From 94700347f80f5280a1e6f52ebb58543ba9ec1473 Mon Sep 17 00:00:00 2001
From: Niklas Wichter <niklaswichter@gmail.com>
Date: Fri, 13 Mar 2026 17:05:00 +0100
Subject: [PATCH] test: add move resource API tests

---
 tests/Feature/MoveResourceApiTest.php | 238 ++++++++++++++++++++++++++
 1 file changed, 238 insertions(+)
 create mode 100644 tests/Feature/MoveResourceApiTest.php

diff --git a/tests/Feature/MoveResourceApiTest.php b/tests/Feature/MoveResourceApiTest.php
new file mode 100644
index 000000000..80d50122b
--- /dev/null
+++ b/tests/Feature/MoveResourceApiTest.php
@@ -0,0 +1,238 @@
+<?php
+
+use App\Models\Application;
+use App\Models\Environment;
+use App\Models\Project;
+use App\Models\Server;
+use App\Models\Service;
+use App\Models\StandaloneDocker;
+use App\Models\StandalonePostgresql;
+use App\Models\Team;
+use App\Models\User;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+
+uses(RefreshDatabase::class);
+
+beforeEach(function () {
+    $this->team = Team::factory()->create();
+    $this->user = User::factory()->create();
+    $this->team->members()->attach($this->user->id, ['role' => 'owner']);
+
+    session(['currentTeam' => $this->team]);
+
+    $this->token = $this->user->createToken('test-token', ['*']);
+    $this->bearerToken = $this->token->plainTextToken;
+
+    $this->server = Server::factory()->create(['team_id' => $this->team->id]);
+    $this->destination = StandaloneDocker::factory()->create(['server_id' => $this->server->id]);
+    $this->project = Project::factory()->create(['team_id' => $this->team->id]);
+    $this->environment = Environment::factory()->create(['project_id' => $this->project->id]);
+
+    $this->targetProject = Project::factory()->create(['team_id' => $this->team->id]);
+    $this->targetEnvironment = Environment::factory()->create(['project_id' => $this->targetProject->id]);
+});
+
+describe('POST /api/v1/applications/{uuid}/move', function () {
+    test('moves application to another environment', function () {
+        $application = Application::factory()->create([
+            'environment_id' => $this->environment->id,
+            'destination_id' => $this->destination->id,
+            'destination_type' => $this->destination->getMorphClass(),
+        ]);
+
+        $response = $this->withHeaders([
+            'Authorization' => 'Bearer '.$this->bearerToken,
+            'Content-Type' => 'application/json',
+        ])->postJson("/api/v1/applications/{$application->uuid}/move", [
+            'environment_uuid' => $this->targetEnvironment->uuid,
+        ]);
+
+        $response->assertStatus(200);
+        $response->assertJsonFragment(['message' => 'Application moved successfully.']);
+        $response->assertJsonStructure(['message', 'uuid', 'project_uuid', 'environment_uuid']);
+
+        $application->refresh();
+        expect($application->environment_id)->toBe($this->targetEnvironment->id);
+    });
+
+    test('returns 404 when application not found', function () {
+        $response = $this->withHeaders([
+            'Authorization' => 'Bearer '.$this->bearerToken,
+            'Content-Type' => 'application/json',
+        ])->postJson('/api/v1/applications/non-existent-uuid/move', [
+            'environment_uuid' => $this->targetEnvironment->uuid,
+        ]);
+
+        $response->assertStatus(404);
+    });
+
+    test('returns 422 when environment_uuid is missing', function () {
+        $application = Application::factory()->create([
+            'environment_id' => $this->environment->id,
+            'destination_id' => $this->destination->id,
+            'destination_type' => $this->destination->getMorphClass(),
+        ]);
+
+        $response = $this->withHeaders([
+            'Authorization' => 'Bearer '.$this->bearerToken,
+            'Content-Type' => 'application/json',
+        ])->postJson("/api/v1/applications/{$application->uuid}/move", []);
+
+        $response->assertStatus(422);
+    });
+
+    test('returns 422 when extra fields are provided', function () {
+        $application = Application::factory()->create([
+            'environment_id' => $this->environment->id,
+            'destination_id' => $this->destination->id,
+            'destination_type' => $this->destination->getMorphClass(),
+        ]);
+
+        $response = $this->withHeaders([
+            'Authorization' => 'Bearer '.$this->bearerToken,
+            'Content-Type' => 'application/json',
+        ])->postJson("/api/v1/applications/{$application->uuid}/move", [
+            'environment_uuid' => $this->targetEnvironment->uuid,
+            'bogus_field' => 'value',
+        ]);
+
+        $response->assertStatus(422);
+    });
+
+    test('returns 404 when target environment belongs to another team', function () {
+        $otherTeam = Team::factory()->create();
+        $otherProject = Project::factory()->create(['team_id' => $otherTeam->id]);
+        $otherEnvironment = Environment::factory()->create(['project_id' => $otherProject->id]);
+
+        $application = Application::factory()->create([
+            'environment_id' => $this->environment->id,
