presseportale/tests/Feature/Auth/AuthenticationTest.php

<?php

use App\Models\User;
use Livewire\Volt\Volt as LivewireVolt;
use Tests\TestCase;

test('login screen can be rendered', function () {
    /** @var TestCase $this */
    $portalUrl = rtrim((string) config('domains.domain_portal_url', 'http://pressekonto.test'), '/');
    $response = $this->get($portalUrl.'/login');

    $response->assertStatus(200);
});

test('users can authenticate using the login screen', function () {
    /** @var TestCase $this */
    // Super-Admin damit canAccessAdmin() === true → Login-Redirect auf /dashboard.
    // Seit der rollen-basierten Redirect-Logik (Phase 1) landen rollenlose
    // User auf '/', nicht mehr auf /dashboard.
    $user = User::factory()->superAdmin()->create();

    $response = LivewireVolt::test('auth.login')
        ->set('email', $user->email)
        ->set('password', 'password')
        ->call('login');

    $response
        ->assertHasNoErrors()
        ->assertRedirect(route('dashboard', absolute: false));

    $this->assertAuthenticated();
    $user->refresh();
    expect($user->last_login_at)->not->toBeNull();
    expect($user->last_login_ip)->toBe('127.0.0.1');
});

test('users can not authenticate with invalid password', function () {
    /** @var TestCase $this */
    $user = User::factory()->create();

    $response = LivewireVolt::test('auth.login')
        ->set('email', $user->email)
        ->set('password', 'wrong-password')
        ->call('login');

    $response->assertHasErrors('email');

    $this->assertGuest();
});

test('users can logout', function () {
    /** @var TestCase $this */
    $user = User::factory()->create();

    $response = $this->actingAs($user)->post('/logout');

    $response->assertRedirect('/');

    $this->assertGuest();
});