first commit

2026-01-09 12:54:53 +05:30
commit 7ccf44f7da
1070 changed files with 113036 additions and 0 deletions
--- a/tests/Feature/Auth/PasswordReset/ProcessTest.php
+++ b/tests/Feature/Auth/PasswordReset/ProcessTest.php
@@ -0,0 +1,104 @@
+<?php
+
+namespace Tests\Feature\Auth\PasswordReset;
+
+use App\Models\User;
+use DB;
+use Hash;
+use Tests\Facades\UserFactory;
+use Tests\TestCase;
+
+class ProcessTest extends TestCase
+{
+    private const URI = 'auth/password/reset/process';
+
+    private User $user;
+
+    protected function setUp(): void
+    {
+        parent::setUp();
+
+        $this->user = UserFactory::create();
+    }
+
+    protected function createReset(string $email, string $token, string $createdAt): array
+    {
+        DB::table('password_resets')->insert([
+            'email' => $email,
+            'token' => Hash::make($token),
+            'created_at' => $createdAt
+        ]);
+
+        return [
+            'email' => $email,
+            'token' => $token,
+            'password' => 'new_password',
+            'password_confirmation' => 'new_password'
+        ];
+    }
+
+    public function test_process(): void
+    {
+        $reset = $this->createReset($this->user->email, 'token', now());
+
+        $response = $this->postJson(self::URI, $reset);
+
+        $response->assertOk();
+
+        $this->user->refresh();
+
+        $this->assertTrue(Hash::check($reset['password'], $this->user->password));
+        $response->assertJsonStructure(['access_token']);
+    }
+
+    public function test_invalid_token(): void
+    {
+        $reset = $this->createReset($this->user->email, 'token', now());
+        $reset['token'] = 'invalid_token';
+
+        $response = $this->postJson(self::URI, $reset);
+
+        $response->assertUnauthorized();
+    }
+
+    public function test_invalid_email(): void
+    {
+        $reset = $this->createReset($this->user->email, 'token', now());
+        $reset['email'] = 'invalidemail@example.com';
+
+        $response = $this->postJson(self::URI, $reset);
+
+        $response->assertUnauthorized('authorization.invalid_password_data');
+    }
+
+    public function test_almost_expired(): void
+    {
+        $reset = [$this->user->email, 'expired', now()->subMinutes(config('auth.passwords.users.expire') - 1)];
+        $reset = $this->createReset(...$reset);
+
+        $response = $this->postJson(self::URI, $reset);
+
+        $response->assertOk();
+
+        $this->user->refresh();
+
+        $this->assertTrue(Hash::check($reset['password'], $this->user->password));
+        $response->assertJsonStructure(['access_token']);
+    }
+
+    public function test_expired(): void
+    {
+        $reset = [$this->user->email, 'expired', now()->subMinutes(config('auth.passwords.users.expire'))];
+        $reset = $this->createReset(...$reset);
+
+        $response = $this->postJson(self::URI, $reset);
+
+        $response->assertUnauthorized();
+    }
+
+    public function test_without_params(): void
+    {
+        $response = $this->postJson(self::URI);
+        $response->assertError(self::HTTP_BAD_REQUEST);
+    }
+}