kang
3c74ffc2d5
- 在 `composer.json` 中新增 `phpoffice/phpspreadsheet` 依赖。 - 更新 `ReportJobDownloadController` 以使用 `AdminReportSpreadsheetExporter` 进行 XLSX 格式的报表导出，简化导出逻辑并确保文件名包含动态生成的输出路径后缀。 - 更新 `AdminAuthorizationRegistry` 中的权限定义，扩展相关权限以支持新的设置管理功能。
51 lines
1.6 KiB
PHP
51 lines
1.6 KiB
PHP
<?php
|
|
|
|
use App\Models\AdminUser;
|
|
use Database\Seeders\AdminRbacAndUserSeeder;
|
|
use Illuminate\Support\Facades\DB;
|
|
use Illuminate\Support\Facades\Hash;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
|
|
uses(RefreshDatabase::class);
|
|
|
|
test('admin dashboard api resource is bound after migrations without manual auth sync', function (): void {
|
|
$this->seed(AdminRbacAndUserSeeder::class);
|
|
|
|
$resourceId = (int) DB::table('admin_api_resources')
|
|
->where('code', 'admin.dashboard')
|
|
->value('id');
|
|
|
|
expect($resourceId)->toBeGreaterThan(0);
|
|
|
|
$bindingCount = DB::table('admin_api_resource_bindings')
|
|
->where('api_resource_id', $resourceId)
|
|
->count();
|
|
|
|
expect($bindingCount)->toBeGreaterThan(0);
|
|
|
|
$admin = AdminUser::query()->where('username', 'admin')->firstOrFail();
|
|
$token = $admin->createToken('test', ['*'], now()->addDay())->plainTextToken;
|
|
|
|
$this->withHeader('Authorization', 'Bearer '.$token)
|
|
->getJson('/api/v1/admin/dashboard')
|
|
->assertOk();
|
|
});
|
|
|
|
test('admin user without dashboard permission is forbidden on dashboard api', function (): void {
|
|
$this->seed(AdminRbacAndUserSeeder::class);
|
|
|
|
$admin = AdminUser::query()->create([
|
|
'username' => 'no_dashboard',
|
|
'name' => 'No Dashboard',
|
|
'email' => null,
|
|
'password' => Hash::make('secret-strong'),
|
|
'status' => 0,
|
|
]);
|
|
|
|
$token = $admin->createToken('test', ['*'], now()->addDay())->plainTextToken;
|
|
|
|
$this->withHeader('Authorization', 'Bearer '.$token)
|
|
->getJson('/api/v1/admin/dashboard')
|
|
->assertForbidden();
|
|
});
|