45

backend/tests/Feature/AdminSyncTest.php

@@ -0,0 +1,59 @@
+<?php
+
+namespace Tests\Feature;
+
+use App\Models\Tenant;
+use App\Models\User;
+use App\Services\Graph\DirectorySync;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Tests\TestCase;
+
+class AdminSyncTest extends TestCase
+{
+    use RefreshDatabase;
+
+    private Tenant $tenant;
+
+    protected function setUp(): void
+    {
+        parent::setUp();
+        config(['signature.admin_allowed_cidrs' => []]);
+        $this->tenant = Tenant::create(['name' => 'CABM', 'entra_tenant_id' => '11111111-1111-1111-1111-111111111111']);
+
+        // Pas d'appel Graph en test : la synchro est simulée.
+        $this->app->instance(DirectorySync::class, new class extends DirectorySync {
+            public array $calls = [];
+
+            public function run(Tenant $tenant, bool $full = false): array
+            {
+                $this->calls[] = $full;
+
+                return ['users' => 3, 'removed' => 1, 'groups' => 2, 'memberships' => 5];
+            }
+        });
+    }
+
+    private function user(string $role): User
+    {
+        return User::create(['name' => $role, 'email' => "{$role}@x.fr", 'tenant_id' => $this->tenant->id, 'entra_oid' => '22222222-2222-2222-2222-222222222222', 'role' => $role]);
+    }
+
+    public function test_admin_lance_une_synchro_complete(): void
+    {
+        $this->actingAs($this->user('admin'))->from('/admin')->post('/admin/synchro', ['full' => '1'])
+            ->assertRedirect('/admin')
+            ->assertSessionHas('status', 'Synchronisation complète terminée : 3 agents mis à jour, 1 retirés, 2 groupes, 5 appartenances.');
+
+        $this->assertSame([true], app(DirectorySync::class)->calls);
+    }
+
+    public function test_editeur_ne_peut_pas_synchroniser(): void
+    {
+        $this->actingAs($this->user('editor'))->post('/admin/synchro')->assertForbidden();
+    }
+
+    public function test_bouton_visible_sur_le_tableau_de_bord(): void
+    {
+        $this->actingAs($this->user('admin'))->get('/admin')->assertOk()->assertSee('Synchroniser maintenant');
+    }
+}

