Snapshot of main at 9f39a6e1e (2026-11-02)

tests/Feature/EmailVerificationTest.php

@@ -0,0 +1,75 @@
+<?php
+
+namespace Tests\Feature;
+
+use App\Models\User;
+use App\Providers\RouteServiceProvider;
+use Illuminate\Auth\Events\Verified;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Illuminate\Support\Facades\Event;
+use Illuminate\Support\Facades\URL;
+use Laravel\Fortify\Features;
+use Tests\TestCase;
+
+class EmailVerificationTest extends TestCase
+{
+    use RefreshDatabase;
+
+    public function test_email_verification_screen_can_be_rendered()
+    {
+        if (! Features::enabled(Features::emailVerification())) {
+            return $this->markTestSkipped('Email verification not enabled.');
+        }
+
+        $user = User::factory()->withPersonalTeam()->unverified()->create();
+
+        $response = $this->actingAs($user)->get('/email/verify');
+
+        $response->assertStatus(200);
+    }
+
+    public function test_email_can_be_verified()
+    {
+        if (! Features::enabled(Features::emailVerification())) {
+            return $this->markTestSkipped('Email verification not enabled.');
+        }
+
+        Event::fake();
+
+        $user = User::factory()->unverified()->create();
+
+        $verificationUrl = URL::temporarySignedRoute(
+            'verification.verify',
+            now()->addMinutes(60),
+            ['type' => 'user', 'id' => $user->id, 'hash' => sha1($user->email)]
+        );
+
+        $response = $this->actingAs($user)->get($verificationUrl);
+
+        Event::assertDispatched(\App\Events\ProfileVerified::class);
+
+        $this->assertTrue($user->fresh()->hasVerifiedEmail());
+        // Profiles verify through /email/verify/{type}/..., then land on the localized confirmation page
+        $response->assertRedirect();
+        $this->assertStringEndsWith('/email/verified', $response->headers->get('Location'));
+    }
+
+    public function test_email_can_not_verified_with_invalid_hash()
+    {
+        if (! Features::enabled(Features::emailVerification())) {
+            return $this->markTestSkipped('Email verification not enabled.');
+        }
+
+        $user = User::factory()->unverified()->create();
+
+        $verificationUrl = URL::temporarySignedRoute(
+            'verification.verify',
+            now()->addMinutes(60),
+            ['type' => 'user', 'id' => $user->id, 'hash' => sha1('wrong-email')]
+        );
+
+        $this->actingAs($user)->get($verificationUrl);
+
+        $this->assertFalse($user->fresh()->hasVerifiedEmail());
+    }
+}