TenantAtlas/tests/Feature/DirectoryGroups/SyncJobUpsertsGroupsTest.php

<?php

use App\Jobs\EntraGroupSyncJob;
use App\Models\EntraGroup;
use App\Services\Directory\EntraGroupSyncService;
use App\Services\Graph\GraphClientInterface;
use App\Services\Graph\GraphResponse;
use App\Services\Intune\AuditLogger;
use App\Services\OperationRunService;

it('sync job upserts groups and updates run counters', function () {

    [$user, $tenant] = createUserWithTenant(role: 'owner');

    EntraGroup::factory()->create([
        'tenant_id' => $tenant->getKey(),
        'entra_id' => '11111111-1111-1111-1111-111111111111',
        'display_name' => 'Old Name',
        'last_seen_at' => now('UTC')->subDays(10),
    ]);

    $mock = \Mockery::mock(GraphClientInterface::class);
    $mock->shouldReceive('request')
        ->twice()
        ->andReturn(
            new GraphResponse(success: true, data: [
                'value' => [
                    [
                        'id' => '11111111-1111-1111-1111-111111111111',
                        'displayName' => 'New Name',
                        'groupTypes' => ['Unified'],
                        'securityEnabled' => false,
                        'mailEnabled' => true,
                    ],
                ],
                '@odata.nextLink' => 'https://graph.microsoft.com/v1.0/groups?$skiptoken=abc',
            ], status: 200),
            new GraphResponse(success: true, data: [
                'value' => [
                    [
                        'id' => '22222222-2222-2222-2222-222222222222',
                        'displayName' => 'Second Group',
                        'groupTypes' => [],
                        'securityEnabled' => true,
                        'mailEnabled' => false,
                    ],
                ],
            ], status: 200),
        );

    app()->instance(GraphClientInterface::class, $mock);

    /** @var OperationRunService $opService */
    $opService = app(OperationRunService::class);
    $opRun = $opService->ensureRun(
        tenant: $tenant,
        type: 'entra_group_sync',
        inputs: ['selection_key' => 'groups-v1:all'],
        initiator: $user,
    );

    $job = new EntraGroupSyncJob(
        tenantId: (int) $tenant->getKey(),
        selectionKey: 'groups-v1:all',
        slotKey: null,
        runId: null,
        operationRun: $opRun,
    );

    $job->handle(app(EntraGroupSyncService::class), app(AuditLogger::class));

    $opRun->refresh();

    expect($opRun->status)->toBe('completed')
        ->and($opRun->outcome)->toBe('succeeded')
        ->and($opRun->summary_counts['processed'] ?? null)->toBe(2)
        ->and($opRun->summary_counts['updated'] ?? null)->toBe(2)
        ->and($opRun->summary_counts['failed'] ?? null)->toBe(0);

    expect(EntraGroup::query()->where('tenant_id', $tenant->getKey())->count())->toBe(2);

    $updated = EntraGroup::query()
        ->where('tenant_id', $tenant->getKey())
        ->where('entra_id', '11111111-1111-1111-1111-111111111111')
        ->first();

    expect($updated)->not->toBeNull()
        ->and($updated->display_name)->toBe('New Name')
        ->and($updated->mail_enabled)->toBeTrue();
});