148 lines
3.7 KiB
PHP
148 lines
3.7 KiB
PHP
<?php
|
|
|
|
use App\Events\User\TwoFactorEnabled;
|
|
use App\Http\Resources\UserResource;
|
|
use App\Models\User;
|
|
use Carbon\Carbon;
|
|
use PragmaRX\Google2FA\Google2FA;
|
|
use Tests\Feature\ApiTestCase;
|
|
|
|
test('update 2fa unathenticated', function () {
|
|
$this->setSettings(['2fa.enabled' => true]);
|
|
|
|
User::factory()->create();
|
|
|
|
$this->putJson('api/me/2fa')
|
|
->assertStatus(401);
|
|
});
|
|
|
|
test('enable two factor auth', function () {
|
|
$this->setSettings(['2fa.enabled' => true]);
|
|
|
|
$this->withoutExceptionHandling();
|
|
|
|
Event::fake([
|
|
TwoFactorEnabled::class,
|
|
]);
|
|
|
|
$user = $this->login();
|
|
|
|
$this->putJson('api/me/2fa')
|
|
->assertOk()
|
|
->assertJson(['message' => 'Verification token sent.'])
|
|
->assertJsonStructure([
|
|
'message',
|
|
'qrcode',
|
|
]);
|
|
|
|
$this->assertTrue(
|
|
DB::table('users')
|
|
->where('id', $user->id)
|
|
->whereNotNull('two_factor_secret')
|
|
->exists()
|
|
);
|
|
|
|
Event::assertNotDispatched(TwoFactorEnabled::class);
|
|
});
|
|
|
|
test('verify user auth app with correct code', function () {
|
|
$google2fa = new Google2FA;
|
|
$secret = encrypt($google2fa->generateSecretKey());
|
|
|
|
$this->setSettings(['2fa.enabled' => true]);
|
|
|
|
Event::fake([
|
|
TwoFactorEnabled::class,
|
|
]);
|
|
|
|
$user = $this->login();
|
|
$user->two_factor_secret = $secret;
|
|
$user->save();
|
|
|
|
$validCode = $google2fa->getCurrentOtp(decrypt($user->two_factor_secret));
|
|
|
|
$response = $this->postJson('api/me/2fa/verify', ['code' => $validCode]);
|
|
|
|
$updatedUser = (new UserResource($user->fresh()))->resolve();
|
|
|
|
$response->assertOk()
|
|
->assertJsonFragment($updatedUser);
|
|
|
|
$this->assertTrue(
|
|
DB::table('users')
|
|
->where('id', $user->id)
|
|
->whereNotNull('two_factor_confirmed_at')
|
|
->exists()
|
|
);
|
|
|
|
Event::assertDispatched(TwoFactorEnabled::class);
|
|
});
|
|
|
|
test('verify user app with invalid token', function () {
|
|
$this->setSettings(['2fa.enabled' => true]);
|
|
|
|
$user = $this->login();
|
|
|
|
$this->postJson('api/me/2fa/verify', ['code' => '123123'])
|
|
->assertStatus(422)
|
|
->assertJson(['message' => 'Invalid 2FA token.']);
|
|
|
|
$this->assertTrue(
|
|
DB::table('users')
|
|
->where('id', $user->id)
|
|
->whereNull('two_factor_confirmed_at')
|
|
->exists()
|
|
);
|
|
});
|
|
|
|
test('enable two factor auth when it is already enabled', function () {
|
|
$google2fa = new Google2FA;
|
|
$secret = encrypt($google2fa->generateSecretKey());
|
|
|
|
$this->setSettings(['2fa.enabled' => true]);
|
|
|
|
$user = $this->login();
|
|
$user->two_factor_secret = $secret;
|
|
$user->two_factor_confirmed_at = Carbon::now();
|
|
$user->save();
|
|
|
|
$this->putJson('api/me/2fa')
|
|
->assertStatus(422)
|
|
->assertJson([
|
|
'message' => '2FA is already enabled for this user.',
|
|
]);
|
|
});
|
|
|
|
test('disable two factor auth', function () {
|
|
$google2fa = new Google2FA;
|
|
$secret = encrypt($google2fa->generateSecretKey());
|
|
|
|
$this->setSettings(['2fa.enabled' => true]);
|
|
|
|
$user = User::factory()->create([
|
|
'two_factor_secret' => $secret,
|
|
'two_factor_confirmed_at' => Carbon::now(),
|
|
]);
|
|
|
|
$this->be($user, ApiTestCase::API_GUARD);
|
|
|
|
$response = $this->deleteJson('api/me/2fa');
|
|
|
|
$user = (new UserResource($user->fresh()))->resolve();
|
|
|
|
$response->assertOk()
|
|
->assertJsonFragment($user);
|
|
});
|
|
|
|
test('disable 2fa when it is already disabled', function () {
|
|
$this->setSettings(['2fa.enabled' => true]);
|
|
|
|
$this->login();
|
|
|
|
$this->deleteJson('api/me/2fa')
|
|
->assertStatus(422)
|
|
->assertJson([
|
|
'message' => '2FA is not enabled for this user.',
|
|
]);
|
|
});
|