backend/tests/Feature/AdminTemplatesTest.php

@@ -0,0 +1,135 @@
+<?php
+
+namespace Tests\Feature;
+
+use App\Models\Assignment;
+use App\Models\AuditLog;
+use App\Models\DirectoryGroup;
+use App\Models\DirectoryUser;
+use App\Models\Template;
+use App\Models\Tenant;
+use App\Models\User;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Tests\TestCase;
+
+class AdminTemplatesTest extends TestCase
+{
+    use RefreshDatabase;
+
+    private Tenant $tenant;
+    private DirectoryUser $agent;
+
+    protected function setUp(): void
+    {
+        parent::setUp();
+        config(['signature.admin_allowed_cidrs' => []]);
+
+        $this->tenant = Tenant::create(['name' => 'CABM', 'entra_tenant_id' => '11111111-1111-1111-1111-111111111111']);
+        $this->agent = DirectoryUser::create([
+            'tenant_id' => $this->tenant->id, 'entra_oid' => '22222222-2222-2222-2222-222222222222',
+            'display_name' => 'Jean Martin', 'given_name' => 'Jean', 'surname' => 'Martin',
+            'mail' => 'j.martin@beziers-mediterranee.fr', 'account_enabled' => true,
+        ]);
+    }
+
+    private function user(string $role): User
+    {
+        return User::create([
+            'name' => $role, 'email' => "{$role}@beziers-mediterranee.fr", 'tenant_id' => $this->tenant->id,
+            'entra_oid' => '22222222-2222-2222-2222-222222222222', 'role' => $role,
+        ]);
+    }
+
+    private function payload(array $over = []): array
+    {
+        return array_merge(['name' => 'Directeurs', 'draft_html_full' => '<b>{{prenom}}</b>', 'draft_html_short' => '{{nom}}'], $over);
+    }
+
+    public function test_agent_sans_role_refuse(): void
+    {
+        $this->actingAs($this->user(''))->get('/admin/templates')->assertForbidden();
+    }
+
+    public function test_editeur_cree_et_modifie_un_brouillon_nettoye_mais_ne_publie_pas(): void
+    {
+        $editor = $this->user('editor');
+        $this->actingAs($editor)->post('/admin/templates', $this->payload([
+            'draft_html_full' => '<b>{{prenom}}</b><script>alert(1)</script>',
+        ]))->assertRedirect();
+
+        $t = Template::firstWhere('name', 'Directeurs');
+        $this->assertSame('<b>{{prenom}}</b>', $t->draft_html_full);
+        $this->assertNull($t->html_full, 'rien n\'est publié tant qu\'un admin ne publie pas');
+
+        $this->actingAs($editor)->post("/admin/templates/{$t->id}/publish")->assertForbidden();
+        $this->actingAs($editor)->get('/admin/affectations')->assertForbidden();
+        $this->assertTrue(AuditLog::where('action', 'template.create')->exists());
+    }
+
+    public function test_admin_publie_versionne_et_restaure(): void
+    {
+        $admin = $this->user('admin');
+        $t = Template::create(['tenant_id' => $this->tenant->id] + $this->payload());
+
+        $this->actingAs($admin)->post("/admin/templates/{$t->id}/publish")->assertRedirect();
+        $t->refresh();
+        $this->assertSame(1, $t->published_version);
+        $this->assertSame('<b>{{prenom}}</b>', $t->html_full);
+
+        $this->actingAs($admin)->put("/admin/templates/{$t->id}", $this->payload(['draft_html_full' => 'v2']))->assertRedirect();
