TenantAtlas/apps/platform/tests/Feature/Workspaces/SelectEnvironmentControllerTest.php

<?php

declare(strict_types=1);

use App\Filament\Pages\EnvironmentDashboard;
use App\Models\ManagedEnvironment;
use App\Models\User;
use App\Models\Workspace;
use App\Models\WorkspaceMembership;
use App\Support\Workspaces\WorkspaceContext;
use Illuminate\Foundation\Testing\RefreshDatabase;

uses(RefreshDatabase::class);

it('stores remembered context and redirects to the tenant dashboard for active tenants', function (): void {
    $activeEnvironment = ManagedEnvironment::factory()->active()->create();
    [$user, $activeEnvironment] = createUserWithTenant(tenant: $activeEnvironment, role: 'owner');

    $response = $this->actingAs($user)
        ->withSession([WorkspaceContext::SESSION_KEY => (int) $activeEnvironment->workspace_id])
        ->post(route('admin.select-environment'), [
            'managed_environment_id' => (int) $activeEnvironment->getKey(),
        ]);

    $response->assertRedirect(EnvironmentDashboard::getUrl(panel: 'admin', tenant: $activeEnvironment));

    expect(session()->get(WorkspaceContext::LAST_ENVIRONMENT_IDS_SESSION_KEY, []))
        ->toHaveKey((string) $activeEnvironment->workspace_id, (int) $activeEnvironment->getKey());
});

it('returns 404 when selecting an onboarding tenant that is not eligible for the standard lane', function (): void {
    $activeEnvironment = ManagedEnvironment::factory()->active()->create();
    [$user, $activeEnvironment] = createUserWithTenant(tenant: $activeEnvironment, role: 'owner');

    $onboardingTenant = ManagedEnvironment::factory()->onboarding()->create([
        'workspace_id' => (int) $activeEnvironment->workspace_id,
    ]);

    createUserWithTenant(
        tenant: $onboardingTenant,
        user: $user,
        role: 'owner',
        workspaceRole: 'owner',
        ensureDefaultMicrosoftProviderConnection: false,
    );

    $this->actingAs($user)
        ->withSession([WorkspaceContext::SESSION_KEY => (int) $activeEnvironment->workspace_id])
        ->post(route('admin.select-environment'), [
            'managed_environment_id' => (int) $onboardingTenant->getKey(),
        ])
        ->assertNotFound();

    expect(session()->get(WorkspaceContext::LAST_ENVIRONMENT_IDS_SESSION_KEY, []))
        ->not->toHaveKey((string) $activeEnvironment->workspace_id);
});

it('redirects to choose-workspace when no workspace is selected', function (): void {
    $user = User::factory()->create();

    $workspaceA = Workspace::factory()->create();
    $workspaceB = Workspace::factory()->create();

    WorkspaceMembership::factory()->create([
        'workspace_id' => (int) $workspaceA->getKey(),
        'user_id' => (int) $user->getKey(),
        'role' => 'owner',
    ]);

    WorkspaceMembership::factory()->create([
        'workspace_id' => (int) $workspaceB->getKey(),
        'user_id' => (int) $user->getKey(),
        'role' => 'owner',
    ]);

    $tenant = ManagedEnvironment::factory()->active()->create([
        'workspace_id' => (int) $workspaceA->getKey(),
    ]);

    $user->tenants()->syncWithoutDetaching([
        $tenant->getKey() => ['role' => 'owner'],
    ]);

    $this->actingAs($user)
        ->post(route('admin.select-environment'), [
            'managed_environment_id' => (int) $tenant->getKey(),
        ])
        ->assertRedirect('/admin/choose-workspace');
});

it('returns 404 when selecting a tenant from another workspace', function (): void {
    $activeEnvironment = ManagedEnvironment::factory()->active()->create(['name' => 'Current Workspace ManagedEnvironment']);
    [$user, $activeEnvironment] = createUserWithTenant(tenant: $activeEnvironment, role: 'owner');

    $foreignTenant = ManagedEnvironment::factory()->active()->create(['name' => 'Foreign Workspace ManagedEnvironment']);
    createUserWithTenant(tenant: $foreignTenant, user: $user, role: 'owner');

    $this->actingAs($user)
        ->withSession([WorkspaceContext::SESSION_KEY => (int) $activeEnvironment->workspace_id])
        ->post(route('admin.select-environment'), [
            'managed_environment_id' => (int) $foreignTenant->getKey(),
        ])
        ->assertNotFound();

    expect(session()->get(WorkspaceContext::LAST_ENVIRONMENT_IDS_SESSION_KEY, []))
        ->not->toHaveKey((string) $activeEnvironment->workspace_id);
});

it('returns 404 when selecting a tenant the user cannot access', function (): void {
    $user = User::factory()->create();
    $workspace = Workspace::factory()->create();

    WorkspaceMembership::factory()->create([
        'workspace_id' => (int) $workspace->getKey(),
        'user_id' => (int) $user->getKey(),
        'role' => 'owner',
    ]);

    $tenant = ManagedEnvironment::factory()->active()->create([
        'workspace_id' => (int) $workspace->getKey(),
    ]);
    $allowedTenant = ManagedEnvironment::factory()->active()->create([
        'workspace_id' => (int) $workspace->getKey(),
    ]);

    $user->tenants()->syncWithoutDetaching([
        $allowedTenant->getKey() => ['role' => 'owner'],
    ]);
    app(\App\Services\Auth\CapabilityResolver::class)->clearCache();

    $this->actingAs($user)
        ->withSession([WorkspaceContext::SESSION_KEY => (int) $workspace->getKey()])
        ->post(route('admin.select-environment'), [
            'managed_environment_id' => (int) $tenant->getKey(),
        ])
        ->assertNotFound();
});