TenantAtlas/apps/platform/tests/Unit/VerificationLinkBehaviorTest.php
ahmido ce0615a9c1 Spec 182: relocate Laravel platform to apps/platform (#213)
## Summary
- move the Laravel application into `apps/platform` and keep the repository root for orchestration, docs, and tooling
- update the local command model, Sail/Docker wiring, runtime paths, and ignore rules around the new platform location
- add relocation quickstart/contracts plus focused smoke coverage for bootstrap, command model, routes, and runtime behavior

## Validation
- `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/PlatformRelocation`
- integrated browser smoke validated `/up`, `/`, `/admin`, `/admin/choose-workspace`, and tenant route semantics for `200`, `403`, and `404`

## Remaining Rollout Checks
- validate Dokploy build context and working-directory assumptions against the new `apps/platform` layout
- confirm web, queue, and scheduler processes all start from the expected working directory in staging/production
- verify no legacy volume mounts or asset-publish paths still point at the old root-level `public/` or `storage/` locations

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #213
2026-04-08 08:40:47 +00:00

104 lines
3.6 KiB
PHP

<?php
declare(strict_types=1);
use App\Filament\Resources\ProviderConnectionResource;
use App\Models\ProviderConnection;
use App\Models\Tenant;
use App\Support\Links\RequiredPermissionsLinks;
use App\Support\Providers\ProviderReasonCodes;
use App\Support\Verification\VerificationLinkBehavior;
use Illuminate\Foundation\Testing\RefreshDatabase;
uses(RefreshDatabase::class);
it('classifies external remediation links as external deep dives', function (): void {
$behavior = app(VerificationLinkBehavior::class)->describe(
label: 'Grant admin consent',
url: 'https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/grant-admin-consent',
);
expect($behavior)->toMatchArray([
'label' => 'Grant admin consent',
'url' => 'https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/grant-admin-consent',
'kind' => 'external',
'opens_in_new_tab' => true,
'show_new_tab_hint' => true,
]);
});
it('classifies required permissions links as internal diagnostic deep dives', function (): void {
$tenant = Tenant::factory()->create([
'external_id' => 'tenant-required-permissions-a',
]);
$behavior = app(VerificationLinkBehavior::class)->describe(
label: 'Open required permissions',
url: RequiredPermissionsLinks::requiredPermissions($tenant),
);
expect($behavior)->toMatchArray([
'kind' => 'internal-diagnostic',
'opens_in_new_tab' => true,
'show_new_tab_hint' => true,
]);
});
it('classifies provider connection management routes as internal diagnostic deep dives', function (): void {
$tenant = Tenant::factory()->create([
'external_id' => 'tenant-provider-connections-a',
]);
$connection = ProviderConnection::factory()->create([
'workspace_id' => (int) $tenant->workspace_id,
'tenant_id' => (int) $tenant->getKey(),
'provider' => 'microsoft',
'entra_tenant_id' => (string) $tenant->tenant_id,
]);
$behavior = app(VerificationLinkBehavior::class)->describe(
label: 'Manage Provider Connections',
url: ProviderConnectionResource::getUrl(
'edit',
['tenant' => $tenant->external_id, 'record' => (int) $connection->getKey()],
panel: 'admin',
),
);
expect($behavior)->toMatchArray([
'kind' => 'internal-diagnostic',
'opens_in_new_tab' => true,
'show_new_tab_hint' => true,
]);
});
it('leaves inline-safe onboarding links in the current tab', function (): void {
$behavior = app(VerificationLinkBehavior::class)->describe(
label: 'Return to onboarding',
url: '/admin/onboarding',
);
expect($behavior)->toMatchArray([
'kind' => 'internal-inline-safe',
'opens_in_new_tab' => false,
'show_new_tab_hint' => false,
]);
});
it('routes permission-related verification report checks through the assist when it is available', function (): void {
$behavior = app(VerificationLinkBehavior::class);
expect($behavior->shouldRouteThroughAssist([
'key' => 'provider.connection.preflight',
'reason_code' => ProviderReasonCodes::ProviderConsentMissing,
], true))->toBeTrue()
->and($behavior->shouldRouteThroughAssist([
'key' => 'permissions.admin_consent',
'reason_code' => 'ok',
], true))->toBeTrue()
->and($behavior->shouldRouteThroughAssist([
'key' => 'provider.connection.preflight',
'reason_code' => ProviderReasonCodes::ProviderConsentMissing,
], false))->toBeFalse();
});