feat: can specify several users to configure

Signed-off-by: d9pouces <github@19pouces.net>

tests/test_php.py

@@ -80,7 +80,8 @@ def test_apply_writes_global_composer_config(tmp_path) -> None:
                 "name": "demo",
                 "type": "composer",
                 "url": "https://example.invalid/composer",
-            }
+            },
+            {"packagist.org": False},
         ]
     }
 
@@ -93,7 +94,70 @@ def test_apply_writes_multiple_repositories_in_order(tmp_path) -> None:
 
     config_path = dst / "root/.composer/config.json"
     content = json.loads(config_path.read_text(encoding="utf-8"))
-    assert [repo["name"] for repo in content["repositories"]] == ["demo", "other"]
+    names = [repo["name"] for repo in content["repositories"] if "name" in repo]
+    assert names == ["demo", "other"]
+    assert {"packagist.org": False} in content["repositories"]
+
+
+def test_apply_disables_secure_http_and_packagist_when_repo_not_https(
+    tmp_path,
+) -> None:
+    data = {
+        "uuid": "12345678-1234-5678-1234-567812345678",
+        "organisation": "InterDiode",
+        "configurations": {
+            "php": {
+                "repositories": [
+                    {"name": "demo", "url": "https://example.invalid/composer"},
+                    {"name": "insecure", "url": "http://other.invalid/composer"},
+                ]
+            }
+        },
+    }
+    dst = tmp_path / "dst"
+    context = Context(config=make_config(data), dst=dst, src=None)
+
+    PhpModule().apply(context)
+
+    config_path = dst / "root/.composer/config.json"
+    content = json.loads(config_path.read_text(encoding="utf-8"))
+    assert content["config"] == {"secure-http": False}
+    assert {"packagist.org": False} in content["repositories"]
+
+
+def test_apply_does_not_disable_secure_http_when_all_repos_https(tmp_path) -> None:
+    dst = tmp_path / "dst"
+    context = Context(config=make_config(CONFIG_WITH_REPO), dst=dst, src=None)
+
+    PhpModule().apply(context)
+
+    config_path = dst / "root/.composer/config.json"
+    content = json.loads(config_path.read_text(encoding="utf-8"))
+    assert "config" not in content
+
+
+def test_apply_always_disables_packagist(tmp_path) -> None:
+    dst = tmp_path / "dst"
+    context = Context(config=make_config(CONFIG_WITH_REPO), dst=dst, src=None)
+
+    PhpModule().apply(context)
+
+    config_path = dst / "root/.composer/config.json"
+    content = json.loads(config_path.read_text(encoding="utf-8"))
+    assert {"packagist.org": False} in content["repositories"]
+
+
+def test_apply_writes_composer_config_for_each_configured_user(tmp_path) -> None:
+    dst = tmp_path / "dst"
+    context = Context(
+        config=make_config(CONFIG_WITH_REPO), dst=dst, src=None, users=["alice"]
+    )
+
+    PhpModule().apply(context)
+
+    root_content = (dst / "root/.composer/config.json").read_bytes()
+    alice_content = (dst / "home/alice/.composer/config.json").read_bytes()
+    assert alice_content == root_content
 
 
 def test_apply_without_certificates_does_not_write_openssl_ini(tmp_path) -> None: