Saad Ibn-Ezzoubayr
35545c2a8f
Initial commit of the L'Ami Fiduciaire SaaS platform built on Laravel 12, Vue 3, Inertia.js 2, and Tailwind CSS 4. Story 0.1 (rename folders to declarations in database) is implemented and code-reviewed: migration, rollback, and 6 Pest tests all passing. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
95 lines
2.8 KiB
PHP
95 lines
2.8 KiB
PHP
<?php
|
|
|
|
use App\Models\User;
|
|
use Illuminate\Auth\Events\Verified;
|
|
use Illuminate\Support\Facades\Event;
|
|
use Illuminate\Support\Facades\URL;
|
|
|
|
test('email verification screen can be rendered', function () {
|
|
$user = User::factory()->unverified()->create();
|
|
|
|
$response = $this->actingAs($user)->get(route('verification.notice'));
|
|
|
|
$response->assertOk();
|
|
});
|
|
|
|
test('email can be verified', function () {
|
|
$user = User::factory()->unverified()->create();
|
|
|
|
Event::fake();
|
|
|
|
$verificationUrl = URL::temporarySignedRoute(
|
|
'verification.verify',
|
|
now()->addMinutes(60),
|
|
['id' => $user->id, 'hash' => sha1($user->email)],
|
|
);
|
|
|
|
$response = $this->actingAs($user)->get($verificationUrl);
|
|
|
|
Event::assertDispatched(Verified::class);
|
|
expect($user->fresh()->hasVerifiedEmail())->toBeTrue();
|
|
$response->assertRedirect(route('dashboard', absolute: false).'?verified=1');
|
|
});
|
|
|
|
test('email is not verified with invalid hash', function () {
|
|
$user = User::factory()->unverified()->create();
|
|
|
|
Event::fake();
|
|
|
|
$verificationUrl = URL::temporarySignedRoute(
|
|
'verification.verify',
|
|
now()->addMinutes(60),
|
|
['id' => $user->id, 'hash' => sha1('wrong-email')],
|
|
);
|
|
|
|
$this->actingAs($user)->get($verificationUrl);
|
|
|
|
Event::assertNotDispatched(Verified::class);
|
|
expect($user->fresh()->hasVerifiedEmail())->toBeFalse();
|
|
});
|
|
|
|
test('email is not verified with invalid user id', function () {
|
|
$user = User::factory()->unverified()->create();
|
|
|
|
Event::fake();
|
|
|
|
$verificationUrl = URL::temporarySignedRoute(
|
|
'verification.verify',
|
|
now()->addMinutes(60),
|
|
['id' => 123, 'hash' => sha1($user->email)],
|
|
);
|
|
|
|
$this->actingAs($user)->get($verificationUrl);
|
|
|
|
Event::assertNotDispatched(Verified::class);
|
|
expect($user->fresh()->hasVerifiedEmail())->toBeFalse();
|
|
});
|
|
|
|
test('verified user is redirected to dashboard from verification prompt', function () {
|
|
$user = User::factory()->create();
|
|
|
|
Event::fake();
|
|
|
|
$response = $this->actingAs($user)->get(route('verification.notice'));
|
|
|
|
Event::assertNotDispatched(Verified::class);
|
|
$response->assertRedirect(route('dashboard', absolute: false));
|
|
});
|
|
|
|
test('already verified user visiting verification link is redirected without firing event again', function () {
|
|
$user = User::factory()->create();
|
|
|
|
Event::fake();
|
|
|
|
$verificationUrl = URL::temporarySignedRoute(
|
|
'verification.verify',
|
|
now()->addMinutes(60),
|
|
['id' => $user->id, 'hash' => sha1($user->email)],
|
|
);
|
|
|
|
$this->actingAs($user)->get($verificationUrl)
|
|
->assertRedirect(route('dashboard', absolute: false).'?verified=1');
|
|
|
|
Event::assertNotDispatched(Verified::class);
|
|
expect($user->fresh()->hasVerifiedEmail())->toBeTrue();
|
|
}); |