presseportale/tests/Feature/Api/V1/PressReleaseSubmitApiTest.php

<?php

use App\Enums\PressReleaseStatus;
use App\Models\Category;
use App\Models\Company;
use App\Models\PressRelease;
use App\Models\PressReleaseStatusLog;
use App\Models\User;
use Illuminate\Support\Facades\Queue;
use Laravel\Sanctum\Sanctum;
use Tests\TestCase;

test('api create always produces a draft and ignores any status input', function () {
    /** @var TestCase $this */
    $user = User::factory()->create();
    $company = Company::factory()->presseecho()->create();
    $category = Category::factory()->withTranslations()->create();
    $user->companies()->attach($company->id, ['role' => 'owner']);

    Sanctum::actingAs($user, ['press-releases:write']);

    $this->postJson('/api/v1/press-releases', [
        'company_id' => $company->id,
        'category_id' => $category->id,
        'language' => 'de',
        'title' => 'API Entwurf',
        'text' => 'Inhalt',
        'status' => 'review', // soll ignoriert werden
    ])
        ->assertCreated()
        ->assertJsonPath('data.status', PressReleaseStatus::Draft->value);
});

test('api submit route raises a draft to review and counts quota and writes a log', function () {
    /** @var TestCase $this */
    Queue::fake(); // Klassifikations-Routing separat getestet; hier nur der Submit-Übergang.

    $user = User::factory()->create(['press_release_quota_used_this_month' => 0]);
    $pressRelease = PressRelease::factory()->create([
        'user_id' => $user->id,
        'status' => PressReleaseStatus::Draft->value,
        'title' => 'Saubere Pressemitteilung',
        'text' => 'Vollkommen unauffälliger Inhalt.',
    ]);

    Sanctum::actingAs($user, ['press-releases:write']);

    $this->postJson("/api/v1/press-releases/{$pressRelease->id}/submit")
        ->assertOk()
        ->assertJsonPath('data.status', PressReleaseStatus::Review->value);

    expect($pressRelease->fresh()->status)->toBe(PressReleaseStatus::Review);
    expect($user->fresh()->press_release_quota_used_this_month)->toBe(1);
    expect(PressReleaseStatusLog::where('press_release_id', $pressRelease->id)
        ->where('to_status', PressReleaseStatus::Review->value)
        ->exists())->toBeTrue();
});

test('api submit auto-rejects a press release containing a banned word', function () {
    /** @var TestCase $this */
    config()->set('blacklist.words', ['penis']);

    $user = User::factory()->create();
    $pressRelease = PressRelease::factory()->create([
        'user_id' => $user->id,
        'status' => PressReleaseStatus::Draft->value,
        'title' => 'Unzulässiger Titel penis',
        'text' => 'Inhalt',
    ]);

    Sanctum::actingAs($user, ['press-releases:write']);

    $this->postJson("/api/v1/press-releases/{$pressRelease->id}/submit")
        ->assertStatus(422);

    expect($pressRelease->fresh()->status)->toBe(PressReleaseStatus::Rejected);
});

test('api submit requires the write ability', function () {
    /** @var TestCase $this */
    $user = User::factory()->create();
    $pressRelease = PressRelease::factory()->create([
        'user_id' => $user->id,
        'status' => PressReleaseStatus::Draft->value,
    ]);

    Sanctum::actingAs($user, ['press-releases:read']);

    $this->postJson("/api/v1/press-releases/{$pressRelease->id}/submit")
        ->assertForbidden();
});

test('api submit rejects a press release already in review', function () {
    /** @var TestCase $this */
    $user = User::factory()->create();
    $pressRelease = PressRelease::factory()->inReview()->create([
        'user_id' => $user->id,
    ]);

    Sanctum::actingAs($user, ['press-releases:write']);

    $this->postJson("/api/v1/press-releases/{$pressRelease->id}/submit")
        ->assertStatus(409);
});

test('api user cannot submit another users press release', function () {
    /** @var TestCase $this */
    $owner = User::factory()->create();
    $otherUser = User::factory()->create();
    $pressRelease = PressRelease::factory()->create([
        'user_id' => $owner->id,
        'status' => PressReleaseStatus::Draft->value,
    ]);

    Sanctum::actingAs($otherUser, ['press-releases:write']);

    $this->postJson("/api/v1/press-releases/{$pressRelease->id}/submit")
        ->assertForbidden();
});