actingAsForApi(User::factory()->create()) ->postJson(route('api.assets.store')) ->assertForbidden(); } public function testAllAssetAttributesAreStored() { $company = Company::factory()->create(); $location = Location::factory()->create(); $model = AssetModel::factory()->create(); $rtdLocation = Location::factory()->create(); $status = Statuslabel::factory()->create(); $supplier = Supplier::factory()->create(); $user = User::factory()->createAssets()->create(); $userAssigned = User::factory()->create(); $response = $this->actingAsForApi($user) ->postJson(route('api.assets.store'), [ 'asset_eol_date' => '2024-06-02', 'asset_tag' => 'random_string', 'assigned_user' => $userAssigned->id, 'company_id' => $company->id, 'last_audit_date' => '2023-09-03', 'location_id' => $location->id, 'model_id' => $model->id, 'name' => 'A New Asset', 'notes' => 'Some notes', 'order_number' => '5678', 'purchase_cost' => '123.45', 'purchase_date' => '2023-09-02', 'requestable' => true, 'rtd_location_id' => $rtdLocation->id, 'serial' => '1234567890', 'status_id' => $status->id, 'supplier_id' => $supplier->id, 'warranty_months' => 10, ]) ->assertOk() ->assertStatusMessageIs('success') ->json(); $asset = Asset::find($response['payload']['id']); $this->assertTrue($asset->adminuser->is($user)); $this->assertEquals('2024-06-02', $asset->asset_eol_date); $this->assertEquals('random_string', $asset->asset_tag); $this->assertEquals($userAssigned->id, $asset->assigned_to); $this->assertTrue($asset->company->is($company)); $this->assertEquals('2023-09-03 00:00:00', $asset->last_audit_date->format('Y-m-d H:i:s')); $this->assertTrue($asset->location->is($location)); $this->assertTrue($asset->model->is($model)); $this->assertEquals('A New Asset', $asset->name); $this->assertEquals('Some notes', $asset->notes); $this->assertEquals('5678', $asset->order_number); $this->assertEquals('123.45', $asset->purchase_cost); $this->assertTrue($asset->purchase_date->is('2023-09-02')); $this->assertEquals('1', $asset->requestable); $this->assertTrue($asset->defaultLoc->is($rtdLocation)); $this->assertEquals('1234567890', $asset->serial); $this->assertTrue($asset->assetstatus->is($status)); $this->assertTrue($asset->supplier->is($supplier)); $this->assertEquals(10, $asset->warranty_months); } public function testSetsLastAuditDateToMidnightOfProvidedDate() { $response = $this->actingAsForApi(User::factory()->superuser()->create()) ->postJson(route('api.assets.store'), [ 'last_audit_date' => '2023-09-03 12:23:45', 'asset_tag' => '1234', 'model_id' => AssetModel::factory()->create()->id, 'status_id' => Statuslabel::factory()->create()->id, ]) ->assertOk() ->assertStatusMessageIs('success'); $asset = Asset::find($response['payload']['id']); $this->assertEquals('00:00:00', $asset->last_audit_date->format('H:i:s')); } public function testLastAuditDateCanBeNull() { $response = $this->actingAsForApi(User::factory()->superuser()->create()) ->postJson(route('api.assets.store'), [ // 'last_audit_date' => '2023-09-03 12:23:45', 'asset_tag' => '1234', 'model_id' => AssetModel::factory()->create()->id, 'status_id' => Statuslabel::factory()->create()->id, ]) ->assertOk() ->assertStatusMessageIs('success'); $asset = Asset::find($response['payload']['id']); $this->assertNull($asset->last_audit_date); } public function testNonDateUsedForLastAuditDateReturnsValidationError() { $response = $this->actingAsForApi(User::factory()->superuser()->create()) ->postJson(route('api.assets.store'), [ 'last_audit_date' => 'this-is-not-valid', 'asset_tag' => '1234', 'model_id' => AssetModel::factory()->create()->id, 