81 lines
2.8 KiB
PHP
81 lines
2.8 KiB
PHP
<?php
|
|
|
|
namespace Pterodactyl\Tests\Integration\Api\Application\Users;
|
|
|
|
use Pterodactyl\Models\User;
|
|
use Illuminate\Http\Response;
|
|
use Pterodactyl\Tests\Integration\Api\Application\ApplicationApiIntegrationTestCase;
|
|
|
|
class ExternalUserControllerTest extends ApplicationApiIntegrationTestCase
|
|
{
|
|
/**
|
|
* Test that a user can be retrieved by their external ID.
|
|
*/
|
|
public function testGetRemoteUser()
|
|
{
|
|
$user = User::factory()->create();
|
|
|
|
$response = $this->getJson('/api/application/users/external/' . $user->external_id);
|
|
$response->assertStatus(Response::HTTP_OK);
|
|
$response->assertJsonCount(2);
|
|
$response->assertJsonStructure([
|
|
'object',
|
|
'attributes' => [
|
|
'id', 'external_id', 'uuid', 'username', 'email', 'first_name', 'last_name',
|
|
'language', 'root_admin', '2fa', 'created_at', 'updated_at',
|
|
],
|
|
]);
|
|
|
|
$response->assertJson([
|
|
'object' => 'user',
|
|
'attributes' => [
|
|
'id' => $user->id,
|
|
'external_id' => $user->external_id,
|
|
'uuid' => $user->uuid,
|
|
'username' => $user->username,
|
|
'email' => $user->email,
|
|
'first_name' => $user->name_first,
|
|
'last_name' => $user->name_last,
|
|
'language' => $user->language,
|
|
'root_admin' => (bool) $user->root_admin,
|
|
'2fa' => (bool) $user->totp_enabled,
|
|
'created_at' => $this->formatTimestamp($user->created_at),
|
|
'updated_at' => $this->formatTimestamp($user->updated_at),
|
|
],
|
|
], true);
|
|
}
|
|
|
|
/**
|
|
* Test that an invalid external ID returns a 404 error.
|
|
*/
|
|
public function testGetMissingUser()
|
|
{
|
|
$response = $this->getJson('/api/application/users/external/nil');
|
|
$this->assertNotFoundJson($response);
|
|
}
|
|
|
|
/**
|
|
* Test that an authentication error occurs if a key does not have permission
|
|
* to access a resource.
|
|
*/
|
|
public function testErrorReturnedIfNoPermission()
|
|
{
|
|
$user = User::factory()->create();
|
|
$this->createNewDefaultApiKey($this->getApiUser(), ['r_users' => 0]);
|
|
|
|
$response = $this->getJson('/api/application/users/external/' . $user->external_id);
|
|
$this->assertAccessDeniedJson($response);
|
|
}
|
|
|
|
/**
|
|
* Test that a users's existence is not exposed unless an API key has permission
|
|
* to access the resource.
|
|
*/
|
|
public function testResourceIsNotExposedWithoutPermissions()
|
|
{
|
|
$this->createNewDefaultApiKey($this->getApiUser(), ['r_users' => 0]);
|
|
|
|
$response = $this->getJson('/api/application/users/external/nil');
|
|
$this->assertAccessDeniedJson($response);
|
|
}
|
|
}
|