65 lines
2 KiB
PHP
65 lines
2 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
// SPDX-License-Identifier: EUPL-1.2
|
||
|
|
|
||
|
|
declare(strict_types=1);
|
||
|
|
|
||
|
|
use Core\Mod\Agentic\Models\AgentApiKey;
|
||
|
|
use Core\Mod\Agentic\Models\AgentSession;
|
||
|
|
use Core\Tenant\Models\Workspace;
|
||
|
|
|
||
|
|
beforeEach(function (): void {
|
||
|
|
require __DIR__.'/../../../../Routes/api.php';
|
||
|
|
});
|
||
|
|
|
||
|
|
function agentAuthRouteKey(
|
||
|
|
Workspace $workspace,
|
||
|
|
array $permissions = [AgentApiKey::PERM_AUTH_WRITE, AgentApiKey::PERM_SESSIONS_WRITE]
|
||
|
|
): AgentApiKey {
|
||
|
|
return createApiKey($workspace, 'Agent Auth Key', $permissions);
|
||
|
|
}
|
||
|
|
|
||
|
|
test('agent auth register route creates an authenticated session record', function (): void {
|
||
|
|
$workspace = createWorkspace();
|
||
|
|
$key = agentAuthRouteKey($workspace);
|
||
|
|
|
||
|
|
$response = $this
|
||
|
|
->withHeader('Authorization', 'Bearer '.$key->plainTextKey)
|
||
|
|
->postJson('/v1/agent/auth/register', [
|
||
|
|
'agent_type' => 'codex',
|
||
|
|
'context' => ['repo' => 'core/agent'],
|
||
|
|
'work_log' => [
|
||
|
|
['message' => 'Registered via API'],
|
||
|
|
],
|
||
|
|
]);
|
||
|
|
|
||
|
|
$response
|
||
|
|
->assertCreated()
|
||
|
|
->assertJsonPath('data.status', AgentSession::STATUS_ACTIVE)
|
||
|
|
->assertJsonPath('data.agent_type', 'codex')
|
||
|
|
->assertJsonPath('data.context_summary.repo', 'core/agent')
|
||
|
|
->assertJsonPath('data.work_log.0.message', 'Registered via API');
|
||
|
|
|
||
|
|
expect(AgentSession::query()->where('workspace_id', $workspace->id)->count())->toBe(1);
|
||
|
|
});
|
||
|
|
|
||
|
|
test('agent auth provision route returns a new plain text key', function (): void {
|
||
|
|
$workspace = createWorkspace();
|
||
|
|
|
||
|
|
$this->withoutMiddleware();
|
||
|
|
|
||
|
|
$response = $this->postJson('/v1/agent/auth/provision', [
|
||
|
|
'workspace_id' => $workspace->id,
|
||
|
|
'oauth_user_id' => 'user-42',
|
||
|
|
'permissions' => [AgentApiKey::PERM_FLEET_READ],
|
||
|
|
'rate_limit' => 120,
|
||
|
|
]);
|
||
|
|
|
||
|
|
$response
|
||
|
|
->assertCreated()
|
||
|
|
->assertJsonPath('data.rate_limit', 120)
|
||
|
|
->assertJsonPath('data.permissions.0', AgentApiKey::PERM_FLEET_READ);
|
||
|
|
|
||
|
|
expect((string) $response->json('data.plain_text_key'))->toStartWith('ak_');
|
||
|
|
});
|