ahmido
bab01f07a9
## Summary - standardize Microsoft provider connections around explicit platform vs dedicated identity modes - centralize admin-consent URL and runtime identity resolution so platform flows no longer fall back to tenant-local credentials - add migration classification, richer consent and verification state handling, dedicated override management, and focused regression coverage ## Validation - focused repo test coverage was added across provider identity, onboarding, audit, policy, guard, and migration flows - latest explicit passing run in the workspace: `vendor/bin/sail artisan test --compact tests/Feature/AdminConsentCallbackTest.php tests/Feature/Audit/ProviderConnectionConsentAuditTest.php` ## Notes - branch includes the full Spec 137 artifact set under `specs/137-platform-provider-identity/` - target base branch: `dev` Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #166
70 lines
2.3 KiB
PHP
70 lines
2.3 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
use App\Filament\Resources\ProviderConnectionResource;
|
|
use App\Filament\Resources\TenantResource;
|
|
use App\Models\ProviderConnection;
|
|
use App\Models\TenantPermission;
|
|
use Illuminate\Support\Facades\Bus;
|
|
|
|
it('Spec081 renders provider connection list/edit pages DB-only', function (): void {
|
|
[$user, $tenant] = createUserWithTenant(role: 'owner');
|
|
|
|
$connection = ProviderConnection::factory()->create([
|
|
'tenant_id' => (int) $tenant->getKey(),
|
|
'display_name' => 'Spec081 Connection',
|
|
'provider' => 'microsoft',
|
|
'status' => 'connected',
|
|
'migration_review_required' => true,
|
|
'metadata' => [
|
|
'legacy_identity_classification_source' => 'tenantpilot:provider-connections:classify',
|
|
'legacy_identity_result' => 'dedicated',
|
|
'effective_app' => [
|
|
'app_id' => null,
|
|
'source' => 'review_required',
|
|
],
|
|
],
|
|
]);
|
|
|
|
$this->actingAs($user);
|
|
Bus::fake();
|
|
|
|
assertNoOutboundHttp(function () use ($tenant, $connection): void {
|
|
$this->get(ProviderConnectionResource::getUrl('index', ['tenant' => $tenant->external_id], panel: 'admin'))
|
|
->assertOk()
|
|
->assertSee('Spec081 Connection');
|
|
|
|
$this->get(ProviderConnectionResource::getUrl('edit', ['tenant' => $tenant->external_id, 'record' => $connection], panel: 'admin'))
|
|
->assertOk()
|
|
->assertSee('Spec081 Connection')
|
|
->assertSee('Migration review')
|
|
->assertSee('Review required');
|
|
});
|
|
|
|
Bus::assertNothingDispatched();
|
|
});
|
|
|
|
it('Spec081 renders tenant view page DB-only', function (): void {
|
|
[$user, $tenant] = createUserWithTenant(role: 'owner');
|
|
|
|
TenantPermission::query()->create([
|
|
'tenant_id' => (int) $tenant->getKey(),
|
|
'permission_key' => 'DeviceManagementConfiguration.ReadWrite.All',
|
|
'status' => 'granted',
|
|
'details' => ['source' => 'spec081-test'],
|
|
]);
|
|
|
|
$this->actingAs($user);
|
|
Bus::fake();
|
|
|
|
assertNoOutboundHttp(function () use ($tenant): void {
|
|
$this->get(TenantResource::getUrl('view', ['record' => $tenant], tenant: $tenant))
|
|
->assertOk()
|
|
->assertSee($tenant->name)
|
|
->assertSee('DeviceManagementConfiguration.ReadWrite.All');
|
|
});
|
|
|
|
Bus::assertNothingDispatched();
|
|
});
|