Vasyka
d1e0695930
- SetLocale middleware (ro/ru/en, session-first, user-persisted)
- Lang switcher in topbar (Filament render hook USER_MENU_BEFORE)
- POST /locale/{lang} route persists to user.locale + session
- Database notifications enabled on tenant panel (30s polling)
- GlobalSearch (Cmd+K / Ctrl+K) on Client, Vehicle, WorkOrder, Lead, Part
- Tests: TenantIsolation (4), AuthFlow (2), WorkOrderCalc (3), MarkupRule (3)
78 lines
2.4 KiB
PHP
78 lines
2.4 KiB
PHP
<?php
|
|
|
|
namespace Tests\Feature;
|
|
|
|
use App\Models\Central\Company;
|
|
use App\Models\Central\Plan;
|
|
use App\Models\Tenant\User;
|
|
use App\Tenancy\TenantManager;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
use Illuminate\Support\Facades\Hash;
|
|
use Tests\TestCase;
|
|
|
|
/**
|
|
* User-ul tenant A NU trebuie să poată se logheze pe subdomain-ul tenant B.
|
|
* Garanție 1-user-1-tenant.
|
|
*/
|
|
class AuthFlowTest extends TestCase
|
|
{
|
|
use RefreshDatabase;
|
|
|
|
public function test_user_cannot_login_on_wrong_subdomain(): void
|
|
{
|
|
$plan = Plan::create([
|
|
'name' => 'Test', 'slug' => 'test', 'price' => 0, 'features' => [],
|
|
]);
|
|
$companyA = Company::create([
|
|
'plan_id' => $plan->id,
|
|
'slug' => 'company-a-' . uniqid(),
|
|
'name' => 'A', 'status' => 'active',
|
|
]);
|
|
$companyB = Company::create([
|
|
'plan_id' => $plan->id,
|
|
'slug' => 'company-b-' . uniqid(),
|
|
'name' => 'B', 'status' => 'active',
|
|
]);
|
|
|
|
app(TenantManager::class)->setCurrent($companyA);
|
|
$userA = User::create([
|
|
'company_id' => $companyA->id,
|
|
'name' => 'Alice',
|
|
'email' => 'alice@a.com',
|
|
'password' => Hash::make('secret123'),
|
|
'status' => 'active',
|
|
]);
|
|
|
|
// Switch to company B context — try to attempt() with A's credentials
|
|
app(TenantManager::class)->setCurrent($companyB);
|
|
$ok = auth('web')->attempt(['email' => 'alice@a.com', 'password' => 'secret123']);
|
|
|
|
$this->assertFalse($ok, 'User from company A authenticated successfully on company B subdomain');
|
|
}
|
|
|
|
public function test_user_can_login_on_own_subdomain(): void
|
|
{
|
|
$plan = Plan::create([
|
|
'name' => 'Test', 'slug' => 'test', 'price' => 0, 'features' => [],
|
|
]);
|
|
$company = Company::create([
|
|
'plan_id' => $plan->id,
|
|
'slug' => 'mine-' . uniqid(),
|
|
'name' => 'Mine', 'status' => 'active',
|
|
]);
|
|
|
|
app(TenantManager::class)->setCurrent($company);
|
|
User::create([
|
|
'company_id' => $company->id,
|
|
'name' => 'Bob',
|
|
'email' => 'bob@mine.com',
|
|
'password' => Hash::make('pwd12345'),
|
|
'status' => 'active',
|
|
]);
|
|
|
|
$ok = auth('web')->attempt(['email' => 'bob@mine.com', 'password' => 'pwd12345']);
|
|
|
|
$this->assertTrue($ok);
|
|
}
|
|
}
|