feat: local password reset

2026-06-23 16:27:08 +02:00
1 parent fe562e5e73
commit 8bb7f08074
@@ -0,0 +1,103 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Tests\Controller;
+
+use App\Entity\User;
+use App\Service\PasswordResetManager;
+use Symfony\Bundle\FrameworkBundle\Test\WebTestCase;
+use Symfony\Component\HttpFoundation\Request;
+
+class ResetPasswordControllerTest extends WebTestCase
+{
+    public function testPasswordResetRequestUsesGenericSuccessMessageForExistingAccount(): void
+    {
+        $client = self::createClient([], [
+            'HTTPS' => 'on',
+        ]);
+        $client->disableReboot();
+
+        $manager = $this->createMock(PasswordResetManager::class);
+        $manager
+            ->expects(self::once())
+            ->method('requestPasswordReset')
+            ->with('[email protected]')
+            ->willReturn(true);
+        self::getContainer()->set(PasswordResetManager::class, $manager);
+
+        $crawler = $client->request('GET', '/reset-password');
+        $form = $crawler->selectButton('Passwort-Reset-Link anfordern')->form([
+            'form[email]' => '[email protected]',
+        ]);
+        $client->submit($form);
+
+        self::assertResponseRedirects('/');
+        $client->followRedirect();
+
+        self::assertStringContainsString('Du erhältst in Kürze eine E-Mail mit einem Link zum Zurücksetzen deines Passworts', $client->getResponse()->getContent());
+    }
+
+    public function testPasswordResetRequestUsesSameGenericSuccessMessageForMissingAccount(): void
+    {
+        $client = self::createClient([], [
+            'HTTPS' => 'on',
+        ]);
+        $client->disableReboot();
+
+        $manager = $this->createMock(PasswordResetManager::class);
+        $manager
+            ->expects(self::once())
+            ->method('requestPasswordReset')
+            ->with('[email protected]')
+            ->willReturn(false);
+        self::getContainer()->set(PasswordResetManager::class, $manager);
+
+        $crawler = $client->request('GET', '/reset-password');
+        $form = $crawler->selectButton('Passwort-Reset-Link anfordern')->form([
+            'form[email]' => '[email protected]',
+        ]);
+        $client->submit($form);
+
+        self::assertResponseRedirects('/');
+        $client->followRedirect();
+
+        self::assertStringContainsString('Du erhältst in Kürze eine E-Mail mit einem Link zum Zurücksetzen deines Passworts', $client->getResponse()->getContent());
+    }
+
+    public function testPasswordResetConfirmationDisplaysFormAndUpdatesPassword(): void
+    {
+        $client = self::createClient([], [
+            'HTTPS' => 'on',
+        ]);
+        $client->disableReboot();
+
+        $user = new User('[email protected]');
+        $manager = $this->createMock(PasswordResetManager::class);
+        $manager
+            ->expects(self::exactly(2))
+            ->method('validateResetRequest')
+            ->with(self::isInstanceOf(Request::class))
+            ->willReturn($user);
+        $manager
+            ->expects(self::once())
+            ->method('resetPassword')
+            ->with($user, 'new-password');
+        self::getContainer()->set(PasswordResetManager::class, $manager);
+
+        $crawler = $client->request('GET', '/reset-password/[email protected]&nonce=token&expires=9999999999&_hash=signature');
+        self::assertResponseIsSuccessful();
+        self::assertSelectorTextContains('h1', 'Neues Passwort');
+
+        $form = $crawler->selectButton('Passwort speichern')->form([
+            'form[password][first]' => 'new-password',
+            'form[password][second]' => 'new-password',
+        ]);
+        $client->submit($form);
+
+        self::assertResponseRedirects('/');
+        $client->followRedirect();
+
+        self::assertStringContainsString('Dein Passwort wurde aktualisiert', $client->getResponse()->getContent());
+    }
+}