prepareDatabase([ 'discussions' => [ ['id' => 1, 'title' => 'Empty discussion', 'created_at' => Carbon::now()->toDateTimeString(), 'user_id' => 2, 'first_post_id' => null, 'comment_count' => 0, 'is_private' => 0], ['id' => 2, 'title' => 'Discussion with post', 'created_at' => Carbon::now()->toDateTimeString(), 'user_id' => 2, 'first_post_id' => 1, 'comment_count' => 1, 'is_private' => 0], ['id' => 3, 'title' => 'Private discussion', 'created_at' => Carbon::now()->toDateTimeString(), 'user_id' => 2, 'first_post_id' => null, 'comment_count' => 0, 'is_private' => 1], ['id' => 4, 'title' => 'Discussion with hidden post', 'created_at' => Carbon::now()->toDateTimeString(), 'user_id' => 2, 'first_post_id' => 2, 'comment_count' => 1, 'is_private' => 0], ], 'posts' => [ ['id' => 1, 'discussion_id' => 2, 'created_at' => Carbon::now()->toDateTimeString(), 'user_id' => 2, 'type' => 'comment', 'content' => '

a normal reply - too-obscure

'], ['id' => 2, 'discussion_id' => 4, 'created_at' => Carbon::now()->toDateTimeString(), 'user_id' => 2, 'type' => 'comment', 'content' => '

a hidden reply - too-obscure

', 'hidden_at' => Carbon::now()->toDateTimeString()], ], 'users' => [ $this->normalUser(), ] ]); } /** * @test */ public function author_can_see_discussion() { $response = $this->send( $this->request('GET', '/api/discussions/1', [ 'authenticatedAs' => 2, ]) ); $this->assertEquals(200, $response->getStatusCode()); } /** * @test */ public function author_can_see_discussion_via_slug() { // Note that here, the slug doesn't actually have to match the real slug // since the default slugging strategy only takes the numerical part into account $response = $this->send( $this->request('GET', '/api/discussions/1-fdsafdsajfsakf', [ 'authenticatedAs' => 2, ])->withQueryParams([ 'bySlug' => true ]) ); $this->assertEquals(200, $response->getStatusCode()); } /** * @test */ public function guest_cannot_see_empty_discussion() { $response = $this->send( $this->request('GET', '/api/discussions/1') ); $this->assertEquals(404, $response->getStatusCode()); } /** * @test */ public function guest_cannot_see_hidden_posts() { $response = $this->send( $this->request('GET', '/api/discussions/4') ); $json = json_decode($response->getBody()->getContents(), true); $this->assertNull(Arr::get($json, 'data.relationships.posts')); } /** * @test */ public function author_can_see_hidden_posts() { $response = $this->send( $this->request('GET', '/api/discussions/4', [ 'authenticatedAs' => 2, ]) ); $json = json_decode($response->getBody()->getContents(), true); $this->assertEquals(2, Arr::get($json, 'data.relationships.posts.data.0.id')); } /** * @test */ public function guest_can_see_discussion() { $response = $this->send( $this->request('GET', '/api/discussions/2') ); $this->assertEquals(200, $response->getStatusCode()); } /** * @test */ public function guests_cannot_see_private_discussion() { $response = $this->send( $this->request('GET', '/api/discussions/3') ); $this->assertEquals(404, $response->getStatusCode()); } }