83 lines
2.0 KiB
PHP
83 lines
2.0 KiB
PHP
<?php
|
|
|
|
use App\Models\User;
|
|
use Carbon\Carbon;
|
|
use Illuminate\Support\Str;
|
|
|
|
test('test password reset', function () {
|
|
$this->setSettings(['forgot_password' => true]);
|
|
|
|
$user = User::factory()->create(['email' => 'test@test.com']);
|
|
|
|
$token = createNewToken();
|
|
|
|
DB::table('password_resets')->insert([
|
|
'email' => $user->email,
|
|
'token' => Hash::make($token),
|
|
'created_at' => Carbon::now(),
|
|
]);
|
|
|
|
resetPassword($token, $user->email)
|
|
->assertOk();
|
|
|
|
$this->assertTrue(Hash::check('123123123', $user->fresh()->password));
|
|
});
|
|
|
|
test('test password reset with expired token', function () {
|
|
$this->setSettings(['forgot_password' => true]);
|
|
|
|
$user = User::factory()->create(['email' => 'test@test.com']);
|
|
|
|
$token = createNewToken();
|
|
|
|
DB::table('password_resets')->insert([
|
|
'email' => $user->email,
|
|
'token' => Hash::make($token),
|
|
'created_at' => Carbon::now()->subHours(2),
|
|
]);
|
|
|
|
resetPassword($token, $user->email)
|
|
->assertJson([
|
|
'message' => 'This password reset token is invalid.',
|
|
]);
|
|
});
|
|
|
|
test('test password reset with invalid email', function () {
|
|
$this->setSettings(['forgot_password' => true]);
|
|
|
|
$user = User::factory()->create(['email' => 'test@test.com']);
|
|
|
|
$token = createNewToken();
|
|
|
|
DB::table('password_resets')->insert([
|
|
'email' => $user->email,
|
|
'token' => Hash::make($token),
|
|
'created_at' => Carbon::now(),
|
|
]);
|
|
|
|
resetPassword($token, 'foo@bar.com')
|
|
->assertOk()
|
|
->assertJson(['success' => true]);
|
|
});
|
|
|
|
function resetPassword($token, $email)
|
|
{
|
|
return test()->postJson('api/password/reset', [
|
|
'token' => $token,
|
|
'email' => $email,
|
|
'password' => '123123123',
|
|
'password_confirmation' => '123123123',
|
|
]);
|
|
}
|
|
|
|
function createNewToken()
|
|
{
|
|
$key = config('app.key');
|
|
|
|
if (Str::startsWith($key, 'base64:')) {
|
|
$key = base64_decode(substr($key, 7));
|
|
}
|
|
|
|
return hash_hmac('sha256', Str::random(40), $key);
|
|
}
|