test(admin): allow empty documentation domain catalog

Author: c15k0

tests/controller/AdminFrontendRoutesControllerTest.php

@@ -4,14 +4,17 @@
 
 use PHPUnit\Framework\TestCase;
 use PSFS\base\Router;
+use PSFS\base\Request;
 use PSFS\base\Security;
+use PSFS\base\admin\AdminFrontendCsrf;
 use PSFS\base\exception\ApiException;
 use PSFS\controller\AdminFrontendRoutesController;
 
 class AdminFrontendRoutesControllerTest extends TestCase
 {
     protected function setUp(): void
     {
+        Request::dropInstance();
         Router::dropInstance();
         Router::getInstance()->hydrateRouting();
     }
@@ -20,6 +23,7 @@ protected function tearDown(): void
     {
         Security::setTest(false);
         Security::dropInstance();
+        Request::dropInstance();
         Router::dropInstance();
     }
 
@@ -37,7 +41,12 @@ public function testDocumentationIndexReturnsTheKnownDomainsAsAnEnvelope(): void
         $response = json_decode((new AdminFrontendRoutesControllerProbe())->documentation(), true, 512, JSON_THROW_ON_ERROR);
 
         self::assertTrue($response['ok']);
-        self::assertNotEmpty($response['data']['domains']);
+        self::assertIsArray($response['data']['domains']);
+        self::assertIsArray($response['data']['documentPaths']);
+
+        $documentPathDomains = array_keys($response['data']['documentPaths']);
+        sort($documentPathDomains, SORT_NATURAL | SORT_FLAG_CASE);
+        self::assertSame($documentPathDomains, $response['data']['domains']);
         foreach ($response['data']['domains'] as $domain) {
             self::assertSame('/' . strtoupper($domain) . '/api/doc', $response['data']['documentPaths'][$domain]);
         }
@@ -57,12 +66,28 @@ public function testDocumentationDomainReturnsTheV2EnvelopeForAnUnknownDomain():
         ], $response);
     }
 
-    public function testRegenerationKeepsTheExistingAuthorizationBoundary(): void
+    public function testRegenerationWithValidCsrfTokenKeepsTheExistingAuthorizationBoundary(): void
+    {
+        Security::setTest(false);
+        Security::dropInstance();
+        $token = AdminFrontendCsrf::issue();
+        Request::dropInstance();
+        Request::getInstance()->setServer([
+            'HTTP_X_PSFS_CSRF' => $token,
+        ]);
+
+        $this->expectException(ApiException::class);
+        $this->expectExceptionMessage('Restricted area');
+        (new AdminFrontendRoutesControllerProbe())->regenerate();
+    }
+
+    public function testRegenerationRejectsAMissingCsrfTokenBeforeRouteWork(): void
     {
         Security::setTest(false);
         Security::dropInstance();
 
         $this->expectException(ApiException::class);
+        $this->expectExceptionMessage('Invalid CSRF token');
         (new AdminFrontendRoutesControllerProbe())->regenerate();
     }
 }