Add onlyAuthenticated, guard options and automated tests

.github/workflows/tests.yml

@@ -0,0 +1,35 @@
+name: Tests
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: true
+      matrix:
+        php: [8.2, 8.3, 8.4]
+
+    name: PHP ${{ matrix.php }}
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup PHP
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: ${{ matrix.php }}
+          extensions: dom, curl, libxml, mbstring, zip, pcntl, pdo, sqlite, pdo_sqlite
+          coverage: none
+
+      - name: Install dependencies
+        run: composer install --prefer-dist --no-interaction --no-progress
+
+      - name: Run tests
+        run: vendor/bin/pest

.gitignore

@@ -1,2 +1,3 @@
 vendor
-.idea
+.idea
+.phpunit.cache

CLAUDE.md

@@ -32,6 +32,15 @@ The `accessToken` can be set:
 1. **Globally** via `config/filament-userback.php` - applies to all panels
 2. **Per-panel** via `->accessToken()` method - overrides global config
 
+The `only_authenticated` setting controls whether the widget is shown only to authenticated users:
+1. **Globally** via `config/filament-userback.php` (default: `true`)
+2. **Per-panel** via `->onlyAuthenticated()` method - overrides global config
+
+The `guard` setting specifies which authentication guard to use:
+1. **Per-panel** via `->guard()` method - highest priority
+2. **Globally** via `config/filament-userback.php`
+3. **Fallback** to the panel's configured auth guard (`$panel->getAuthGuard()`)
+
 ## Common Tasks
 
 ### Testing the plugin locally

composer.json

@@ -15,18 +15,36 @@
         "illuminate/contracts": "^11.0|^12.0",
         "spatie/laravel-package-tools": "^1.16"
     },
+    "require-dev": {
+        "orchestra/testbench": "^9.0|^10.0",
+        "pestphp/pest": "^3.0",
+        "pestphp/pest-plugin-laravel": "^3.0"
+    },
     "autoload": {
         "psr-4": {
             "CoddinWeb\\FilamentUserback\\": "src/"
         }
     },
+    "autoload-dev": {
+        "psr-4": {
+            "CoddinWeb\\FilamentUserback\\Tests\\": "tests/"
+        }
+    },
     "extra": {
         "laravel": {
             "providers": [
                 "CoddinWeb\\FilamentUserback\\FilamentUserbackServiceProvider"
             ]
         }
     },
+    "scripts": {
+        "test": "vendor/bin/pest"
+    },
+    "config": {
+        "allow-plugins": {
+            "pestphp/pest-plugin": true
+        }
+    },
     "minimum-stability": "dev",
     "prefer-stable": true
 }

config/filament-userback.php

@@ -17,4 +17,32 @@
     */
 
     'access_token' => env('USERBACK_ACCESS_TOKEN'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Only Authenticated Users
+    |--------------------------------------------------------------------------
+    |
+    | When set to true, the Userback widget will only be rendered for
+    | authenticated users. Set to false to show the widget to all visitors.
+    |
+    | This can be overridden per-panel using the ->onlyAuthenticated() method.
+    |
+    */
+
+    'only_authenticated' => env('USERBACK_ONLY_AUTHENTICATED', true),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Authentication Guard
+    |--------------------------------------------------------------------------
+    |
+    | The authentication guard to use when checking if a user is authenticated.
+    | If not set, it will fall back to the panel's configured auth guard.
+    |
+    | This can be overridden per-panel using the ->guard() method.
+    |
+    */
+
+    'guard' => env('USERBACK_GUARD'),
 ];

phpunit.xml

@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<phpunit xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:noNamespaceSchemaLocation="vendor/phpunit/phpunit/phpunit.xsd"
+         bootstrap="vendor/autoload.php"
+         colors="true"
+         cacheDirectory=".phpunit.cache"
+>
+    <testsuites>
+        <testsuite name="Tests">
+            <directory>tests</directory>
+        </testsuite>
+    </testsuites>
+    <source>
+        <include>
+            <directory>src</directory>
+        </include>
+    </source>
+</phpunit>

resources/views/userback.blade.php

@@ -1,4 +1,4 @@
-@if(\is_string($accessToken))
+@if(\is_string($accessToken) && (!$onlyAuthenticated || auth($guard)->check()))
 <script>
     window.Userback = window.Userback || {};
     Userback.access_token = @js($accessToken);

src/UserbackPlugin.php

@@ -16,6 +16,10 @@ class UserbackPlugin implements Plugin
 {
     protected ?string $accessToken = null;
 
+    protected ?bool $onlyAuthenticated = null;
+
+    protected ?string $guard = null;
+
     protected ?Closure $userDataUsing = null;
 
     public static function make(): static
@@ -42,6 +46,20 @@ public function userDataUsing(?Closure $callback): static
         return $this;
     }
 
+    public function onlyAuthenticated(bool $onlyAuthenticated = true): static
+    {
+        $this->onlyAuthenticated = $onlyAuthenticated;
+
+        return $this;
+    }
+
+    public function guard(?string $guard): static
+    {
+        $this->guard = $guard;
+
+        return $this;
+    }
+
     public function register(Panel $panel): void
     {
     }
@@ -63,6 +81,8 @@ public function boot(Panel $panel): void
                 [
                     'accessToken' => $this->getAccessToken(),
                     'userData' => $this->getUserData(),
+                    'onlyAuthenticated' => $this->getOnlyAuthenticated(),
+                    'guard' => $this->getGuard($panel),
                 ],
             ),
         );
@@ -89,6 +109,43 @@ protected function getAccessToken(): ?string
         return null;
     }
 
+    protected function getOnlyAuthenticated(): bool
+    {
+        if (\is_bool($this->onlyAuthenticated)) {
+            return $this->onlyAuthenticated;
+        }
+
+        $configValue = Config::get('filament-userback.only_authenticated');
+
+        return \is_bool($configValue) ? $configValue : true;
+    }
+
+    protected function getGuard(Panel $panel): ?string
+    {
+        $guard = null;
+
+        if (\is_string($this->guard)) {
+            $guard = $this->guard;
+        } elseif (\is_string($configGuard = Config::get('filament-userback.guard'))) {
+            $guard = $configGuard;
+        } else {
+            $guard = $panel->getAuthGuard();
+        }
+
+        return $this->isValidGuard($guard) ? $guard : null;
+    }
+
+    protected function isValidGuard(?string $guard): bool
+    {
+        if ($guard === null) {
+            return true;
+        }
+
+        $guards = Config::get('auth.guards', []);
+
+        return \is_array($guards) && \array_key_exists($guard, $guards);
+    }
+
     /**
      * @return array<string, mixed>|null
      */