Framework: BUG: actingAs() not working for POST requests

[Jamesking56]

• Laravel Version: 5.5.14
• PHP Version: 7.1
• Database Driver & Version: MySQL Homestead Latest

Description:

When using phpunit testing, actingAs() is not authenticating POST requests. I am using Laravel Passport so it could be a factor.

Steps To Reproduce:

1. Create a POST route that requires authentication (auth:api middleware).
2. Create a new Test to create a user, authenticate as them and submit a POST request to route.

Expected Output

Authenticated request and action taken (my example was a create)

Actual Output

Unauthenticated JSON response from the endpoint. (used dump() to find out).

Test Code

````php
public function testSuperAdminsCanCreateATeam()
{
$faker = app(Generator::class);
$data = [
'name' => $faker->word,
'company' => $faker->company,
'address' => $faker->address,
'telephone' => $faker->phoneNumber,
'email' => $faker->unique()->safeEmail,
'vat_number' => 0
];
$user = factory(User::class)->create(['super_admin' => true]);

    $response = $this
        ->actingAs($user)
        ->json('POST', route('api.teams.store'), $data);

    $response
        ->dump()     // Dump here shows Unauthenticated response.
        ->assertStatus(Response::HTTP_CREATED)
        ->assertJson([
            'status' => 'success',
            'data' => array_merge(
                ['owner_id' => $user->id],
                $data
            )
        ]);
}

````

[Dylan-DPC]

Can you try it out with simpler example? I have tried actingAs (not this example that you have provided) and it works fine. I think the bug could be with how you are assigning roles or doing some authorisation check we don't know about

[Jamesking56]

I'm using the default Passport guard, I don't have any custom authentication.

I'm also using the default auth:api middleware.

It could be a bug in Passport rather than Laravel itself, I'm not sure

On Sat, Oct 7, 2017 at 7:13 PM +0100, "Dylan DPC" [e-mail] wrote:

Can you try it out with simpler example? I have tried actingAs (not this example that you have provided) and it works fine. I think the bug could be with how you are assigning roles or doing some authorisation check we don't know about

—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub, or mute the thread.

[Dylan-DPC]

Do check this out: https://laravel.com/docs/5.5/passport#testing

[antonkomarev]

@Jamesking56 try actingAs($user, 'api')

[Jamesking56]

Can confirm that using Passport::actingAs($user) works.

[rizkiyoist]

@Jamesking56 try actingAs($user, 'api')

this works for me