fix: adapt tests to support web and api guards

Author: k2so-dev

database/factories/UserFactory.php

@@ -24,6 +24,7 @@ class UserFactory extends Factory
     public function definition(): array
     {
         return [
+            'ulid' => Str::ulid()->toBase32(),
             'name' => fake()->name(),
             'email' => fake()->unique()->safeEmail(),
             'email_verified_at' => now(),
@@ -37,7 +38,7 @@ public function definition(): array
      */
     public function unverified(): static
     {
-        return $this->state(fn (array $attributes) => [
+        return $this->state(fn(array $attributes) => [
             'email_verified_at' => null,
         ]);
     }

tests/Feature/Auth/AuthenticationTest.php

@@ -4,7 +4,6 @@
 
 use App\Models\User;
 use Illuminate\Foundation\Testing\RefreshDatabase;
-use Illuminate\Support\Str;
 use Illuminate\Testing\Fluent\AssertableJson;
 use Tests\TestCase;
 
@@ -14,17 +13,32 @@ class AuthenticationTest extends TestCase
 
     public function test_users_can_authenticate_using_the_login_screen(): void
     {
+        $guard = config('auth.defaults.guard');
+
         $user = User::factory()->create();
 
         $response = $this->postJson('/api/v1/login', [
             'email' => $user->email,
             'password' => 'password',
+        ], [
+            'Origin' => isset(config('sanctum.stateful')[0]) ? config('sanctum.stateful')[0] : 'localhost',
         ]);
 
         $response->assertStatus(200);
-        $response->assertJson(fn (AssertableJson $json) => $json
-            ->hasAll(['ok', 'token'])
-        );
+
+        if ($guard === 'api') {
+            $response->assertJson(
+                fn(AssertableJson $json) => $json
+                    ->hasAll(['ok', 'token'])
+            );
+        } else {
+            $response->assertJson(
+                fn(AssertableJson $json) => $json
+                    ->has('ok')
+                    ->where('ok', true)
+                    ->missing('token')
+            );
+        }
     }
 
     public function test_users_can_not_authenticate_with_invalid_password(): void
@@ -36,23 +50,30 @@ public function test_users_can_not_authenticate_with_invalid_password(): void
             'password' => 'wrong-password',
         ]);
 
-        $response->assertJson(fn (AssertableJson $json) => $json
-            ->hasAll(['ok', 'message', 'errors'])
-            ->missing('token')
+        $response->assertJson(
+            fn(AssertableJson $json) => $json
+                ->hasAll(['ok', 'message', 'errors'])
+                ->where('ok', false)
+                ->missing('token')
         );
     }
 
     public function test_users_can_logout(): void
     {
-        $user = User::factory()->create([
-            'ulid' => Str::ulid()->toBase32(),
-        ]);
+        $guard = config('auth.defaults.guard');
 
-        $token = $user->createToken('test-token')->plainTextToken;
+        /** @var User $user */
+        $user = User::factory()->create();
 
-        $response = $this->post('/api/v1/logout', [], [
-            'Authorization' => 'Bearer '.$token,
-        ]);
+        if ($guard === 'api') {
+            $token = $user->createDeviceToken('test-device', '127.0.0.1');
+            $response = $this->post('/api/v1/logout', [], [
+                'Authorization' => 'Bearer ' . $token,
+            ]);
+        } else {
+            $this->actingAs($user, $guard);
+            $response = $this->post('/api/v1/logout');
+        }
 
         $response->assertJson(['ok' => true], true);
     }

tests/Feature/Auth/EmailVerificationTest.php

@@ -7,7 +7,6 @@
 use Illuminate\Foundation\Testing\RefreshDatabase;
 use Illuminate\Support\Facades\Event;
 use Illuminate\Support\Facades\URL;
-use Str;
 use Tests\TestCase;
 
 class EmailVerificationTest extends TestCase
@@ -18,10 +17,7 @@ public function test_email_can_be_verified(): void
     {
         $this->withoutMiddleware();
 
-        $user = User::factory()->create([
-            'email_verified_at' => null,
-            'ulid' => Str::ulid()->toBase32(),
-        ]);
+        $user = User::factory()->unverified()->create();
 
         Event::fake();
 
@@ -42,10 +38,7 @@ public function test_email_is_not_verified_with_invalid_hash(): void
     {
         $this->withoutMiddleware();
 
-        $user = User::factory()->create([
-            'email_verified_at' => null,
-            'ulid' => Str::ulid()->toBase32(),
-        ]);
+        $user = User::factory()->unverified()->create();
 
         $verificationUrl = URL::temporarySignedRoute(
             'verification.verify',