+            'destination_id' => $this->destination->id,
+            'destination_type' => $this->destination->getMorphClass(),
+        ]);
+
+        $response = $this->withHeaders([
+            'Authorization' => 'Bearer '.$this->bearerToken,
+            'Content-Type' => 'application/json',
+        ])->postJson("/api/v1/applications/{$application->uuid}/move", [
+            'environment_uuid' => $otherEnvironment->uuid,
+        ]);
+
+        $response->assertStatus(404);
+    });
+
+    test('returns 400 when application is already in the target environment', function () {
+        $application = Application::factory()->create([
+            'environment_id' => $this->environment->id,
+            'destination_id' => $this->destination->id,
+            'destination_type' => $this->destination->getMorphClass(),
+        ]);
+
+        $response = $this->withHeaders([
+            'Authorization' => 'Bearer '.$this->bearerToken,
+            'Content-Type' => 'application/json',
+        ])->postJson("/api/v1/applications/{$application->uuid}/move", [
+            'environment_uuid' => $this->environment->uuid,
+        ]);
+
+        $response->assertStatus(400);
+    });
+
+    test('preserves resource-level environment variables after move', function () {
+        $application = Application::factory()->create([
+            'environment_id' => $this->environment->id,
+            'destination_id' => $this->destination->id,
+            'destination_type' => $this->destination->getMorphClass(),
+        ]);
+
+        \App\Models\EnvironmentVariable::create([
+            'key' => 'TEST_VAR',
+            'value' => 'test-value',
+            'resourceable_type' => Application::class,
+            'resourceable_id' => $application->id,
+            'is_preview' => false,
+        ]);
+
+        $response = $this->withHeaders([
+            'Authorization' => 'Bearer '.$this->bearerToken,
+            'Content-Type' => 'application/json',
+        ])->postJson("/api/v1/applications/{$application->uuid}/move", [
+            'environment_uuid' => $this->targetEnvironment->uuid,
+        ]);
+
+        $response->assertStatus(200);
+
+        $application->refresh();
+        $envVar = $application->environment_variables->where('key', 'TEST_VAR')->first();
+        expect($envVar)->not->toBeNull();
+        expect($envVar->value)->toBe('test-value');
+    });
+});
+
+describe('POST /api/v1/databases/{uuid}/move', function () {
+    test('moves database to another environment', function () {
+        $database = StandalonePostgresql::factory()->create([
+            'environment_id' => $this->environment->id,
+            'destination_id' => $this->destination->id,
+            'destination_type' => $this->destination->getMorphClass(),
+        ]);
+
+        $response = $this->withHeaders([
+            'Authorization' => 'Bearer '.$this->bearerToken,
+            'Content-Type' => 'application/json',
+        ])->postJson("/api/v1/databases/{$database->uuid}/move", [
+            'environment_uuid' => $this->targetEnvironment->uuid,
+        ]);
+
+        $response->assertStatus(200);
+        $response->assertJsonFragment(['message' => 'Database moved successfully.']);
+
+        $database->refresh();
+        expect($database->environment_id)->toBe($this->targetEnvironment->id);
+    });
+
+    test('returns 404 when database not found', function () {
+        $response = $this->withHeaders([
+            'Authorization' => 'Bearer '.$this->bearerToken,
+            'Content-Type' => 'application/json',
+        ])->postJson('/api/v1/databases/non-existent-uuid/move', [
+            'environment_uuid' => $this->targetEnvironment->uuid,
+        ]);
+
+        $response->assertStatus(404);
+    });
+});
+
+describe('POST /api/v1/services/{uuid}/move', function () {
+    test('moves service to another environment', function () {
+        $service = Service::factory()->create([
+            'server_id' => $this->server->id,
+            'destination_id' => $this->destination->id,
+            'destination_type' => $this->destination->getMorphClass(),
+            'environment_id' => $this->environment->id,
+        ]);
+
+        $response = $this->withHeaders([
+            'Authorization' => 'Bearer '.$this->bearerToken,
+            'Content-Type' => 'application/json',
+        ])->postJson("/api/v1/services/{$service->uuid}/move", [
+            'environment_uuid' => $this->targetEnvironment->uuid,
+        ]);
+
+        $response->assertStatus(200);
+        $response->assertJsonFragment(['message' => 'Service moved successfully.']);
+
+        $service->refresh();
+        expect($service->environment_id)->toBe($this->targetEnvironment->id);
+    });
+
+    test('returns 404 when service not found', function () {
+        $response = $this->withHeaders([
+            'Authorization' => 'Bearer '.$this->bearerToken,
+            'Content-Type' => 'application/json',
+        ])->postJson('/api/v1/services/non-existent-uuid/move', [
+            'environment_uuid' => $this->targetEnvironment->uuid,
+        ]);
+
+        $response->assertStatus(404);
+    });
+});