public function NodeTest::testGetIndividual in Drupal 9

Same name and namespace in other branches

1. 8 core/modules/jsonapi/tests/src/Functional/NodeTest.php \Drupal\Tests\jsonapi\Functional\NodeTest::testGetIndividual()
2. 10 core/modules/jsonapi/tests/src/Functional/NodeTest.php \Drupal\Tests\jsonapi\Functional\NodeTest::testGetIndividual()

Tests GETting an individual resource, plus edge cases to ensure good DX.

Overrides ResourceTestBase::testGetIndividual

File

core/modules/jsonapi/tests/src/Functional/NodeTest.php, line 316

Class

NodeTest

JSON:API integration test for the "Node" content entity type.

Namespace

Drupal\Tests\jsonapi\Functional

Code

public function testGetIndividual() {
  parent::testGetIndividual();
  $this
    ->assertCacheableNormalizations();

  // Unpublish node.
  $this->entity
    ->setUnpublished()
    ->save();

  // @todo Remove line below in favor of commented line in https://www.drupal.org/project/drupal/issues/2878463.
  $url = Url::fromRoute(sprintf('jsonapi.%s.individual', static::$resourceTypeName), [
    'entity' => $this->entity
      ->uuid(),
  ]);

  // $url = $this->entity->toUrl('jsonapi');
  $request_options = $this
    ->getAuthenticationRequestOptions();

  // 403 when accessing own unpublished node.
  $response = $this
    ->request('GET', $url, $request_options);

  // @todo Remove $expected + assertResourceResponse() in favor of the commented line below once https://www.drupal.org/project/drupal/issues/2943176 lands.
  $expected_document = [
    'jsonapi' => static::$jsonApiMember,
    'errors' => [
      [
        'title' => 'Forbidden',
        'status' => '403',
        'detail' => 'The current user is not allowed to GET the selected resource.',
        'links' => [
          'info' => [
            'href' => HttpExceptionNormalizer::getInfoUrl(403),
          ],
          'via' => [
            'href' => $url
              ->setAbsolute()
              ->toString(),
          ],
        ],
        'source' => [
          'pointer' => '/data',
        ],
      ],
    ],
  ];
  $this
    ->assertResourceResponse(403, $expected_document, $response, [
    '4xx-response',
    'http_response',
    'node:1',
  ], [
    'url.query_args:resourceVersion',
    'url.site',
    'user.permissions',
  ], FALSE, 'MISS');

  /* $this->assertResourceErrorResponse(403, 'The current user is not allowed to GET the selected resource.', $response, '/data'); */

  // 200 after granting permission.
  $this
    ->grantPermissionsToTestedRole([
    'view own unpublished content',
  ]);
  $response = $this
    ->request('GET', $url, $request_options);

  // The response varies by 'user', causing the 'user.permissions' cache
  // context to be optimized away.
  $expected_cache_contexts = Cache::mergeContexts($this
    ->getExpectedCacheContexts(), [
    'user',
  ]);
  $expected_cache_contexts = array_diff($expected_cache_contexts, [
    'user.permissions',
  ]);
  $this
    ->assertResourceResponse(200, FALSE, $response, $this
    ->getExpectedCacheTags(), $expected_cache_contexts, FALSE, 'UNCACHEABLE');
}