mirror of
https://github.com/AnimeThemes/animethemes-server.git
synced 2026-07-11 01:24:46 +02:00
44 lines
982 B
PHP
44 lines
982 B
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
use App\Enums\Auth\CrudPermission;
|
|
use App\Models\Admin\Dump;
|
|
use App\Models\Auth\User;
|
|
use Laravel\Sanctum\Sanctum;
|
|
|
|
use function Pest\Laravel\delete;
|
|
|
|
test('protected', function () {
|
|
$dump = Dump::factory()->createOne();
|
|
|
|
$response = delete(route('api.dump.destroy', ['dump' => $dump]));
|
|
|
|
$response->assertUnauthorized();
|
|
});
|
|
|
|
test('forbidden', function () {
|
|
$dump = Dump::factory()->createOne();
|
|
|
|
$user = User::factory()->createOne();
|
|
|
|
Sanctum::actingAs($user);
|
|
|
|
$response = delete(route('api.dump.destroy', ['dump' => $dump]));
|
|
|
|
$response->assertForbidden();
|
|
});
|
|
|
|
test('deleted', function () {
|
|
$dump = Dump::factory()->createOne();
|
|
|
|
$user = User::factory()->withPermissions(CrudPermission::DELETE->format(Dump::class))->createOne();
|
|
|
|
Sanctum::actingAs($user);
|
|
|
|
$response = delete(route('api.dump.destroy', ['dump' => $dump]));
|
|
|
|
$response->assertOk();
|
|
$this->assertModelMissing($dump);
|
|
});
|