62e5d6da57
Adds an explicit test asserting that when a workspace has multiple LinkedIn users (e.g., the owner plus a client teammate), syncing tokens from one user's accounts never touches accounts admin'd by a different LinkedIn user — even though all live in the same workspace. The behavior is already correct by virtue of the `admin_user_id` / `platform_user_id` match in the synchronizer's query, but the property is now part of the test contract instead of emergent.
270 lines
10 KiB
PHP
270 lines
10 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
use App\Enums\SocialAccount\Status;
|
|
use App\Models\SocialAccount;
|
|
use App\Models\User;
|
|
use App\Models\Workspace;
|
|
use App\Services\Social\LinkedInTokenSynchronizer;
|
|
|
|
beforeEach(function () {
|
|
$this->user = User::factory()->create();
|
|
$this->workspace = Workspace::factory()->create(['user_id' => $this->user->id]);
|
|
$this->synchronizer = new LinkedInTokenSynchronizer;
|
|
});
|
|
|
|
test('syncs tokens from linkedin personal to linkedin page', function () {
|
|
$linkedInUserId = 'linkedin-user-123';
|
|
|
|
$personalAccount = SocialAccount::factory()->linkedin()->create([
|
|
'workspace_id' => $this->workspace->id,
|
|
'platform_user_id' => $linkedInUserId,
|
|
'access_token' => 'new-access-token',
|
|
'refresh_token' => 'new-refresh-token',
|
|
'token_expires_at' => now()->addDays(60),
|
|
]);
|
|
|
|
$pageAccount = SocialAccount::factory()->linkedinPage()->create([
|
|
'workspace_id' => $this->workspace->id,
|
|
'platform_user_id' => 'org-123',
|
|
'access_token' => 'old-access-token',
|
|
'refresh_token' => 'old-refresh-token',
|
|
'token_expires_at' => now()->subDay(),
|
|
'meta' => [
|
|
'organization_id' => 'org-123',
|
|
'admin_user_id' => $linkedInUserId,
|
|
'admin_name' => 'Test User',
|
|
],
|
|
]);
|
|
|
|
$this->synchronizer->syncTokens($personalAccount);
|
|
|
|
$pageAccount->refresh();
|
|
expect($pageAccount->access_token)->toBe('new-access-token');
|
|
expect($pageAccount->refresh_token)->toBe('new-refresh-token');
|
|
expect($pageAccount->token_expires_at->toDateString())->toBe(now()->addDays(60)->toDateString());
|
|
});
|
|
|
|
test('syncs tokens from linkedin page to linkedin personal', function () {
|
|
$linkedInUserId = 'linkedin-user-456';
|
|
|
|
$personalAccount = SocialAccount::factory()->linkedin()->create([
|
|
'workspace_id' => $this->workspace->id,
|
|
'platform_user_id' => $linkedInUserId,
|
|
'access_token' => 'old-access-token',
|
|
'refresh_token' => 'old-refresh-token',
|
|
'token_expires_at' => now()->subDay(),
|
|
]);
|
|
|
|
$pageAccount = SocialAccount::factory()->linkedinPage()->create([
|
|
'workspace_id' => $this->workspace->id,
|
|
'platform_user_id' => 'org-456',
|
|
'access_token' => 'new-access-token',
|
|
'refresh_token' => 'new-refresh-token',
|
|
'token_expires_at' => now()->addDays(60),
|
|
'meta' => [
|
|
'organization_id' => 'org-456',
|
|
'admin_user_id' => $linkedInUserId,
|
|
'admin_name' => 'Test User',
|
|
],
|
|
]);
|
|
|
|
$this->synchronizer->syncTokens($pageAccount);
|
|
|
|
$personalAccount->refresh();
|
|
expect($personalAccount->access_token)->toBe('new-access-token');
|
|
expect($personalAccount->refresh_token)->toBe('new-refresh-token');
|
|
expect($personalAccount->token_expires_at->toDateString())->toBe(now()->addDays(60)->toDateString());
|
|
});
|
|
|
|
test('marks disconnected account as connected after sync', function () {
|
|
