fix: anonymize user first and last names

tests/Service/DatabaseAnonymizerTest.php

@@ -26,6 +26,8 @@ class DatabaseAnonymizerTest extends TestCase
         );
 
         $user = new User('[email protected]');
+        $user->setFirstName('Mia');
+        $user->setLastName('Muster');
         $user->setPassword('plain-text-password');
         $user->setPersonId(12345);
         $user->setAddressId(67890);
@@ -162,6 +164,10 @@ class DatabaseAnonymizerTest extends TestCase
         $service->anonymizeAccommodationBooking($booking);
 
         self::assertStringEndsWith('@example.test', $user->getEmail());
+        self::assertNotSame('Mia', $user->getFirstName());
+        self::assertNotSame('Muster', $user->getLastName());
+        self::assertNotNull($user->getFirstName());
+        self::assertNotNull($user->getLastName());
         self::assertSame('plain-text-password', $user->getPassword());
         self::assertSame(12345, $user->getPersonId());
         self::assertSame(67890, $user->getAddressId());
@@ -254,4 +260,46 @@ class DatabaseAnonymizerTest extends TestCase
         self::assertNull($booking->getCity());
         self::assertNull($booking->getRemarks());
     }
+
+    /**
+     * Most accounts carry no name until the BusPro import fills one in. Minting one here would
+     * turn an incomplete profile into one that reads as complete while profileComplete still
+     * says otherwise.
+     */
+    public function testAnonymizeUserLeavesUnsetNamesNull(): void
+    {
+        $service = new DatabaseAnonymizer(
+            $this->createStub(EntityManagerInterface::class),
+            new NullLogger(),
+        );
+
+        $user = new User('[email protected]');
+
+        $service->anonymizeUser($user);
+
+        self::assertStringEndsWith('@example.test', (string) $user->getEmail());
+        self::assertNull($user->getFirstName());
+        self::assertNull($user->getLastName());
+    }
+
+    /**
+     * Two accounts of the same person are an intended state, and User::$email is unique. The
+     * identity is therefore looked up by email alone: resolving it by name too would hand both
+     * accounts the same synthetic email and break the run on a constraint violation.
+     */
+    public function testAnonymizeUserGivesTwoAccountsOfTheSamePersonDistinctEmails(): void
+    {
+        $service = new DatabaseAnonymizer(
+            $this->createStub(EntityManagerInterface::class),
+            new NullLogger(),
+        );
+
+        $private = (new User('[email protected]'))->setFirstName('Mia')->setLastName('Muster');
+        $staff = (new User('[email protected]'))->setFirstName('Mia')->setLastName('Muster');
+
+        $service->anonymizeUser($private);
+        $service->anonymizeUser($staff);
+
+        self::assertNotSame($private->getEmail(), $staff->getEmail());
+    }
 }