mirror of
https://github.com/opensourcepos/opensourcepos.git
synced 2026-09-12 21:37:23 -04:00
jekkos
28755dfd50
* fix(tests): resolve all phpunit failures (#4626) Bring the phpunit suite from 153 failures to 0 (281 tests passing): - Employee: decouple grants block from save_value success; restructure save_employee new-employee + disallowed-grants early return - Sale: unify sales_payments_temp schema (add sale_cash_refund, reference_code) so both creators produce an identical superset table - Employees controller: provide placeholder password/hash in testing env so new-employee insert succeeds and grant logic is testable - TestDatabaseBootstrapSeeder: reset shared connection table-name cache after bootstrap reset to avoid stale listTables()/tableExists() results - Config: fix postSaveLocale validation rule syntax - Test data: use unique employee usernames to avoid UNIQUE constraint collisions latching strict-mode transStatus=false on the shared conn - Various test-file and language-string corrections * test: consolidate employee fixtures in shared trait Route test employee creation through a single EmployeeFixtureTrait that delegates to Employee::save_employee(), so fixtures exercise the same production code path instead of raw DB inserts. Removes six near-duplicate helpers across EmployeeTest, SalesControllerTest, and EmployeesControllerTest while preserving each test's specific grant set. Closes a piece of the fixture-scattering flagged in #4626. Closes #4626 * test: add global DROP/CREATE grant and commit theme fixtures * fix(ci): remove redundant symlink step, set working encryption key * fix(ci): run phpunit with --no-coverage to avoid no-driver warning * fix: address code review findings - Config: restore strict locale validation (min required|integer|>0) and fix max cross-field check with a new gte_field rule (CI4's greater_than_equal_to[field] does not resolve the field value) - Tests: assert rejection for non-numeric/zero/negative/min>max limits - .env.example: remove shared hard-coded encryption.key (auto-generates); document Docker env-var usage - phpunit.yml: scope CREATE/DROP grant to ospos_test.* and provision a per-run encryption key as an env var * feat: support ENCRYPTION_KEY env var for encryption key Read ENCRYPTION_KEY as a fallback for the encryption key when the config value is empty. This is a supported, reliable path for Docker / container deploys and CI, avoiding reliance on the raw dotted encryption.key env var. * fix: align Summary_report temp tables with Sale temp table schema Summary_report created sales_items_taxes_temp and sales_payments_temp with fewer columns than the canonical create_temp_table() in Sale.php. A later reader expecting those columns hit a schema-mismatch SQL error on the shared temp tables. Add internal_tax/sales_tax (sales_items_taxes_temp) and reference_code (sales_payments_temp) so all creators emit the identical column set.
