Laravel Authorization Testing Gate Policy Ability Assertions

Laravel1 September 20262 menit baca

Laravel Authorization Testing Gate Policy Ability Assertions

Definisi

Menguji otorisasi memastikan Gate, Policy, dan helper authorize()/@can benar menolak/izinkan sesuai aturan. Tanpa test, regresi akses (user lihat data orang lain) mudah lewat.

Kapan dipakai

Pakai di setiap fitur ber-otorisasi: crud resource, admin-only, ownership. Test di level unit (Policy method) dan feature (HTTP 403 vs 200).

Cara kerja

Unit policy

php

test('owner bisa edit post', function () {
    $user = User::factory()->create();
    $post = Post::

Selesai membaca dokumentasi ini?

Kembali ke rujukan utama Laravel untuk melanjutkan topik lainnya.

Kembali ke Kategori

php

test('tamu tak bisa akses dashboard', function () {
    $this->get('/dashboard')->assertRedirect('/login');
});
 
test('user tak punya permission 403', function () {
    $this->actingAs(User::factory()->create())
         ->delete("/posts/1")
         ->assertForbidden();
});

Laravel Authorization Testing Gate Policy Ability Assertions | Rujukan Pemrograman | Mahir.dev Academy

Laravel Authorization Testing Gate Policy Ability Assertions

Laravel Authorization Testing Gate Policy Ability Assertions

Definisi

Kapan dipakai

Cara kerja

Unit policy

Selesai membaca dokumentasi ini?

Feature HTTP

Struktur alur

Catatan implementasi

Kesalahan umum

Referensi terkait