AcadeNice/corentin_wakdo
7
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(admin): lien decouvrable vers la page de definition du PIN (#28)
Some checks failed
CI / secret-scan (push) Has been cancelled
Details
CI / php-lint (push) Has been cancelled
Details
CI / static-tests (push) Has been cancelled
Details
CI / auto-merge (push) Has been cancelled
Details

Browse source
This commit is contained in:
Corentin JOGUET 2026-06-16 14:21:42 +02:00
parent c284c840d0
commit 2cc499dc71
2 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/app/Views/admin/layout.php
View file

@ -79,6 +79,8 @@ $navClass = static function (string $code, string $current): string {
</div> </div>
</button> </button>
<div class="dropdown-menu" id="userMenu"> <div class="dropdown-menu" id="userMenu">
<a href="/admin/profile/pin">Mon PIN d'action sensible</a>
<div class="divider"></div>
<form method="post" action="/logout"> <form method="post" action="/logout">
<input type="hidden" name="_csrf" value="<?= $csrf ?>"> <input type="hidden" name="_csrf" value="<?= $csrf ?>">
<button class="danger" type="submit">Se deconnecter</button> <button class="danger" type="submit">Se deconnecter</button>

3
tests/Unit/Admin/DashboardControllerTest.php
View file

@ -160,6 +160,9 @@ final class DashboardControllerTest extends TestCase
// Deconnexion = formulaire POST avec CSRF. // Deconnexion = formulaire POST avec CSRF.
self::assertStringContainsString('action="/logout"', $body); self::assertStringContainsString('action="/logout"', $body);
self::assertStringContainsString('name="_csrf"', $body); self::assertStringContainsString('name="_csrf"', $body);
// Le menu utilisateur rend la page self-service du PIN (decouvrable, pas
// seulement par URL directe).
self::assertStringContainsString('/admin/profile/pin', $body);
} }
public function testForbiddenWhenPermissionDenied(): void public function testForbiddenWhenPermissionDenied(): void