mirror of https://github.com/pixelfed/pixelfed
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
114 lines
3.2 KiB
PHP
114 lines
3.2 KiB
PHP
<?php
|
|
|
|
use App\Models\User;
|
|
use Illuminate\Foundation\Testing\LazilyRefreshDatabase;
|
|
|
|
uses(LazilyRefreshDatabase::class);
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Authenticated Route Smoke Tests
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| These tests verify that routes requiring authentication return expected
|
|
| status codes for logged-in users. They catch broken views, missing
|
|
| controllers, and auth middleware regressions.
|
|
|
|
|
*/
|
|
|
|
beforeEach(function () {
|
|
$this->user = User::factory()->create();
|
|
$this->user->refresh();
|
|
$this->profile = $this->user->profile;
|
|
});
|
|
|
|
test('authenticated user homepage redirects to spa', function () {
|
|
$this->actingAs($this->user)
|
|
->get('/')
|
|
->assertRedirect('/i/web');
|
|
});
|
|
|
|
test('settings home page loads for authenticated user', function () {
|
|
$this->actingAs($this->user)
|
|
->get('/settings/home')
|
|
->assertStatus(200);
|
|
});
|
|
|
|
test('settings privacy page loads', function () {
|
|
$this->actingAs($this->user)
|
|
->get('/settings/privacy')
|
|
->assertStatus(200);
|
|
});
|
|
|
|
test('settings security page requires password confirmation', function () {
|
|
$this->actingAs($this->user)
|
|
->get('/settings/security')
|
|
->assertRedirect(route('password.confirm'));
|
|
});
|
|
|
|
test('settings security page loads after password confirmation', function () {
|
|
$this->actingAs($this->user)
|
|
->withSession(['auth.password_confirmed_at' => time()])
|
|
->get('/settings/security')
|
|
->assertStatus(200);
|
|
});
|
|
|
|
test('discover page loads for authenticated user', function () {
|
|
$this->actingAs($this->user)
|
|
->get('/discover')
|
|
->assertStatus(200);
|
|
});
|
|
|
|
test('notifications page loads', function () {
|
|
$this->actingAs($this->user)
|
|
->get('/account/activity')
|
|
->assertStatus(200);
|
|
});
|
|
|
|
test('compose page loads', function () {
|
|
$this->actingAs($this->user)
|
|
->get('/i/compose')
|
|
->assertStatus(200);
|
|
});
|
|
|
|
test('settings developers page requires password confirmation', function () {
|
|
$this->actingAs($this->user)
|
|
->get('/settings/applications')
|
|
->assertRedirect(route('password.confirm'));
|
|
});
|
|
|
|
test('settings developers page loads after password confirmation', function () {
|
|
$this->actingAs($this->user)
|
|
->withSession(['auth.password_confirmed_at' => time()])
|
|
->get('/settings/applications')
|
|
->assertStatus(200);
|
|
});
|
|
|
|
test('oauth clients endpoint works for authenticated user', function () {
|
|
$this->actingAs($this->user, 'web')
|
|
->getJson('/oauth/clients')
|
|
->assertOk();
|
|
});
|
|
|
|
test('oauth personal access tokens endpoint works', function () {
|
|
$this->actingAs($this->user, 'web')
|
|
->getJson('/oauth/personal-access-tokens')
|
|
->assertOk();
|
|
});
|
|
|
|
test('direct messages page loads', function () {
|
|
$this->actingAs($this->user)
|
|
->get('/account/direct')
|
|
->assertStatus(200);
|
|
});
|
|
|
|
test('unauthenticated user cannot access settings', function () {
|
|
$this->get('/settings/home')
|
|
->assertRedirect('/login');
|
|
});
|
|
|
|
test('unauthenticated user cannot access compose', function () {
|
|
$this->get('/i/compose')
|
|
->assertStatus(403);
|
|
});
|