get('/login'); $this->withHtml($resp)->assertElementContains('a[href="' . url('/password/email') . '"]', 'Forgot Password?'); $resp = $this->get('/password/email'); $this->withHtml($resp)->assertElementContains('form[action="' . url('/password/email') . '"]', 'Send Reset Link'); $resp = $this->post('/password/email', [ 'email' => 'admin@admin.com', ]); $resp->assertRedirect('/password/email'); $resp = $this->get('/password/email'); $resp->assertSee('A password reset link will be sent to admin@admin.com if that email address is found in the system.'); $this->assertDatabaseHas('password_resets', [ 'email' => 'admin@admin.com', ]); /** @var User $user */ $user = User::query()->where('email', '=', 'admin@admin.com')->first(); Notification::assertSentTo($user, ResetPassword::class); $n = Notification::sent($user, ResetPassword::class); $this->get('/password/reset/' . $n->first()->token) ->assertOk() ->assertSee('Reset Password'); $resp = $this->post('/password/reset', [ 'email' => 'admin@admin.com', 'password' => 'randompass', 'password_confirmation' => 'randompass', 'token' => $n->first()->token, ]); $resp->assertRedirect('/'); $this->get('/')->assertSee('Your password has been successfully reset'); } public function test_reset_flow_shows_success_message_even_if_wrong_password_to_prevent_user_discovery() { $this->get('/password/email'); $resp = $this->followingRedirects()->post('/password/email', [ 'email' => 'barry@admin.com', ]); $resp->assertSee('A password reset link will be sent to barry@admin.com if that email address is found in the system.'); $resp->assertDontSee('We can\'t find a user'); $this->get('/password/reset/arandometokenvalue')->assertSee('Reset Password'); $resp = $this->post('/password/reset', [ 'email' => 'barry@admin.com', 'password' => 'randompass', 'password_confirmation' => 'randompass', 'token' => 'arandometokenvalue', ]); $resp->assertRedirect('/password/reset/arandometokenvalue'); $this->get('/password/reset/arandometokenvalue') ->assertDontSee('We can\'t find a user') ->assertSee('The password reset token is invalid for this email address.'); } public function test_reset_page_shows_sign_links() { $this->setSettings(['registration-enabled' => 'true']); $resp = $this->get('/password/email'); $this->withHtml($resp)->assertElementContains('a', 'Log in') ->assertElementContains('a', 'Sign up'); } public function test_reset_request_is_throttled() { $editor = $this->getEditor(); Notification::fake(); $this->get('/password/email'); $this->followingRedirects()->post('/password/email', [ 'email' => $editor->email, ]); $resp = $this->followingRedirects()->post('/password/email', [ 'email' => $editor->email, ]); Notification::assertTimesSent(1, ResetPassword::class); $resp->assertSee('A password reset link will be sent to ' . $editor->email . ' if that email address is found in the system.'); } }