config/graph_contracts.php

@@ -534,11 +534,6 @@
             'update_method' => 'PATCH',
             'id_field' => 'id',
             'hydration' => 'properties',
-            'update_strip_keys' => [
-                'isAssigned',
-                'templateId',
-                'isMigratingToConfigurationPolicy',
-            ],
         ],
         'mobileApp' => [
             'resource' => 'deviceAppManagement/mobileApps',

tests/Feature/EndpointSecurityIntentRestoreSanitizationTest.php

@@ -1,102 +0,0 @@
-<?php
-
-use App\Models\BackupItem;
-use App\Models\BackupSet;
-use App\Models\Tenant;
-use App\Services\Graph\GraphClientInterface;
-use App\Services\Graph\GraphResponse;
-use App\Services\Intune\RestoreService;
-use Illuminate\Foundation\Testing\RefreshDatabase;
-
-uses(RefreshDatabase::class);
-
-class EndpointSecurityIntentRestoreGraphClient implements GraphClientInterface
-{
-    /** @var array<int, array{policyType:string,policyId:string,payload:array,options:array<string,mixed>}> */
-    public array $applyPolicyCalls = [];
-
-    public function listPolicies(string $policyType, array $options = []): GraphResponse
-    {
-        return new GraphResponse(true, []);
-    }
-
-    public function getPolicy(string $policyType, string $policyId, array $options = []): GraphResponse
-    {
-        return new GraphResponse(true, ['payload' => []]);
-    }
-
-    public function getOrganization(array $options = []): GraphResponse
-    {
-        return new GraphResponse(true, []);
-    }
-
-    public function applyPolicy(string $policyType, string $policyId, array $payload, array $options = []): GraphResponse
-    {
-        $this->applyPolicyCalls[] = [
-            'policyType' => $policyType,
-            'policyId' => $policyId,
-            'payload' => $payload,
-            'options' => $options,
-        ];
-
-        return new GraphResponse(true, []);
-    }
-
-    public function getServicePrincipalPermissions(array $options = []): GraphResponse
-    {
-        return new GraphResponse(true, []);
-    }
-
-    public function request(string $method, string $path, array $options = []): GraphResponse
-    {
-        return new GraphResponse(true, []);
-    }
-}
-
-test('restore strips non-patchable fields from endpoint security intent updates', function () {
-    $client = new EndpointSecurityIntentRestoreGraphClient;
-    app()->instance(GraphClientInterface::class, $client);
-
-    $tenant = Tenant::factory()->create();
-    $backupSet = BackupSet::factory()->for($tenant)->create([
-        'status' => 'completed',
-        'item_count' => 1,
-    ]);
-
-    $backupItem = BackupItem::factory()->for($tenant)->for($backupSet)->create([
-        'policy_id' => null,
-        'policy_identifier' => 'intent-1',
-        'policy_type' => 'endpointSecurityIntent',
-        'platform' => 'windows',
-        'payload' => [
-            'id' => 'intent-1',
-            '@odata.type' => '#microsoft.graph.deviceManagementIntent',
-            'displayName' => 'SPO Account Protection',
-            'description' => 'Demo',
-            'isAssigned' => false,
-            'templateId' => '0f2b5d70-d4e9-4156-8c16-1397eb6c54a5',
-            'isMigratingToConfigurationPolicy' => false,
-        ],
-        'assignments' => null,
-    ]);
-
-    $service = app(RestoreService::class);
-    $run = $service->execute(
-        tenant: $tenant,
-        backupSet: $backupSet,
-        selectedItemIds: [$backupItem->id],
-        dryRun: false,
-    );
-
-    expect($run->status)->toBe('completed');
-    expect($client->applyPolicyCalls)->toHaveCount(1);
-
-    $payload = $client->applyPolicyCalls[0]['payload'] ?? [];
-    expect($payload)->toBeArray();
-    expect($payload)->toHaveKey('displayName');
-    expect($payload)->toHaveKey('description');
-    expect($payload)->not->toHaveKey('id');
-    expect($payload)->not->toHaveKey('isAssigned');
-    expect($payload)->not->toHaveKey('templateId');
-    expect($payload)->not->toHaveKey('isMigratingToConfigurationPolicy');
-});