Implements workspace-scoped managed tenant onboarding wizard (Filament v5 / Livewire v4) with strict RBAC (404/403 semantics), resumable sessions, provider connection selection/creation, verification OperationRun, and optional bootstrap. Removes legacy onboarding entrypoints and adds Pest coverage + spec artifacts (073). ## Summary <!-- Kurz: Was ändert sich und warum? --> ## Spec-Driven Development (SDD) - [ ] Es gibt eine Spec unter `specs/<NNN>-<feature>/` - [ ] Enthaltene Dateien: `plan.md`, `tasks.md`, `spec.md` - [ ] Spec beschreibt Verhalten/Acceptance Criteria (nicht nur Implementation) - [ ] Wenn sich Anforderungen während der Umsetzung geändert haben: Spec/Plan/Tasks wurden aktualisiert ## Implementation - [ ] Implementierung entspricht der Spec - [ ] Edge cases / Fehlerfälle berücksichtigt - [ ] Keine unbeabsichtigten Änderungen außerhalb des Scopes ## Tests - [ ] Tests ergänzt/aktualisiert (Pest/PHPUnit) - [ ] Relevante Tests lokal ausgeführt (`./vendor/bin/sail artisan test` oder `php artisan test`) ## Migration / Config / Ops (falls relevant) - [ ] Migration(en) enthalten und getestet - [ ] Rollback bedacht (rückwärts kompatibel, sichere Migration) - [ ] Neue Env Vars dokumentiert (`.env.example` / Doku) - [ ] Queue/cron/storage Auswirkungen geprüft ## UI (Filament/Livewire) (falls relevant) - [ ] UI-Flows geprüft - [ ] Screenshots/Notizen hinzugefügt ## Notes <!-- Links, Screenshots, Follow-ups, offene Punkte --> Co-authored-by: Ahmed Darrazi <ahmeddarrazi@adsmac.fritz.box> Reviewed-on: #88
156 lines
5.0 KiB
PHP
156 lines
5.0 KiB
PHP
<?php
|
|
|
|
use App\Models\Policy;
|
|
use App\Models\Tenant;
|
|
use App\Services\Graph\GraphClientInterface;
|
|
use App\Services\Graph\GraphResponse;
|
|
use App\Services\Intune\BackupService;
|
|
use App\Services\Intune\VersionService;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
|
|
uses(RefreshDatabase::class);
|
|
|
|
class SettingsCatalogHydrationGraphClient implements GraphClientInterface
|
|
{
|
|
public array $requests = [];
|
|
|
|
public function listPolicies(string $policyType, array $options = []): GraphResponse
|
|
{
|
|
return new GraphResponse(true, []);
|
|
}
|
|
|
|
public function getPolicy(string $policyType, string $policyId, array $options = []): GraphResponse
|
|
{
|
|
$this->requests[] = ['getPolicy', $policyType, $policyId];
|
|
|
|
return new GraphResponse(true, ['payload' => [
|
|
'id' => $policyId,
|
|
'displayName' => 'Settings Catalog Alpha',
|
|
'@odata.type' => '#microsoft.graph.deviceManagementConfigurationPolicy',
|
|
]]);
|
|
}
|
|
|
|
public function getOrganization(array $options = []): GraphResponse
|
|
{
|
|
return new GraphResponse(true, []);
|
|
}
|
|
|
|
public function applyPolicy(string $policyType, string $policyId, array $payload, array $options = []): GraphResponse
|
|
{
|
|
return new GraphResponse(true, []);
|
|
}
|
|
|
|
public function getServicePrincipalPermissions(array $options = []): GraphResponse
|
|
{
|
|
return new GraphResponse(true, []);
|
|
}
|
|
|
|
public function request(string $method, string $path, array $options = []): GraphResponse
|
|
{
|
|
$this->requests[] = [$method, $path];
|
|
|
|
if (str_contains($path, '/settings')) {
|
|
return new GraphResponse(true, [
|
|
'value' => [
|
|
['displayName' => 'Setting A', 'value' => 'on'],
|
|
