QT/InvoiceShelf
1
0
Fork 0
mirror of https://github.com/InvoiceShelf/InvoiceShelf.git synced 2026-07-18 06:45:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(updater): disable the in-app updater in containerized installs

Browse Source 
The Docker image already injects CONTAINERIZED=true; consume it via config('invoiceshelf.containerized'), expose it on /app/version, block the update endpoints + console command, and show a 'docker compose pull' panel instead of the updater. Adds missing i18n keys.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
Darko Gjorgjijoski
2026-06-14 23:42:11 +02:00
parent c04b84e5b5
commit 9e496102d4
10 changed files with 146 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

46
tests/Feature/Admin/UpdateContainerizedTest.php Normal file
View File

@@ -0,0 +1,46 @@
<?php
use App\Models\User;
use Laravel\Sanctum\Sanctum;
use function Pest\Laravel\getJson;
use function Pest\Laravel\postJson;
beforeEach(function () {
Artisan::call('db:seed', ['--class' => 'DatabaseSeeder', '--force' => true]);
Artisan::call('db:seed', ['--class' => 'DemoSeeder', '--force' => true]);
$user = User::where('role', 'super admin')->first();
$this->withHeaders([
'company' => $user->companies()->first()->id,
]);
Sanctum::actingAs($user, ['*']);
});
it('exposes the containerized flag from the app version endpoint', function () {
config(['invoiceshelf.containerized' => true]);
getJson('/api/v1/app/version')
->assertOk()
->assertJson(['containerized' => true]);
config(['invoiceshelf.containerized' => false]);
getJson('/api/v1/app/version')
->assertOk()
->assertJson(['containerized' => false]);
});
it('blocks the in-app updater endpoints when containerized', function () {
config(['invoiceshelf.containerized' => true]);
getJson('/api/v1/check/update')->assertForbidden();
postJson('/api/v1/update/download', ['version' => '2.4.0'])->assertForbidden();
postJson('/api/v1/update/unzip', ['path' => '/tmp/x.zip'])->assertForbidden();
postJson('/api/v1/update/copy', ['path' => '/tmp/x'])->assertForbidden();
postJson('/api/v1/update/clean')->assertForbidden();
postJson('/api/v1/update/migrate')->assertForbidden();
postJson('/api/v1/update/finish', ['installed' => '2.4.0', 'version' => '2.4.1'])->assertForbidden();
});