Current state with latest updates

2026-08-23 13:28:34 +02:00
parent 5af95f6533
commit f52879edbb
74 changed files with 5174 additions and 960 deletions
@@ -0,0 +1,88 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Tests\Feature\SecurityReport;
+
+use App\Models\SecurityReport;
+use App\Models\User;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Inertia\Testing\AssertableInertia;
+use Tests\TestCase;
+
+final class SecurityReportAdminTest extends TestCase
+{
+    use RefreshDatabase;
+
+    protected function setUp(): void
+    {
+        parent::setUp();
+
+        config(['security-report.enabled' => true]);
+    }
+
+    public function test_guest_cannot_open_security_report_page(): void
+    {
+        $this->get('/moderation/system/security-report')
+            ->assertRedirect(route('login'));
+    }
+
+    public function test_normal_user_cannot_open_security_report_page(): void
+    {
+        $user = User::factory()->create(['role' => 'user']);
+
+        $this->actingAs($user)
+            ->get('/moderation/system/security-report')
+            ->assertRedirect(route('index'));
+    }
+
+    public function test_staff_non_admin_cannot_open_security_report_page(): void
+    {
+        $manager = User::factory()->create(['role' => 'manager']);
+
+        $this->actingAs($manager)
+            ->get('/moderation/system/security-report')
+            ->assertForbidden();
+    }
+
+    public function test_admin_can_open_security_report_index_and_detail(): void
+    {
+        $admin = User::factory()->create(['role' => 'admin']);
+        $report = SecurityReport::query()->create([
+            'status' => 'completed_with_findings',
+            'started_at' => now()->subMinute(),
+            'finished_at' => now(),
+            'total_critical' => 1,
+            'total_high' => 2,
+            'total_medium' => 3,
+            'total_low' => 4,
+            'total_unknown' => 0,
+            'composer_outdated_count' => 5,
+            'npm_outdated_count' => 6,
+            'triggered_by' => 'artisan',
+            'summary' => [
+                'total' => ['critical' => 1, 'high' => 2, 'medium' => 3, 'low' => 4, 'unknown' => 0],
+            ],
+            'composer_audit' => ['advisories' => ['laravel/framework' => [['severity' => 'high', 'title' => 'Test advisory']]]],
+            'npm_audit' => ['vulnerabilities' => ['vite' => ['severity' => 'moderate', 'via' => [['title' => 'Moderate issue']]]]],
+        ]);
+
+        $this->actingAs($admin)
+            ->get('/moderation/system/security-report')
+            ->assertOk()
+            ->assertInertia(fn (AssertableInertia $page) => $page
+                ->component('Admin/System/SecurityReportIndex')
+                ->where('latest.id', $report->id)
+                ->where('latest.total_critical', 1)
+                ->where('reports.data.0.id', $report->id));
+
+        $this->actingAs($admin)
+            ->get('/moderation/system/security-report/' . $report->id)
+            ->assertOk()
+            ->assertInertia(fn (AssertableInertia $page) => $page
+                ->component('Admin/System/SecurityReportShow')
+                ->where('report.id', $report->id)
+                ->where('report.total_high', 2)
+                ->where('report.composer_advisories.0.package', 'laravel/framework'));
+    }
+}