74 lines
2.5 KiB
PHP
74 lines
2.5 KiB
PHP
<?php
|
|
|
|
use App\Enums\PressReleaseStatus;
|
|
use App\Models\PressRelease;
|
|
use App\Models\User;
|
|
use App\Services\Auth\MagicLinkGenerator;
|
|
use Tests\TestCase;
|
|
|
|
test('preview link returns press release for valid unexpired token', function () {
|
|
/** @var TestCase $this */
|
|
$owner = User::factory()->create();
|
|
$pr = PressRelease::factory()->create([
|
|
'user_id' => $owner->id,
|
|
'status' => PressReleaseStatus::Draft->value,
|
|
'title' => 'Geheime Vorschau',
|
|
'text' => 'Vertraulicher Inhalt für unsere Partner.',
|
|
]);
|
|
|
|
$share = app(MagicLinkGenerator::class)->createPressReleaseShareLink($pr, $owner);
|
|
|
|
$this->get(route('press-releases.preview', ['token' => $share['plain_token']]))
|
|
->assertOk()
|
|
->assertSee('Geheime Vorschau')
|
|
->assertSee('Vertraulicher Inhalt');
|
|
});
|
|
|
|
test('preview link allows access to draft press release without authentication', function () {
|
|
/** @var TestCase $this */
|
|
$owner = User::factory()->create();
|
|
$pr = PressRelease::factory()->create([
|
|
'user_id' => $owner->id,
|
|
'status' => PressReleaseStatus::Review->value,
|
|
]);
|
|
|
|
$share = app(MagicLinkGenerator::class)->createPressReleaseShareLink($pr, $owner);
|
|
|
|
$response = $this->get(route('press-releases.preview', ['token' => $share['plain_token']]));
|
|
|
|
$response->assertOk();
|
|
expect(auth()->check())->toBeFalse();
|
|
});
|
|
|
|
test('expired preview link returns 410 gone', function () {
|
|
/** @var TestCase $this */
|
|
$owner = User::factory()->create();
|
|
$pr = PressRelease::factory()->create(['user_id' => $owner->id]);
|
|
|
|
$share = app(MagicLinkGenerator::class)->createPressReleaseShareLink($pr, $owner);
|
|
$share['magic_link']->update(['expires_at' => now()->subMinute()]);
|
|
|
|
$this->get(route('press-releases.preview', ['token' => $share['plain_token']]))
|
|
->assertStatus(410)
|
|
->assertSee('abgelaufen');
|
|
});
|
|
|
|
test('invalid token returns 404', function () {
|
|
/** @var TestCase $this */
|
|
$this->get(route('press-releases.preview', ['token' => str_repeat('a', 64)]))
|
|
->assertStatus(404)
|
|
->assertSee('ungültig');
|
|
});
|
|
|
|
test('preview link for soft deleted press release returns 404', function () {
|
|
/** @var TestCase $this */
|
|
$owner = User::factory()->create();
|
|
$pr = PressRelease::factory()->create(['user_id' => $owner->id]);
|
|
|
|
$share = app(MagicLinkGenerator::class)->createPressReleaseShareLink($pr, $owner);
|
|
|
|
$pr->forceDelete();
|
|
|
|
$this->get(route('press-releases.preview', ['token' => $share['plain_token']]))
|
|
->assertStatus(404);
|
|
});
|