+        $this->assertSame('<b>{{prenom}}</b>', $t->fresh()->html_full, 'le brouillon ne modifie pas le publié');
+
+        $version = $t->versions()->first();
+        $this->actingAs($admin)->post("/admin/templates/{$t->id}/versions/{$version->id}/restore")->assertRedirect();
+        $this->assertSame('<b>{{prenom}}</b>', $t->fresh()->draft_html_full);
+    }
+
+    public function test_apercu_rend_le_brouillon_pour_un_agent(): void
+    {
+        $this->actingAs($this->user('editor'))
+            ->postJson('/admin/templates/preview', ['html' => 'Bonjour {{prenom}} <img src=x onerror=alert(1)>', 'variant' => 'full', 'agent_id' => $this->agent->id])
+            ->assertOk()
+            ->assertJson(['html' => 'Bonjour Jean <img src=x>', 'agent' => 'Jean Martin — j.martin@beziers-mediterranee.fr']);
+    }
+
+    public function test_cloisonnement_entre_tenants(): void
+    {
+        $other = Tenant::create(['name' => 'Commune', 'entra_tenant_id' => '99999999-9999-9999-9999-999999999999']);
+        $foreign = Template::create(['tenant_id' => $other->id, 'name' => 'Autre', 'draft_html_full' => 'x']);
+
+        $this->actingAs($this->user('superadmin'))->get("/admin/templates/{$foreign->id}")->assertNotFound();
+    }
+
+    public function test_affectations_crud_et_template_par_defaut(): void
+    {
+        $admin = $this->user('admin');
+        $t = Template::create(['tenant_id' => $this->tenant->id] + $this->payload());
+        $t->publish();
+        $group = DirectoryGroup::create(['tenant_id' => $this->tenant->id, 'entra_oid' => '33333333-3333-3333-3333-333333333333', 'display_name' => 'signature_mail_directeurs']);
+
+        $this->actingAs($admin)->post('/admin/affectations', ['template_id' => $t->id, 'directory_group_id' => $group->id, 'priority' => 50])->assertRedirect();
+        $this->actingAs($admin)->post('/admin/affectations', ['template_id' => $t->id, 'directory_group_id' => $group->id, 'priority' => 60])
+            ->assertSessionHasErrors('directory_group_id');
+
+        $a = Assignment::first();
+        $this->actingAs($admin)->put("/admin/affectations/{$a->id}", ['priority' => 100])->assertRedirect();
+        $this->assertSame(100, $a->fresh()->priority);
+
+        $this->actingAs($admin)->post("/admin/templates/{$t->id}/default")->assertRedirect();
+        $this->assertTrue($t->fresh()->is_default);
+        $this->actingAs($admin)->delete("/admin/templates/{$t->id}")->assertStatus(422);
+
+        $this->actingAs($admin)->delete("/admin/affectations/{$a->id}")->assertRedirect();
+        $this->assertSame(0, Assignment::count());
+    }
+
+    public function test_pages_principales_s_affichent(): void
+    {
+        $admin = $this->user('superadmin');
+        $t = Template::create(['tenant_id' => $this->tenant->id] + $this->payload());
+        foreach (['/admin', '/admin/templates', '/admin/templates/create', "/admin/templates/{$t->id}", '/admin/affectations', '/admin/agents', "/admin/agents/{$this->agent->id}", '/me'] as $url) {
+            $this->actingAs($admin)->get($url)->assertOk();
+        }
+        $this->actingAs($admin)->getJson('/admin/agents/recherche?q=mar')->assertOk()->assertJsonFragment(['id' => $this->agent->id]);
+    }
+}

