Saad Ibn-Ezzoubayr
fd43a6f429
Stories 0.2-0.5: rename folders→declarations (backend+frontend), configure Redis for cache/queue/sessions, add foundation database migrations (permissions, archived_at), replace DeclarationStatus enum with architecture lifecycle values, create DeclarationObserver for status transition validation and auto-archive, fix controller status transitions to respect observer rules. 93 tests pass (240 assertions). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
96 lines
2.8 KiB
PHP
96 lines
2.8 KiB
PHP
<?php
|
|
|
|
use App\Models\User;
|
|
use Illuminate\Auth\Events\Verified;
|
|
use Illuminate\Support\Facades\Event;
|
|
use Illuminate\Support\Facades\URL;
|
|
|
|
test('email verification screen can be rendered', function () {
|
|
$user = User::factory()->unverified()->create();
|
|
|
|
$response = $this->actingAs($user)->get(route('verification.notice'));
|
|
|
|
$response->assertOk();
|
|
});
|
|
|
|
test('email can be verified', function () {
|
|
$user = User::factory()->unverified()->create();
|
|
|
|
Event::fake();
|
|
|
|
$verificationUrl = URL::temporarySignedRoute(
|
|
'verification.verify',
|
|
now()->addMinutes(60),
|
|
['id' => $user->id, 'hash' => sha1($user->email)],
|
|
);
|
|
|
|
$response = $this->actingAs($user)->get($verificationUrl);
|
|
|
|
Event::assertDispatched(Verified::class);
|
|
expect($user->fresh()->hasVerifiedEmail())->toBeTrue();
|
|
$response->assertRedirect(route('dashboard', absolute: false).'?verified=1');
|
|
});
|
|
|
|
test('email is not verified with invalid hash', function () {
|
|
$user = User::factory()->unverified()->create();
|
|
|
|
Event::fake();
|
|
|
|
$verificationUrl = URL::temporarySignedRoute(
|
|
'verification.verify',
|
|
now()->addMinutes(60),
|
|
['id' => $user->id, 'hash' => sha1('wrong-email')],
|
|
);
|
|
|
|
$this->actingAs($user)->get($verificationUrl);
|
|
|
|
Event::assertNotDispatched(Verified::class);
|
|
expect($user->fresh()->hasVerifiedEmail())->toBeFalse();
|
|
});
|
|
|
|
test('email is not verified with invalid user id', function () {
|
|
$user = User::factory()->unverified()->create();
|
|
|
|
Event::fake();
|
|
|
|
$verificationUrl = URL::temporarySignedRoute(
|
|
'verification.verify',
|
|
now()->addMinutes(60),
|
|
['id' => 123, 'hash' => sha1($user->email)],
|
|
);
|
|
|
|
$this->actingAs($user)->get($verificationUrl);
|
|
|
|
Event::assertNotDispatched(Verified::class);
|
|
expect($user->fresh()->hasVerifiedEmail())->toBeFalse();
|
|
});
|
|
|
|
test('verified user is redirected to dashboard from verification prompt', function () {
|
|
$user = User::factory()->create();
|
|
|
|
Event::fake();
|
|
|
|
$response = $this->actingAs($user)->get(route('verification.notice'));
|
|
|
|
Event::assertNotDispatched(Verified::class);
|
|
$response->assertRedirect(route('dashboard', absolute: false));
|
|
});
|
|
|
|
test('already verified user visiting verification link is redirected without firing event again', function () {
|
|
$user = User::factory()->create();
|
|
|
|
Event::fake();
|
|
|
|
$verificationUrl = URL::temporarySignedRoute(
|
|
'verification.verify',
|
|
now()->addMinutes(60),
|
|
['id' => $user->id, 'hash' => sha1($user->email)],
|
|
);
|
|
|
|
$this->actingAs($user)->get($verificationUrl)
|
|
->assertRedirect(route('dashboard', absolute: false).'?verified=1');
|
|
|
|
Event::assertNotDispatched(Verified::class);
|
|
expect($user->fresh()->hasVerifiedEmail())->toBeTrue();
|
|
});
|