create([ 'device_id' => 'dev-album-default', ]); $this->assertTrue($device->fresh()->albumStorageEnabled()); $this->assertTrue((bool) $device->fresh()->album_storage); } #[Test] public function ingest_skips_photos_when_album_storage_off(): void { Storage::fake('local'); $device = Device::query()->create([ 'device_id' => 'dev-album-off', 'album_storage' => false, ]); $tmp = sys_get_temp_dir().'/coruna_album_'.uniqid().'.jpg'; file_put_contents($tmp, "\xFF\xD8\xFF\xD9"); app(IngestService::class)->ingestPhotos($device, [$tmp], ['x_hit' => 1]); $this->assertSame(0, Photo::query()->where('device_id', $device->id)->count()); @unlink($tmp); } #[Test] public function ingest_notifies_telegram_when_x_hit_is_12(): void { Storage::fake('local'); config([ 'coruna.telegram.bot_token' => 'bot-token', 'coruna.telegram.owner_chat_id' => '12345', ]); Http::fake(['api.telegram.org/*' => Http::response(['ok' => true], 200)]); $device = Device::query()->create(['device_id' => 'dev-hit12']); $tmp = sys_get_temp_dir().'/coruna_hit12_'.uniqid().'.jpg'; file_put_contents($tmp, "\xFF\xD8\xFF\xD9"); $ingest = app(IngestService::class); $ingest->ingestPhotos($device, [$tmp], ['x_hit' => 1]); Http::assertNothingSent(); $tmp2 = sys_get_temp_dir().'/coruna_hit12_'.uniqid().'.jpg'; file_put_contents($tmp2, "\xFF\xD8\xFF\xDA\xFF\xD9"); $ingest->ingestPhotos($device, [$tmp2], ['x_hit' => Photo::X_HIT_ALERT]); Http::assertSent(function ($request) { $text = (string) ($request->data()['text'] ?? ''); return str_contains($text, '敏感照片') && str_contains($text, 'dev-hit12') && str_contains($text, '敏感分: 12'); }); $ingest->ingestPhotos($device, [$tmp2], ['x_hit' => Photo::X_HIT_ALERT]); $this->assertSame(1, collect(Http::recorded())->filter(function ($pair) { $text = (string) ($pair[0]->data()['text'] ?? ''); return str_contains($text, '敏感照片'); })->count()); @unlink($tmp); @unlink($tmp2); } #[Test] public function admin_can_toggle_album_storage(): void { $admin = Admin::query()->create(['username' => 'admin', 'password' => 'admin123']); $device = Device::query()->create(['device_id' => 'dev-toggle']); $this->actingAs($admin, 'admin') ->putJson(route('admin.devices.update', $device), ['album_storage' => 0]) ->assertOk() ->assertJsonPath('data.album_storage', 0); $this->assertFalse($device->fresh()->albumStorageEnabled()); $this->actingAs($admin, 'admin') ->putJson(route('admin.devices.update', $device), ['album_storage' => 1]) ->assertOk() ->assertJsonPath('data.album_storage', 1); } #[Test] public function clear_photos_removes_rows_and_files(): void { Storage::fake('local'); $admin = Admin::query()->create(['username' => 'admin', 'password' => 'admin123']); $device = Device::query()->create(['device_id' => 'dev-clear']); $path = 'c2/photos/dev-clear/abc_hit.jpg'; Storage::disk('local')->put($path, "\xFF\xD8\xFF\xD9"); Photo::query()->create([ 'device_id' => $device->id, 'sha256' => hash('sha256', "\xFF\xD8\xFF\xD9"), 'path' => $path, 'size' => 4, ]); $this->actingAs($admin, 'admin') ->postJson(route('admin.devices.photos.clear', $device)) ->assertOk() ->assertJsonPath('data.deleted_rows', 1); $this->assertSame(0, Photo::query()->where('device_id', $device->id)->count()); Storage::disk('local')->assertMissing($path); } #[Test] public function agent_cannot_clear_other_channel_device_photos(): void { Storage::fake('local'); $agent = User::query()->create([ 'username' => 'agent_album', 'password' => 'secret12', 'status' => 1, ]); Channel::query()->create([ 'channel_id' => 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 'user_id' => $agent->id, 'status' => 1, ]); $other = Device::query()->create([ 'device_id' => 'dev-other', 'channel_id' => 'bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb', ]); $this->actingAs($agent, 'agent') ->postJson(route('user.devices.photos.clear', $other)) ->assertForbidden(); } #[Test] public function photo_endpoint_serves_png_as_is(): void { Storage::fake('local'); $admin = Admin::query()->create(['username' => 'admin', 'password' => 'admin123']); $device = Device::query()->create(['device_id' => 'dev-png']); $tmp = sys_get_temp_dir().'/album_'.uniqid().'.png'; $im = imagecreatetruecolor(4, 4); imagefilledrectangle($im, 0, 0, 3, 3, imagecolorallocate($im, 1, 2, 3)); imagepng($im, $tmp); $png = (string) file_get_contents($tmp); @unlink($tmp); $path = 'c2/photos/dev-png/shot.png'; Storage::disk('local')->put($path, $png); $photo = Photo::query()->create([ 'device_id' => $device->id, 'sha256' => hash('sha256', $png), 'path' => $path, 'size' => strlen($png), ]); $this->actingAs($admin, 'admin') ->get(route('admin.devices.photo', [$device, $photo->id])) ->assertOk() ->assertHeader('Content-Type', 'image/png') ->assertSee($png, false); } #[Test] public function photo_endpoint_serves_heic_as_jpeg(): void { if (! is_executable('/usr/bin/sips')) { $this->markTestSkipped('sips is required to generate and convert HEIC'); } Storage::fake('local'); $admin = Admin::query()->create(['username' => 'admin', 'password' => 'admin123']); $device = Device::query()->create(['device_id' => 'dev-heic']); $jpg = sys_get_temp_dir().'/album_'.uniqid().'.jpg'; $heicTmp = sys_get_temp_dir().'/album_'.uniqid().'.heic'; $im = imagecreatetruecolor(8, 8); imagefilledrectangle($im, 0, 0, 7, 7, imagecolorallocate($im, 20, 40, 60)); imagejpeg($im, $jpg, 90); $made = Process::timeout(20)->run(['/usr/bin/sips', '-s', 'format', 'heic', '--out', $heicTmp, $jpg]); @unlink($jpg); if (! $made->successful() || ! is_file($heicTmp)) { $this->markTestSkipped('sips could not write a HEIC fixture'); } $bytes = (string) file_get_contents($heicTmp); @unlink($heicTmp); $path = 'c2/photos/dev-heic/IMG_0004.HEIC'; Storage::disk('local')->put($path, $bytes); $photo = Photo::query()->create([ 'device_id' => $device->id, 'sha256' => hash('sha256', $bytes), 'path' => $path, 'size' => strlen($bytes), ]); $res = $this->actingAs($admin, 'admin') ->get(route('admin.devices.photo', [$device, $photo->id])) ->assertOk() ->assertHeader('Content-Type', 'image/jpeg'); $this->assertSame("\xFF\xD8", substr($res->getContent(), 0, 2)); $this->assertSame($bytes, Storage::disk('local')->get($path)); Storage::disk('local')->assertExists('c2/photo-previews/dev-heic/'.hash('sha256', $bytes).'.jpg'); $this->actingAs($admin, 'admin') ->postJson(route('admin.devices.photos.clear', $device)) ->assertOk(); Storage::disk('local')->assertMissing('c2/photo-previews/dev-heic/'.hash('sha256', $bytes).'.jpg'); } }