$linkedInUserId = 'linkedin-user-789';
|
|
|
|
$personalAccount = SocialAccount::factory()->linkedin()->create([
|
|
'workspace_id' => $this->workspace->id,
|
|
'platform_user_id' => $linkedInUserId,
|
|
'access_token' => 'new-access-token',
|
|
'refresh_token' => 'new-refresh-token',
|
|
'token_expires_at' => now()->addDays(60),
|
|
]);
|
|
|
|
$pageAccount = SocialAccount::factory()->linkedinPage()->create([
|
|
'workspace_id' => $this->workspace->id,
|
|
'platform_user_id' => 'org-789',
|
|
'access_token' => 'old-access-token',
|
|
'refresh_token' => 'old-refresh-token',
|
|
'status' => Status::Disconnected,
|
|
'meta' => [
|
|
'organization_id' => 'org-789',
|
|
'admin_user_id' => $linkedInUserId,
|
|
'admin_name' => 'Test User',
|
|
],
|
|
]);
|
|
|
|
$this->synchronizer->syncTokens($personalAccount);
|
|
|
|
$pageAccount->refresh();
|
|
expect($pageAccount->status)->toBe(Status::Connected);
|
|
});
|
|
|
|
test('does not sync when no linked account exists', function () {
|
|
$personalAccount = SocialAccount::factory()->linkedin()->create([
|
|
'workspace_id' => $this->workspace->id,
|
|
'platform_user_id' => 'linkedin-user-solo',
|
|
'access_token' => 'access-token',
|
|
'refresh_token' => 'refresh-token',
|
|
]);
|
|
|
|
// This should not throw any errors
|
|
$this->synchronizer->syncTokens($personalAccount);
|
|
|
|
// Just verify the account still has its original tokens
|
|
expect($personalAccount->access_token)->toBe('access-token');
|
|
});
|
|
|
|
test('syncs tokens to every linked page admin\'d by the same user', function () {
|
|
$linkedInUserId = 'linkedin-user-multi';
|
|
|
|
$personalAccount = SocialAccount::factory()->linkedin()->create([
|
|
'workspace_id' => $this->workspace->id,
|
|
'platform_user_id' => $linkedInUserId,
|
|
'access_token' => 'new-access-token',
|
|
'refresh_token' => 'new-refresh-token',
|
|
'token_expires_at' => now()->addDays(60),
|
|
]);
|
|
|
|
$pageOne = SocialAccount::factory()->linkedinPage()->create([
|
|
'workspace_id' => $this->workspace->id,
|
|
'platform_user_id' => 'org-one',
|
|
'access_token' => 'old-token-1',
|
|
'refresh_token' => 'old-refresh-1',
|
|
'meta' => [
|
|
'organization_id' => 'org-one',
|
|
'admin_user_id' => $linkedInUserId,
|
|
'admin_name' => 'Test User',
|
|
],
|
|
]);
|
|
|
|
$pageTwo = SocialAccount::factory()->linkedinPage()->create([
|
|
'workspace_id' => $this->workspace->id,
|
|
'platform_user_id' => 'org-two',
|
|
'access_token' => 'old-token-2',
|
|
'refresh_token' => 'old-refresh-2',
|
|
'meta' => [
|
|
'organization_id' => 'org-two',
|
|
'admin_user_id' => $linkedInUserId,
|
|
'admin_name' => 'Test User',
|
|
],
|
|
]);
|
|
|
|
$unrelatedPage = SocialAccount::factory()->linkedinPage()->create([
|
|
'workspace_id' => $this->workspace->id,
|
|
'platform_user_id' => 'org-other-admin',
|
|
'access_token' => 'untouched-token',
|
|
'refresh_token' => 'untouched-refresh',
|
|
'meta' => [
|
|
'organization_id' => 'org-other-admin',
|
|
'admin_user_id' => 'someone-else',
|
|
'admin_name' => 'Other User',
|
|
],
|
|
]);
|
|
|
|
$this->synchronizer->syncTokens($personalAccount);
|
|
|
|
$pageOne->refresh();
|
|
$pageTwo->refresh();
|
|
$unrelatedPage->refresh();
|
|
|
|
expect($pageOne->access_token)->toBe('new-access-token');
|
|
expect($pageOne->refresh_token)->toBe('new-refresh-token');
|
|
expect($pageTwo->access_token)->toBe('new-access-token');
|
|
expect($pageTwo->refresh_token)->toBe('new-refresh-token');
|
|
