mirror of
https://github.com/AnimeThemes/animethemes-server.git
synced 2026-09-04 19:55:05 +02:00
43 lines
1.0 KiB
PHP
43 lines
1.0 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
use App\Enums\Auth\ExtendedCrudPermission;
|
|
use App\Models\Auth\User;
|
|
use App\Models\Wiki\Image;
|
|
use Laravel\Sanctum\Sanctum;
|
|
|
|
use function Pest\Laravel\delete;
|
|
|
|
test('protected', function (): void {
|
|
$image = Image::factory()->createOne();
|
|
|
|
$response = delete(route('api.image.forceDelete', ['image' => $image]));
|
|
|
|
$response->assertUnauthorized();
|
|
});
|
|
|
|
test('forbidden', function (): void {
|
|
$image = Image::factory()->createOne();
|
|
|
|
$user = User::factory()->createOne();
|
|
|
|
Sanctum::actingAs($user);
|
|
|
|
$response = delete(route('api.image.forceDelete', ['image' => $image]));
|
|
|
|
$response->assertForbidden();
|
|
});
|
|
|
|
test('deleted', function (): void {
|
|
$image = Image::factory()->createOne();
|
|
|
|
$user = User::factory()->withPermissions(ExtendedCrudPermission::FORCE_DELETE->format(Image::class))->createOne();
|
|
|
|
Sanctum::actingAs($user);
|
|
$response = delete(route('api.image.forceDelete', ['image' => $image]));
|
|
|
|
$response->assertOk();
|
|
$this->assertModelMissing($image);
|
|
});
|