passport::actingAs($data->user);

        // Act
        $response = $this->postJson(route('api.v1.clients.store', [$data->organization->getKey()]), [
            'name' => 'Test Client',
        ]);

        // Assert
        $response->assertForbidden();
    }

    public function test_store_endpoint_creates_new_client(): void
    {
        // Arrange
        $data = $this->createUserWithPermission([
            'clients:create',
        ]);
        $clientFake = Client::factory()->make();
        Passport::actingAs($data->user);

        // Act
        $response = $this->postJson(route('api.v1.clients.store', [$data->organization->getKey()]), [
            'name' => $clientFake->name,
        ]);

        // Assert
        $response->assertStatus(201);
        $response->assertJson(fn (AssertableJson $json) => $json
            ->has('data')
            ->where('data.name', $clientFake->name)
        );
    }

    public function test_update_endpoint_fails_if_user_has_no_permission_to_update_clients(): void
    {
        // Arrange
        $data = $this->createUserWithPermission([
        ]);
        $client = Client::factory()->forOrganization($data->organization)->create();
        $clientFake = Client::factory()->make();
        Passport::actingAs($data->user);

        // Act
        $response = $this->putJson(route('api.v1.clients.update', [$data->organization->getKey(), $client->getKey()]), [
            'name' => $clientFake->name,
        ]);

        // Assert
        $response->assertForbidden();
    }

    public function test_update_endpoint_fails_if_user_is_not_part_of_client_organization(): void
    {
        // Arrange
        $data = $this->createUserWithPermission([
            'clients:update',
        ]);
        $otherOrganization = Organization::factory()->create();
        $client = Client::factory()->forOrganization($otherOrganization)->create();
        $clientFake = Client::factory()->make();
        Passport::actingAs($data->user);

        // Act
        $response = $this->putJson(route('api.v1.clients.update', [$data->organization->getKey(), $client->getKey()]), [
            'name' => $clientFake->name,
        ]);

        // Assert
        $response->assertForbidden();
        $this->assertDatabaseHas(Client::class, [
            'id' => $client->getKey(),
            'name' => $client->name,
            'organization_id' => $otherOrganization->getKey(),
        ]);
    }

    public function test_update_endpoint_updates_client(): void
    {
        // Arrange
        $data = $this->createUserWithPermission([
            'clients:update',
        ]);
        $client = Client::factory()->forOrganization($data->organization)->create();
        $clientFake = Client::factory()->make();
        Passport::actingAs($data->user);

        // Act
        $response = $this->putJson(route('api.v1.clients.update', [$data->organization->getKey(), $client->getKey()]), [
            'name' => $clientFake->name,
        ]);

        // Assert
        $response->assertStatus(200);
        $response->assertJson(fn (AssertableJson $json) => $json
            ->has('data')
            ->where('data.name', $clientFake->name)
        );
        $this->assertDatabaseHas(Client::class, [
            'name' => $clientFake->name,
            'organization_id' => $data->organization->getKey(),
        ]);
    }

    public function test_destroy_endpoint_fails_if_user_has_no_permission_to_delete_clients(): void
    {
        // Arrange
        $data = $this->createUserWithPermission([
        ]);
        $client = Client::factory()->forOrganization($data->organization)->create();
        Passport::actingAs($data->user);

        // Act
        $response = $this->deleteJson(route('api.v1.clients.destroy', [$data->organization->getKey(), $client->getKey()]));

        // Assert
        $response->assertForbidden();
    }

    public function test_destroy_endpoint_fails_if_user_is_not_part_of_client_organization(): void
    {
        // Arrange
        $data = $this->createUserWithPermission([
            'clients:delete',
        ]);
        $otherOrganization = Organization::factory()->create();
        $client = Client::factory()->forOrganization($otherOrganization)->create();
        Passport::actingAs($data->user);

        // Act
        $response = $this->deleteJson(route('api.v1.clients.destroy', [$data->organization->getKey(), $client->getKey()]));

        // Assert
        $response->assertForbidden();
        $this->assertDatabaseHas(Client::class, [
            'id' => $client->getKey(),
            'name' => $client->name,
            'organization_id' => $otherOrganization->getKey(),
        ]);
    }

    public function test_destroy_endpoint_deletes_client(): void
    {
        // Arrange
        $data = $this->createUserWithPermission([
            'clients:delete',
        ]);
        $client = Client::factory()->forOrganization($data->organization)->create();
        Passport::actingAs($data->user);

        // Act
        $response = $this->deleteJson(route('api.v1.clients.destroy', [$data->organization->getKey(), $client->getKey()]));

        // Assert
        $response->assertStatus(204);
        $response->assertNoContent();
        $this->assertDatabaseMissing(Client::class, [
            'id' => $client->getKey(),
        ]);
    }
}