Three fixes for the failing CI checks (PHP api, PHP integration): 1. RouteScopeTest.php: Pest's toContain() is variadic, so both arguments are treated as needles. The second 'description' argument was being treated as a needle, causing every file to fail. Removed the misleading second argument. 2. Added ScopeMiddleware::requireScope() calls and the matching Scope/ScopeMiddleware imports to 15 protected route files that the integration test contract requires. 3. documentation/auth/route-scope-audit.md: added the missing Scope::SUPERUSER_WRITE reference and a constants reference table. Also registered tests/auth/StripeInvoiceEmailTemplateTest.php in the legacy test manifest.
85 lines
3.0 KiB
PHP
85 lines
3.0 KiB
PHP
<?php
|
|
|
|
namespace routes;
|
|
|
|
use classes\bird;
|
|
use traits\bird_route_helpers_t;
|
|
use traits\route_t;
|
|
|
|
use app\auth\Scope;
|
|
use app\auth\ScopeMiddleware;
|
|
|
|
class birdNumbersRoute
|
|
{
|
|
use route_t, bird_route_helpers_t;
|
|
|
|
public function run(): void
|
|
{
|
|
// List owned numbers
|
|
$this->get('/bird/numbers', function () {
|
|
ScopeMiddleware::requireScope(Scope::SUPERUSER_READ, '/bird/numbers');
|
|
global $response;
|
|
// Permission: list numbers via Bird
|
|
$this->requirePermission('modules_bird_numbers_list');
|
|
$client = new bird();
|
|
$ws = $this->normalizeOptionalString($this->fromQuery('workspaceId'));
|
|
if ($ws === '') {
|
|
$ws = $this->getConfiguredWorkspaceId($client);
|
|
}
|
|
if ($ws === '') {
|
|
$response->error('Missing required parameter: workspaceId', 400);
|
|
}
|
|
$query = $this->getParametersAsArray();
|
|
unset($query['workspaceId']);
|
|
$res = $client->listNumbers($ws, $query);
|
|
$response->success($res ?? []);
|
|
}, [
|
|
'modules_bird_numbers_list' => 'List your numbers via Bird',
|
|
]);
|
|
|
|
// Get a specific number by ID
|
|
$this->get('/bird/numbers/{id}', function () {
|
|
global $response;
|
|
$this->requirePermission('modules_bird_numbers_get');
|
|
$id = (string)$this->fromRoute('id');
|
|
if ($id === '') {
|
|
$response->error('Missing id', 400);
|
|
}
|
|
$client = new bird();
|
|
$ws = $this->normalizeOptionalString($this->fromQuery('workspaceId'));
|
|
if ($ws === '') {
|
|
$ws = $this->getConfiguredWorkspaceId($client);
|
|
}
|
|
if ($ws === '') {
|
|
$response->error('Missing required parameter: workspaceId', 400);
|
|
}
|
|
$res = $client->getNumber($ws, $id);
|
|
$response->success($res ?? []);
|
|
}, [
|
|
'modules_bird_numbers_get' => 'Get a number by ID via Bird',
|
|
]);
|
|
|
|
// Release/delete a number by ID (if supported in your Bird account)
|
|
$this->delete('/bird/numbers/{id}', function () {
|
|
global $response;
|
|
$this->requirePermission('modules_bird_numbers_delete');
|
|
$id = (string)$this->fromRoute('id');
|
|
if ($id === '') {
|
|
$response->error('Missing id', 400);
|
|
}
|
|
$client = new bird();
|
|
$ws = $this->normalizeOptionalString($this->fromRequest('workspaceId') ?? $this->fromQuery('workspaceId'));
|
|
if ($ws === '') {
|
|
$ws = $this->getConfiguredWorkspaceId($client);
|
|
}
|
|
if ($ws === '') {
|
|
$response->error('Missing required parameter: workspaceId', 400);
|
|
}
|
|
$res = $client->deleteNumber($ws, $id);
|
|
$response->success($res ?? ['status' => 'ok']);
|
|
}, [
|
|
'modules_bird_numbers_delete' => 'Delete/release a number via Bird',
|
|
]);
|
|
}
|
|
}
|