- Refactor WorkspacePolicy to use pivot role instead of workspace.user_id - Add manageBilling policy (owner only) to BillingController - Fix ApiKeyController authorization (view → manageTeam for store/destroy) - Fix WorkspaceInviteController using workspace.user_id for owner checks - Fix WorkspaceController settings is_owner using workspace.user_id - Create PostAction enum for UpdatePost/PostController action strings - Create ApiToken\Status enum - Add User::SUBSCRIPTION_NAME constant, replace all hardcoded 'default' - Convert wantsEmailFor to accept NotificationType enum - Convert all $data[] to data_get() across publishers, controllers, jobs - Fix SocialLoginController callback missing try/catch - Fix SocialController::toggleActive missing workspace null check - Fix UpdatePost NPE on meta merge when postPlatform not found - Remove HTML5 required attributes from form inputs - Convert function declarations to arrow functions in Vue components - Replace hardcoded URLs with Wayfinder route helpers - Replace new Date() with dayjs - Add 16 new test files covering policies, authorization, publishing
192 lines
6.9 KiB
PHP
192 lines
6.9 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
use App\Enums\User\Setup;
|
|
use App\Enums\UserWorkspace\Role;
|
|
use App\Models\User;
|
|
use App\Models\Workspace;
|
|
|
|
test('self hosted mode bypasses subscription check', function () {
|
|
config(['trypost.self_hosted' => true]);
|
|
|
|
$user = User::factory()->create(['setup' => Setup::Completed]);
|
|
$workspace = Workspace::factory()->create(['user_id' => $user->id]);
|
|
$workspace->members()->attach($user->id, ['role' => Role::Owner->value]);
|
|
$user->update(['current_workspace_id' => $workspace->id]);
|
|
|
|
$this->actingAs($user)
|
|
->get(route('app.calendar'))
|
|
->assertOk();
|
|
});
|
|
|
|
test('unauthenticated user is redirected to login', function () {
|
|
config(['trypost.self_hosted' => false]);
|
|
|
|
$this->get(route('app.calendar'))
|
|
->assertRedirect(route('login'));
|
|
});
|
|
|
|
test('user with active subscription can access protected route', function () {
|
|
config(['trypost.self_hosted' => false]);
|
|
|
|
$user = User::factory()->create(['setup' => Setup::Completed]);
|
|
$workspace = Workspace::factory()->create(['user_id' => $user->id]);
|
|
$workspace->members()->attach($user->id, ['role' => Role::Owner->value]);
|
|
$user->update(['current_workspace_id' => $workspace->id]);
|
|
|
|
$user->subscriptions()->create([
|
|
'type' => 'default',
|
|
'stripe_id' => 'sub_123',
|
|
'stripe_status' => 'active',
|
|
'stripe_price' => 'price_123',
|
|
]);
|
|
|
|
$this->actingAs($user)
|
|
->get(route('app.calendar'))
|
|
->assertOk();
|
|
});
|
|
|
|
test('user on trial subscription can access protected route', function () {
|
|
config(['trypost.self_hosted' => false]);
|
|
|
|
$user = User::factory()->create(['setup' => Setup::Completed]);
|
|
$workspace = Workspace::factory()->create(['user_id' => $user->id]);
|
|
$workspace->members()->attach($user->id, ['role' => Role::Owner->value]);
|
|
$user->update(['current_workspace_id' => $workspace->id]);
|
|
|
|
// Create a subscription with trial
|
|
$user->subscriptions()->create([
|
|
'type' => 'default',
|
|
'stripe_id' => 'sub_trial_123',
|
|
'stripe_status' => 'trialing',
|
|
'stripe_price' => 'price_123',
|
|
'trial_ends_at' => now()->addDays(7),
|
|
]);
|
|
|
|
$this->actingAs($user)
|
|
->get(route('app.calendar'))
|
|
->assertOk();
|
|
});
|
|
|
|
test('user without subscription is redirected to subscribe page', function () {
|
|
config(['trypost.self_hosted' => false]);
|
|
|
|
$user = User::factory()->create(['setup' => Setup::Completed]);
|
|
$workspace = Workspace::factory()->create(['user_id' => $user->id]);
|
|
$workspace->members()->attach($user->id, ['role' => Role::Owner->value]);
|
|
$user->update(['current_workspace_id' => $workspace->id]);
|
|
|
|
$this->actingAs($user)
|
|
->get(route('app.calendar'))
|
|
->assertRedirect(route('app.subscribe'));
|
|
});
|
|
|
|
test('user with expired trial subscription is redirected to subscribe page', function () {
|
|
config(['trypost.self_hosted' => false]);
