74bd88d3d6
Self-hosted installs (SELF_HOSTED=true, the default) now close /register
to the public. Workspace invites still work — the AcceptInvite page
links into /register with ?invite={id}, the middleware persists that
into the session, and POST /register passes through.
- EnsureRegistrationEnabled middleware gates GET/POST /register.
Accepts ?invite=… (URL) or pending_invite_id (session) as the pass.
- RegisteredUserController::store clears the marker after signup.
- AcceptInvite.vue passes invite.id in the register link's query string.
- Login.vue hides the "Sign up" link when self_hosted.
- UserSeeder bootstraps a single admin (admin@trypost.it / password).
Idempotent; not wired into DatabaseSeeder — operator runs
`php artisan db:seed --class=UserSeeder` per the install docs.
- Tests cover both flag values for every changed surface.
Docs PR: see trypost-docs self-hosting/installation.mdx step 3.
86 lines
2.4 KiB
PHP
86 lines
2.4 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
beforeEach(fn () => config()->set('trypost.self_hosted', false));
|
|
|
|
test('login page loads when google auth is disabled', function () {
|
|
config(['trypost.google_auth_enabled' => false]);
|
|
|
|
$response = $this->get(route('login'));
|
|
|
|
$response->assertOk();
|
|
});
|
|
|
|
test('login page loads when google auth is enabled', function () {
|
|
config(['trypost.google_auth_enabled' => true]);
|
|
|
|
$response = $this->get(route('login'));
|
|
|
|
$response->assertOk();
|
|
});
|
|
|
|
test('register page loads when google auth is disabled', function () {
|
|
config(['trypost.google_auth_enabled' => false]);
|
|
|
|
$response = $this->get(route('register'));
|
|
|
|
$response->assertOk();
|
|
});
|
|
|
|
test('register page loads when google auth is enabled', function () {
|
|
config(['trypost.google_auth_enabled' => true]);
|
|
|
|
$response = $this->get(route('register'));
|
|
|
|
$response->assertOk();
|
|
});
|
|
|
|
test('login page shares google auth enabled prop as false when disabled', function () {
|
|
config(['trypost.google_auth_enabled' => false]);
|
|
|
|
$response = $this->get(route('login'));
|
|
|
|
$response->assertOk();
|
|
|
|
$page = $response->original->getData()['page'];
|
|
expect($page['props']['googleAuthEnabled'])->toBeFalse();
|
|
});
|
|
|
|
test('login page shares google auth enabled prop as true when enabled', function () {
|
|
config(['trypost.google_auth_enabled' => true]);
|
|
|
|
$response = $this->get(route('login'));
|
|
|
|
$response->assertOk();
|
|
|
|
$page = $response->original->getData()['page'];
|
|
expect($page['props']['googleAuthEnabled'])->toBeTrue();
|
|
});
|
|
|
|
test('google auth redirect route exists', function () {
|
|
$response = $this->get(route('auth.google.redirect'));
|
|
|
|
// Should redirect to Google OAuth, not 404
|
|
$response->assertRedirect();
|
|
});
|
|
|
|
test('google auth callback route exists', function () {
|
|
$response = $this->get(route('auth.google.callback'));
|
|
|
|
// Should redirect to login on failure (no OAuth code), not 404
|
|
$response->assertRedirect(route('login'));
|
|
});
|
|
|
|
test('register page still shares google auth enabled prop when self_hosted (via pending invite)', function () {
|
|
config()->set('trypost.self_hosted', true);
|
|
config()->set('trypost.google_auth_enabled', true);
|
|
|
|
$response = $this
|
|
->withSession(['pending_invite_id' => 'invite-abc'])
|
|
->get(route('register'));
|
|
|
|
$response->assertOk();
|
|
$page = $response->original->getData()['page'];
|
|
expect($page['props']['googleAuthEnabled'])->toBeTrue();
|
|
});
|