create(); $user = User::factory()->create(); WorkspaceMembership::factory()->create([ 'workspace_id' => (int) $workspace->getKey(), 'user_id' => (int) $user->getKey(), 'role' => 'owner', ]); session()->put(WorkspaceContext::SESSION_KEY, (int) $workspace->getKey()); $this->actingAs($user); $entraTenantId = '33333333-3333-3333-3333-333333333333'; $component = Livewire::actingAs($user)->test(ManagedTenantOnboardingWizard::class); $component->call('identifyManagedTenant', [ 'entra_tenant_id' => $entraTenantId, 'environment' => 'prod', 'name' => 'Acme', ]); $tenant = Tenant::query()->where('tenant_id', $entraTenantId)->firstOrFail(); $connection = ProviderConnection::factory()->create([ 'workspace_id' => (int) $workspace->getKey(), 'tenant_id' => (int) $tenant->getKey(), 'provider' => 'microsoft', 'entra_tenant_id' => $entraTenantId, 'display_name' => 'Acme (onboarding)', 'is_default' => true, ]); $component->call('selectProviderConnection', (int) $connection->getKey()); $session = TenantOnboardingSession::query() ->where('workspace_id', (int) $workspace->getKey()) ->where('entra_tenant_id', $entraTenantId) ->whereNull('completed_at') ->firstOrFail(); expect($session->state['provider_connection_id'] ?? null)->toBe((int) $connection->getKey()); }); it('prevents selecting a provider connection bound to a different managed tenant', function (): void { $workspace = Workspace::factory()->create(); $user = User::factory()->create(); WorkspaceMembership::factory()->create([ 'workspace_id' => (int) $workspace->getKey(), 'user_id' => (int) $user->getKey(), 'role' => 'owner', ]); session()->put(WorkspaceContext::SESSION_KEY, (int) $workspace->getKey()); $this->actingAs($user); $entraTenantId = '44444444-4444-4444-4444-444444444444'; $component = Livewire::actingAs($user)->test(ManagedTenantOnboardingWizard::class); $component->call('identifyManagedTenant', [ 'entra_tenant_id' => $entraTenantId, 'environment' => 'prod', 'name' => 'Primary Tenant', ]); $primaryTenant = Tenant::query()->where('tenant_id', $entraTenantId)->firstOrFail(); $otherTenant = Tenant::factory()->create([ 'workspace_id' => (int) $workspace->getKey(), 'tenant_id' => '55555555-5555-5555-5555-555555555555', 'status' => Tenant::STATUS_ONBOARDING, ]); $otherConnection = ProviderConnection::factory()->create([ 'workspace_id' => (int) $workspace->getKey(), 'tenant_id' => (int) $otherTenant->getKey(), 'provider' => 'microsoft', 'entra_tenant_id' => (string) $otherTenant->tenant_id, 'display_name' => 'Other tenant connection', 'is_default' => true, ]); expect((int) $otherConnection->tenant_id)->not->toBe((int) $primaryTenant->getKey()); $component ->call('selectProviderConnection', (int) $otherConnection->getKey()) ->assertStatus(404); });