tests/Feature/Users/EditTest.php
<?php

namespace Tests\Feature\Users;

use App\Models\User;
use Illuminate\Foundation\Testing\WithFaker;
use Tests\Facades\UserFactory;
use Tests\TestCase;
use Faker\Factory as FakerFactory;

class EditTest extends TestCase
{
    use WithFaker;

    private const URI = '/users/edit';

    /** @var User $admin */
    private User $admin;
    /** @var User $manager */
    private User $manager;
    /** @var User $auditor */
    private User $auditor;
    /** @var User $user */
    private User $user;

    protected function setUp(): void
    {
        parent::setUp();

        $this->admin = UserFactory::refresh()->asAdmin()->withTokens()->create();
        $this->manager = UserFactory::refresh()->asManager()->withTokens()->create();
        $this->auditor = UserFactory::refresh()->asAuditor()->withTokens()->create();
        $this->user = UserFactory::refresh()->asUser()->withTokens()->create();
    }

    public function test_edit_as_admin(): void
    {
        $this->user->full_name = $this->faker->name;

        $response = $this->actingAs($this->admin)->postJson(self::URI, $this->user->toArray());

        $response->assertOk();
        $response->assertJson(['res' => $this->user->toArray()]);
        $this->assertDatabaseHas('users', $this->user->only('id', 'full_name'));
    }

    public function test_edit_as_manager(): void
    {
        $this->user->full_name = $this->faker->name;

        $response = $this->actingAs($this->manager)->postJson(self::URI, $this->user->toArray());

        $response->assertForbidden();
    }

    public function test_edit_as_auditor(): void
    {
        $this->user->full_name = $this->faker->name;

        $response = $this->actingAs($this->auditor)->postJson(self::URI, $this->user->toArray());

        $response->assertForbidden();
    }

    public function test_edit_as_user(): void
    {
        $this->admin->full_name = $this->faker->name;

        $response = $this->actingAs($this->user)->postJson(self::URI, $this->admin->toArray());

        $response->assertForbidden();
    }

    public function test_edit_as_your_own_user(): void
    {
        $faker = FakerFactory::create();
        $user = clone $this->user;

        $user->full_name = $faker->unique()->firstName;
        $user->email = $faker->unique()->email;
        $user->password = $faker->unique()->password;
        $user->user_language = 'en';

        $response = $this->actingAs($this->user)->postJson(
            self::URI,
            $user->only('id', 'full_name', 'email', 'password', 'user_language')
        );

        $response->assertOk();
        $response->assertJson(['res' => $user->toArray()]);
        $this->assertDatabaseHas(
            'users',
            $user->only('id', 'full_name', 'email', 'user_language')
        );
    }

    public function test_edit_forbidden_field_as_user(): void
    {
        $user = clone $this->user;
        $user->is_admin = true;

        $response = $this->actingAs($this->user)->postJson(
            self::URI,
            $user->only('id', 'is_admin')
        );

        $response->assertValidationError();
    }

    public function test_not_existing(): void
    {
        $this->user->id++;
        $this->user->email = 'newemail@example.com';

        $response = $this->actingAs($this->admin)->postJson(self::URI, $this->user->toArray());

        $response->assertNotFound();
    }


    public function test_unauthorized(): void
    {
        $response = $this->postJson(self::URI);

        $response->assertUnauthorized();
    }

    public function test_without_params(): void
    {
        $response = $this->actingAs($this->admin)->postJson(self::URI);

        $response->assertValidationError();
    }
}
