postAs('api/invitations', [ 'emails' => ['foo@bar.io', 'bar@baz.ai'], 'is_admin' => true, ], create_admin()) ->assertSuccessful() ->assertJsonStructure(['*' => UserProspectResource::JSON_STRUCTURE]); Mail::assertQueued(UserInvite::class, 2); } public function testNonAdminCannotInvite(): void { Mail::fake(); $this->postAs('api/invitations', ['emails' => ['foo@bar.io', 'bar@baz.ai']]) ->assertForbidden(); Mail::assertNothingQueued(); } public function testGetProspect(): void { $prospect = self::createProspect(); $this->get("api/invitations?token=$prospect->invitation_token") ->assertSuccessful() ->assertJsonStructure(UserProspectResource::JSON_STRUCTURE); } public function testRevoke(): void { $prospect = self::createProspect(); $this->deleteAs('api/invitations', ['email' => $prospect->email], create_admin()) ->assertSuccessful(); self::assertModelMissing($prospect); } public function testNonAdminCannotRevoke(): void { $prospect = self::createProspect(); $this->deleteAs('api/invitations', ['email' => $prospect->email]) ->assertForbidden(); self::assertModelExists($prospect); } public function testAccept(): void { $prospect = self::createProspect(); $this->post('api/invitations/accept', [ 'token' => $prospect->invitation_token, 'name' => 'Bruce Dickinson', 'password' => 'SuperSecretPassword', ]) ->assertSuccessful() ->assertJsonStructure(['token', 'audio-token']); $prospect->refresh(); self::assertFalse($prospect->is_prospect); } private static function createProspect(): User { return User::factory()->for(create_admin(), 'invitedBy')->create([ 'invitation_token' => Str::uuid()->toString(), 'invited_at' => now(), ]); } }