jonnybarnes.uk/tests/Feature/Admin/TokensTest.php

<?php

declare(strict_types=1);

namespace Tests\Feature\Admin;

use App\Models\MicropubToken;
use App\Models\User;
use Illuminate\Foundation\Testing\RefreshDatabase;
use PHPUnit\Framework\Attributes\Test;
use Tests\TestCase;

class TokensTest extends TestCase
{
    use RefreshDatabase;

    #[Test]
    public function index_requires_authentication(): void
    {
        $response = $this->get('/admin/tokens');
        $response->assertRedirect();
    }

    #[Test]
    public function index_lists_issued_tokens(): void
    {
        $user = User::factory()->make();
        $token = MicropubToken::create([
            'token_hash' => hash('sha256', 'a-token'),
            'client_id' => 'https://quill.p3k.io',
            'me' => 'https://jonnybarnes.uk',
            'scope' => 'create update',
        ]);

        $response = $this->actingAs($user)->get('/admin/tokens');
        $response->assertOk();
        $response->assertSeeText($token->client_id);
    }

    #[Test]
    public function revoke_requires_authentication(): void
    {
        $token = MicropubToken::create([
            'token_hash' => hash('sha256', 'a-token'),
            'client_id' => 'https://quill.p3k.io',
            'me' => 'https://jonnybarnes.uk',
            'scope' => 'create',
        ]);

        $response = $this->put("/admin/tokens/{$token->id}/revoke");
        $response->assertRedirect();

        $this->assertFalse($token->fresh()->isRevoked);
    }

    #[Test]
    public function revoke_marks_the_token_as_revoked(): void
    {
        $user = User::factory()->make();
        $token = MicropubToken::create([
            'token_hash' => hash('sha256', 'a-token'),
            'client_id' => 'https://quill.p3k.io',
            'me' => 'https://jonnybarnes.uk',
            'scope' => 'create',
        ]);

        $this->actingAs($user)->put("/admin/tokens/{$token->id}/revoke");

        $this->assertTrue($token->fresh()->isRevoked);
    }

    #[Test]
    public function revoke_redirects_to_index(): void
    {
        $user = User::factory()->make();
        $token = MicropubToken::create([
            'token_hash' => hash('sha256', 'a-token'),
            'client_id' => 'https://quill.p3k.io',
            'me' => 'https://jonnybarnes.uk',
            'scope' => 'create',
        ]);

        $response = $this->actingAs($user)->put("/admin/tokens/{$token->id}/revoke");

        $response->assertRedirect('/admin/tokens');
    }
}