1
0
mirror of https://github.com/BookStackApp/BookStack.git synced 2024-10-30 15:42:41 +01:00
BookStack/tests/Api/PagesApiTest.php

309 lines
10 KiB
PHP
Raw Normal View History

2021-06-26 17:23:15 +02:00
<?php
namespace Tests\Api;
2020-11-28 17:30:30 +01:00
use BookStack\Entities\Models\Book;
use BookStack\Entities\Models\Chapter;
use BookStack\Entities\Models\Page;
use Tests\TestCase;
class PagesApiTest extends TestCase
{
use TestsApi;
protected $baseEndpoint = '/api/pages';
public function test_index_endpoint_returns_expected_page()
{
$this->actingAsApiEditor();
$firstPage = Page::query()->orderBy('id', 'asc')->first();
$resp = $this->getJson($this->baseEndpoint . '?count=1&sort=+id');
$resp->assertJson(['data' => [
[
2021-06-26 17:23:15 +02:00
'id' => $firstPage->id,
'name' => $firstPage->name,
'slug' => $firstPage->slug,
'book_id' => $firstPage->book->id,
2020-11-28 17:30:30 +01:00
'priority' => $firstPage->priority,
2021-06-26 17:23:15 +02:00
],
2020-11-28 17:30:30 +01:00
]]);
}
public function test_create_endpoint()
{
$this->actingAsApiEditor();
$book = Book::query()->first();
$details = [
2021-06-26 17:23:15 +02:00
'name' => 'My API page',
2020-11-28 17:30:30 +01:00
'book_id' => $book->id,
2021-06-26 17:23:15 +02:00
'html' => '<p>My new page content</p>',
'tags' => [
2020-11-28 17:30:30 +01:00
[
2021-06-26 17:23:15 +02:00
'name' => 'tagname',
2020-11-28 17:30:30 +01:00
'value' => 'tagvalue',
2021-06-26 17:23:15 +02:00
],
],
2020-11-28 17:30:30 +01:00
];
$resp = $this->postJson($this->baseEndpoint, $details);
unset($details['html']);
$resp->assertStatus(200);
$newItem = Page::query()->orderByDesc('id')->where('name', '=', $details['name'])->first();
$resp->assertJson(array_merge($details, ['id' => $newItem->id, 'slug' => $newItem->slug]));
$this->assertDatabaseHas('tags', [
2021-06-26 17:23:15 +02:00
'entity_id' => $newItem->id,
2020-11-28 17:30:30 +01:00
'entity_type' => $newItem->getMorphClass(),
2021-06-26 17:23:15 +02:00
'name' => 'tagname',
'value' => 'tagvalue',
2020-11-28 17:30:30 +01:00
]);
$resp->assertSeeText('My new page content');
$resp->assertJsonMissing(['book' => []]);
$this->assertActivityExists('page_create', $newItem);
}
public function test_page_name_needed_to_create()
{
$this->actingAsApiEditor();
$book = Book::query()->first();
$details = [
'book_id' => $book->id,
2021-06-26 17:23:15 +02:00
'html' => '<p>A page created via the API</p>',
2020-11-28 17:30:30 +01:00
];
$resp = $this->postJson($this->baseEndpoint, $details);
$resp->assertStatus(422);
$resp->assertJson($this->validationResponse([
2021-06-26 17:23:15 +02:00
'name' => ['The name field is required.'],
2020-11-28 17:30:30 +01:00
]));
}
public function test_book_id_or_chapter_id_needed_to_create()
{
$this->actingAsApiEditor();
$details = [
'name' => 'My api page',
'html' => '<p>A page created via the API</p>',
];
$resp = $this->postJson($this->baseEndpoint, $details);
$resp->assertStatus(422);
$resp->assertJson($this->validationResponse([
2021-06-26 17:23:15 +02:00
'book_id' => ['The book id field is required when chapter id is not present.'],
'chapter_id' => ['The chapter id field is required when book id is not present.'],
2020-11-28 17:30:30 +01:00
]));
$chapter = Chapter::visible()->first();
