mirror of
https://github.com/anikeen-com/id.git
synced 2026-11-08 16:48:31 +00:00
envoyr
642e518259
Anikeen ID now sends trusted apps the user's role (admin or user) in GET v1/user, a user read by ID and user.updated, so an app like the Console can take its admins from Anikeen ID. Enums\Role, the Socialite user's role and Resources\User::role()/isAdmin() expose it.
56 lines
1.9 KiB
PHP
56 lines
1.9 KiB
PHP
<?php
|
|
|
|
namespace Anikeen\Id\Tests;
|
|
|
|
use Anikeen\Id\AnikeenId;
|
|
use Anikeen\Id\Enums\Role;
|
|
use Anikeen\Id\Resources\User;
|
|
use Anikeen\Id\Socialite\Provider;
|
|
use Illuminate\Http\Request;
|
|
use ReflectionMethod;
|
|
|
|
/**
|
|
* The user's role, seen by trusted apps only: at sign-in, read by ID and in user.updated.
|
|
*/
|
|
class UserRoleTest extends TestCase
|
|
{
|
|
private function socialiteUser(array $raw): \SocialiteProviders\Manager\OAuth2\User
|
|
{
|
|
$provider = new Provider(Request::create('/'), 'client', 'secret', 'https://app.test/callback');
|
|
$map = new ReflectionMethod($provider, 'mapUserToObject');
|
|
|
|
return $map->invoke($provider, $raw);
|
|
}
|
|
|
|
public function test_the_socialite_user_carries_the_role(): void
|
|
{
|
|
$raw = ['id' => '01JUSER', 'username' => 'ada', 'name' => 'Ada', 'email' => 'ada@example.com', 'avatar' => null];
|
|
|
|
$this->assertSame(Role::ADMIN, $this->socialiteUser([...$raw, 'role' => 'admin'])->role);
|
|
// apps that aren't trusted never get it
|
|
$this->assertNull($this->socialiteUser($raw)->role);
|
|
}
|
|
|
|
public function test_a_user_read_by_id_has_the_role(): void
|
|
{
|
|
$this->respond(200, ['data' => ['id' => '01JUSER', 'name' => 'Ada', 'role' => 'admin']]);
|
|
|
|
$user = app(AnikeenId::class)->findUserById('01JUSER');
|
|
|
|
$this->assertSame(Role::ADMIN, $user->role());
|
|
$this->assertTrue($user->isAdmin());
|
|
}
|
|
|
|
public function test_the_webhook_object_has_it_for_trusted_apps_only(): void
|
|
{
|
|
$trusted = new User(['object' => 'user', 'id' => '01JUSER', 'version' => 3, 'role' => 'user']);
|
|
$other = new User(['object' => 'user', 'id' => '01JUSER', 'version' => 3]);
|
|
|
|
$this->assertSame(Role::USER, $trusted->role());
|
|
$this->assertFalse($trusted->isAdmin());
|
|
$this->assertNull($other->role());
|
|
$this->assertFalse($other->isAdmin());
|
|
$this->assertSame([Role::ADMIN, Role::USER], Role::all());
|
|
}
|
|
}
|