mirror of
https://github.com/pelican-dev/panel.git
synced 2025-05-20 00:34:44 +02:00

* add spatie/permissions * add policies * add role resource * add root admin role handling * replace some "root_admin" with function * add model specific permissions * make permission selection nicer * fix user creation * fix tests * add back subuser checks in server policy * add custom model for role * assign new users to role if root_admin is set * add api for roles * fix phpstan * add permissions for settings page * remove "restore" and "forceDelete" permissions * add user count to list * prevent deletion if role has users * update user list * fix server policy * remove old `root_admin` column * small refactor * fix tests * forgot can checks here * forgot use * disable editing own roles & disable assigning root admin * don't allow to rename root admin role * remove php bombing exception handler * fix role assignment when creating a user * fix disableOptionWhen * fix missing `root_admin` attribute on react frontend * add permission check for bulk delete * rename viewAny to viewList * improve canAccessPanel check * fix admin not displaying for non-root admins * make sure non root admins can't edit root admins * fix import * fix settings page permission check * fix server permissions for non-subusers * fix settings page permission check v2 * small cleanup * cleanup config file * move consts from resouce into enum & model * Update database/migrations/2024_08_01_114538_remove_root_admin_column.php Co-authored-by: Lance Pioch <lancepioch@gmail.com> * fix config * fix phpstan * fix phpstan 2.0 --------- Co-authored-by: Lance Pioch <lancepioch@gmail.com>
114 lines
3.4 KiB
PHP
114 lines
3.4 KiB
PHP
<?php
|
|
|
|
namespace App\Tests\Integration\Api\Application;
|
|
|
|
use Illuminate\Http\Request;
|
|
use App\Models\User;
|
|
use PHPUnit\Framework\Assert;
|
|
use App\Models\ApiKey;
|
|
use App\Models\Role;
|
|
use App\Services\Acl\Api\AdminAcl;
|
|
use App\Tests\Integration\IntegrationTestCase;
|
|
use Illuminate\Foundation\Testing\DatabaseTransactions;
|
|
use App\Tests\Traits\Integration\CreatesTestModels;
|
|
use App\Transformers\Api\Application\BaseTransformer;
|
|
use App\Transformers\Api\Client\BaseClientTransformer;
|
|
use App\Tests\Traits\Http\IntegrationJsonRequestAssertions;
|
|
|
|
abstract class ApplicationApiIntegrationTestCase extends IntegrationTestCase
|
|
{
|
|
use CreatesTestModels;
|
|
use DatabaseTransactions;
|
|
use IntegrationJsonRequestAssertions;
|
|
|
|
private ApiKey $key;
|
|
|
|
private User $user;
|
|
|
|
/**
|
|
* Bootstrap application API tests. Creates a default admin user and associated API key
|
|
* and also sets some default headers required for accessing the API.
|
|
*/
|
|
protected function setUp(): void
|
|
{
|
|
parent::setUp();
|
|
|
|
$this->user = $this->createApiUser();
|
|
$this->key = $this->createApiKey($this->user);
|
|
|
|
$this
|
|
->withHeader('Accept', 'application/vnd.panel.v1+json')
|
|
->withHeader('Authorization', 'Bearer ' . $this->key->identifier . $this->key->token);
|
|
}
|
|
|
|
public function getApiUser(): User
|
|
{
|
|
return $this->user;
|
|
}
|
|
|
|
public function getApiKey(): ApiKey
|
|
{
|
|
return $this->key;
|
|
}
|
|
|
|
/**
|
|
* Creates a new default API key and refreshes the headers using it.
|
|
*/
|
|
protected function createNewDefaultApiKey(User $user, array $permissions = []): ApiKey
|
|
{
|
|
$this->key = $this->createApiKey($user, $permissions);
|
|
|
|
$this->withHeader('Authorization', 'Bearer ' . $this->key->identifier . $this->key->token);
|
|
|
|
return $this->key;
|
|
}
|
|
|
|
/**
|
|
* Create an administrative user.
|
|
*/
|
|
protected function createApiUser(): User
|
|
{
|
|
$user = User::factory()->create();
|
|
$user->syncRoles(Role::getRootAdmin());
|
|
|
|
return $user;
|
|
}
|
|
|
|
/**
|
|
* Create a new application API key for a given user model.
|
|
*/
|
|
protected function createApiKey(User $user, array $permissions = []): ApiKey
|
|
{
|
|
return ApiKey::factory()->create(array_merge([
|
|
'user_id' => $user->id,
|
|
'key_type' => ApiKey::TYPE_APPLICATION,
|
|
'r_servers' => AdminAcl::READ | AdminAcl::WRITE,
|
|
'r_nodes' => AdminAcl::READ | AdminAcl::WRITE,
|
|
'r_allocations' => AdminAcl::READ | AdminAcl::WRITE,
|
|
'r_users' => AdminAcl::READ | AdminAcl::WRITE,
|
|
'r_eggs' => AdminAcl::READ | AdminAcl::WRITE,
|
|
'r_database_hosts' => AdminAcl::READ | AdminAcl::WRITE,
|
|
'r_server_databases' => AdminAcl::READ | AdminAcl::WRITE,
|
|
'r_mounts' => AdminAcl::READ | AdminAcl::WRITE,
|
|
], $permissions));
|
|
}
|
|
|
|
/**
|
|
* Return a transformer that can be used for testing purposes.
|
|
*/
|
|
protected function getTransformer(string $abstract): BaseTransformer
|
|
{
|
|
$request = Request::createFromGlobals();
|
|
$request->setUserResolver(function () {
|
|
return $this->getApiKey()->user;
|
|
});
|
|
|
|
$transformer = $abstract::fromRequest($request);
|
|
|
|
Assert::assertInstanceOf(BaseTransformer::class, $transformer);
|
|
Assert::assertNotInstanceOf(BaseClientTransformer::class, $transformer);
|
|
|
|
return $transformer;
|
|
}
|
|
}
|