dir = storage_path('framework/testing/img-'.uniqid());
config(['signature.admin_allowed_cidrs' => [], 'signature.image_path' => $this->dir]);
File::ensureDirectoryExists($this->dir);
$this->tenant = Tenant::create(['name' => 'CABM', 'entra_tenant_id' => '11111111-1111-1111-1111-111111111111']);
}
protected function tearDown(): void
{
File::deleteDirectory($this->dir);
parent::tearDown();
}
private function user(string $role): User
{
return User::create(['name' => $role, 'email' => "{$role}@x.fr", 'tenant_id' => $this->tenant->id, 'entra_oid' => '22222222-2222-2222-2222-222222222222', 'role' => $role]);
}
private function png(string $client = 'Logo CABM.png'): UploadedFile
{
$tmp = tempnam(sys_get_temp_dir(), 'png');
file_put_contents($tmp, base64_decode(self::PNG));
return new UploadedFile($tmp, $client, 'image/png', null, true);
}
public function test_editeur_depose_une_image_au_nom_nettoye_sans_ecraser(): void
{
$editor = $this->user('editor');
$this->actingAs($editor)->post('/admin/images', ['image' => $this->png()])->assertRedirect()->assertSessionHasNoErrors();
$this->actingAs($editor)->post('/admin/images', ['image' => $this->png()])->assertRedirect();
$this->assertFileExists($this->dir.'/logo-cabm.png');
$this->assertFileExists($this->dir.'/logo-cabm-2.png');
$this->actingAs($editor)->get('/admin/images')->assertOk()->assertSee('logo-cabm-2.png');
}
public function test_refuse_un_faux_png_et_le_svg(): void
{
$tmp = tempnam(sys_get_temp_dir(), 'x');
file_put_contents($tmp, '');
$this->actingAs($this->user('editor'))
->post('/admin/images', ['image' => new UploadedFile($tmp, 'logo.png', 'image/png', null, true)])
->assertSessionHasErrors('image');
$this->assertSame([], File::files($this->dir));
}
public function test_suppression_reservee_admin_et_bloquee_si_utilisee(): void
{
File::ensureDirectoryExists($this->dir);
file_put_contents($this->dir.'/logo.png', base64_decode(self::PNG));
$this->actingAs($this->user('editor'))->delete('/admin/images/logo.png')->assertForbidden();
$admin = User::create(['name' => 'a', 'email' => 'a@x.fr', 'tenant_id' => $this->tenant->id, 'entra_oid' => '33333333-3333-3333-3333-333333333333', 'role' => 'admin']);
$t = Template::create(['tenant_id' => $this->tenant->id, 'name' => 'Défaut', 'draft_html_full' => '
']);
$this->actingAs($admin)->delete('/admin/images/logo.png')->assertSessionHasErrors('image');
$this->assertFileExists($this->dir.'/logo.png');
$t->update(['draft_html_full' => 'texte']);
$this->actingAs($admin)->delete('/admin/images/logo.png')->assertSessionHasNoErrors();
$this->assertFileDoesNotExist($this->dir.'/logo.png');
}
}