wip: guest account registration (self-service and booking create flow)

2026-06-23 16:27:09 +02:00
1 parent e4430ac5c5
commit d74888f64b
@@ -256,6 +256,59 @@ class PersonalDataControllerTest extends TestCase
        ], $controller->flashes);
    }

+    public function testIndexConsumesWelcomeActivationAfterForcedPasswordChangeSucceeds(): void
+    {
+        $personalData = $this->createCompletePersonalData();
+        $controller = $this->createController(true, true, $this->validator(), 'NewPassw0rd!');
+        $controller->user->markWelcomeActivationPending('current-nonce', new \DateTimeImmutable('+30 minutes'));
+
+        $controller->apiClient
+            ->expects(self::once())
+            ->method('getPersonalData')
+            ->with('[email protected]', null, null)
+            ->willReturn($personalData);
+        $controller->apiClient
+            ->expects(self::once())
+            ->method('updatePersonalData')
+            ->with('[email protected]', $personalData)
+            ->willReturn($personalData);
+        $controller->newsletterManager
+            ->expects(self::once())
+            ->method('hasConfirmedOptIn')
+            ->with('[email protected]')
+            ->willReturn(false);
+        $controller->newsletterManager
+            ->expects(self::once())
+            ->method('hasPendingConfirmation')
+            ->with('[email protected]')
+            ->willReturn(false);
+        $controller->dataLoader
+            ->expects(self::once())
+            ->method('invalidateUserBookingCaches')
+            ->with($controller->user);
+        $controller->entityManager
+            ->expects(self::once())
+            ->method('flush');
+        $controller->passwordHasher
+            ->expects(self::once())
+            ->method('hashPassword')
+            ->with($controller->user, 'NewPassw0rd!')
+            ->willReturn('new-local-hash');
+
+        $request = Request::create('/personal-data', 'POST');
+        $request->setSession(new Session(new MockArraySessionStorage()));
+        $request->getSession()->set(PersonalDataController::SESSION_FORCE_PASSWORD_CHANGE_KEY, true);
+
+        $response = $controller->index($request);
+
+        self::assertSame(302, $response->getStatusCode());
+        self::assertSame('new-local-hash', $controller->user->getPassword());
+        self::assertNull($controller->user->getWelcomeActivationNonce());
+        self::assertNull($controller->user->getWelcomeActivationExpiresAt());
+        self::assertNotNull($controller->user->getWelcomeActivatedAt());
+        self::assertFalse($request->getSession()->has(PersonalDataController::SESSION_FORCE_PASSWORD_CHANGE_KEY));
+    }
+
    public function testIndexDoesNotPersistInvalidFormSubmission(): void
    {
        $controller = $this->createController(true, false, $this->validator(), 'NewPassw0rd!');