Дмитрий
62 lines
2.3 KiB
PHP
62 lines
2.3 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
use Illuminate\Foundation\Testing\DatabaseTransactions;
|
|
use Illuminate\Support\Facades\DB;
|
|
|
|
uses(DatabaseTransactions::class);
|
|
|
|
beforeEach(function () {
|
|
DB::table('incidents_log')->delete();
|
|
$this->adminId = (int) DB::table('saas_admin_users')->insertGetId([
|
|
'email' => 'rkn-'.bin2hex(random_bytes(3)).'@test',
|
|
'full_name' => 'RKN Admin',
|
|
'password_hash' => bcrypt('test1234'),
|
|
'is_active' => true,
|
|
'role' => 'support',
|
|
'created_at' => now(),
|
|
]);
|
|
});
|
|
|
|
function makeRknIncident(int $adminId, array $overrides = []): int
|
|
{
|
|
$started = $overrides['started_at'] ?? now()->subHours(2);
|
|
|
|
return (int) DB::table('incidents_log')->insertGetId(array_merge([
|
|
'type' => 'data_breach',
|
|
'severity' => 'critical',
|
|
'started_at' => $started,
|
|
'detected_at' => $started,
|
|
'summary' => 'PDN leak test',
|
|
'created_by_admin_id' => $adminId,
|
|
'created_at' => now(),
|
|
], $overrides));
|
|
}
|
|
|
|
test('POST rkn-notify проставляет rkn_notified_at + audit-log', function () {
|
|
$id = makeRknIncident($this->adminId);
|
|
$r = $this->postJson("/api/admin/incidents/{$id}/rkn-notify");
|
|
$r->assertOk();
|
|
expect($r->json('incident.rkn_notified'))->toBeTrue();
|
|
expect($r->json('incident.rkn_notified_at'))->toBeString();
|
|
expect(DB::table('incidents_log')->where('id', $id)->value('rkn_notified_at'))->not->toBeNull();
|
|
expect(DB::table('saas_admin_audit_log')->where('action', 'incident.rkn_notify')->where('target_id', $id)->exists())
|
|
->toBeTrue();
|
|
});
|
|
|
|
test('POST rkn-notify несуществующий инцидент → 404', function () {
|
|
$this->postJson('/api/admin/incidents/99999999/rkn-notify')->assertStatus(404);
|
|
});
|
|
|
|
test('POST rkn-notify не data_breach → 422', function () {
|
|
$id = makeRknIncident($this->adminId, ['type' => 'service_outage']);
|
|
$this->postJson("/api/admin/incidents/{$id}/rkn-notify")->assertStatus(422);
|
|
expect(DB::table('incidents_log')->where('id', $id)->value('rkn_notified_at'))->toBeNull();
|
|
});
|
|
|
|
test('POST rkn-notify повторно → 409', function () {
|
|
$id = makeRknIncident($this->adminId, ['rkn_notified_at' => now()->subHour()]);
|
|
$this->postJson("/api/admin/incidents/{$id}/rkn-notify")->assertStatus(409);
|
|
});
|