- Create Account model as Cashier Billable entity (stripe, plan, subscription) - Account owns workspaces and has an owner_id (User) - User belongs to one Account via account_id - Workspace belongs to Account via account_id, no longer has billing fields - Remove Brand model entirely (workspaces serve as grouping) - Rename brand_limit to workspace_limit in plans - Workspace roles simplified: admin/member/viewer (owner via Account) - Invites now belong to Account with workspaces JSON array - Pennant features scope changed from Workspace to Account - EnsureSubscribed middleware checks Account subscription - All controllers updated: BillingController, OnboardingController, WorkspaceInviteController, SocialController, StripeEventListener - Frontend: extract GoogleAuthButton component, create WorkspaceRole enum for type-safe role checks, fix all views for new architecture - All 1101 tests passing
96 lines
3.4 KiB
PHP
96 lines
3.4 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
use App\Enums\SocialAccount\Platform;
|
|
use App\Enums\User\Setup;
|
|
use App\Enums\UserWorkspace\Role;
|
|
use App\Models\SocialAccount;
|
|
use App\Models\User;
|
|
use App\Models\Workspace;
|
|
|
|
beforeEach(function () {
|
|
$this->user = User::factory()->create(['setup' => Setup::Completed]);
|
|
$this->workspace = Workspace::factory()->create(['user_id' => $this->user->id]);
|
|
$this->workspace->members()->attach($this->user->id, ['role' => Role::Member->value]);
|
|
$this->user->update(['current_workspace_id' => $this->workspace->id]);
|
|
});
|
|
|
|
// Index tests
|
|
test('accounts index requires authentication', function () {
|
|
$response = $this->get(route('app.accounts'));
|
|
|
|
$response->assertRedirect(route('login'));
|
|
});
|
|
|
|
test('accounts index shows platforms and connected accounts', function () {
|
|
SocialAccount::factory()->create([
|
|
'workspace_id' => $this->workspace->id,
|
|
'platform' => Platform::LinkedIn,
|
|
]);
|
|
|
|
$response = $this->actingAs($this->user)->get(route('app.accounts'));
|
|
|
|
$response->assertOk();
|
|
$response->assertInertia(fn ($page) => $page
|
|
->component('accounts/Index', false)
|
|
->has('workspace')
|
|
->has('platforms')
|
|
);
|
|
});
|
|
|
|
test('accounts index redirects if no workspace', function () {
|
|
$this->user->update(['current_workspace_id' => null]);
|
|
|
|
$response = $this->actingAs($this->user)->get(route('app.accounts'));
|
|
|
|
$response->assertRedirect(route('app.workspaces.create'));
|
|
});
|
|
|
|
// Disconnect tests
|
|
test('disconnect requires authentication', function () {
|
|
$account = SocialAccount::factory()->create(['workspace_id' => $this->workspace->id]);
|
|
|
|
$response = $this->delete(route('app.accounts.disconnect', $account));
|
|
|
|
$response->assertRedirect(route('login'));
|
|
});
|
|
|
|
test('disconnect removes social account', function () {
|
|
$account = SocialAccount::factory()->create(['workspace_id' => $this->workspace->id]);
|
|
|
|
$response = $this->actingAs($this->user)->delete(route('app.accounts.disconnect', $account));
|
|
|
|
$response->assertRedirect();
|
|
expect(SocialAccount::find($account->id))->toBeNull();
|
|
});
|
|
|
|
test('disconnect returns 403 for other workspace account', function () {
|
|
$otherWorkspace = Workspace::factory()->create();
|
|
$account = SocialAccount::factory()->create(['workspace_id' => $otherWorkspace->id]);
|
|
|
|
$response = $this->actingAs($this->user)->delete(route('app.accounts.disconnect', $account));
|
|
|
|
$response->assertForbidden();
|
|
});
|
|
|
|
// Member authorization tests
|
|
test('member cannot disconnect social account', function () {
|
|
$member = User::factory()->create(['setup' => Setup::Completed]);
|
|
$this->workspace->members()->attach($member->id, ['role' => Role::Member->value]);
|
|
$member->update(['current_workspace_id' => $this->workspace->id]);
|
|
|
|
$account = SocialAccount::factory()->create(['workspace_id' => $this->workspace->id]);
|
|
|
|
$this->actingAs($member)->delete(route('app.accounts.disconnect', $account))->assertForbidden();
|
|
});
|
|
|
|
test('member cannot toggle social account', function () {
|
|
$member = User::factory()->create(['setup' => Setup::Completed]);
|
|
$this->workspace->members()->attach($member->id, ['role' => Role::Member->value]);
|
|
$member->update(['current_workspace_id' => $this->workspace->id]);
|
|
|
|
$account = SocialAccount::factory()->create(['workspace_id' => $this->workspace->id]);
|
|
|
|
$this->actingAs($member)->put(route('app.accounts.toggle', $account))->assertForbidden();
|
|
});
|