test: fiabilisation de la suite de tests

- BusinessLogicTest: utilise le vrai modele StressEvent + auth Sanctum
- AdminAccessTest: compte actif requis pour l'acces au panel
- SecurityHeadersTest: verifie les en-tetes de securite
- suppression du modele orphelin EvenementStress

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

WEB/app/Models/EvenementStress.php

@@ -1,10 +0,0 @@
-<?php
-
-namespace App\Models;
-
-use Illuminate\Database\Eloquent\Model;
-
-class EvenementStress extends Model
-{
-    //
-}

WEB/tests/Feature/AdminAccessTest.php

@@ -2,8 +2,8 @@
 
 namespace Tests\Feature;
 
-use App\Models\User;
 use App\Models\Role;
+use App\Models\User;
 use Illuminate\Foundation\Testing\RefreshDatabase;
 use Tests\TestCase;
 
@@ -31,7 +31,12 @@ class AdminAccessTest extends TestCase
     public function test_admin_user_can_access_admin_panel(): void
     {
         $role = Role::create(['libelle' => 'Admin']);
-        $user = User::factory()->create(['id_role' => $role->id]);
+        // L'accès au panel Filament exige un compte actif ET le rôle Admin
+        // (cf. User::canAccessPanel()).
+        $user = User::factory()->create([
+            'id_role' => $role->id,
+            'is_active' => true,
+        ]);
 
         $response = $this->actingAs($user)->get('/admin');
 

WEB/tests/Feature/AuthSecurityTest.php

@@ -2,11 +2,11 @@
 
 namespace Tests\Feature;
 
-use App\Models\User;
 use App\Models\Role;
+use App\Models\User;
 use Illuminate\Foundation\Testing\RefreshDatabase;
-use Tests\TestCase;
 use PHPUnit\Framework\Attributes\Test;
+use Tests\TestCase;
 
 class AuthSecurityTest extends TestCase
 {

WEB/tests/Feature/BusinessLogicTest.php

@@ -2,23 +2,30 @@
 
 namespace Tests\Feature;
 
-use App\Models\EvenementStress;
+use App\Models\StressEvent;
+use App\Models\User;
 use Illuminate\Foundation\Testing\RefreshDatabase;
-use Illuminate\Foundation\Testing\WithFaker;
-use Tests\TestCase;
+use Laravel\Sanctum\Sanctum;
 use PHPUnit\Framework\Attributes\Test;
+use Tests\TestCase;
 
 class BusinessLogicTest extends TestCase
 {
+    use RefreshDatabase;
+
     #[Test]
     public function la_liste_des_evenements_de_stress_est_accessible()
     {
-        // On crée un événement simulé
-        EvenementStress::create(['libelle' => 'Mariage', 'points' => 50]);
+        // La route /api/stress-events est protégée par Sanctum :
+        // on simule un utilisateur authentifié via un jeton.
+        Sanctum::actingAs(User::factory()->create());
+
+        // On crée un événement de stress (échelle Holmes & Rahe)
+        StressEvent::create(['event_name' => 'Mariage', 'points' => 50]);
 
         $response = $this->getJson('/api/stress-events');
 
         $response->assertStatus(200)
-                ->assertJsonFragment(['libelle' => 'Mariage']);
+            ->assertJsonFragment(['event_name' => 'Mariage']);
     }
 }

WEB/tests/Feature/DiagnosticTest.php

@@ -2,11 +2,10 @@
 
 namespace Tests\Feature;
 
-use Tests\TestCase;
-use App\Models\User;
 use App\Models\StressEvent;
-use App\Models\ResultatDiag;
+use App\Models\User;
 use Illuminate\Foundation\Testing\RefreshDatabase;
+use Tests\TestCase;
 
 class DiagnosticTest extends TestCase
 {
@@ -26,7 +25,7 @@ class DiagnosticTest extends TestCase
         // Simuler une requête de diagnostic
         $response = $this->actingAs($user)
             ->post(route('diagnostics.store'), [
-                'events' => [$event1->id, $event2->id]
+                'events' => [$event1->id, $event2->id],
             ]);
 
         // Vérifier la redirection et le score en session
@@ -37,7 +36,7 @@ class DiagnosticTest extends TestCase
         $this->assertDatabaseHas('resultat_diags', [
             'id_user' => $user->id,
             'score_total' => 160,
-            'niveau_stress' => 'Modéré'
+            'niveau_stress' => 'Modéré',
         ]);
     }
 }

WEB/tests/Feature/SecurityHeadersTest.php

@@ -0,0 +1,25 @@
+<?php
+
+namespace Tests\Feature;
+
+use PHPUnit\Framework\Attributes\Test;
+use Tests\TestCase;
+
+/**
+ * Vérifie que les en-têtes HTTP de sécurité (middleware SecurityHeaders)
+ * sont bien présents sur les réponses de l'application.
+ */
+class SecurityHeadersTest extends TestCase
+{
+    #[Test]
+    public function les_entetes_de_securite_sont_presents()
+    {
+        $response = $this->get('/');
+
+        $response->assertHeader('X-Frame-Options', 'SAMEORIGIN');
+        $response->assertHeader('X-Content-Type-Options', 'nosniff');
+        $response->assertHeader('Referrer-Policy', 'strict-origin-when-cross-origin');
+        $response->assertHeader('Content-Security-Policy');
+        $response->assertHeader('Permissions-Policy');
+    }
+}

WEB/tests/Unit/StressCalculationTest.php

@@ -18,7 +18,7 @@ class StressCalculationTest extends TestCase
         $totalScore = array_sum($eventPoints);
 
         // 3. Assertion (La vérification)
-        $this->assertEquals(223, $totalScore, "Le calcul du score total a échoué.");
+        $this->assertEquals(223, $totalScore, 'Le calcul du score total a échoué.');
     }
 
     /**
@@ -27,16 +27,16 @@ class StressCalculationTest extends TestCase
     public function test_stress_level_label(): void
     {
         $score = 250;
-        $level = "";
+        $level = '';
 
         if ($score >= 300) {
-            $level = "Risque élevé";
+            $level = 'Risque élevé';
         } elseif ($score >= 150) {
-            $level = "Risque modéré";
+            $level = 'Risque modéré';
         } else {
-            $level = "Risque léger";
+            $level = 'Risque léger';
         }
 
-        $this->assertEquals("Risque modéré", $level);
+        $this->assertEquals('Risque modéré', $level);
     }
 }

WEB/tests/Unit/StressCalculatorTest.php

@@ -12,7 +12,7 @@ class StressCalculatorTest extends TestCase
     protected function setUp(): void
     {
         parent::setUp();
-        $this->calculator = new StressCalculator();
+        $this->calculator = new StressCalculator;
     }
 
     public function test_calculate_score_sums_points_correctly(): void