TenantAtlas/apps/platform/tests/Feature/EntraAdminRoles/StoredReportFingerprintTest.php
2026-04-08 09:33:16 +02:00

58 lines
1.9 KiB
PHP

<?php
declare(strict_types=1);
use App\Models\StoredReport;
use Illuminate\Foundation\Testing\RefreshDatabase;
uses(RefreshDatabase::class);
it('persists fingerprint and previous_fingerprint columns', function (): void {
[$user, $tenant] = createUserWithTenant();
$report = StoredReport::factory()->create([
'tenant_id' => $tenant->getKey(),
'report_type' => StoredReport::REPORT_TYPE_ENTRA_ADMIN_ROLES,
'fingerprint' => str_repeat('a', 64),
'previous_fingerprint' => str_repeat('b', 64),
]);
$fresh = StoredReport::query()->find($report->getKey());
expect($fresh->fingerprint)->toBe(str_repeat('a', 64))
->and($fresh->previous_fingerprint)->toBe(str_repeat('b', 64));
});
it('prevents duplicate (tenant_id, report_type, fingerprint) via unique index', function (): void {
[$user, $tenant] = createUserWithTenant();
$fingerprint = hash('sha256', 'test-content');
StoredReport::factory()->create([
'tenant_id' => $tenant->getKey(),
'report_type' => StoredReport::REPORT_TYPE_ENTRA_ADMIN_ROLES,
'fingerprint' => $fingerprint,
]);
expect(fn () => StoredReport::factory()->create([
'tenant_id' => $tenant->getKey(),
'report_type' => StoredReport::REPORT_TYPE_ENTRA_ADMIN_ROLES,
'fingerprint' => $fingerprint,
]))->toThrow(\Illuminate\Database\QueryException::class);
});
it('allows null fingerprint for existing reports without fingerprinting', function (): void {
[$user, $tenant] = createUserWithTenant();
$report = StoredReport::factory()->create([
'tenant_id' => $tenant->getKey(),
'report_type' => StoredReport::REPORT_TYPE_PERMISSION_POSTURE,
'fingerprint' => null,
'previous_fingerprint' => null,
]);
$fresh = StoredReport::query()->find($report->getKey());
expect($fresh->fingerprint)->toBeNull()
->and($fresh->previous_fingerprint)->toBeNull();
});