TRF Certest first commit

2025-02-26 08:57:46 +01:00
commit 3ce064a108
2524 changed files with 475404 additions and 0 deletions
@@ -0,0 +1,38 @@
+<?php
+
+namespace Tests\Feature\Api\Auth\Password;
+
+use Mail;
+use Tests\Feature\ApiTestCase;
+use Vanguard\Mail\ResetPassword;
+use Vanguard\User;
+
+class RemindControllerTest extends ApiTestCase
+{
+    /** @test */
+    public function send_password_reminder()
+    {
+        $this->setSettings(['forgot_password' => true]);
+
+        Mail::fake();
+
+        $user = User::factory()->create(['email' => 'test@test.com']);
+
+        $this->postJson('api/password/remind', ['email' => 'test@test.com'])
+            ->assertOk();
+
+        Mail::assertQueued(ResetPassword::class, function ($mail) use ($user) {
+            return $mail->hasTo($user->email);
+        });
+    }
+
+    /** @test */
+    public function password_reminder_with_wrong_email()
+    {
+        $this->setSettings(['forgot_password' => true]);
+
+        $this->postJson('api/password/remind', ['email' => 'test@test.com'])
+            ->assertStatus(422)
+            ->assertJsonValidationErrors('email');
+    }
+}
@@ -0,0 +1,96 @@
+<?php
+
+namespace Tests\Feature\Api\Auth\Password;
+
+use Carbon\Carbon;
+use DB;
+use Hash;
+use Illuminate\Support\Str;
+use Tests\Feature\ApiTestCase;
+use Vanguard\User;
+
+class ResetControllerTest extends ApiTestCase
+{
+    /** @test */
+    public function password_reset()
+    {
+        $this->setSettings(['forgot_password' => true]);
+
+        $user = User::factory()->create(['email' => 'test@test.com']);
+
+        $token = $this->createNewToken();
+
+        DB::table('password_resets')->insert([
+            'email' => $user->email,
+            'token' => Hash::make($token),
+            'created_at' => Carbon::now(),
+        ]);
+
+        $this->resetPassword($token, $user->email)
+            ->assertOk();
+
+        $this->assertTrue(Hash::check('123123123', $user->fresh()->password));
+    }
+
+    /** @test */
+    public function password_reset_with_expired_token()
+    {
+        $this->setSettings(['forgot_password' => true]);
+
+        $user = User::factory()->create(['email' => 'test@test.com']);
+
+        $token = $this->createNewToken();
+
+        DB::table('password_resets')->insert([
+            'email' => $user->email,
+            'token' => Hash::make($token),
+            'created_at' => Carbon::now()->subHours(2),
+        ]);
+
+        $this->resetPassword($token, $user->email)
+            ->assertJson([
+                'message' => 'This password reset token is invalid.',
+            ]);
+    }
+
+    /** @test */
+    public function password_reset_with_invalid_email()
+    {
+        $this->setSettings(['forgot_password' => true]);
+
+        $user = User::factory()->create(['email' => 'test@test.com']);
+
+        $token = $this->createNewToken();
+
+        DB::table('password_resets')->insert([
+            'email' => $user->email,
+            'token' => Hash::make($token),
+            'created_at' => Carbon::now(),
+        ]);
+
+        $this->resetPassword($token, 'foo@bar.com')
+            ->assertOk()
+            ->assertJson(['success' => true]);
+    }
+
+    private function resetPassword($token, $email)
+    {
+        return $this->postJson('api/password/reset', [
+            'token' => $token,
+            'email' => $email,
+            'password' => '123123123',
+            'password_confirmation' => '123123123',
+        ]);
+    }
+
+    private function createNewToken()
+    {
+        $key = $this->app['config']['app.key'];
+
+        if (Str::startsWith($key, 'base64:')) {
+            $key = base64_decode(substr($key, 7));
+        }
+
+        return hash_hmac('sha256', Str::random(40), $key);
+    }
+}