diff --git a/app/Http/Controllers/Api/AssetsController.php b/app/Http/Controllers/Api/AssetsController.php index 755a50ccac..e3bd87bb26 100644 --- a/app/Http/Controllers/Api/AssetsController.php +++ b/app/Http/Controllers/Api/AssetsController.php @@ -6,6 +6,7 @@ use App\Events\CheckoutableCheckedIn; use App\Http\Requests\StoreAssetRequest; use App\Http\Requests\UpdateAssetRequest; use App\Http\Traits\MigratesLegacyAssetLocations; +use App\Http\Transformers\ComponentsTransformer; use App\Models\AccessoryCheckout; use App\Models\CheckoutAcceptance; use App\Models\LicenseSeat; @@ -1322,6 +1323,18 @@ class AssetsController extends Controller return (new AssetsTransformer)->transformCheckedoutAccessories($accessory_checkouts, $total); } + public function assignedComponents(Request $request, Asset $asset): JsonResponse|array + { + $this->authorize('view', Asset::class); + $this->authorize('view', $asset); + + $asset->loadCount('components'); + $total = $asset->components_count; + + $components = $asset->load(['components' => fn($query) => $query->applyOffsetAndLimit($total)])->components; + + return (new ComponentsTransformer)->transformComponents($components, $total); + } /** * Generate asset labels by tag diff --git a/routes/api.php b/routes/api.php index 5fc5c85a35..94c7ca3df5 100644 --- a/routes/api.php +++ b/routes/api.php @@ -571,6 +571,13 @@ Route::group(['prefix' => 'v1', 'middleware' => ['api', 'api-throttle:api']], fu 'assignedAccessories' ] )->name('api.assets.assigned_accessories'); + + Route::get('{asset}/assigned/components', + [ + Api\AssetsController::class, + 'assignedComponents' + ] + )->name('api.assets.assigned_components'); /** End assigned routes */ }); diff --git a/tests/Feature/Assets/Api/AssignedComponentsTest.php b/tests/Feature/Assets/Api/AssignedComponentsTest.php new file mode 100644 index 0000000000..ad5ce43349 --- /dev/null +++ b/tests/Feature/Assets/Api/AssignedComponentsTest.php @@ -0,0 +1,79 @@ +actingAsForApi(User::factory()->create()) + ->getJson(route('api.assets.assigned_components', Asset::factory()->create())) + ->assertForbidden(); + } + + public function test_adheres_to_company_scoping() + { + $this->settings->enableMultipleFullCompanySupport(); + + [$companyA, $companyB] = Company::factory()->count(2)->create(); + + $asset = Asset::factory()->for($companyA)->create(); + + $user = User::factory()->for($companyB)->viewAssets()->create(); + + $this->actingAsForApi($user) + ->getJson(route('api.assets.assigned_components', $asset)) + ->assertOk() + ->assertStatusMessageIs('error') + ->assertMessagesAre('Asset not found'); + } + + public function test_can_get_components_assigned_to_specific_asset() + { + $unassociatedComponent = Component::factory()->create(); + + $asset = Asset::factory()->hasComponents(2)->create(); + + $componentsAssignedToAsset = $asset->components; + + $this->actingAsForApi(User::factory()->viewAssets()->create()) + ->getJson(route('api.assets.assigned_components', $asset)) + ->assertOk() + ->assertResponseContainsInRows($componentsAssignedToAsset) + ->assertResponseDoesNotContainInRows($unassociatedComponent) + ->assertJson(function (AssertableJson $json) { + $json->where('total', 2) + ->count('rows', 2) + ->etc(); + }); + } + + public function test_adheres_to_offset_and_limit() + { + $asset = Asset::factory()->hasComponents(2)->create(); + + $componentsAssignedToAsset = $asset->components; + + $this->actingAsForApi(User::factory()->viewAssets()->create()) + ->getJson(route('api.assets.assigned_components', [ + 'asset' => $asset, + 'offset' => 1, + 'limit' => 1, + ])) + ->assertOk() + ->assertResponseDoesNotContainInRows($componentsAssignedToAsset->first()) + ->assertResponseContainsInRows($componentsAssignedToAsset->last()) + ->assertJson(function (AssertableJson $json) { + $json->where('total', 2) + ->count('rows', 1) + ->etc(); + }); + } +}