$resp = $this->postJson($this->baseEndpoint, array_merge($details, ['chapter_id' => $chapter->id]));
$resp->assertStatus(200);
$book = Book::visible()->first();
$resp = $this->postJson($this->baseEndpoint, array_merge($details, ['book_id' => $book->id]));
$resp->assertStatus(200);
}
public function test_markdown_can_be_provided_for_create()
{
$this->actingAsApiEditor();
$book = Book::visible()->first();
$details = [
2021-06-26 17:23:15 +02:00
'book_id' => $book->id,
'name' => 'My api page',
2020-11-28 17:30:30 +01:00
'markdown' => "# A new API page \n[link](https://example.com)",
];
$resp = $this->postJson($this->baseEndpoint, $details);
$resp->assertJson(['markdown' => $details['markdown']]);
$respHtml = $resp->json('html');
$this->assertStringContainsString('new API page</h1>', $respHtml);
$this->assertStringContainsString('link</a>', $respHtml);
$this->assertStringContainsString('href="https://example.com"', $respHtml);
}
public function test_read_endpoint()
{
$this->actingAsApiEditor();
$page = Page::visible()->first();
$resp = $this->getJson($this->baseEndpoint . "/{$page->id}");
$resp->assertStatus(200);
$resp->assertJson([
2021-06-26 17:23:15 +02:00
'id' => $page->id,
'slug' => $page->slug,
2020-11-28 17:30:30 +01:00
'created_by' => [
'name' => $page->createdBy->name,
],
2021-06-26 17:23:15 +02:00
'book_id' => $page->book_id,
2020-11-28 17:30:30 +01:00
'updated_by' => [
'name' => $page->createdBy->name,
],
'owned_by' => [
2021-06-26 17:23:15 +02:00
'name' => $page->ownedBy->name,
],
2020-11-28 17:30:30 +01:00
]);
}
public function test_read_endpoint_provides_rendered_html()
{
$this->actingAsApiEditor();
$page = Page::visible()->first();
$page->html = "<p>testing</p><script>alert('danger')</script><h1>Hello</h1>";
$page->save();
$resp = $this->getJson($this->baseEndpoint . "/{$page->id}");
$html = $resp->json('html');
$this->assertStringNotContainsString('script', $html);
$this->assertStringContainsString('Hello', $html);
$this->assertStringContainsString('testing', $html);
}
public function test_update_endpoint()
{
$this->actingAsApiEditor();
$page = Page::visible()->first();
$details = [
'name' => 'My updated API page',
'html' => '<p>A page created via the API</p>',
'tags' => [
[
2021-06-26 17:23:15 +02:00
'name' => 'freshtag',
2020-11-28 17:30:30 +01:00
'value' => 'freshtagval',
2021-06-26 17:23:15 +02:00
],
2020-11-28 17:30:30 +01:00
],
];
$resp = $this->putJson($this->baseEndpoint . "/{$page->id}", $details);
$page->refresh();
$resp->assertStatus(200);
unset($details['html']);
$resp->assertJson(array_merge($details, [
2021-06-26 17:23:15 +02:00
'id' => $page->id, 'slug' => $page->slug, 'book_id' => $page->book_id,
2020-11-28 17:30:30 +01:00
]));
$this->assertActivityExists('page_update', $page);
}
public function test_providing_new_chapter_id_on_update_will_move_page()
{
$this->actingAsApiEditor();
$page = Page::visible()->first();
$chapter = Chapter::visible()->where('book_id', '!=', $page->book_id)->first();
$details = [
2021-06-26 17:23:15 +02:00
'name' => 'My updated API page',
2020-11-28 17:30:30 +01:00
'chapter_id' => $chapter->id,
2021-06-26 17:23:15 +02:00
'html' => '<p>A page created via the API</p>',
2020-11-28 17:30:30 +01:00
];
$resp = $this->putJson($this->baseEndpoint . "/{$page->id}", $details);