111 lines
4.2 KiB
Bash
111 lines
4.2 KiB
Bash
#--------------------------------------------------------------------
|
|
# ENVIRONMENT
|
|
#--------------------------------------------------------------------
|
|
|
|
CI_ENVIRONMENT=production
|
|
|
|
#--------------------------------------------------------------------
|
|
# SECURITY: ALLOWED HOSTNAMES
|
|
#--------------------------------------------------------------------
|
|
# CRITICAL: Whitelist of allowed hostnames to prevent Host Header
|
|
# Injection attacks (GHSA-jchf-7hr6-h4f3).
|
|
#
|
|
# REQUIRED IN PRODUCTION: Application will fail to start if not configured.
|
|
# In development, falls back to 'localhost' with an error log.
|
|
#
|
|
# Configure with comma-separated list of domains/subdomains:
|
|
# app.allowedHostnames='yourdomain.com,www.yourdomain.com'
|
|
#
|
|
# Or via environment variable (useful for Docker/Compose):
|
|
# ALLOWED_HOSTNAMES=yourdomain.com,www.yourdomain.com
|
|
#
|
|
# For local development:
|
|
# app.allowedHostnames='localhost'
|
|
#
|
|
# Note: Do not include protocol (http/https) or port numbers.
|
|
app.allowedHostnames=''
|
|
|
|
#--------------------------------------------------------------------
|
|
# DATABASE
|
|
#--------------------------------------------------------------------
|
|
|
|
database.default.hostname='localhost'
|
|
database.default.database='ospos'
|
|
database.default.username='admin'
|
|
database.default.password='pointofsale'
|
|
database.default.DBDriver='MySQLi'
|
|
database.default.DBPrefix='ospos_'
|
|
|
|
database.development.hostname='localhost'
|
|
database.development.database='ospos'
|
|
database.development.username='admin'
|
|
database.development.password='pointofsale'
|
|
database.development.DBDriver='MySQLi'
|
|
database.development.DBPrefix='ospos_'
|
|
|
|
database.tests.hostname='localhost'
|
|
database.tests.database='ospos_test'
|
|
database.tests.username='admin'
|
|
database.tests.password='pointofsale'
|
|
database.tests.DBDriver='MySQLi'
|
|
database.tests.DBPrefix='ospos_'
|
|
|
|
#--------------------------------------------------------------------
|
|
# ENCRYPTION
|
|
#--------------------------------------------------------------------
|
|
|
|
# Leave blank and the application auto-generates a unique key on first use.
|
|
# For Docker/Compose, pass it via the ENCRYPTION_KEY env var instead:
|
|
# docker run -e ENCRYPTION_KEY="$(openssl rand -hex 32)" opensourcepos
|
|
# ENCRYPTION_KEY is read as a fallback when encryption.key is empty, so no
|
|
# shared key needs to be committed or baked into the shipped image.
|
|
encryption.key=''
|
|
|
|
#--------------------------------------------------------------------
|
|
# LOGGER
|
|
# - 0=Disables logging, Error logging TURNED OFF
|
|
# - 1=Emergency Messages - System is unusable
|
|
# - 2=Alert Messages - Action Must Be Taken Immediately
|
|
# - 3=Critical Messages - Application component unavailable, unexpected exception.
|
|
# - 4=Runtime Errors - Don't need immediate action, but should be monitored.
|
|
# - 5=Warnings - Exceptional occurrences that are not errors.
|
|
# - 6=Notices - Normal but significant events.
|
|
# - 7=Info - Interesting events, like user logging in, etc.
|
|
# - 8=Debug - Detailed debug information.
|
|
# - 9=All Messages
|
|
#--------------------------------------------------------------------
|
|
|
|
logger.threshold=0
|
|
app.db_log_enabled=false
|
|
|
|
#--------------------------------------------------------------------
|
|
# HONEYPOT
|
|
#--------------------------------------------------------------------
|
|
|
|
honeypot.hidden=true
|
|
honeypot.label='Fill This Field'
|
|
honeypot.name='honeypot'
|
|
honeypot.template='<label>{label}</label><input type="text" name="{name}" value="">'
|
|
honeypot.container='<div style="display:none">{template}</div>'
|
|
|
|
#--------------------------------------------------------------------
|
|
# SECURITY: DISALLOW PASSWORD CHANGE
|
|
#--------------------------------------------------------------------
|
|
# When true, disables the "change password" feature for all employees.
|
|
# Useful when passwords are managed by an external system (e.g. SSO/LDAP).
|
|
#
|
|
# DISALLOW_PASSWORD_CHANGE=false
|
|
|
|
DISALLOW_PASSWORD_CHANGE=false
|
|
|
|
#--------------------------------------------------------------------
|
|
# SECURITY: DISALLOW GRANT CHANGE
|
|
#--------------------------------------------------------------------
|
|
# When true, disables changing an employee's grants for all employees.
|
|
# New employees cannot be created with grants while this is enabled.
|
|
# Useful for demo deployments.
|
|
#
|
|
# DISALLOW_GRANT_CHANGE=false
|
|
|
|
DISALLOW_GRANT_CHANGE=false
|