presseportale/tests/Feature/Web/TerminationRequestTest.php
Kevin Adametz fe1525b9ff auth/mail: Magic-Link-2FA (M1) + Mailversand über die Queue
- Magic-Link-Login übergibt bei aktiviertem 2FA an die 2FA-Challenge,
  statt sie zu umgehen (M1).
- Bestätigungs-/Benachrichtigungs-Mails (Kontakt, Recht, Kündigung,
  Widerruf, Magic-Link) laufen als ShouldQueue+afterCommit über die Queue,
  damit die Response nicht am SMTP-Roundtrip hängt.

Hinweis: Der Queue-Worker muss im Betrieb laufen und überwacht werden, da
fristrelevante Bestätigungen darüber zugestellt werden (siehe
Betriebsüberwachung).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-14 13:49:21 +00:00

143 lines
5.5 KiB
PHP

<?php
use App\Mail\TerminationRequestReceived;
use App\Mail\TerminationRequestSubmitted;
use App\Models\TerminationRequest;
use Illuminate\Support\Facades\Mail;
use Tests\TestCase;
test('the hub footer shows the legally required termination button', function () {
/** @var TestCase $this */
$response = $this->get('https://pressekonto.test/')->assertSuccessful();
expect($response->getContent())
->toContain('Verträge hier kündigen')
->toContain(route('kuendigung', ['edition' => 'de']));
});
test('the termination confirmation page renders the § 312k form with the hub shell', function () {
/** @var TestCase $this */
$response = $this->get('https://pressekonto.test/de/kuendigung')->assertSuccessful();
$content = $response->getContent();
expect($content)
// Pflichtangaben der Bestätigungsseite (§ 312k Abs. 2 BGB).
->toContain('Ordentliche Kündigung')
->toContain('Außerordentliche Kündigung')
->toContain('name="kind"')
->toContain('name="reason"')
->toContain('name="terminate_mode"')
->toContain('Zum nächstmöglichen Zeitpunkt')
// Bestätigungsschaltfläche mit gesetzeskonformer Aufschrift.
->toContain('jetzt kündigen')
// Hub-Gerüst (host-aware static-page).
->toContain('Publisher · Hub');
});
test('an ordinary termination is persisted and both mails are queued after persistence', function () {
/** @var TestCase $this */
Mail::fake();
config()->set('domains.domains.pressekonto.brand.contact_email', 'kontakt@pressekonto.de');
$this->from('https://pressekonto.test/de/kuendigung')
->post('https://pressekonto.test/de/kuendigung', [
'kind' => 'ordentlich',
'name' => 'Paula Presse',
'email' => 'paula@example.test',
'contract_reference' => 'STR-2026-0042',
'terminate_mode' => 'asap',
])
->assertRedirect('https://pressekonto.test/de/kuendigung')
->assertSessionHas('termination-status');
$request = TerminationRequest::query()->firstOrFail();
expect($request->kind)->toBe('ordentlich');
expect($request->reason)->toBeNull();
expect($request->name)->toBe('Paula Presse');
expect($request->email)->toBe('paula@example.test');
expect($request->contract_reference)->toBe('STR-2026-0042');
expect($request->terminate_at)->toBeNull();
expect($request->host)->toBe('pressekonto.test');
expect($request->status)->toBe('open');
// § 312k Abs. 4 BGB: sofortige automatische Zugangsbestätigung.
Mail::assertQueued(TerminationRequestReceived::class, fn (TerminationRequestReceived $mail) => $mail->hasTo('paula@example.test'));
Mail::assertQueued(TerminationRequestSubmitted::class, fn (TerminationRequestSubmitted $mail) => $mail->hasTo('kontakt@pressekonto.de'));
});
test('an extraordinary termination requires a reason', function () {
/** @var TestCase $this */
Mail::fake();
$this->post('https://pressekonto.test/de/kuendigung', [
'kind' => 'ausserordentlich',
'name' => 'Paula Presse',
'email' => 'paula@example.test',
'terminate_mode' => 'asap',
])->assertSessionHasErrorsIn('termination', ['reason']);
expect(TerminationRequest::query()->count())->toBe(0);
Mail::assertNothingOutgoing();
$this->post('https://pressekonto.test/de/kuendigung', [
'kind' => 'ausserordentlich',
'reason' => 'Wiederholte Störung der Leistung.',
'name' => 'Paula Presse',
'email' => 'paula@example.test',
'terminate_mode' => 'asap',
])->assertSessionHas('termination-status');
expect(TerminationRequest::query()->firstOrFail()->reason)->toBe('Wiederholte Störung der Leistung.');
});
test('a termination to a specific date requires and persists the date', function () {
/** @var TestCase $this */
Mail::fake();
$this->post('https://pressekonto.test/de/kuendigung', [
'kind' => 'ordentlich',
'name' => 'Paula Presse',
'email' => 'paula@example.test',
'terminate_mode' => 'date',
])->assertSessionHasErrorsIn('termination', ['terminate_at']);
$this->post('https://pressekonto.test/de/kuendigung', [
'kind' => 'ordentlich',
'name' => 'Paula Presse',
'email' => 'paula@example.test',
'terminate_mode' => 'date',
'terminate_at' => '2026-08-31',
])->assertSessionHas('termination-status');
expect(TerminationRequest::query()->firstOrFail()->terminate_at->format('Y-m-d'))->toBe('2026-08-31');
});
test('termination validation errors land in the termination error bag', function () {
/** @var TestCase $this */
Mail::fake();
$this->post('https://pressekonto.test/de/kuendigung', [
'name' => '',
'email' => 'keine-mail',
])->assertSessionHasErrorsIn('termination', ['kind', 'name', 'email', 'terminate_mode']);
expect(TerminationRequest::query()->count())->toBe(0);
Mail::assertNothingOutgoing();
});
test('honeypot submissions are silently accepted without persisting or mailing', function () {
/** @var TestCase $this */
Mail::fake();
$this->post('https://pressekonto.test/de/kuendigung', [
'kind' => 'ordentlich',
'name' => 'Bot',
'email' => 'bot@example.test',
'terminate_mode' => 'asap',
'website' => 'https://spam.example',
])->assertSessionHas('termination-status');
expect(TerminationRequest::query()->count())->toBe(0);
Mail::assertNothingOutgoing();
});