feat: delete account

2026-05-18 12:41:02 +02:00
parent fd3d3959bd
commit 5c436fd65b
3 changed files with 123 additions and 0 deletions
@@ -0,0 +1,81 @@
+<?php
+
+use App\Models\MealPosts;
+use App\Models\User;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Storage;
+use Illuminate\Support\Str;
+use Laravel\Sanctum\Sanctum;
+
+uses(RefreshDatabase::class);
+
+it('deletes the authenticated account and related data', function () {
+    Storage::fake('public');
+
+    $user = User::factory()->create([
+        'avatar_url' => 'avatars/profile.jpg',
+    ]);
+
+    Storage::disk('public')->put('avatars/profile.jpg', 'avatar');
+    Storage::disk('public')->put('meal-posts/local.jpg', 'meal');
+
+    $localMealPost = MealPosts::factory()->for($user, 'user')->create([
+        'image_url' => 'meal-posts/local.jpg',
+    ]);
+    $remoteMealPost = MealPosts::factory()->for($user, 'user')->create([
+        'image_url' => 'https://example.com/meal.jpg',
+    ]);
+    $deviceToken = $user->deviceTokens()->create([
+        'expo_push_token' => 'ExponentPushToken[account-deletion]',
+        'platform' => 'ios',
+    ]);
+
+    $user->createToken('api');
+
+    DB::table('notifications')->insert([
+        'id' => (string) Str::uuid(),
+        'type' => 'test',
+        'notifiable_type' => User::class,
+        'notifiable_id' => $user->getKey(),
+        'data' => json_encode(['message' => 'test'], JSON_THROW_ON_ERROR),
+        'created_at' => now(),
+        'updated_at' => now(),
+    ]);
+    DB::table('sessions')->insert([
+        'id' => 'account-deletion-session',
+        'user_id' => $user->getKey(),
+        'ip_address' => '127.0.0.1',
+        'user_agent' => 'Pest',
+        'payload' => 'payload',
+        'last_activity' => now()->timestamp,
+    ]);
+    DB::table('password_reset_tokens')->insert([
+        'email' => $user->email,
+        'token' => 'reset-token',
+        'created_at' => now(),
+    ]);
+
+    Sanctum::actingAs($user);
+
+    $this->deleteJson('/api/auth/me')
+        ->assertOk()
+        ->assertJsonPath('message', 'Compte supprimé avec succès');
+
+    $this->assertDatabaseMissing('users', ['id' => $user->getKey()]);
+    $this->assertDatabaseMissing('meal_posts', ['id' => $localMealPost->getKey()]);
+    $this->assertDatabaseMissing('meal_posts', ['id' => $remoteMealPost->getKey()]);
+    $this->assertDatabaseMissing('device_tokens', ['id' => $deviceToken->getKey()]);
+    $this->assertDatabaseMissing('personal_access_tokens', ['tokenable_id' => $user->getKey()]);
+    $this->assertDatabaseMissing('notifications', ['notifiable_id' => $user->getKey()]);
+    $this->assertDatabaseMissing('sessions', ['user_id' => $user->getKey()]);
+    $this->assertDatabaseMissing('password_reset_tokens', ['email' => $user->email]);
+
+    Storage::disk('public')->assertMissing('avatars/profile.jpg');
+    Storage::disk('public')->assertMissing('meal-posts/local.jpg');
+});
+
+it('requires authentication to delete an account', function () {
+    $this->deleteJson('/api/auth/me')
+        ->assertUnauthorized();
+});