Kevin Adametz
00796a35d5
Konsolidierter, bereinigter Stand der Wissensbasis (docs/). Frischer Wurzel-Commit, um urheberrechtlich problematische Volltexte aus der Historie zu entfernen (die bisherige Historie bestand aus einem einzigen Initial-Commit). Enthaltene Änderungen (vgl. docs/_Steuerung/CHANGELOG.md, 2026-05-29): - Copyright-Hygiene: 25 Volltext-/Übersetzungsdateien (Sharp 14 Kap., Wala 11 Kap.) entfernt; je Quelle _Fundstellen-Index.md als Provenienzbeleg; Quellnachweise + Steuerungsdateien angepasst. - Konsistenz-Korrekturen: Reichweite 000-013 (Scorecard-Regeln), Rule-ID MW-WK-DIFF-101, Quellnachweis-Dateiverweis, Dok.000 v2.0.2. - Dateinamen-Normalisierung: Startdatei ohne Leerzeichen. Originale (Wala/Sharp E-Books) privat außerhalb des Repos archiviert. Co-authored-by: Cursor <cursoragent@cursor.com>
72 lines
No EOL
2 KiB
PHP
72 lines
No EOL
2 KiB
PHP
<?php
|
|
|
|
use App\Models\User;
|
|
use Illuminate\Auth\Events\Verified;
|
|
use Illuminate\Support\Facades\Event;
|
|
use Illuminate\Support\Facades\URL;
|
|
use Laravel\Fortify\Features;
|
|
|
|
beforeEach(function () {
|
|
$this->skipUnlessFortifyHas(Features::emailVerification());
|
|
});
|
|
|
|
test('email verification screen can be rendered', function () {
|
|
$user = User::factory()->unverified()->create();
|
|
|
|
$response = $this->actingAs($user)->get(route('verification.notice'));
|
|
|
|
$response->assertOk();
|
|
});
|
|
|
|
test('email can be verified', function () {
|
|
$user = User::factory()->unverified()->create();
|
|
|
|
Event::fake();
|
|
|
|
$verificationUrl = URL::temporarySignedRoute(
|
|
'verification.verify',
|
|
now()->addMinutes(60),
|
|
['id' => $user->id, 'hash' => sha1($user->email)],
|
|
);
|
|
|
|
$response = $this->actingAs($user)->get($verificationUrl);
|
|
|
|
Event::assertDispatched(Verified::class);
|
|
|
|
expect($user->fresh()->hasVerifiedEmail())->toBeTrue();
|
|
$response->assertRedirect(route('dashboard', absolute: false).'?verified=1');
|
|
});
|
|
|
|
test('email is not verified with invalid hash', function () {
|
|
$user = User::factory()->unverified()->create();
|
|
|
|
$verificationUrl = URL::temporarySignedRoute(
|
|
'verification.verify',
|
|
now()->addMinutes(60),
|
|
['id' => $user->id, 'hash' => sha1('wrong-email')],
|
|
);
|
|
|
|
$this->actingAs($user)->get($verificationUrl);
|
|
|
|
expect($user->fresh()->hasVerifiedEmail())->toBeFalse();
|
|
});
|
|
|
|
test('already verified user visiting verification link is redirected without firing event again', function () {
|
|
$user = User::factory()->create([
|
|
'email_verified_at' => now(),
|
|
]);
|
|
|
|
Event::fake();
|
|
|
|
$verificationUrl = URL::temporarySignedRoute(
|
|
'verification.verify',
|
|
now()->addMinutes(60),
|
|
['id' => $user->id, 'hash' => sha1($user->email)],
|
|
);
|
|
|
|
$this->actingAs($user)->get($verificationUrl)
|
|
->assertRedirect(route('dashboard', absolute: false).'?verified=1');
|
|
|
|
expect($user->fresh()->hasVerifiedEmail())->toBeTrue();
|
|
Event::assertNotDispatched(Verified::class);
|
|
}); |