'status_id' => Statuslabel::factory()->create()->id, ]) ->assertStatusMessageIs('error'); $this->assertNotNull($response->json('messages.last_audit_date')); } public function testArchivedDepreciateAndPhysicalCanBeNull() { $model = AssetModel::factory()->ipadModel()->create(); $status = Statuslabel::factory()->create(); $this->settings->enableAutoIncrement(); $response = $this->actingAsForApi(User::factory()->superuser()->create()) ->postJson(route('api.assets.store'), [ 'model_id' => $model->id, 'status_id' => $status->id, 'archive' => null, 'depreciate' => null, 'physical' => null ]) ->assertOk() ->assertStatusMessageIs('success') ->json(); $asset = Asset::find($response['payload']['id']); $this->assertEquals(0, $asset->archived); $this->assertEquals(1, $asset->physical); $this->assertEquals(0, $asset->depreciate); } public function testArchivedDepreciateAndPhysicalCanBeEmpty() { $model = AssetModel::factory()->ipadModel()->create(); $status = Statuslabel::factory()->create(); $this->settings->enableAutoIncrement(); $response = $this->actingAsForApi(User::factory()->superuser()->create()) ->postJson(route('api.assets.store'), [ 'model_id' => $model->id, 'status_id' => $status->id, 'archive' => '', 'depreciate' => '', 'physical' => '' ]) ->assertOk() ->assertStatusMessageIs('success') ->json(); $asset = Asset::find($response['payload']['id']); $this->assertEquals(0, $asset->archived); $this->assertEquals(1, $asset->physical); $this->assertEquals(0, $asset->depreciate); } public function testAssetEolDateIsCalculatedIfPurchaseDateSet() { $model = AssetModel::factory()->mbp13Model()->create(); $status = Statuslabel::factory()->create(); $this->settings->enableAutoIncrement(); $response = $this->actingAsForApi(User::factory()->superuser()->create()) ->postJson(route('api.assets.store'), [ 'model_id' => $model->id, 'purchase_date' => '2021-01-01', 'status_id' => $status->id, ]) ->assertOk() ->assertStatusMessageIs('success') ->json(); $asset = Asset::find($response['payload']['id']); $this->assertEquals('2024-01-01', $asset->asset_eol_date); } public function testAssetEolDateIsNotCalculatedIfPurchaseDateNotSet() { $model = AssetModel::factory()->mbp13Model()->create(); $status = Statuslabel::factory()->create(); $this->settings->enableAutoIncrement(); $response = $this->actingAsForApi(User::factory()->superuser()->create()) ->postJson(route('api.assets.store'), [ 'model_id' => $model->id, 'status_id' => $status->id, ]) ->assertOk() ->assertStatusMessageIs('success') ->json(); $asset = Asset::find($response['payload']['id']); $this->assertNull($asset->asset_eol_date); } public function testAssetEolExplicitIsSetIfAssetEolDateIsExplicitlySet() { $model = AssetModel::factory()->mbp13Model()->create(); $status = Statuslabel::factory()->create(); $this->settings->enableAutoIncrement(); $response = $this->actingAsForApi(User::factory()->superuser()->create()) ->postJson(route('api.assets.store'), [ 'model_id' => $model->id, 'asset_eol_date' => '2025-01-01', 'status_id' => $status->id, ]) ->assertOk() ->assertStatusMessageIs('success') ->json(); $asset = Asset::find($response['payload']['id']); $this->assertEquals('2025-01-01', $asset->asset_eol_date); $this->assertTrue($asset->eol_explicit); } public function testAssetGetsAssetTagWithAutoIncrement() { $model = AssetModel::factory()->create(); $status = Statuslabel::factory()->create(); $this->settings->enableAutoIncrement(); $response = $this->actingAsForApi(User::factory()->superuser()->create()) ->postJson(route('api.assets.store'), [ 'model_id' => $model->id, 