feat: update user roles and passwords in QA driver, enhance documentation with error codes, and improve trial activation error handling

2026-07-19 15:19:03 +03:30
parent 3e841b5e57
commit 7761c37a3e
10 changed files with 326 additions and 109 deletions
@@ -0,0 +1,53 @@
+<?php
+
+namespace App\Tests\ClinicService;
+
+use App\ClinicService\Entity\ServiceItem;
+use App\ClinicService\Entity\ServiceSection;
+use App\Doctor\Entity\Doctor;
+use App\Tests\ApiTestCase;
+
+/**
+ * GET /api/v1/service-items resolves the caller's working context. A user with
+ * neither a doctor profile nor a clinic (admin, secretary, representation, plain
+ * patient) resolves to EntityContext::unknown(), whose id is null — which used
+ * to reach ServiceItemRepository::findByEntity(int $entityId) and fatal with a
+ * 500. It must be a 403 instead.
+ */
+class ServiceItemsUnresolvedContextTest extends ApiTestCase
+{
+    public function testUserWithoutDoctorOrClinicGetsForbiddenNotServerError(): void
+    {
+        foreach ([['ROLE_ADMIN'], ['ROLE_SECRETARY'], ['ROLE_REPRESENTATION'], ['ROLE_USER']] as $roles) {
+            $user = $this->createUser($roles);
+
+            $this->authJson('GET', '/api/v1/service-items', $user);
+
+            $this->assertSame(
+                403,
+                $this->responseCode(),
+                sprintf('roles %s should be forbidden, not a server error', implode(',', $roles)),
+            );
+        }
+    }
+
+    public function testDoctorStillGetsTheirOwnItems(): void
+    {
+        $owner  = $this->createUser(['ROLE_DOCTOR']);
+        $doctor = new Doctor($owner, 'دکتر تست محیط');
+        $this->em->persist($doctor);
+        $this->em->flush();
+
+        $section = new ServiceSection('doctor', $doctor->getId(), 'تزریقات');
+        $item    = new ServiceItem($section, 'سرم ۵۰۰cc');
+        $this->em->persist($section);
+        $this->em->persist($item);
+        $this->em->flush();
+
+        $body = $this->authJson('GET', '/api/v1/service-items', $owner);
+
+        $this->assertSame(200, $this->responseCode());
+        $this->assertTrue($body['success']);
+        $this->assertContains('سرم ۵۰۰cc', array_column($body['data'], 'name'));
+    }
+}