nativephp.com/tests/Feature/PluginWebhookTest.php at f75622b63276212c86b8a26a62da93b48b5497c4 · NativePHP/nativephp.com · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
<?php

namespace Tests\Feature;

use App\Models\Plugin;
use Illuminate\Foundation\Testing\RefreshDatabase;
use PHPUnit\Framework\Attributes\Test;
use Tests\TestCase;

class PluginWebhookTest extends TestCase
{
    use RefreshDatabase;

    #[Test]
    public function ping_event_succeeds_for_unapproved_plugin(): void
    {
        $plugin = Plugin::factory()->create();

        $response = $this->postJson(
            route('webhooks.plugins', $plugin->webhook_secret),
            [],
            ['X-GitHub-Event' => 'ping']
        );

        $response->assertOk()
            ->assertJson(['success' => true, 'message' => 'pong']);
    }

    #[Test]
    public function ping_event_succeeds_for_approved_plugin(): void
    {
        $plugin = Plugin::factory()->approved()->create();

        $response = $this->postJson(
            route('webhooks.plugins', $plugin->webhook_secret),
            [],
            ['X-GitHub-Event' => 'ping']
        );

        $response->assertOk()
            ->assertJson(['success' => true, 'message' => 'pong']);
    }

    #[Test]
    public function non_ping_event_returns_403_for_unapproved_plugin(): void
    {
        $plugin = Plugin::factory()->create();

        $response = $this->postJson(
            route('webhooks.plugins', $plugin->webhook_secret),
            [],
            ['X-GitHub-Event' => 'push']
        );

        $response->assertForbidden()
            ->assertJson(['error' => 'Plugin is not approved']);
    }

    #[Test]
    public function invalid_secret_returns_404(): void
    {
        $response = $this->postJson(
            route('webhooks.plugins', 'invalid-secret'),
            [],
            ['X-GitHub-Event' => 'ping']
        );

        $response->assertNotFound();
    }
}