From a7b9ce803b50378a02f3ca20b9b957b50bab59b5 Mon Sep 17 00:00:00 2001
From: Dayamond <pyramond69@gmail.com>
Date: Tue, 21 Oct 2025 17:18:00 +0200
Subject: [PATCH] Add routes

---
 tests/Login.bru      | 51 ++++++++++++++++++++++++++++++++++++++++++++
 tests/extractCSRF.js |  4 ++++
 tests/get CSRF.bru   | 20 +++++++++++++++++
 tests/hello.bru      |  2 +-
 tests/me.bru         | 15 +++++++++++++
 5 files changed, 91 insertions(+), 1 deletion(-)
 create mode 100644 tests/Login.bru
 create mode 100644 tests/extractCSRF.js
 create mode 100644 tests/get CSRF.bru
 create mode 100644 tests/me.bru

diff --git a/tests/Login.bru b/tests/Login.bru
new file mode 100644
index 0000000..bc6b32e
--- /dev/null
+++ b/tests/Login.bru
@@ -0,0 +1,51 @@
+meta {
+  name: Login
+  type: http
+  seq: 4
+}
+
+post {
+  url: http://localhost:8000/api/users/login
+  body: json
+  auth: basic
+}
+
+headers {
+  X-XSRF-TOKEN: eyJpdiI6IjZaY0Y4aWtBMkxhWnlWQ2VpNDBhQWc9PSIsInZhbHVlIjoiWkF0N2lWTmlRSzdienZqREp0YUxPOFg0OE10bXZZME1QRitZRjV6bGs3QnZ0WUJVU1RkL0h0eDhPR1huODFuZzFHMDQxNzg4eDN4Ri91eVdFSDNVNUloSGZtRHd1aFd0TEF6MkxzOUhDMjRJeUxEYUcveEZHcVlzMnZha0Q1MkQiLCJtYWMiOiI0MDc2NzRmMjFiNDhjMDBjMWY4Yzc5Y2FjNTZhZWNkN2FkM2RmMzJlZDNmOWYwNDFhZWFlZGFmOGE4ZTA0Yzg0IiwidGFnIjoiIn0=
+  Accept: application/json
+}
+
+auth:basic {
+  username: test@test.com
+  password: test
+}
+
+body:json {
+  {
+    "email": "{{email}}",
+    "password": "{{password}}"
+  }
+}
+
+vars:pre-request {
+  email: test@test.com
+  password: test
+  xsrf: null
+}
+
+settings {
+  encodeUrl: true
+  timeout: 0
+}
+
+docs {
+  Permet de se connecter
+  
+  
+  Le header X-XSRF-TOKEN est obligatoire.
+  Pour le récupérer:
+  - Lancer la requête get CSR
+  - Prendre la valeur XSRF-TOKEN du Set-Cookie des Header
+  - Mettre la valeur dans le script extractCSRF.js
+  - Copier la valeur de retour
+}
diff --git a/tests/extractCSRF.js b/tests/extractCSRF.js
new file mode 100644
index 0000000..745e42f
--- /dev/null
+++ b/tests/extractCSRF.js
@@ -0,0 +1,4 @@
+const c = "eyJpdiI6IjZaY0Y4aWtBMkxhWnlWQ2VpNDBhQWc9PSIsInZhbHVlIjoiWkF0N2lWTmlRSzdienZqREp0YUxPOFg0OE10bXZZME1QRitZRjV6bGs3QnZ0WUJVU1RkL0h0eDhPR1huODFuZzFHMDQxNzg4eDN4Ri91eVdFSDNVNUloSGZtRHd1aFd0TEF6MkxzOUhDMjRJeUxEYUcveEZHcVlzMnZha0Q1MkQiLCJtYWMiOiI0MDc2NzRmMjFiNDhjMDBjMWY4Yzc5Y2FjNTZhZWNkN2FkM2RmMzJlZDNmOWYwNDFhZWFlZGFmOGE4ZTA0Yzg0IiwidGFnIjoiIn0%3D";
+const token = decodeURIComponent(c);
+console.log(token);
+
diff --git a/tests/get CSRF.bru b/tests/get CSRF.bru
new file mode 100644
index 0000000..423fdb4
--- /dev/null
+++ b/tests/get CSRF.bru	
@@ -0,0 +1,20 @@
+meta {
+  name: get CSRF
+  type: http
+  seq: 3
+}
+
+get {
+  url: http://localhost:8000/sanctum/csrf-cookie
+  body: none
+  auth: inherit
+}
+
+assert {
+  res.status: eq 204
+}
+
+settings {
+  encodeUrl: true
+  timeout: 0
+}
diff --git a/tests/hello.bru b/tests/hello.bru
index 470316b..4225161 100644
--- a/tests/hello.bru
+++ b/tests/hello.bru
@@ -1,7 +1,7 @@
 meta {
   name: hello
   type: http
-  seq: 1
+  seq: 2
 }
 
 get {
diff --git a/tests/me.bru b/tests/me.bru
new file mode 100644
index 0000000..78adfc3
--- /dev/null
+++ b/tests/me.bru
@@ -0,0 +1,15 @@
+meta {
+  name: me
+  type: http
+  seq: 5
+}
+
+get {
+  url: http://localhost:8000/api/me
+  body: none
+  auth: inherit
+}
+
+settings {
+  encodeUrl: true
+}