137 lines
4.0 KiB
PHP
137 lines
4.0 KiB
PHP
<?php
|
|
|
|
use App\Models\User;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
use Illuminate\Support\Facades\Queue;
|
|
use Illuminate\Support\Facades\DB;
|
|
use App\Jobs\SendVerificationEmailJob;
|
|
|
|
uses(RefreshDatabase::class);
|
|
|
|
it('completes happy path registration onboarding flow', function () {
|
|
Queue::fake();
|
|
|
|
$register = $this->post('/register', [
|
|
'email' => 'flow-user@example.com',
|
|
]);
|
|
|
|
$register->assertRedirect('/register/notice');
|
|
|
|
$user = User::query()->where('email', 'flow-user@example.com')->firstOrFail();
|
|
expect($user->onboarding_step)->toBe('email');
|
|
|
|
$token = null;
|
|
Queue::assertPushed(SendVerificationEmailJob::class, function (SendVerificationEmailJob $job) use (&$token) {
|
|
$token = $job->token;
|
|
|
|
return true;
|
|
});
|
|
|
|
$this->get('/verify/' . $token)->assertRedirect('/setup/password');
|
|
|
|
$user->refresh();
|
|
expect($user->onboarding_step)->toBe('verified');
|
|
|
|
$this->actingAs($user)
|
|
->post('/setup/password', [
|
|
'password' => 'StrongPass1!',
|
|
'password_confirmation' => 'StrongPass1!',
|
|
])->assertRedirect('/setup/username');
|
|
|
|
$this->actingAs($user)
|
|
->post('/setup/username', [
|
|
'username' => 'flow_user_final',
|
|
])->assertRedirect('/@flow_user_final');
|
|
|
|
$user->refresh();
|
|
expect($user->onboarding_step)->toBe('complete');
|
|
expect($user->username)->toBe('flow_user_final');
|
|
});
|
|
|
|
it('rejects invalid verification token', function () {
|
|
$response = $this->from('/login')->get('/verify/not-a-real-token');
|
|
|
|
$response->assertRedirect('/login');
|
|
$response->assertSessionHasErrors('email');
|
|
});
|
|
|
|
it('rejects expired verification token', function () {
|
|
$user = User::factory()->create([
|
|
'email_verified_at' => null,
|
|
'onboarding_step' => 'email',
|
|
'is_active' => false,
|
|
]);
|
|
|
|
$column = \Illuminate\Support\Facades\Schema::hasColumn('user_verification_tokens', 'token_hash') ? 'token_hash' : 'token';
|
|
DB::table('user_verification_tokens')->insert([
|
|
'user_id' => $user->id,
|
|
$column => hash('sha256', 'expired-checklist-token'),
|
|
'expires_at' => now()->subHour(),
|
|
'created_at' => now(),
|
|
'updated_at' => now(),
|
|
]);
|
|
|
|
$response = $this->from('/login')->get('/verify/expired-checklist-token');
|
|
|
|
$response->assertRedirect('/login');
|
|
$response->assertSessionHasErrors('email');
|
|
expect($user->fresh()->email_verified_at)->toBeNull();
|
|
});
|
|
|
|
it('rejects duplicate email at registration', function () {
|
|
Queue::fake();
|
|
|
|
User::factory()->create([
|
|
'email' => 'duplicate-check@example.com',
|
|
'email_verified_at' => now(),
|
|
'onboarding_step' => 'complete',
|
|
'is_active' => true,
|
|
]);
|
|
|
|
$response = $this->post('/register', [
|
|
'email' => 'duplicate-check@example.com',
|
|
]);
|
|
|
|
$response->assertRedirect('/register/notice');
|
|
$response->assertSessionHas('status', 'If that email is valid, we sent a verification link.');
|
|
Queue::assertNothingPushed();
|
|
});
|
|
|
|
it('rejects username conflict during username setup', function () {
|
|
User::factory()->create([
|
|
'username' => 'taken_username',
|
|
'onboarding_step' => 'complete',
|
|
]);
|
|
|
|
$user = User::factory()->create([
|
|
'username' => 'candidate_username',
|
|
'onboarding_step' => 'password',
|
|
]);
|
|
|
|
$this->actingAs($user)
|
|
->from('/setup/username')
|
|
->post('/setup/username', [
|
|
'username' => 'taken_username',
|
|
])
|
|
->assertRedirect('/setup/username')
|
|
->assertSessionHasErrors('username');
|
|
|
|
expect($user->fresh()->onboarding_step)->toBe('password');
|
|
});
|
|
|
|
it('resumes onboarding by redirecting user to current required step', function () {
|
|
$user = User::factory()->create([
|
|
'onboarding_step' => 'verified',
|
|
]);
|
|
|
|
$this->actingAs($user)
|
|
->get('/profile')
|
|
->assertRedirect('/setup/password');
|
|
|
|
$user->forceFill(['onboarding_step' => 'password'])->save();
|
|
|
|
$this->actingAs($user)
|
|
->get('/upload')
|
|
->assertRedirect('/setup/username');
|
|
});
|