TenantAtlas/apps/platform/tests/Unit/VerificationReportSanitizerNextStepsUrlTest.php
ahmido ce0615a9c1 Spec 182: relocate Laravel platform to apps/platform (#213)
## Summary
- move the Laravel application into `apps/platform` and keep the repository root for orchestration, docs, and tooling
- update the local command model, Sail/Docker wiring, runtime paths, and ignore rules around the new platform location
- add relocation quickstart/contracts plus focused smoke coverage for bootstrap, command model, routes, and runtime behavior

## Validation
- `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/PlatformRelocation`
- integrated browser smoke validated `/up`, `/`, `/admin`, `/admin/choose-workspace`, and tenant route semantics for `200`, `403`, and `404`

## Remaining Rollout Checks
- validate Dokploy build context and working-directory assumptions against the new `apps/platform` layout
- confirm web, queue, and scheduler processes all start from the expected working directory in staging/production
- verify no legacy volume mounts or asset-publish paths still point at the old root-level `public/` or `storage/` locations

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #213
2026-04-08 08:40:47 +00:00

37 lines
1.2 KiB
PHP

<?php
declare(strict_types=1);
use App\Support\Verification\VerificationReportSanitizer;
it('does not truncate next step URLs so required OAuth query params remain present', function (): void {
$tenantId = 'b0091e5d-944f-4a34-bcd9-12cbfb7b75cf';
$clientId = 'c9110351-1e46-43fe-865d-8a1ce896cc47';
$veryLongRedirect = 'http://localhost/admin/consent/callback/'.str_repeat('x', 260);
$url = sprintf(
'https://login.microsoftonline.com/%s/v2.0/adminconsent?%s',
$tenantId,
http_build_query([
'client_id' => $clientId,
'state' => 'tenantpilot|123',
'redirect_uri' => $veryLongRedirect,
'scope' => 'https://graph.microsoft.com/.default',
]),
);
// This URL exceeds 200 chars; sanitizer must not drop the `scope`.
expect(strlen($url))->toBeGreaterThan(200);
$sanitized = VerificationReportSanitizer::sanitizeNextStepsPayload([
['label' => 'Grant admin consent', 'url' => $url],
]);
expect($sanitized)
->toBeArray()
->not->toBeEmpty()
->and($sanitized[0]['url'] ?? null)->toContain('scope=')
->and($sanitized[0]['url'] ?? null)->toContain(urlencode('https://graph.microsoft.com/.default'));
});