66 lines
2.4 KiB
PHP
66 lines
2.4 KiB
PHP
<?php
|
|
declare(strict_types=1);
|
|
|
|
namespace Tests\Auth;
|
|
|
|
use App\Auth\Exception\InvalidResetTokenException;
|
|
use App\Auth\Infrastructure\PdoPasswordResetRepository as PasswordResetRepository;
|
|
use App\Auth\Application\PasswordResetApplicationService as PasswordResetService;
|
|
use App\Shared\Database\Migrator;
|
|
use App\Shared\Mail\MailServiceInterface;
|
|
use App\User\User;
|
|
use App\User\Infrastructure\PdoUserRepository as UserRepository;
|
|
use PDO;
|
|
use PHPUnit\Framework\TestCase;
|
|
|
|
#[\PHPUnit\Framework\Attributes\AllowMockObjectsWithoutExpectations]
|
|
|
|
final class PasswordResetServiceIntegrationTest extends TestCase
|
|
{
|
|
private PDO $db;
|
|
private PasswordResetService $service;
|
|
private UserRepository $users;
|
|
private PasswordResetRepository $resets;
|
|
|
|
protected function setUp(): void
|
|
{
|
|
$this->db = new PDO('sqlite::memory:', options: [
|
|
PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
|
|
PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,
|
|
]);
|
|
$this->db->sqliteCreateFunction('strip_tags', 'strip_tags', 1);
|
|
Migrator::run($this->db);
|
|
|
|
$this->users = new UserRepository($this->db);
|
|
$this->resets = new PasswordResetRepository($this->db);
|
|
$mail = new class implements MailServiceInterface {
|
|
public function send(string $to, string $subject, string $template, array $context = []): void
|
|
{
|
|
}
|
|
};
|
|
|
|
$this->service = new PasswordResetService($this->resets, $this->users, $mail, $this->db);
|
|
}
|
|
|
|
public function testResetPasswordConsumesTokenOnlyOnceAndUpdatesPassword(): void
|
|
{
|
|
$userId = $this->users->create(new User(0, 'alice', 'alice@example.com', password_hash('ancienpass1', PASSWORD_BCRYPT)));
|
|
$tokenRaw = 'token-brut-integration';
|
|
$tokenHash = hash('sha256', $tokenRaw);
|
|
$this->resets->create($userId, $tokenHash, date('Y-m-d H:i:s', time() + 3600));
|
|
|
|
$this->service->resetPassword($tokenRaw, 'nouveaupass1');
|
|
|
|
$user = $this->users->findById($userId);
|
|
self::assertNotNull($user);
|
|
self::assertTrue(password_verify('nouveaupass1', $user->getPasswordHash()));
|
|
|
|
$row = $this->db->query("SELECT used_at FROM password_resets WHERE token_hash = '{$tokenHash}'")->fetch();
|
|
self::assertIsArray($row);
|
|
self::assertNotEmpty($row['used_at']);
|
|
|
|
$this->expectException(InvalidResetTokenException::class);
|
|
$this->service->resetPassword($tokenRaw, 'encoreplusfort1');
|
|
}
|
|
}
|