Kevin Adametz
2cde7284a1
- 83 Komponenten: Livewire\Volt\Component → Livewire\Component
- 73 Routen (admin, auth, customer): Volt::route() → Route::livewire()
- 88 Testdateien: Volt::test/actingAs → Livewire::test/actingAs
- VoltServiceProvider gelöscht; composer remove livewire/volt
- config/livewire.php auf v4-Schlüssel (component_layout, component_placeholder,
component_locations, make_command: SFC ohne ⚡). Der alte Schlüssel layout war
wirkungslos; alle gerouteten Komponenten setzen ihr Layout selbst.
- CLAUDE.md, AGENTS.md, boost.json, .cursorrules, Skill volt-development
- Roadmap: erledigt; Larastan erfasst SFCs weiterhin nicht (Blade-Dateien)
Suite 2.325 grün, einer übersprungen; Larastan und Pint ohne Meldung;
route:cache und view:cache laufen.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
101 lines
3.7 KiB
PHP
101 lines
3.7 KiB
PHP
<?php
|
|
|
|
use App\Models\Company;
|
|
use App\Models\User;
|
|
use Database\Seeders\RolesAndPermissionsSeeder;
|
|
use Illuminate\Http\UploadedFile;
|
|
use Illuminate\Support\Facades\RateLimiter;
|
|
use Illuminate\Support\Facades\Route;
|
|
use Illuminate\Support\Facades\Storage;
|
|
use Livewire\Livewire;
|
|
use Tests\TestCase;
|
|
|
|
test('responses carry the application-level security headers', function () {
|
|
/** @var TestCase $this */
|
|
$this->get('https://presseecho.test/de')
|
|
->assertSuccessful()
|
|
->assertHeader('X-Content-Type-Options', 'nosniff')
|
|
->assertHeader('X-Frame-Options', 'SAMEORIGIN')
|
|
->assertHeader('Referrer-Policy', 'strict-origin-when-cross-origin')
|
|
->assertHeader('Permissions-Policy', 'camera=(), microphone=(), geolocation=()');
|
|
});
|
|
|
|
test('the magic link and preview consume routes are throttled', function () {
|
|
$routes = Route::getRoutes();
|
|
|
|
expect($routes->getByName('magic-links.consume')->gatherMiddleware())->toContain('throttle:10,1');
|
|
expect($routes->getByName('press-releases.preview')->gatherMiddleware())->toContain('throttle:30,1');
|
|
});
|
|
|
|
test('password reset requests are rate limited per email', function () {
|
|
foreach (range(1, 3) as $i) {
|
|
RateLimiter::hit('password-reset|spam@example.test', 3600);
|
|
}
|
|
|
|
Livewire::test('auth.forgot-password')
|
|
->set('email', 'spam@example.test')
|
|
->call('sendPasswordResetLink')
|
|
->assertHasErrors(['email']);
|
|
});
|
|
|
|
test('registration is rate limited per ip', function () {
|
|
foreach (range(1, 10) as $i) {
|
|
RateLimiter::hit('register-ip|127.0.0.1', 3600);
|
|
}
|
|
|
|
Livewire::test('auth.register')
|
|
->set('name', 'Bot Bot')
|
|
->set('email', 'bot@example.test')
|
|
->set('password', 'super-secret-password')
|
|
->set('password_confirmation', 'super-secret-password')
|
|
->set('terms_accepted', true)
|
|
->call('register')
|
|
->assertHasErrors(['email']);
|
|
|
|
expect(User::query()->where('email', 'bot@example.test')->exists())->toBeFalse();
|
|
});
|
|
|
|
test('company create stores the logo through the image service pipeline', function () {
|
|
/** @var TestCase $this */
|
|
$this->seed(RolesAndPermissionsSeeder::class);
|
|
Storage::fake('public');
|
|
|
|
$admin = User::factory()->create(['is_active' => true]);
|
|
$admin->assignRole('admin');
|
|
|
|
Livewire::actingAs($admin)
|
|
->test('admin.companies.create')
|
|
->set('company_name', 'Logo GmbH')
|
|
->set('email', 'logo@example.test')
|
|
->set('portal', 'presseecho')
|
|
->set('logo', UploadedFile::fake()->image('logo.png', 400, 400))
|
|
->call('save')
|
|
->assertHasNoErrors();
|
|
|
|
$company = Company::query()->where('name', 'Logo GmbH')->firstOrFail();
|
|
|
|
// ImageService-Pfad (UUID-Name unter company-logos/{portal}/{id}) statt
|
|
// roher store()-Ablage; Varianten wurden erzeugt.
|
|
expect($company->logo_path)->toStartWith('company-logos/presseecho/'.$company->id.'/');
|
|
expect($company->logo_variants)->not->toBeNull();
|
|
Storage::disk('public')->assertExists($company->logo_path);
|
|
});
|
|
|
|
test('company create rejects svg logos', function () {
|
|
/** @var TestCase $this */
|
|
$this->seed(RolesAndPermissionsSeeder::class);
|
|
Storage::fake('public');
|
|
|
|
$admin = User::factory()->create(['is_active' => true]);
|
|
$admin->assignRole('admin');
|
|
|
|
Livewire::actingAs($admin)
|
|
->test('admin.companies.create')
|
|
->set('company_name', 'SVG GmbH')
|
|
->set('portal', 'presseecho')
|
|
->set('logo', UploadedFile::fake()->createWithContent('logo.svg', '<svg xmlns="http://www.w3.org/2000/svg"><script>alert(1)</script></svg>'))
|
|
->call('save')
|
|
->assertHasErrors(['logo']);
|
|
|
|
expect(Company::query()->where('name', 'SVG GmbH')->exists())->toBeFalse();
|
|
});
|