yisroelbaum/TIDE
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

test auth controller signup, confirm-email, login, me, logout

Browse source
This commit is contained in:
Yisroel Baum 2026-05-06 22:12:27 +03:00
parent 99433a21c2
commit 0ffc4b546c
Signed by: yisroelbaum
GPG key ID: 0FA60884F75520A9
1 changed files with 161 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

161
backend/tests/Feature/Auth/AuthFlowTest.php Normal file
View file

@ -0,0 +1,161 @@
<?php
namespace Tests\Feature\Auth;
use App\Email\EmailConfirmationToken\EmailConfirmationTokenRepository;
use App\Shared\ValueObject\EmailAddress;
use App\User\UserRepository;
use Illuminate\Foundation\Testing\RefreshDatabase;
use Tests\TestCase;
class AuthFlowTest extends TestCase
{
use RefreshDatabase;
public function test_signup_creates_unconfirmed_user(): void
{
$response = $this->postJson('/api/signup', [
'email' => 'alice@example.com',
'displayName' => 'alice',
]);
$response->assertStatus(201);
$userRepo = $this->app->make(UserRepository::class);
$user = $userRepo->findByEmail(
new EmailAddress('alice@example.com'),
);
$this->assertNotNull($user);
$this->assertFalse($user->isEmailConfirmed());
}
public function test_signup_validation_returns_400(): void
{
$response = $this->postJson('/api/signup', [
'email' => '',
'displayName' => 'alice',
]);
$response->assertStatus(400);
}
public function test_duplicate_signup_returns_409(): void
{
$this->postJson('/api/signup', [
'email' => 'alice@example.com',
'displayName' => 'alice',
])->assertStatus(201);
$this->postJson('/api/signup', [
'email' => 'alice@example.com',
'displayName' => 'aliceb',
])->assertStatus(409);
}
public function test_confirm_email_then_login_returns_user_and_cookie(): void
{
$this->postJson('/api/signup', [
'email' => 'alice@example.com',
'displayName' => 'alice',
])->assertStatus(201);
$userRepo = $this->app->make(UserRepository::class);
$user = $userRepo->findByEmail(
new EmailAddress('alice@example.com'),
);
$tokenRepo = $this->app->make(
EmailConfirmationTokenRepository::class,
);
$token = $tokenRepo->findByUser($user);
$this->assertNotNull($token);
$this->postJson('/api/confirm-email', [
'token' => $token->getToken(),
'password' => 'longenoughpassword',
])->assertStatus(200);
$loginResponse = $this->postJson('/api/login', [
'email' => 'alice@example.com',
'password' => 'longenoughpassword',
]);
$loginResponse->assertStatus(200);
$loginResponse->assertJsonPath('user.email', 'alice@example.com');
$loginResponse->assertJsonPath('user.displayName', 'alice');
$loginResponse->assertJsonPath('user.isAdmin', false);
$loginResponse->assertCookie('auth_token');
}
public function test_login_with_unconfirmed_account_returns_401(): void
{
$this->postJson('/api/signup', [
'email' => 'alice@example.com',
'displayName' => 'alice',
])->assertStatus(201);
$this->postJson('/api/login', [
'email' => 'alice@example.com',
'password' => 'longenoughpassword',
])->assertStatus(401);
}
public function test_login_with_wrong_password_returns_401(): void
{
$this->postJson('/api/signup', [
'email' => 'alice@example.com',
'displayName' => 'alice',
])->assertStatus(201);
$userRepo = $this->app->make(UserRepository::class);
$user = $userRepo->findByEmail(
new EmailAddress('alice@example.com'),
);
$tokenRepo = $this->app->make(
EmailConfirmationTokenRepository::class,
);
$token = $tokenRepo->findByUser($user);
$this->postJson('/api/confirm-email', [
'token' => $token->getToken(),
'password' => 'longenoughpassword',
])->assertStatus(200);
$this->postJson('/api/login', [
'email' => 'alice@example.com',
'password' => 'wrongpassword',
])->assertStatus(401);
}
public function test_me_requires_auth_cookie(): void
{
$this->getJson('/api/me')->assertStatus(401);
}
public function test_login_sets_auth_cookie_on_response(): void
{
$this->postJson('/api/signup', [
'email' => 'alice@example.com',
'displayName' => 'alice',
])->assertStatus(201);
$userRepo = $this->app->make(UserRepository::class);
$user = $userRepo->findByEmail(
new EmailAddress('alice@example.com'),
);
$tokenRepo = $this->app->make(
EmailConfirmationTokenRepository::class,
);
$token = $tokenRepo->findByUser($user);
$this->postJson('/api/confirm-email', [
'token' => $token->getToken(),
'password' => 'longenoughpassword',
])->assertStatus(200);
$loginResponse = $this->postJson('/api/login', [
'email' => 'alice@example.com',
'password' => 'longenoughpassword',
]);
$loginResponse->assertStatus(200);
$authCookie = $loginResponse->getCookie('auth_token', false);
$this->assertNotNull($authCookie);
$this->assertNotEmpty($authCookie->getValue());
}
}