'status_id' => $status->id, ]) ->assertOk() ->assertStatusMessageIs('success') ->json(); $asset = Asset::find($response['payload']['id']); $this->assertNotNull($asset->asset_tag); } public function testAssetCreationFailsWithNoAssetTagOrAutoIncrement() { $model = AssetModel::factory()->create(); $status = Statuslabel::factory()->create(); $this->settings->disableAutoIncrement(); $this->actingAsForApi(User::factory()->superuser()->create()) ->postJson(route('api.assets.store'), [ 'model_id' => $model->id, 'status_id' => $status->id, ]) ->assertOk() ->assertStatusMessageIs('error'); } public function testUniqueSerialNumbersIsEnforcedWhenEnabled() { $model = AssetModel::factory()->create(); $status = Statuslabel::factory()->create(); $serial = '1234567890'; $this->settings->enableAutoIncrement(); $this->settings->enableUniqueSerialNumbers(); $this->actingAsForApi(User::factory()->superuser()->create()) ->postJson(route('api.assets.store'), [ 'model_id' => $model->id, 'status_id' => $status->id, 'serial' => $serial, ]) ->assertOk() ->assertStatusMessageIs('success'); $this->actingAsForApi(User::factory()->superuser()->create()) ->postJson(route('api.assets.store'), [ 'model_id' => $model->id, 'status_id' => $status->id, 'serial' => $serial, ]) ->assertOk() ->assertStatusMessageIs('error'); } public function testUniqueSerialNumbersIsNotEnforcedWhenDisabled() { $model = AssetModel::factory()->create(); $status = Statuslabel::factory()->create(); $serial = '1234567890'; $this->settings->enableAutoIncrement(); $this->settings->disableUniqueSerialNumbers(); $this->actingAsForApi(User::factory()->superuser()->create()) ->postJson(route('api.assets.store'), [ 'model_id' => $model->id, 'status_id' => $status->id, 'serial' => $serial, ]) ->assertOk() ->assertStatusMessageIs('success'); $this->actingAsForApi(User::factory()->superuser()->create()) ->postJson(route('api.assets.store'), [ 'model_id' => $model->id, 'status_id' => $status->id, 'serial' => $serial, ]) ->assertOk() ->assertStatusMessageIs('success'); } public function testAssetTagsMustBeUniqueWhenUndeleted() { $model = AssetModel::factory()->create(); $status = Statuslabel::factory()->create(); $asset_tag = '1234567890'; $this->settings->disableAutoIncrement(); $this->actingAsForApi(User::factory()->superuser()->create()) ->postJson(route('api.assets.store'), [ 'asset_tag' => $asset_tag, 'model_id' => $model->id, 'status_id' => $status->id, ]) ->assertOk() ->assertStatusMessageIs('success'); $this->actingAsForApi(User::factory()->superuser()->create()) ->postJson(route('api.assets.store'), [ 'asset_tag' => $asset_tag, 'model_id' => $model->id, 'status_id' => $status->id, ]) ->assertOk() ->assertStatusMessageIs('error'); } public function testAssetTagsCanBeDuplicatedIfDeleted() { $model = AssetModel::factory()->create(); $status = Statuslabel::factory()->create(); $asset_tag = '1234567890'; $this->settings->disableAutoIncrement(); $response = $this->actingAsForApi(User::factory()->superuser()->create()) ->postJson(route('api.assets.store'), [ 'asset_tag' => $asset_tag, 'model_id' => $model->id, 'status_id' => $status->id, ]) ->assertOk() ->assertStatusMessageIs('success') ->json(); Asset::find($response['payload']['id'])->delete(); $this->actingAsForApi(User::factory()->superuser()->create()) ->postJson(route('api.assets.store'), [ 'asset_tag' => $asset_tag, 'model_id' => $model->id, 'status_id' => $status->id, ]) ->assertOk() ->assertStatusMessageIs('success'); } public function testAnAssetCanBeCheckedOutToUserOnStore() { $model = AssetModel::factory()->create(); $status = Statuslabel::factory()->create(); $user = User::factory()->createAssets()->create(); $userAssigned = User::factory()->create(); $this->settings->enableAutoIncrement(); $response = $this->actingAsForApi($user) ->postJson(route('api.assets.store'), [ 'assigned_user' => $userAssigned->id, 'model_id' => $model->id, 'status_id' => $status->id, ]) ->assertOk() ->assertStatusMessageIs('success') ->json(); $asset = Asset::find($response['payload']['id']); $this->assertTrue($asset->adminuser->is($user)); $this->assertTrue($asset->checkedOutToUser()); $this->assertTrue($asset->assignedTo->is($userAssigned)); } public function testAnAssetCanBeCheckedOutToLocationOnStore() { $model = AssetModel::factory()->create(); $status = Statuslabel::factory()->create(); $location = Location::factory()->create(); $user = User::factory()->createAssets()->create(); $this->settings->enableAutoIncrement(); $response = $this->actingAsForApi($user) ->postJson(route('api.assets.store'), [ 'assigned_location' => $location->id, 'model_id' => $model->id, 'status_id' => $status->id, ]) ->assertOk() ->assertStatusMessageIs('success') ->json(); $asset = Asset::find($response['payload']['id']); $this->assertTrue($asset->adminuser->is($user)); $this->assertTrue($asset->checkedOutToLocation()); $this->assertTrue($asset->location->is($location)); } public function testAnAssetCanBeCheckedOutToAssetOnStore() { $model = AssetModel::factory()->create(); $status = Statuslabel::factory()->create(); $asset = Asset::factory()->create(); $user = User::factory()->createAssets()->create(); $this->settings->enableAutoIncrement(); $response = $this->actingAsForApi($user) ->postJson(route('api.assets.store'), [ 'assigned_asset' => $asset->id, 'model_id' => $model->id, 'status_id' => $status->id, ]) ->assertOk() ->assertStatusMessageIs('success') ->json(); $apiAsset = Asset::find($response['payload']['id']); $this->assertTrue($apiAsset->adminuser->is($user)); $this->assertTrue($apiAsset->checkedOutToAsset()); // I think this makes sense, but open to a sanity check $this->assertTrue($asset->assignedAssets()->find($response['payload']['id'])->is($apiAsset)); } public function testCompanyIdNeedsToBeInteger() { $this->actingAsForApi(User::factory()->createAssets()->create()) ->postJson(route('api.assets.store'), [ 'company_id' => [1], ]) ->assertStatusMessageIs('error') ->assertJson(function (AssertableJson $json) { $json->has('messages.company_id')->etc(); }); } public function testEncryptedCustomField() { $field = CustomField::factory()->testEncrypted()->create(); $asset = Asset::factory()->hasEncryptedCustomField()->create(); $superuser = User::factory()->superuser()->create(); $normal_user = User::factory()->editAssets()->create(); //first, test that an Admin user can save the encrypted custom field $response = $this->actingAsForApi($superuser) ->patchJson(route('api.assets.update', $asset->id), [ $field->db_column_name() => 'This is encrypted field' ]) ->assertStatusMessageIs('success') ->assertOk() ->json(); $asset->refresh(); $this->assertEquals(\Crypt::decrypt($asset->{$field->db_column_name()}), 'This is encrypted field'); //next, test that a 'normal' user *cannot* change the encrypted custom field $response = $this->actingAsForApi($normal_user) ->patchJson(route('api.assets.update', $asset->id), [ $field->db_column_name() => 'Some Other Value Entirely!' ]) ->assertStatusMessageIs('success') ->assertOk() ->assertMessagesAre('Asset updated successfully, but encrypted custom fields were not due to permissions') ->json(); $asset->refresh(); $this->assertEquals(\Crypt::decrypt($asset->{$field->db_column_name()}), 'This is encrypted field'); } }