TenantAtlas/apps/platform/tests/Feature/Audit/ProviderConnectionMigrationAuditTest.php
ahmido e64bae9cfc feat: cut over tenant core to managed environments (#335)
## Summary
- replace the legacy Tenant and TenantMembership core models with ManagedEnvironment and ManagedEnvironmentMembership
- propagate the managed environment naming and key changes across Filament resources, pages, controllers, jobs, models, and supporting runtime paths
- add feature 279 spec artifacts and focused managed-environment test coverage for model behavior, route binding, panel context, authorization, and legacy guardrails

## Validation
- `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/ManagedEnvironment/LegacyTenantCoreGuardTest.php tests/Feature/ManagedEnvironment/ManagedEnvironmentAuthorizationTest.php tests/Feature/ManagedEnvironment/ManagedEnvironmentPanelContextTest.php tests/Feature/ManagedEnvironment/ManagedEnvironmentRouteBindingTest.php tests/Unit/ManagedEnvironment/ManagedEnvironmentContextResolverTest.php tests/Unit/ManagedEnvironment/ManagedEnvironmentModelTest.php`
- `cd apps/platform && ./vendor/bin/sail bin pint --dirty --format agent`

## Notes
- branch pushed from commit `1123b122`
- browser smoke test file was added but not run in this pass

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #335
2026-05-07 06:38:14 +00:00

75 lines
2.7 KiB
PHP

<?php
declare(strict_types=1);
use App\Models\AuditLog;
use App\Models\ProviderConnection;
use App\Models\ProviderCredential;
use App\Models\ManagedEnvironment;
use Illuminate\Foundation\Testing\RefreshDatabase;
uses(RefreshDatabase::class);
it('audits classification backfill orchestration and applied migration outcomes', function (): void {
config()->set('graph.client_id', 'platform-client-id');
config()->set('graph.client_secret', 'platform-client-secret');
$tenant = ManagedEnvironment::factory()->create([
'managed_environment_id' => 'audit-classification-tenant-id',
'app_client_id' => 'legacy-tenant-client-id',
'app_client_secret' => 'legacy-tenant-client-secret',
]);
$connection = ProviderConnection::factory()->platform()->verifiedHealthy()->create([
'managed_environment_id' => (int) $tenant->getKey(),
'workspace_id' => (int) $tenant->workspace_id,
'provider' => 'microsoft',
'entra_tenant_id' => 'audit-classification-tenant-id',
'is_default' => true,
]);
ProviderCredential::factory()->create([
'provider_connection_id' => (int) $connection->getKey(),
'source' => null,
'payload' => [
'client_id' => 'legacy-different-client-id',
'client_secret' => 'legacy-different-client-secret',
],
]);
$this->artisan('tenantpilot:provider-connections:classify', ['--write' => true])
->assertSuccessful();
$started = AuditLog::query()
->where('managed_environment_id', (int) $tenant->getKey())
->where('action', 'provider_connection.migration_classification_started')
->latest('id')
->first();
$applied = AuditLog::query()
->where('managed_environment_id', (int) $tenant->getKey())
->where('action', 'provider_connection.migration_classification_applied')
->latest('id')
->first();
expect($started)->not->toBeNull()
->and($started?->status)->toBe('success')
->and($started?->metadata)->toMatchArray([
'source' => 'tenantpilot:provider-connections:classify',
'candidate_count' => 1,
'write' => true,
]);
expect($applied)->not->toBeNull()
->and($applied?->status)->toBe('success')
->and($applied?->resource_type)->toBe('provider_connection')
->and($applied?->resource_id)->toBe((string) $connection->getKey())
->and($applied?->metadata)->toMatchArray([
'source' => 'tenantpilot:provider-connections:classify',
'provider_connection_id' => (int) $connection->getKey(),
'provider' => 'microsoft',
'connection_type' => 'dedicated',
'migration_review_required' => true,
]);
});