Files

44 lines
1.0 KiB
PHP

<?php
declare(strict_types=1);
use App\Enums\Auth\ExtendedCrudPermission;
use App\Models\Auth\User;
use App\Models\Wiki\Video;
use Laravel\Sanctum\Sanctum;
use function Pest\Laravel\delete;
test('protected', function (): void {
$video = Video::factory()->createOne();
$response = delete(route('api.video.forceDelete', ['video' => $video]));
$response->assertUnauthorized();
});
test('forbidden', function (): void {
$video = Video::factory()->createOne();
$user = User::factory()->createOne();
Sanctum::actingAs($user);
$response = delete(route('api.video.forceDelete', ['video' => $video]));
$response->assertForbidden();
});
test('deleted', function (): void {
$video = Video::factory()->createOne();
$user = User::factory()->withPermissions(ExtendedCrudPermission::FORCE_DELETE->format(Video::class))->createOne();
Sanctum::actingAs($user);
$response = delete(route('api.video.forceDelete', ['video' => $video]));
$response->assertOk();
$this->assertModelMissing($video);
});