wip

Signed-off-by: Mior Muhammad Zaki <[email protected]>

Author: crynobone

VerificationNotificationTest.php

@@ -1 +1,3 @@
 <?php
+
+use App\Models\User;

composer.json

@@ -13,7 +13,8 @@
     "require": {
         "php": "^8.3",
         "pestphp/pest": "^4.0",
-        "pestphp/pest-plugin-browser": "^4.0"
+        "pestphp/pest-plugin-browser": "^4.0",
+        "pestphp/pest-plugin-laravel": "^4.0"
     },
     "require-dev": {
         "laravel/vue-starter-kit": "dev-pest-ci",

tests/Browser/Auth/EmailVerificationTest.php

@@ -1,5 +1,132 @@
 <?php
 
+use App\Models\User;
+use Illuminate\Auth\Events\Verified;
+use Illuminate\Support\Facades\Event;
+use Illuminate\Support\Facades\URL;
+
+use function Pest\Laravel\actingAs;
+
 test('email verification screen can be rendered', function () {
+    $user = User::factory()->unverified()->create();
+
+    actingAs($user);
+
+    visit(route('verification.notice'))
+        ->assertSee('Verify email')
+        ->assertSee('Please verify your email address by clicking on the link we just emailed to you.')
+        ->assertSee('Resend verification email')
+        ->assertNoConsoleLogs()
+        ->assertNoJavaScriptErrors();
+});
+
+test('email can be verified', function () {
+    $user = User::factory()->unverified()->create();
+
+    actingAs($user);
+
+    Event::fake();
+
+    $verificationUrl = URL::temporarySignedRoute(
+        'verification.verify',
+        now()->addMinutes(60),
+        ['id' => $user->id, 'hash' => sha1($user->email)]
+    );
+
+    visit($verificationUrl)
+        ->assertUrlIs(route('dashboard'))
+        ->assertQueryStringHas('verified', '1')
+        ->assertNoConsoleLogs()
+        ->assertNoJavaScriptErrors();
+
+    Event::assertDispatched(Verified::class);
+    $this->assertTrue($user->fresh()->hasVerifiedEmail());
+});
+
+test('email is not verified with invalid hash', function () {
+    $user = User::factory()->unverified()->create();
+
+    actingAs($user);
+
+    Event::fake();
+
+    $verificationUrl = URL::temporarySignedRoute(
+        'verification.verify',
+        now()->addMinutes(60),
+        ['id' => $user->id, 'hash' => sha1('wrong-email')]
+    );
+
+    visit($verificationUrl)
+        ->assertSee('403')
+        ->assertSee('This action is unauthorized.')
+        ->assertNoConsoleLogs()
+        ->assertNoJavaScriptErrors();
+
+    Event::assertNotDispatched(Verified::class);
+    $this->assertFalse($user->fresh()->hasVerifiedEmail());
+});
+
+test('email is not verified with invalid user id', function () {
+    $user = User::factory()->unverified()->create();
+
+    actingAs($user);
+
+    Event::fake();
+
+    $verificationUrl = URL::temporarySignedRoute(
+        'verification.verify',
+        now()->addMinutes(60),
+        ['id' => 123, 'hash' => sha1($user->email)]
+    );
+
+    visit($verificationUrl)
+        ->assertSee('403')
+        ->assertSee('This action is unauthorized.')
+        ->assertNoConsoleLogs()
+        ->assertNoJavaScriptErrors();
+
+    Event::assertNotDispatched(Verified::class);
+    $this->assertFalse($user->fresh()->hasVerifiedEmail());
+});
+
+test('verified user is redirected to dashboard from verification prompt', function () {
+    $user = User::factory()->create([
+        'email_verified_at' => now(),
+    ]);
+
+    actingAs($user);
+
+    Event::fake();
+
+    visit(route('verification.notice'))
+        ->assertUrlIs(route('dashboard'))
+        ->assertNoConsoleLogs()
+        ->assertNoJavaScriptErrors();
+
+    Event::assertNotDispatched(Verified::class);
+});
+
+test('already_verified_user_visiting_verification_link_is_redirected_without_firing_event_again', function () {
+    $user = User::factory()->create([
+        'email_verified_at' => now(),
+    ]);
+
+    actingAs($user);
+
+    Event::fake();
+
+    $verificationUrl = URL::temporarySignedRoute(
+        'verification.verify',
+        now()->addMinutes(60),
+        ['id' => $user->id, 'hash' => sha1($user->email)]
+    );
+
+    visit($verificationUrl)
+        ->assertUrlIs(route('dashboard'))
+        ->assertQueryStringHas('verified', '1')
+        ->assertNoConsoleLogs()
+        ->assertNoJavaScriptErrors();
 
+    Event::assertNotDispatched(Verified::class);
+    $this->assertTrue($user->fresh()->hasVerifiedEmail());
 });

tests/Browser/Auth/RegistrationTest.php

@@ -4,10 +4,10 @@
 
 test('registration screen can be rendered', function () {
     visit(route('register'))
-        ->assertNoConsoleLogs()
-        ->assertNoJavaScriptErrors()
         ->assertSee('Create an account')
-        ->assertSee('Enter your details below to create your account');
+        ->assertSee('Enter your details below to create your account')
+        ->assertNoConsoleLogs()
+        ->assertNoJavaScriptErrors();
 });
 
 test('new user can be registered', function () {