|
|
|
|
$user = User::factory()->create(['setup' => Setup::Completed]);
|
|
$workspace = Workspace::factory()->create(['user_id' => $user->id]);
|
|
$workspace->members()->attach($user->id, ['role' => Role::Owner->value]);
|
|
$user->update(['current_workspace_id' => $workspace->id]);
|
|
|
|
// Create an expired trial subscription
|
|
$user->subscriptions()->create([
|
|
'type' => 'default',
|
|
'stripe_id' => 'sub_expired_trial',
|
|
'stripe_status' => 'canceled',
|
|
'stripe_price' => 'price_123',
|
|
'trial_ends_at' => now()->subDay(),
|
|
'ends_at' => now()->subDay(),
|
|
]);
|
|
|
|
$this->actingAs($user)
|
|
->get(route('app.calendar'))
|
|
->assertRedirect(route('app.subscribe'));
|
|
});
|
|
|
|
test('user with cancelled subscription is redirected to subscribe page', function () {
|
|
config(['trypost.self_hosted' => false]);
|
|
|
|
$user = User::factory()->create(['setup' => Setup::Completed]);
|
|
$workspace = Workspace::factory()->create(['user_id' => $user->id]);
|
|
$workspace->members()->attach($user->id, ['role' => Role::Owner->value]);
|
|
$user->update(['current_workspace_id' => $workspace->id]);
|
|
|
|
$user->subscriptions()->create([
|
|
'type' => 'default',
|
|
'stripe_id' => 'sub_123',
|
|
'stripe_status' => 'canceled',
|
|
'stripe_price' => 'price_123',
|
|
'ends_at' => now()->subDay(),
|
|
]);
|
|
|
|
$this->actingAs($user)
|
|
->get(route('app.calendar'))
|
|
->assertRedirect(route('app.subscribe'));
|
|
});
|
|
|
|
test('invited member can access workspace when owner has active subscription', function () {
|
|
config(['trypost.self_hosted' => false]);
|
|
|
|
$owner = User::factory()->create(['setup' => Setup::Completed]);
|
|
$workspace = Workspace::factory()->create(['user_id' => $owner->id]);
|
|
$workspace->members()->attach($owner->id, ['role' => Role::Owner->value]);
|
|
|
|
$owner->subscriptions()->create([
|
|
'type' => 'default',
|
|
'stripe_id' => 'sub_owner_123',
|
|
'stripe_status' => 'active',
|
|
'stripe_price' => 'price_123',
|
|
]);
|
|
|
|
$member = User::factory()->create(['setup' => Setup::Completed]);
|
|
$workspace->members()->attach($member->id, ['role' => Role::Member->value]);
|
|
$member->update(['current_workspace_id' => $workspace->id]);
|
|
|
|
$this->actingAs($member)
|
|
->get(route('app.calendar'))
|
|
->assertOk();
|
|
});
|
|
|
|
test('invited member is redirected to subscribe when owner has no subscription', function () {
|
|
config(['trypost.self_hosted' => false]);
|
|
|
|
$owner = User::factory()->create(['setup' => Setup::Completed]);
|
|
$workspace = Workspace::factory()->create(['user_id' => $owner->id]);
|
|
$workspace->members()->attach($owner->id, ['role' => Role::Owner->value]);
|
|
|
|
$member = User::factory()->create(['setup' => Setup::Completed]);
|
|
$workspace->members()->attach($member->id, ['role' => Role::Member->value]);
|
|
$member->update(['current_workspace_id' => $workspace->id]);
|
|
|
|
$this->actingAs($member)
|
|
->get(route('app.calendar'))
|
|
->assertRedirect(route('app.subscribe'));
|
|
});
|
|
|
|
test('invited member on own workspace without subscription is redirected to subscribe', function () {
|
|
config(['trypost.self_hosted' => false]);
|
|
|
|
$owner = User::factory()->create(['setup' => Setup::Completed]);
|
|
$ownerWorkspace = Workspace::factory()->create(['user_id' => $owner->id]);
|
|
$ownerWorkspace->members()->attach($owner->id, ['role' => Role::Owner->value]);
|
|
|
|
$owner->subscriptions()->create([
|
|
'type' => 'default',
|
|
'stripe_id' => 'sub_owner_123',
|
|
'stripe_status' => 'active',
|
|
'stripe_price' => 'price_123',
|
|
]);
|
|
|
|
$member = User::factory()->create(['setup' => Setup::Completed]);
|
|
$ownerWorkspace->members()->attach($member->id, ['role' => Role::Member->value]);
|
|
|
|
$memberWorkspace = Workspace::factory()->create(['user_id' => $member->id]);
|
|
$memberWorkspace->members()->attach($member->id, ['role' => Role::Owner->value]);
|
|
$member->update(['current_workspace_id' => $memberWorkspace->id]);
|
|
|
|
$this->actingAs($member)
|
|
->get(route('app.calendar'))
|
|
->assertRedirect(route('app.subscribe'));
|
|
});
|