expect($unrelatedPage->access_token)->toBe('untouched-token');
|
|
});
|
|
|
|
test('does not sync across different workspaces', function () {
|
|
$linkedInUserId = 'linkedin-user-cross';
|
|
$otherWorkspace = Workspace::factory()->create(['user_id' => $this->user->id]);
|
|
|
|
$personalAccount = SocialAccount::factory()->linkedin()->create([
|
|
'workspace_id' => $this->workspace->id,
|
|
'platform_user_id' => $linkedInUserId,
|
|
'access_token' => 'new-access-token',
|
|
'refresh_token' => 'new-refresh-token',
|
|
]);
|
|
|
|
$pageAccountOtherWorkspace = SocialAccount::factory()->linkedinPage()->create([
|
|
'workspace_id' => $otherWorkspace->id,
|
|
'platform_user_id' => 'org-other',
|
|
'access_token' => 'old-access-token',
|
|
'refresh_token' => 'old-refresh-token',
|
|
'meta' => [
|
|
'organization_id' => 'org-other',
|
|
'admin_user_id' => $linkedInUserId,
|
|
'admin_name' => 'Test User',
|
|
],
|
|
]);
|
|
|
|
$this->synchronizer->syncTokens($personalAccount);
|
|
|
|
$pageAccountOtherWorkspace->refresh();
|
|
// Should NOT have been synced because it's in a different workspace
|
|
expect($pageAccountOtherWorkspace->access_token)->toBe('old-access-token');
|
|
});
|
|
|
|
test('does not sync across different LinkedIn admins inside the same workspace', function () {
|
|
// Scenario: multi-user workspace. Owner connects their own LinkedIn
|
|
// (personal + page they admin); a teammate later connects their
|
|
// company's LinkedIn Page that they admin. Two distinct LinkedIn
|
|
// user identities coexist in the same workspace and must NOT share
|
|
// tokens — each token belongs to whoever authorized it at LinkedIn.
|
|
|
|
$ownerLinkedInId = 'linkedin-user-owner';
|
|
$clientLinkedInId = 'linkedin-user-client';
|
|
|
|
$ownerPersonal = SocialAccount::factory()->linkedin()->create([
|
|
'workspace_id' => $this->workspace->id,
|
|
'platform_user_id' => $ownerLinkedInId,
|
|
'access_token' => 'owner-new-access-token',
|
|
'refresh_token' => 'owner-new-refresh-token',
|
|
'token_expires_at' => now()->addDays(60),
|
|
]);
|
|
|
|
$ownerPage = SocialAccount::factory()->linkedinPage()->create([
|
|
'workspace_id' => $this->workspace->id,
|
|
'platform_user_id' => 'org-owner',
|
|
'access_token' => 'owner-old-access-token',
|
|
'refresh_token' => 'owner-old-refresh-token',
|
|
'meta' => [
|
|
'organization_id' => 'org-owner',
|
|
'admin_user_id' => $ownerLinkedInId,
|
|
'admin_name' => 'Owner',
|
|
],
|
|
]);
|
|
|
|
$clientPage = SocialAccount::factory()->linkedinPage()->create([
|
|
'workspace_id' => $this->workspace->id,
|
|
'platform_user_id' => 'org-client',
|
|
'access_token' => 'client-untouched-access-token',
|
|
'refresh_token' => 'client-untouched-refresh-token',
|
|
'meta' => [
|
|
'organization_id' => 'org-client',
|
|
'admin_user_id' => $clientLinkedInId,
|
|
'admin_name' => 'Client',
|
|
],
|
|
]);
|
|
|
|
$this->synchronizer->syncTokens($ownerPersonal);
|
|
|
|
// Owner's own page got the new token.
|
|
$ownerPage->refresh();
|
|
expect($ownerPage->access_token)->toBe('owner-new-access-token');
|
|
expect($ownerPage->refresh_token)->toBe('owner-new-refresh-token');
|
|
|
|
// Client's page (different admin_user_id) was NOT touched even
|
|
// though it lives in the same workspace.
|
|
$clientPage->refresh();
|
|
expect($clientPage->access_token)->toBe('client-untouched-access-token');
|
|
expect($clientPage->refresh_token)->toBe('client-untouched-refresh-token');
|
|
});
|