ahmido
360d20e881
## Summary - retire the tenant panel runtime and converge operator routing on the workspace-first admin shell - update tenant, operations, and required-permissions navigation helpers to use canonical workspace-scoped URLs - repair the focused feature coverage, add the Spec 280 browser smoke, and record the implementation close-out in the requirements checklist ## Validation - `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/WorkspaceFoundation tests/Feature/Workspaces tests/Feature/ManagedEnvironment tests/Feature/RequiredPermissions tests/Feature/Operations tests/Feature/MonitoringOperationsTest.php` - `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Browser/Spec280WorkspaceTenancyEnvironmentRoutingSmokeTest.php` - `cd apps/platform && ./vendor/bin/sail bin pint --dirty --format agent` ## Note - `origin/platform` is not present on the remote; `platform-dev` is the clean base branch that limits this PR to the Spec 280 prep commit plus the implementation commit. Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #340
70 lines
2.0 KiB
PHP
70 lines
2.0 KiB
PHP
<?php
|
|
|
|
namespace App\Support\Links;
|
|
|
|
use App\Models\ProviderConnection;
|
|
use App\Models\ManagedEnvironment;
|
|
use App\Models\Workspace;
|
|
use App\Services\Providers\AdminConsentUrlFactory;
|
|
|
|
final class RequiredPermissionsLinks
|
|
{
|
|
private const ADMIN_CONSENT_GUIDE_URL = 'https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/grant-admin-consent';
|
|
|
|
/**
|
|
* @param array<string, mixed> $filters
|
|
*/
|
|
public static function requiredPermissions(ManagedEnvironment $tenant, array $filters = []): string
|
|
{
|
|
$workspace = $tenant->workspace()->first();
|
|
|
|
if (! $workspace instanceof Workspace) {
|
|
return url('/admin');
|
|
}
|
|
|
|
$base = url(sprintf(
|
|
'/admin/workspaces/%s/environments/%s/required-permissions',
|
|
urlencode((string) ($workspace->slug ?? $workspace->getKey())),
|
|
urlencode((string) $tenant->getRouteKey()),
|
|
));
|
|
|
|
if ($filters === []) {
|
|
return $base;
|
|
}
|
|
|
|
$query = http_build_query($filters);
|
|
|
|
return $query !== '' ? "{$base}?{$query}" : $base;
|
|
}
|
|
|
|
public static function adminConsentUrl(ManagedEnvironment $tenant): ?string
|
|
{
|
|
$connection = ProviderConnection::query()
|
|
->where('managed_environment_id', (int) $tenant->getKey())
|
|
->where('provider', 'microsoft')
|
|
->orderByDesc('is_default')
|
|
->orderBy('id')
|
|
->first();
|
|
|
|
if (! $connection instanceof ProviderConnection) {
|
|
return null;
|
|
}
|
|
|
|
try {
|
|
return app(AdminConsentUrlFactory::class)->make($connection, sprintf('tenantpilot|%s', $tenant->id));
|
|
} catch (\Throwable) {
|
|
return null;
|
|
}
|
|
}
|
|
|
|
public static function adminConsentGuideUrl(): string
|
|
{
|
|
return self::ADMIN_CONSENT_GUIDE_URL;
|
|
}
|
|
|
|
public static function adminConsentPrimaryUrl(ManagedEnvironment $tenant): string
|
|
{
|
|
return self::adminConsentUrl($tenant) ?? self::adminConsentGuideUrl();
|
|
}
|
|
}
|