einundzwanzig/einundzwanzig-app
1
0
Fork 0
mirror of https://github.com/HolgerHatGarKeineNode/einundzwanzig-app.git synced 2026-06-17 16:40:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

✅ Update MeetupController to use pivot memberships for "My Meetups" in both listing and detail views

Browse Source 
- ✏️ Adjust `mine` method to fetch meetups based on dashboard selections (`meetup_user` pivot).
- ✏️ Add `viewMine` policy to control access to individual meetups for pivot members.
- 🧪 Update feature tests to reflect pivot-based logic for "My Meetups."
This commit is contained in:
HolgerHatGarKeineNode
2026-06-13 22:42:33 +02:00
parent b6f5d57530
commit 8d7b1515d8
3 changed files with 39 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/Feature/Api/MeetupWriteApiTest.php
+21 -8
View File
@@ -70,23 +70,36 @@ it('forbids updating as a pivot member who is not the creator', function () {
])->assertForbidden();
});
it('returns only own in mine index', function () {
it('returns the dashboard-selected meetups in mine index', function () {
Sanctum::actingAs($user = User::factory()->create());
$other = User::factory()->create();
Meetup::factory()->count(2)->create(['created_by' => $user->id]);
Meetup::factory()->create(['created_by' => $other->id]);
$selected = Meetup::factory()->count(2)->create();
$unselected = Meetup::factory()->create();
$user->meetups()->attach($selected);
$response = $this->getJson('/api/my-meetups');
$response->assertSuccessful();
expect($response->json('data'))->toHaveCount(2);
collect($response->json('data'))->each(
fn ($meetup) => expect($meetup['created_by'])->toBe($user->id)
);
$ids = collect($response->json('data'))->pluck('id')->all();
expect($ids)
->toContain(...$selected->pluck('id')->all())
->not->toContain($unselected->id);
});
it('forbids viewing someone elses in mine show', function () {
it('lets a pivot member view in mine show', function () {
Sanctum::actingAs($user = User::factory()->create());
$meetup = Meetup::factory()->create();
$user->meetups()->attach($meetup);
$this->getJson('/api/my-meetups/'.$meetup->id)
->assertSuccessful()
->assertJsonPath('data.id', $meetup->id);
});
it('forbids viewing a meetup the user has not selected in mine show', function () {
$owner = User::factory()->create();
$meetup = Meetup::factory()->create(['created_by' => $owner->id]);