Snapshot of main at 9f39a6e1e (2026-11-02)

tests/Feature/Auth/PasswordResetTest.php

@@ -0,0 +1,102 @@
+<?php
+
+namespace Tests\Feature;
+
+use App\Models\User;
+use App\Notifications\UserPasswordResetNotification as ResetPassword;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Illuminate\Support\Facades\Notification;
+use Laravel\Fortify\Features;
+use Tests\TestCase;
+
+class PasswordResetTest extends TestCase
+{
+    use RefreshDatabase;
+
+    protected function setUp(): void
+    {
+        parent::setUp();
+
+        // phpunit.xml runs with APP_ENV=local, which keeps CSRF checks on
+        $this->withoutMiddleware(\App\Http\Middleware\VerifyCsrfToken::class);
+    }
+
+    public function test_reset_password_link_screen_can_be_rendered()
+    {
+        if (! Features::enabled(Features::resetPasswords())) {
+            return $this->markTestSkipped('Password updates are not enabled.');
+        }
+
+        $response = $this->get(route('password.request'));
+
+        $response->assertStatus(200);
+    }
+
+    public function test_reset_password_link_can_be_requested()
+    {
+        if (! Features::enabled(Features::resetPasswords())) {
+            return $this->markTestSkipped('Password updates are not enabled.');
+        }
+
+        Notification::fake();
+
+        $user = User::factory()->create();
+
+        $response = $this->post(route('password.email'), [
+            'email' => $user->email,
+        ]);
+
+        Notification::assertSentTo($user, ResetPassword::class);
+    }
+
+    public function test_reset_password_screen_can_be_rendered()
+    {
+        if (! Features::enabled(Features::resetPasswords())) {
+            return $this->markTestSkipped('Password updates are not enabled.');
+        }
+
+        Notification::fake();
+
+        $user = User::factory()->create();
+
+        $response = $this->post(route('password.email'), [
+            'email' => $user->email,
+        ]);
+
+        Notification::assertSentTo($user, ResetPassword::class, function ($notification) {
+            $response = $this->get(route('password.reset', ['token' => $notification->token]));
+
+            $response->assertStatus(200);
+
+            return true;
+        });
+    }
+
+    public function test_password_can_be_reset_with_valid_token()
+    {
+        if (! Features::enabled(Features::resetPasswords())) {
+            return $this->markTestSkipped('Password updates are not enabled.');
+        }
+
+        Notification::fake();
+
+        $user = User::factory()->create();
+
+        $response = $this->post(route('password.email'), [
+            'email' => $user->email,
+        ]);
+
+        Notification::assertSentTo($user, ResetPassword::class, function ($notification) use ($user) {
+            $response = $this->post(route('password.update'), [
+                'token' => $notification->token,
+                'email' => $user->email,
+                'password' => 'New-password-2026!',
+                'password_confirmation' => 'New-password-2026!',
+            ]);
+
+            $response->assertSessionHasNoErrors();
+
+            return true;
+        });
+    }
+}