132 lines
4.3 KiB
PHP
132 lines
4.3 KiB
PHP
<?php
|
|
|
|
namespace Tests\Feature\Admin;
|
|
|
|
use App\Models\System\Company;
|
|
use App\Models\System\User;
|
|
use App\Models\System\Role;
|
|
use Spatie\Permission\Models\Permission;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
use Tests\TestCase;
|
|
|
|
class DiscordNotificationSecurityTest extends TestCase
|
|
{
|
|
use RefreshDatabase;
|
|
|
|
protected $company;
|
|
protected $superAdmin;
|
|
protected $tenantAdmin;
|
|
protected $regularUser;
|
|
|
|
protected function setUp(): void
|
|
{
|
|
parent::setUp();
|
|
|
|
// 1. 執行 RoleSeeder 以初始化權限
|
|
$this->artisan('db:seed', ['--class' => 'RoleSeeder']);
|
|
|
|
// 2. 建立測試公司
|
|
$this->company = Company::create([
|
|
'name' => 'Test Company',
|
|
'code' => 'TEST',
|
|
'status' => 1,
|
|
]);
|
|
|
|
// 3. 建立 Super Admin 帳號
|
|
$this->superAdmin = User::create([
|
|
'name' => 'Super Admin User',
|
|
'username' => 'superadmin_test',
|
|
'email' => 'superadmin@example.com',
|
|
'password' => bcrypt('password'),
|
|
'company_id' => null,
|
|
]);
|
|
$this->superAdmin->assignRole('super-admin');
|
|
|
|
// 4. 建立租戶管理員帳號
|
|
$this->tenantAdmin = User::create([
|
|
'name' => 'Tenant Admin User',
|
|
'username' => 'tenantadmin_test',
|
|
'email' => 'tenantadmin@example.com',
|
|
'password' => bcrypt('password'),
|
|
'company_id' => $this->company->id,
|
|
]);
|
|
|
|
$tenantAdminTemplate = Role::where('name', '客戶管理員角色模板')->first();
|
|
$tenantRole = Role::create([
|
|
'name' => '管理員',
|
|
'company_id' => $this->company->id,
|
|
'guard_name' => 'web',
|
|
'is_system' => false,
|
|
]);
|
|
|
|
// 確保 tenantAdminTemplate 包含我們新加的 menu.basic.discord-notifications
|
|
$tenantRole->syncPermissions($tenantAdminTemplate->permissions);
|
|
$this->tenantAdmin->assignRole($tenantRole);
|
|
|
|
// 5. 建立普通無此權限之帳號
|
|
$this->regularUser = User::create([
|
|
'name' => 'Regular User',
|
|
'username' => 'regular_user',
|
|
'email' => 'regular@example.com',
|
|
'password' => bcrypt('password'),
|
|
'company_id' => $this->company->id,
|
|
]);
|
|
|
|
$emptyRole = Role::create([
|
|
'name' => '普通人員',
|
|
'company_id' => $this->company->id,
|
|
'guard_name' => 'web',
|
|
'is_system' => false,
|
|
]);
|
|
// 給予基本會員權限而非 Discord 設定權限
|
|
$emptyRole->syncPermissions(['menu.members']);
|
|
$this->regularUser->assignRole($emptyRole);
|
|
}
|
|
|
|
/**
|
|
* 測試超級管理員可以訪問 Discord Webhook 設定
|
|
*/
|
|
public function test_super_admin_can_access_discord_notifications()
|
|
{
|
|
$this->actingAs($this->superAdmin);
|
|
|
|
$response = $this->get(route('admin.basic-settings.discord-notifications.index'));
|
|
$response->assertStatus(200);
|
|
|
|
$response = $this->post(route('admin.basic-settings.discord-notifications.test'), [
|
|
'webhook_url' => 'https://discord.com/api/webhooks/test',
|
|
]);
|
|
// 發送測試可能會失敗 (如 Mock Discord 伺服器)，但應通過 403 路由認證
|
|
$this->assertNotEquals(403, $response->status());
|
|
}
|
|
|
|
/**
|
|
* 測試租戶管理員可以訪問 Discord Webhook 設定
|
|
*/
|
|
public function test_tenant_admin_can_access_discord_notifications()
|
|
{
|
|
$this->actingAs($this->tenantAdmin);
|
|
|
|
$response = $this->get(route('admin.basic-settings.discord-notifications.index'));
|
|
$response->assertStatus(200);
|
|
}
|
|
|
|
/**
|
|
* 測試無權限之普通用戶會被阻擋且返回 403 錯誤
|
|
*/
|
|
public function test_regular_user_cannot_access_discord_notifications()
|
|
{
|
|
$this->actingAs($this->regularUser);
|
|
|
|
$response = $this->get(route('admin.basic-settings.discord-notifications.index'));
|
|
$response->assertStatus(403);
|
|
|
|
$response = $this->put(route('admin.basic-settings.discord-notifications.update-company', ['id' => $this->company->id]), [
|
|
'discord_webhook_url' => 'https://discord.com/api/webhooks/test',
|
|
'discord_notify_enabled' => true,
|
|
'discord_notify_locale' => 'zh_TW'
|
|
]);
|
|
$response->assertStatus(403);
|
|
}
|
|
}
|