Deploy 1: i18n + Notifications + Global Search + Tests

- SetLocale middleware (ro/ru/en, session-first, user-persisted) - Lang switcher in topbar (Filament render hook USER_MENU_BEFORE) - POST /locale/{lang} route persists to user.locale + session - Database notifications enabled on tenant panel (30s polling) - GlobalSearch (Cmd+K / Ctrl+K) on Client, Vehicle, WorkOrder, Lead, Part - Tests: TenantIsolation (4), AuthFlow (2), WorkOrderCalc (3), MarkupRule (3)
2026-05-07 18:22:48 +00:00
parent 6c72fc7db1
commit d1e0695930
17 changed files with 770 additions and 0 deletions
@@ -0,0 +1,77 @@
+<?php
+
+namespace Tests\Feature;
+
+use App\Models\Central\Company;
+use App\Models\Central\Plan;
+use App\Models\Tenant\User;
+use App\Tenancy\TenantManager;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Illuminate\Support\Facades\Hash;
+use Tests\TestCase;
+
+/**
+ * User-ul tenant A NU trebuie să poată se logheze pe subdomain-ul tenant B.
+ * Garanție 1-user-1-tenant.
+ */
+class AuthFlowTest extends TestCase
+{
+    use RefreshDatabase;
+
+    public function test_user_cannot_login_on_wrong_subdomain(): void
+    {
+        $plan = Plan::create([
+            'name' => 'Test', 'slug' => 'test', 'price' => 0, 'features' => [],
+        ]);
+        $companyA = Company::create([
+            'plan_id' => $plan->id,
+            'slug' => 'company-a-' . uniqid(),
+            'name' => 'A', 'status' => 'active',
+        ]);
+        $companyB = Company::create([
+            'plan_id' => $plan->id,
+            'slug' => 'company-b-' . uniqid(),
+            'name' => 'B', 'status' => 'active',
+        ]);
+
+        app(TenantManager::class)->setCurrent($companyA);
+        $userA = User::create([
+            'company_id' => $companyA->id,
+            'name' => 'Alice',
+            'email' => 'alice@a.com',
+            'password' => Hash::make('secret123'),
+            'status' => 'active',
+        ]);
+
+        // Switch to company B context — try to attempt() with A's credentials
+        app(TenantManager::class)->setCurrent($companyB);
+        $ok = auth('web')->attempt(['email' => 'alice@a.com', 'password' => 'secret123']);
+
+        $this->assertFalse($ok, 'User from company A authenticated successfully on company B subdomain');
+    }
+
+    public function test_user_can_login_on_own_subdomain(): void
+    {
+        $plan = Plan::create([
+            'name' => 'Test', 'slug' => 'test', 'price' => 0, 'features' => [],
+        ]);
+        $company = Company::create([
+            'plan_id' => $plan->id,
+            'slug' => 'mine-' . uniqid(),
+            'name' => 'Mine', 'status' => 'active',
+        ]);
+
+        app(TenantManager::class)->setCurrent($company);
+        User::create([
+            'company_id' => $company->id,
+            'name' => 'Bob',
+            'email' => 'bob@mine.com',
+            'password' => Hash::make('pwd12345'),
+            'status' => 'active',
+        ]);
+
+        $ok = auth('web')->attempt(['email' => 'bob@mine.com', 'password' => 'pwd12345']);
+
+        $this->assertTrue($ok);
+    }
+}