1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
|
<?php
namespace Illuminate\Tests\Auth;
use Closure;
use Illuminate\Events\Dispatcher;
use Illuminate\Foundation\Auth\Access\AuthorizesRequests;
use Illuminate\Http\Request;
use Illuminate\Routing\Controller;
use Illuminate\Routing\Router;
use PHPUnit\Framework\TestCase;
class AuthorizesResourcesTest extends TestCase
{
public function testCreateMethod()
{
$controller = new AuthorizesResourcesController;
$this->assertHasMiddleware($controller, 'create', 'can:create,App\User');
}
public function testStoreMethod()
{
$controller = new AuthorizesResourcesController;
$this->assertHasMiddleware($controller, 'store', 'can:create,App\User');
}
public function testShowMethod()
{
$controller = new AuthorizesResourcesController;
$this->assertHasMiddleware($controller, 'show', 'can:view,user');
}
public function testEditMethod()
{
$controller = new AuthorizesResourcesController;
$this->assertHasMiddleware($controller, 'edit', 'can:update,user');
}
public function testUpdateMethod()
{
$controller = new AuthorizesResourcesController;
$this->assertHasMiddleware($controller, 'update', 'can:update,user');
}
public function testDestroyMethod()
{
$controller = new AuthorizesResourcesController;
$this->assertHasMiddleware($controller, 'destroy', 'can:delete,user');
}
/**
* Assert that the given middleware has been registered on the given controller for the given method.
*
* @param \Illuminate\Routing\Controller $controller
* @param string $method
* @param string $middleware
* @return void
*/
protected function assertHasMiddleware($controller, $method, $middleware)
{
$router = new Router(new Dispatcher);
$router->aliasMiddleware('can', AuthorizesResourcesMiddleware::class);
$router->get($method)->uses(AuthorizesResourcesController::class.'@'.$method);
$this->assertSame(
'caught '.$middleware,
$router->dispatch(Request::create($method, 'GET'))->getContent(),
"The [{$middleware}] middleware was not registered for method [{$method}]"
);
}
}
class AuthorizesResourcesController extends Controller
{
use AuthorizesRequests;
public function __construct()
{
$this->authorizeResource('App\User', 'user');
}
public function index()
{
//
}
public function create()
{
//
}
public function store()
{
//
}
public function show()
{
//
}
public function edit()
{
//
}
public function update()
{
//
}
public function destroy()
{
//
}
}
class AuthorizesResourcesMiddleware
{
public function handle($request, Closure $next, $method, $parameter)
{
return "caught can:{$method},{$parameter}";
}
}
|