backend/tests/Feature/ExampleTest.php

@@ -0,0 +1,18 @@
+<?php
+
+namespace Tests\Feature;
+
+use Tests\TestCase;
+
+class ExampleTest extends TestCase
+{
+    public function test_la_racine_redirige_vers_le_portail_agent(): void
+    {
+        $this->get('/')->assertRedirect('/me');
+    }
+
+    public function test_le_portail_exige_une_connexion(): void
+    {
+        $this->get('/me')->assertRedirect('/login');
+    }
+}

backend/tests/Feature/SignatureApiTest.php

@@ -0,0 +1,118 @@
+<?php
+
+namespace Tests\Feature;
+
+use App\Models\Assignment;
+use App\Models\Campaign;
+use App\Models\DirectoryGroup;
+use App\Models\DirectoryUser;
+use App\Models\EditableField;
+use App\Models\SharedMailbox;
+use App\Models\Template;
+use App\Models\Tenant;
+use App\Models\UserOverride;
+use App\Models\UserPreference;
+use App\Services\Auth\EntraTokenValidator;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use RuntimeException;
+use Tests\TestCase;
+
+class SignatureApiTest extends TestCase
+{
+    use RefreshDatabase;
+
+    private Tenant $tenant;
+    private DirectoryUser $agent;
+
+    protected function setUp(): void
+    {
+        parent::setUp();
+
+        $this->tenant = Tenant::create(['name' => 'CABM', 'entra_tenant_id' => '11111111-1111-1111-1111-111111111111']);
+        $this->agent = DirectoryUser::create([
+            'tenant_id' => $this->tenant->id, 'entra_oid' => '22222222-2222-2222-2222-222222222222',
+            'given_name' => 'Jean', 'surname' => 'Martin', 'job_title' => 'Technicien',
+            'mobile_phone' => '06 00 00 00 00', 'mail' => 'j.martin@beziers-mediterranee.fr', 'account_enabled' => true,
+        ]);
+
+        $default = Template::create(['tenant_id' => $this->tenant->id, 'name' => 'Défaut', 'is_default' => true,
+            'draft_html_full' => 'D {{prenom}}{{#if mobile}} {{mobile}}{{/if}}{{{banniere}}}', 'draft_html_short' => 'd {{prenom}}']);
+        $default->publish();
+
+        // Le validateur de jeton est remplacé : on teste ici la logique métier, pas la cryptographie.
+        $this->app->instance(EntraTokenValidator::class, new class extends EntraTokenValidator {
+            public function validate(string $jwt): array
+            {
+                if ($jwt !== 'ok') {
+                    throw new RuntimeException('bad');
+                }
+
+                return ['tid' => '11111111-1111-1111-1111-111111111111', 'oid' => '22222222-2222-2222-2222-222222222222'];
+            }
+        });
+    }
+
+    private function signature(array $q = [], string $token = 'ok')
+    {
+        return $this->withToken($token)->getJson('/api/v1/signature?'.http_build_query($q));
+    }
+
+    public function test_refuse_sans_jeton_valide(): void
+    {
+        $this->getJson('/api/v1/signature')->assertStatus(401);
+        $this->signature([], 'bad')->assertStatus(401);
+    }
+
+    public function test_template_par_defaut_puis_groupe_prioritaire(): void
+    {
+        $this->signature()->assertOk()->assertJson(['html' => 'D Jean 06 00 00 00 00', 'variant' => 'full', 'template' => 'Défaut']);
+
+        $group = DirectoryGroup::create(['tenant_id' => $this->tenant->id, 'entra_oid' => '33333333-3333-3333-3333-333333333333', 'display_name' => 'signature_mail_directeurs']);
+        $group->members()->attach($this->agent->id);
+        $dir = Template::create(['tenant_id' => $this->tenant->id, 'name' => 'Directeurs', 'draft_html_full' => 'DIR {{nom}}']);
+        $dir->publish();
+        Assignment::create(['tenant_id' => $this->tenant->id, 'template_id' => $dir->id, 'directory_group_id' => $group->id, 'priority' => 100]);
+
+        $this->signature()->assertJson(['html' => 'DIR Martin', 'template' => 'Directeurs']);
+    }
+
+    public function test_variante_reponse_selon_preference(): void
+    {
+        $this->signature(['context' => 'reply'])->assertJson(['html' => 'd Jean', 'variant' => 'short']);
+
+        UserPreference::create(['directory_user_id' => $this->agent->id, 'reply_variant' => 'none']);
+        $this->signature(['context' => 'reply'])->assertJson(['html' => '', 'variant' => 'none']);
+    }
+
+    public function test_surcharge_agent_uniquement_si_champ_ouvert(): void
+    {
+        UserOverride::create(['directory_user_id' => $this->agent->id, 'field' => 'mobile', 'value' => '07 11 11 11 11']);
+        $this->signature()->assertJson(['html' => 'D Jean 06 00 00 00 00']);
+
+        EditableField::create(['tenant_id' => $this->tenant->id, 'field' => 'mobile', 'label' => 'Mobile', 'enabled' => true]);
+        $this->signature()->assertJson(['html' => 'D Jean 07 11 11 11 11']);
+    }
+
+    public function test_boite_partagee_avec_ou_sans_expediteur(): void
+    {
+        $tpl = Template::create(['tenant_id' => $this->tenant->id, 'name' => 'Accueil', 'draft_html_full' => '{{boite_nom}}{{#if prenom}} / {{prenom}}{{/if}}']);
+        $tpl->publish();
+        $box = SharedMailbox::create(['tenant_id' => $this->tenant->id, 'address' => 'accueil@beziers-mediterranee.fr',
+            'display_name' => 'Accueil', 'template_id' => $tpl->id, 'include_sender' => false]);
+
+        $this->signature(['mailbox' => 'accueil@beziers-mediterranee.fr'])->assertJson(['html' => 'Accueil']);
+
+        $box->update(['include_sender' => true]);
+        $this->signature(['mailbox' => 'accueil@beziers-mediterranee.fr'])->assertJson(['html' => 'Accueil / Jean']);
+    }
+
+    public function test_banniere_de_campagne_active_et_ciblee(): void
+    {
+        Campaign::create(['tenant_id' => $this->tenant->id, 'name' => 'Encombrants', 'image_path' => 'campagnes/enc.png',
+            'alt_text' => 'Collecte', 'starts_at' => now()->subDay(), 'ends_at' => now()->addDay()]);
+
+        $html = $this->signature()->assertOk()->json('html');
+        $this->assertStringContainsString('/img/campagnes/enc.png', $html);
+        $this->assertStringContainsString('alt="Collecte"', $html);
+    }
+}