createOne(); $resource = ExternalResource::factory()->createOne(); $parameters = SongResource::factory()->raw(); $response = $this->post(route('api.songresource.store', ['song' => $song, 'resource' => $resource] + $parameters)); $response->assertUnauthorized(); } /** * The Song Resource Store Endpoint shall forbid users without the create song & create resource permissions. * * @return void */ public function testForbidden(): void { $song = Song::factory()->createOne(); $resource = ExternalResource::factory()->createOne(); $parameters = SongResource::factory()->raw(); $user = User::factory()->createOne(); Sanctum::actingAs($user); $response = $this->post(route('api.songresource.store', ['song' => $song, 'resource' => $resource] + $parameters)); $response->assertForbidden(); } /** * The Song Resource Store Endpoint shall create an song resource. * * @return void */ public function testCreate(): void { $song = Song::factory()->createOne(); $resource = ExternalResource::factory()->createOne(); $parameters = SongResource::factory()->raw(); $user = User::factory() ->withPermissions( CrudPermission::CREATE->format(Song::class), CrudPermission::CREATE->format(ExternalResource::class) ) ->createOne(); Sanctum::actingAs($user); $response = $this->post(route('api.songresource.store', ['song' => $song, 'resource' => $resource] + $parameters)); $response->assertCreated(); static::assertDatabaseCount(SongResource::class, 1); } }