TenantAtlas/apps/platform/tests/Unit/Policies/ProviderConnectionPolicyTenantResolutionTest.php

<?php

declare(strict_types=1);

use App\Models\ProviderConnection;
use App\Models\Tenant;
use App\Policies\ProviderConnectionPolicy;
use App\Support\Workspaces\WorkspaceContext;
use Illuminate\Foundation\Testing\RefreshDatabase;

uses(RefreshDatabase::class);

test('provider connection policy resolves tenant from record when route tenant is missing', function (): void {
    [$user, $tenantA] = createUserWithTenant(role: 'owner');

    $tenantB = Tenant::factory()->create([
        'workspace_id' => $tenantA->workspace_id,
    ]);

    session()->put(WorkspaceContext::SESSION_KEY, (int) $tenantA->workspace_id);

    // Simulate a different "current" tenant (e.g. Livewire update without {tenant} route param).
    $tenantB->makeCurrent();

    $connection = ProviderConnection::factory()->create([
        'workspace_id' => (int) $tenantA->workspace_id,
        'tenant_id' => (int) $tenantA->getKey(),
        'provider' => 'microsoft',
    ]);

    $policy = app(ProviderConnectionPolicy::class);

    $result = $policy->update($user, $connection);

    expect($result)->toBeTrue();
});