71 lines
2.3 KiB
PHP
71 lines
2.3 KiB
PHP
<?php
|
|
|
|
namespace Tests\Feature;
|
|
|
|
use App\Livewire\Auth\PasswordChange;
|
|
use App\Models\User;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
use Livewire\Livewire;
|
|
use Tests\TestCase;
|
|
|
|
class OptionalOnboardingTest extends TestCase
|
|
{
|
|
use RefreshDatabase;
|
|
|
|
public function test_rotated_user_without_2fa_reaches_the_dashboard(): void
|
|
{
|
|
$user = User::factory()->create(['must_change_password' => false]);
|
|
|
|
$this->actingAs($user)->get('/')->assertOk();
|
|
}
|
|
|
|
public function test_user_that_must_change_password_is_still_redirected(): void
|
|
{
|
|
$user = User::factory()->create(['must_change_password' => true]);
|
|
|
|
$this->actingAs($user)->get('/')->assertRedirect(route('password.change'));
|
|
}
|
|
|
|
public function test_password_change_lands_on_dashboard_not_2fa_setup(): void
|
|
{
|
|
$user = User::factory()->create(['must_change_password' => true, 'password' => bcrypt('old-Password-1')]);
|
|
|
|
Livewire::actingAs($user)->test(PasswordChange::class)
|
|
->set('current', 'old-Password-1')
|
|
->set('password', 'new-Password-123')
|
|
->set('password_confirmation', 'new-Password-123')
|
|
->call('update')
|
|
->assertRedirect(route('dashboard'));
|
|
}
|
|
|
|
public function test_broadcast_gate_passes_on_password_rotation_alone(): void
|
|
{
|
|
$user = User::factory()->create(['must_change_password' => false]);
|
|
|
|
$this->assertTrue($user->securityOnboarded());
|
|
}
|
|
|
|
public function test_password_change_can_be_skipped_without_rotating(): void
|
|
{
|
|
$user = User::factory()->create(['must_change_password' => true]);
|
|
|
|
Livewire::actingAs($user)->test(PasswordChange::class)
|
|
->call('skip')
|
|
->assertRedirect(route('dashboard'));
|
|
|
|
// Skipping does NOT rotate — the flag (and the warning banner) stay until a real change.
|
|
$this->assertTrue($user->fresh()->must_change_password);
|
|
$this->assertTrue(session('onboarding.password_skipped'));
|
|
}
|
|
|
|
public function test_a_skipped_session_is_no_longer_redirected(): void
|
|
{
|
|
$user = User::factory()->create(['must_change_password' => true]);
|
|
|
|
$this->actingAs($user)
|
|
->withSession(['onboarding.password_skipped' => true])
|
|
->get('/')
|
|
->assertOk();
|
|
}
|
|
}
|