KanbanGit/tests/Feature/Settings/GitConnectionTest.php

<?php

namespace Tests\Feature\Settings;

use App\Actions\Git\GitProviderKey;
use App\Models\User;
use App\Models\UserGitConnection;
use Illuminate\Foundation\Testing\RefreshDatabase;
use Illuminate\Support\Facades\Http;
use Inertia\Testing\AssertableInertia as Assert;
use Tests\TestCase;

class GitConnectionTest extends TestCase
{
    use RefreshDatabase;

    /**
     * Ensure the Git connections settings page is displayed to authenticated users.
     */
    public function test_git_connections_page_is_displayed(): void
    {
        $user = User::factory()->create();
        UserGitConnection::factory()->for($user)->create([
            'account_login' => 'nico',
            'base_url' => 'https://git.example.test',
        ]);

        $this->actingAs($user)
            ->get(route('git-connections.edit'))
            ->assertOk()
            ->assertInertia(fn (Assert $page) => $page
                ->component('settings/GitConnections')
                ->where('gitConnections.0.account_login', 'nico')
                ->where('gitConnections.0.base_url', 'https://git.example.test')
                ->where('gitConnections.0.provider', GitProviderKey::Gitea->value),
            );
    }

    /**
     * Ensure a user can add a verified Gitea connection with repository-only access.
     */
    public function test_users_can_store_verified_gitea_connections_with_repository_only_access(): void
    {
        Http::preventStrayRequests();
        Http::fake([
            'https://git.example.test/api/v1/user/repos*' => Http::response([]),
            'https://git.example.test/api/v1/user' => Http::response([
                'message' => 'Forbidden',
            ], 403),
        ]);

        $user = User::factory()->create();

        $this->actingAs($user)
            ->post(route('git-connections.store'), [
                'provider' => 'gitea',
                'base_url' => 'https://git.example.test/api/v1',
                'api_token' => 'super-secret-token',
            ])
            ->assertRedirect(route('git-connections.edit'))
            ->assertSessionHas('status', 'Git connection was added.');

        $this->assertDatabaseHas('user_git_connections', [
            'user_id' => $user->id,
            'provider' => GitProviderKey::Gitea->value,
            'base_url' => 'https://git.example.test',
            'provider_user_id' => '',
            'account_login' => 'git.example.test',
            'account_name' => null,
        ]);
    }

    /**
     * Ensure a user connection stores authenticated user metadata when it is available.
     */
    public function test_users_can_store_authenticated_user_metadata_when_available(): void
    {
        Http::preventStrayRequests();
        Http::fake([
            'https://git.example.test/api/v1/user/repos*' => Http::response([]),
            'https://git.example.test/api/v1/user' => Http::response([
                'id' => 101,
                'login' => 'nico',
                'full_name' => 'Nico Example',
            ]),
        ]);

        $user = User::factory()->create();

        $this->actingAs($user)
            ->post(route('git-connections.store'), [
                'provider' => 'gitea',
                'base_url' => 'https://git.example.test',
                'api_token' => 'super-secret-token',
            ])
            ->assertRedirect(route('git-connections.edit'))
            ->assertSessionHas('status', 'Git connection was added.');

        $this->assertDatabaseHas('user_git_connections', [
            'user_id' => $user->id,
            'provider' => GitProviderKey::Gitea->value,
            'base_url' => 'https://git.example.test',
            'provider_user_id' => '101',
            'account_login' => 'nico',
            'account_name' => 'Nico Example',
        ]);
    }

    /**
     * Ensure invalid repository credentials are rejected with a validation error.
     */
    public function test_invalid_provider_credentials_are_rejected(): void
    {
        Http::preventStrayRequests();
        Http::fake([
            'https://git.example.test/api/v1/user/repos*' => Http::response([
                'message' => 'Unauthorized',
            ], 401),
        ]);

        $user = User::factory()->create();

        $this->actingAs($user)
            ->from(route('git-connections.edit'))
            ->post(route('git-connections.store'), [
                'provider' => 'gitea',
                'base_url' => 'https://git.example.test',
                'api_token' => 'wrong-token',
            ])
            ->assertRedirect(route('git-connections.edit'))
            ->assertSessionHasErrors('api_token');
    }

    /**
     * Ensure a user can update only their own Git connection.
     */
    public function test_users_can_update_their_own_git_connections(): void
    {
        Http::preventStrayRequests();
        Http::fake([
            'https://git.internal.test/api/v1/user/repos*' => Http::response([]),
            'https://git.internal.test/api/v1/user' => Http::response([
                'id' => 202,
                'login' => 'updated-user',
                'full_name' => 'Updated User',
            ]),
        ]);

        $user = User::factory()->create();
        $gitConnection = UserGitConnection::factory()->for($user)->create([
            'account_login' => 'old-user',
            'account_name' => 'Old User',
            'base_url' => 'https://git.example.test',
            'provider' => GitProviderKey::Gitea,
            'provider_user_id' => '100',
        ]);

        $this->actingAs($user)
            ->patch(route('git-connections.update', $gitConnection), [
                'provider' => 'gitea',
                'base_url' => 'https://git.internal.test',
                'api_token' => 'fresh-token',
            ])
            ->assertRedirect(route('git-connections.edit'))
            ->assertSessionHas('status', 'Git connection was updated.');

        $this->assertDatabaseHas('user_git_connections', [
            'id' => $gitConnection->id,
            'base_url' => 'https://git.internal.test',
            'provider_user_id' => '202',
            'account_login' => 'updated-user',
            'account_name' => 'Updated User',
        ]);
    }

    /**
     * Ensure users cannot update another user's Git connection.
     */
    public function test_users_cannot_update_foreign_git_connections(): void
    {
        Http::preventStrayRequests();
        Http::fake();

        $owner = User::factory()->create();
        $otherUser = User::factory()->create();
        $gitConnection = UserGitConnection::factory()->for($owner)->create();

        $this->actingAs($otherUser)
            ->patch(route('git-connections.update', $gitConnection), [
                'provider' => 'gitea',
                'base_url' => 'https://git.example.test',
                'api_token' => 'fresh-token',
            ])
            ->assertForbidden();
    }

    /**
     * Ensure users can remove their own Git connections.
     */
    public function test_users_can_delete_their_own_git_connections(): void
    {
        $user = User::factory()->create();
        $gitConnection = UserGitConnection::factory()->for($user)->create([
            'account_login' => 'nico',
            'base_url' => 'https://git.example.test',
        ]);

        $this->actingAs($user)
            ->delete(route('git-connections.destroy', $gitConnection))
            ->assertRedirect(route('git-connections.edit'))
            ->assertSessionHas(
                'status',
                'nico @ https://git.example.test was removed.',
            );

        $this->assertDatabaseMissing('user_git_connections', [
            'id' => $gitConnection->id,
        ]);
    }
}