ppeasy_vg12/tests/Feature/Web/UpdateProfileTest.php

<?php

use App\Events\User\ChangedAvatar;
use App\Events\User\UpdatedProfileDetails;
use App\Models\Role;
use App\Support\Enum\UserStatus;
use Carbon\Carbon;
use Facades\Tests\Setup\UserFactory;
use Illuminate\Foundation\Testing\RefreshDatabase;
use Illuminate\Http\UploadedFile;

uses(RefreshDatabase::class);

beforeEach(function () {
    $this->be(UserFactory::create());
});

test('test user can access his profile page', function () {
    $this->get('/profile')->assertOk();
});

test('test user can update his profile details', function () {
    Event::fake([
        UpdatedProfileDetails::class,
    ]);

    $data = getStubDetailsData();

    $this->from('/profile')
        ->put('profile/details', $data)
        ->assertRedirect('/profile');

    $this->assertSessionHasSuccess('Profile updated successfully.');
    $this->assertDatabaseHas('users', $data + ['id' => auth()->id()]);

    Event::assertDispatched(UpdatedProfileDetails::class);
});

test('test user cannot change his status while updating the profile', function () {
    $data = getStubDetailsData();

    $this->from('/profile')
        ->put('profile/details', $data + ['status' => UserStatus::BANNED->value])
        ->assertRedirect('/profile');

    $this->assertSessionHasSuccess('Profile updated successfully.');
    $this->assertDatabaseHas('users', $data + [
        'id' => auth()->id(),
        'status' => UserStatus::ACTIVE,
    ]);
});

test('test user cannot change his role while updating the profile', function () {
    $data = getStubDetailsData();

    $role = Role::factory()->create();

    $this->from('/profile')
        ->put('profile/details', $data + ['role_id' => $role])
        ->assertRedirect('/profile');

    $this->assertSessionHasSuccess('Profile updated successfully.');

    $this->assertNotEquals($role->id, auth()->user()->role_id);
});

test('test update avatar', function () {
    Event::fake([
        ChangedAvatar::class,
    ]);

    Storage::fake('public');

    $data = [
        'avatar' => UploadedFile::fake()->image('photo1.jpg', 300, 300),
        'points' => [
            'x1' => 0,
            'y1' => 0,
            'x2' => 200,
            'y2' => 200,
        ],
    ];

    $this->from('profile')
        ->post('/profile/avatar', $data)
        ->assertRedirect('profile');

    $this->assertSessionHasSuccess('Avatar changed successfully.');

    $user = auth()->user()->fresh();

    $this->assertNotNull($user->avatar);
    Storage::disk('public')->assertExists("upload/users/{$user->avatar}");

    [$width, $height] = getimagesizefromstring(
        Storage::disk('public')->get("upload/users/{$user->avatar}")
    );

    $this->assertEquals(160, $width);
    $this->assertEquals(160, $height);

    Event::assertDispatched(ChangedAvatar::class);
});

test('test update avatar with invalid image file', function () {
    Storage::fake('public');

    $data = [
        'avatar' => UploadedFile::fake()->create('foo.txt', 123),
        'points' => [
            'x1' => 0,
            'y1' => 0,
            'x2' => 200,
            'y2' => 200,
        ],
    ];

    $this->from('profile')
        ->post('/profile/avatar', $data)
        ->assertRedirect('profile')
        ->assertSessionHasErrors('avatar');

    $user = auth()->user()->fresh();

    Storage::disk('public')->assertMissing("upload/users/{$user->avatar}");
    $this->assertNull($user->avatar);
});

test('test update avatar external', function () {
    Event::fake([
        ChangedAvatar::class,
    ]);

    $data = ['url' => '//www.gravatar.com/avatar'];
    $this->post(route('profile.update.avatar-external', auth()->id()), $data)
        ->assertRedirect();

    $this->assertSessionHasSuccess('Avatar changed successfully.');

    $this->assertEquals($data['url'], auth()->user()->fresh()->avatar);

    Event::assertDispatched(ChangedAvatar::class);
});

test('test update user login details', function () {
    $data = [
        'email' => 'john@doe.com',
        'username' => 'milos',
        'password' => 'milos123123',
        'password_confirmation' => 'milos123123',
    ];

    $this->from('/profile')
        ->put('profile/login-details', $data)
        ->assertRedirect('/profile');

    $this->assertSessionHasSuccess('Login details updated successfully.');

    $user = auth()->user()->fresh();

    $this->assertEquals($data['email'], $user->email);
    $this->assertEquals($data['username'], $user->username);
    $this->assertTrue(Hash::check($data['password'], $user->password));
});

test('test password is not changed if omited on update', function () {
    auth()->user()->update([
        'email' => 'john@example.com',
        'password' => '123123',
    ]);

    $data = [
        'email' => 'test@test.com',
        'password' => '',
        'password_confirmation' => '',
    ];

    $this->from('/profile')
        ->put('profile/login-details', $data)
        ->assertRedirect('/profile');

    $user = auth()->user()->fresh();

    $this->assertEquals($data['email'], $user->email);
    $this->assertTrue(Hash::check('123123', $user->password));
});

test('test user session invalidation', function () {
    $this->withoutExceptionHandling();

    config(['session.driver' => 'database']);

    $user = UserFactory::withCredentials('foo', 'bar')->create();

    $this->be($user);

    $agent = $this->app['agent'];
    $device = $agent->device() ?: 'Unknown';
    $platform = $agent->platform() ?: 'Unknown';

    // Log-in manually to actually create session record in DB
    $this->post('/login', ['username' => 'foo', 'password' => 'bar']);

    $this->get('/profile/sessions')
        ->assertSee('127.0.0.1')
        ->assertSee($device)
        ->assertSee($platform)
        ->assertSee($agent->browser());

    $sessionId = DB::table('sessions')->where('user_id', $user->id)->first()->id;
    $this->delete("profile/sessions/{$sessionId}/invalidate");

    $this->assertDatabaseMissing('sessions', ['user_id' => $user->id]);
});

function getStubDetailsData(): array
{
    return [
        'first_name' => 'foo',
        'last_name' => 'bar',
        'birthday' => Carbon::now()->subYears(25)->format('Y-m-d'),
        'phone' => '12345667',
        'address' => 'the address',
        'country_id' => 688, // Serbia,
    ];
}