Токен-аутентификация Sanctum (login/logout по устройствам), эндпоинты /api/v1 для зон/устройств/правил автоматизации с тем же RBAC (owner/viewer), что и в веб-версии — контроллеры переиспользуют существующие Policy и FormRequest. Устройства отдают живой статус из Device Shadow (Redis) и историю телеметрии из ClickHouse, плюс управление (turn-on/turn-off/set-level) через device-control-service.
66 lines
2.0 KiB
PHP
66 lines
2.0 KiB
PHP
<?php
|
|
|
|
namespace Tests\Feature\Api\V1;
|
|
|
|
use App\Enums\UserRole;
|
|
use App\Models\User;
|
|
use App\Models\Zone;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
use Tests\TestCase;
|
|
|
|
class ZoneApiTest extends TestCase
|
|
{
|
|
use RefreshDatabase;
|
|
|
|
public function test_owner_can_create_zone(): void
|
|
{
|
|
$owner = User::factory()->create(['role' => UserRole::Owner]);
|
|
|
|
$response = $this->actingAs($owner)->postJson('/api/v1/zones', [
|
|
'name' => 'Гостиная',
|
|
'description' => 'Тест',
|
|
]);
|
|
|
|
$response->assertCreated();
|
|
$response->assertJsonPath('data.name', 'Гостиная');
|
|
$this->assertDatabaseHas('zones', ['name' => 'Гостиная', 'user_id' => $owner->id]);
|
|
}
|
|
|
|
public function test_viewer_cannot_create_zone(): void
|
|
{
|
|
$viewer = User::factory()->create(['role' => UserRole::Viewer]);
|
|
|
|
$response = $this->actingAs($viewer)->postJson('/api/v1/zones', ['name' => 'Гостиная']);
|
|
|
|
$response->assertForbidden();
|
|
$this->assertDatabaseMissing('zones', ['name' => 'Гостиная']);
|
|
}
|
|
|
|
public function test_viewer_can_list_zones(): void
|
|
{
|
|
$viewer = User::factory()->create(['role' => UserRole::Viewer]);
|
|
Zone::forceCreate(['user_id' => $viewer->id, 'name' => 'Гроубокс']);
|
|
|
|
$response = $this->actingAs($viewer)->getJson('/api/v1/zones');
|
|
|
|
$response->assertOk();
|
|
$response->assertJsonPath('data.0.name', 'Гроубокс');
|
|
}
|
|
|
|
public function test_viewer_cannot_delete_zone(): void
|
|
{
|
|
$viewer = User::factory()->create(['role' => UserRole::Viewer]);
|
|
$zone = Zone::forceCreate(['user_id' => $viewer->id, 'name' => 'Гроубокс']);
|
|
|
|
$response = $this->actingAs($viewer)->deleteJson("/api/v1/zones/{$zone->id}");
|
|
|
|
$response->assertForbidden();
|
|
$this->assertDatabaseHas('zones', ['id' => $zone->id]);
|
|
}
|
|
|
|
public function test_guest_gets_401(): void
|
|
{
|
|
$this->getJson('/api/v1/zones')->assertUnauthorized();
|
|
}
|
|
}
|