$resp->assertStatus(200);
$resp->assertJson([
'chapter_id' => $chapter->id,
2021-06-26 17:23:15 +02:00
'book_id' => $chapter->book_id,
2020-11-28 17:30:30 +01:00
]);
}
public function test_providing_move_via_update_requires_page_create_permission_on_new_parent()
{
$this->actingAsApiEditor();
$page = Page::visible()->first();
$chapter = Chapter::visible()->where('book_id', '!=', $page->book_id)->first();
$this->setEntityRestrictions($chapter, ['view'], [$this->getEditor()->roles()->first()]);
$details = [
2021-06-26 17:23:15 +02:00
'name' => 'My updated API page',
2020-11-28 17:30:30 +01:00
'chapter_id' => $chapter->id,
2021-06-26 17:23:15 +02:00
'html' => '<p>A page created via the API</p>',
2020-11-28 17:30:30 +01:00
];
$resp = $this->putJson($this->baseEndpoint . "/{$page->id}", $details);
$resp->assertStatus(403);
}
public function test_update_endpoint_does_not_wipe_content_if_no_html_or_md_provided()
{
$this->actingAsApiEditor();
$page = Page::visible()->first();
$originalContent = $page->html;
$details = [
'name' => 'My updated API page',
'tags' => [
[
'name' => 'freshtag',
'value' => 'freshtagval',
],
],
];
$this->putJson($this->baseEndpoint . "/{$page->id}", $details);
$page->refresh();
$this->assertEquals($originalContent, $page->html);
}
2020-11-28 17:30:30 +01:00
public function test_delete_endpoint()
{
$this->actingAsApiEditor();
$page = Page::visible()->first();
$resp = $this->deleteJson($this->baseEndpoint . "/{$page->id}");
$resp->assertStatus(204);
$this->assertActivityExists('page_delete', $page);
}
public function test_export_html_endpoint()
{
$this->actingAsApiEditor();
$page = Page::visible()->first();
$resp = $this->get($this->baseEndpoint . "/{$page->id}/export/html");
$resp->assertStatus(200);
$resp->assertSee($page->name);
$resp->assertHeader('Content-Disposition', 'attachment; filename="' . $page->slug . '.html"');
}
public function test_export_plain_text_endpoint()
{
$this->actingAsApiEditor();
$page = Page::visible()->first();
$resp = $this->get($this->baseEndpoint . "/{$page->id}/export/plaintext");
$resp->assertStatus(200);
$resp->assertSee($page->name);
$resp->assertHeader('Content-Disposition', 'attachment; filename="' . $page->slug . '.txt"');
}
public function test_export_pdf_endpoint()
{
$this->actingAsApiEditor();
$page = Page::visible()->first();
$resp = $this->get($this->baseEndpoint . "/{$page->id}/export/pdf");
$resp->assertStatus(200);
$resp->assertHeader('Content-Disposition', 'attachment; filename="' . $page->slug . '.pdf"');
}
public function test_export_markdown_endpoint()
{
$this->actingAsApiEditor();
$page = Page::visible()->first();
$resp = $this->get($this->baseEndpoint . "/{$page->id}/export/markdown");
$resp->assertStatus(200);
$resp->assertSee('# ' . $page->name);
$resp->assertHeader('Content-Disposition', 'attachment; filename="' . $page->slug . '.md"');
}
public function test_cant_export_when_not_have_permission()
{
$types = ['html', 'plaintext', 'pdf', 'markdown'];
$this->actingAsApiEditor();
$this->removePermissionFromUser($this->getEditor(), 'content-export');
$page = Page::visible()->first();
foreach ($types as $type) {
$resp = $this->get($this->baseEndpoint . "/{$page->id}/export/{$type}");
$this->assertPermissionError($resp);
}
}
2021-06-26 17:23:15 +02:00
}