[phpunit] Missing info in doc about unit testing.

[tymondesigns]

[phpunit] Missing info in doc about unit testing.

[tymondesigns]

I think you will find a good answer (if you haven't already) over at Laracasts :)

[jwigal]

Banged my head for a while trying to get some basic functional / integration tests written. Here's what I came up with that seems to be working for Laravel 5.1:

    class APIControllerTest extends TestCase{


        public function testCanGetOAuthTokenWithValidPassword(){
            $this->setupUser();
            $resp = $this->call('POST', '/api/login', 
                ["userid" => "testymctester", "password" => "testallthethings"]);
            $data = json_decode($resp->getContent());
            $this->assertTrue(array_key_exists("token", $data), "response was {$resp->getContent()}");
        }

        public function testCannotGetOAuthTokenWithInvalidPassword(){
            $this->setupUser();
            $resp = $this->call('POST', '/api/login', 
                ["userid" => "testymctester", "password" => "badpassword"]);
            $data = json_decode($resp->getContent());
            $this->assertFalse(array_key_exists("token", $data), "response was {$resp->getContent()}");
        }

        /**
         * A valid user can view a protected resource. 
         * @return [type] [description]
         */
        public function testCanGetProtectedAPIResourceWithOAuthTokenViaHeader(){
            $user = $this->setupUser();
            $token = JWTAuth::fromUser($user);
            $resp = $this->call('GET', '/api/user', [],[],[],["HTTP_AUTHORIZATION" => "Bearer $token"]);
            $this->assertResponseOk();
            $data = json_decode($resp->getContent());
            $this->assertTrue(!!$data->user, "data is {$resp->getContent()}");
        }


        public function testCanGetProtectedAPIResourceWithOAuthTokenViaParam(){
            $user = $this->setupUser();
            $token = JWTAuth::fromUser($user);
            $resp = $this->call('GET', '/api/user', ["token" => $token]);
            $this->assertResponseOk();
            $data = json_decode($resp->getContent());
            $this->assertTrue(!!$data->user, "data is {$resp->getContent()}");
        }



        /**
         * If an invalid token is passed, user can't view a protected resource.
         * @return [type] [description]
         */
        public function testCannotGetProtectedAPIResourceWithoutOAuthToken(){
            // $this->markTestSkipped("testing protected routes does not work till upgrade to Dingo.");
            $resp = $this->call('GET', '/api/user', 
                ["token" => "bogus.bogus.bogus"]);
            $this->assertResponseStatus(401);
        }


        protected function setupUser(){
            $user = User::whereUserid("testymctester");
            if ($user) $user->delete();
            $user = new User([
                "userid" => "testymctester",
                "password" => "testallthethings",
                "email" => "[email protected]",
                "first" => "T",
                "last" => "McTester",
            ]);
            $user->save();
            return $user;       
        }


    }

Our routes.php file looks something like this:

    $api = App::make('Dingo\Api\Routing\Router');

        $api->version('v1', function($api){

            $api->post("login", "App\Http\Controllers\Auth\APIController@authenticate");

            // Protected routes that require authentication
            $api->group(["protected" => true], function($api){
                $api->get('user', 'App\Http\Controllers\Auth\APIController@getAuthenticatedUser');
                $api->get('userinfo', 'App\Http\Controllers\Auth\APIController@getUserInfo');
                $api->get('dates', 'App\Http\Controllers\Auth\APIController@getCalendar');
                $api->get('directory', 'App\Http\Controllers\Auth\APIController@getDirectory');
                $api->get('news', 'App\Http\Controllers\Auth\APIController@getNews');
            });

        });

[jadjoubran]

Hope this helps, in my TestCase.php I setup the token that I needed to use inside $this->token
and then I setup helper methods
authGet, authPost, authPut & authDelete which would call get, post, put & delete with authentication.

The trick was to append ?token=$this->token to the url for all of these methods (as mentioned here)