makeOne(); $response = $this->post(route('api.resource.store', $resource->toArray())); $response->assertUnauthorized(); } /** * The External Resource Store Endpoint shall forbid users without the create external resource permission. * * @return void */ public function testForbidden(): void { $resource = ExternalResource::factory()->makeOne(); $user = User::factory()->createOne(); Sanctum::actingAs($user); $response = $this->post(route('api.resource.store', $resource->toArray())); $response->assertForbidden(); } /** * The External Resource Store Endpoint shall require link & site fields. * * @return void */ public function testRequiredFields(): void { $user = User::factory()->withPermissions(CrudPermission::CREATE->format(ExternalResource::class))->createOne(); Sanctum::actingAs($user); $response = $this->post(route('api.resource.store')); $response->assertJsonValidationErrors([ ExternalResource::ATTRIBUTE_LINK, ExternalResource::ATTRIBUTE_SITE, ]); } /** * The External Resource Store Endpoint shall create an resource. * * @return void */ public function testCreate(): void { $parameters = array_merge( ExternalResource::factory()->raw(), [ExternalResource::ATTRIBUTE_SITE => ResourceSite::OFFICIAL_SITE->localize()], ); $user = User::factory()->withPermissions(CrudPermission::CREATE->format(ExternalResource::class))->createOne(); Sanctum::actingAs($user); $response = $this->post(route('api.resource.store', $parameters)); $response->assertCreated(); static::assertDatabaseCount(ExternalResource::class, 1); } }