['displayName' => 'Setting B', 'value' => 'off'],
|
|
],
|
|
]);
|
|
}
|
|
|
|
return new GraphResponse(true, []);
|
|
}
|
|
}
|
|
|
|
test('settings catalog snapshot hydrates configuration settings and renders in policy detail', function () {
|
|
$client = new SettingsCatalogHydrationGraphClient;
|
|
app()->instance(GraphClientInterface::class, $client);
|
|
|
|
$tenant = Tenant::create([
|
|
'tenant_id' => 'tenant-hydration',
|
|
'name' => 'Tenant One',
|
|
'metadata' => [],
|
|
'is_current' => true,
|
|
]);
|
|
|
|
putenv('INTUNE_TENANT_ID='.$tenant->tenant_id);
|
|
$_ENV['INTUNE_TENANT_ID'] = $tenant->tenant_id;
|
|
$_SERVER['INTUNE_TENANT_ID'] = $tenant->tenant_id;
|
|
$tenant->makeCurrent();
|
|
|
|
$policy = Policy::create([
|
|
'tenant_id' => $tenant->id,
|
|
'external_id' => 'scp-hydrate',
|
|
'policy_type' => 'settingsCatalogPolicy',
|
|
'display_name' => 'Settings Catalog Alpha',
|
|
'platform' => 'windows',
|
|
]);
|
|
|
|
/** @var BackupService $backupService */
|
|
$backupService = app(BackupService::class);
|
|
$backupSet = $backupService->createBackupSet($tenant, [$policy->id], actorEmail: 'tester@example.com');
|
|
|
|
$item = $backupSet->items()->first();
|
|
expect($item->payload)->toHaveKey('settings');
|
|
expect(count($item->payload['settings']))->toBe(2);
|
|
|
|
/** @var VersionService $versions */
|
|
$versions = app(VersionService::class);
|
|
$versions->captureVersion(
|
|
policy: $policy,
|
|
payload: $item->payload,
|
|
createdBy: 'tester@example.com',
|
|
metadata: ['source' => 'test', 'backup_set_id' => $backupSet->id],
|
|
);
|
|
|
|
[$user, $tenant] = createUserWithTenant($tenant, role: 'owner');
|
|
|
|
$response = $this
|
|
->actingAs($user)
|
|
->get(route('filament.admin.resources.policies.view', array_merge(filamentTenantRouteParams($tenant), ['record' => $policy])));
|
|
|
|
$response->assertOk();
|
|
$response->assertSee('Setting A');
|
|
$response->assertSee('on');
|
|
$response->assertSee('Settings');
|
|
});
|
|
|
|
test('settings catalog version capture hydrates settings from graph', function () {
|
|
$client = new SettingsCatalogHydrationGraphClient;
|
|
app()->instance(GraphClientInterface::class, $client);
|
|
|
|
$tenant = Tenant::create([
|
|
'tenant_id' => 'tenant-hydration-version',
|
|
'name' => 'Tenant One',
|
|
'metadata' => [],
|
|
'is_current' => true,
|
|
]);
|
|
|
|
putenv('INTUNE_TENANT_ID='.$tenant->tenant_id);
|
|
$_ENV['INTUNE_TENANT_ID'] = $tenant->tenant_id;
|
|
$_SERVER['INTUNE_TENANT_ID'] = $tenant->tenant_id;
|
|
$tenant->makeCurrent();
|
|
|
|
$policy = Policy::create([
|
|
'tenant_id' => $tenant->id,
|
|
'external_id' => 'scp-version',
|
|
'policy_type' => 'settingsCatalogPolicy',
|
|
'display_name' => 'Settings Catalog Beta',
|
|
'platform' => 'windows',
|
|
]);
|
|
|
|
/** @var VersionService $versions */
|
|
$versions = app(VersionService::class);
|
|
$versions->captureFromGraph($tenant, $policy, createdBy: 'tester@example.com');
|
|
|
|
[$user, $tenant] = createUserWithTenant($tenant, role: 'owner');
|
|
|
|
$response = $this
|
|
->actingAs($user)
|
|
->get(route('filament.admin.resources.policies.view', array_merge(filamentTenantRouteParams($tenant), ['record' => $policy])));
|
|
|
|
$response->assertOk();
|
|
$response->assertSee('Setting A');
|
|
$response->assertSee('Setting B');
|
|
});
|