feat: password reset (#179) (#186)

* feat: password reset via symfonycasts/reset-password-bundle (#179) Implements the full password reset flow using the SymfonyCasts reset-password-bundle. * ci: share base layer cache between dev and prod builds * fix: use CSS form selector in tests instead of translated button text * fix: translate missing validator string for reset password email field * fix: translate reset password form labels via TranslatorInterface * ci: override MAILER_DSN to null for PHPUnit so mailer host is not required
2026-07-08 08:30:15 +02:00 · 2026-07-07 23:43:24 +02:00
parent 47077288d5
commit b915d87d4a
28 changed files with 701 additions and 5 deletions
@@ -0,0 +1,104 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Tvdt\Tests\Controller;
+
+use Doctrine\ORM\EntityManagerInterface;
+use PHPUnit\Framework\Attributes\CoversClass;
+use Symfony\Bundle\FrameworkBundle\KernelBrowser;
+use Symfony\Bundle\FrameworkBundle\Test\WebTestCase;
+use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
+use SymfonyCasts\Bundle\ResetPassword\ResetPasswordHelperInterface;
+use Tvdt\Controller\ResetPasswordController;
+use Tvdt\Entity\User;
+
+#[CoversClass(ResetPasswordController::class)]
+final class ResetPasswordControllerTest extends WebTestCase
+{
+    private KernelBrowser $client;
+
+    private EntityManagerInterface $entityManager;
+
+    protected function setUp(): void
+    {
+        $this->client = self::createClient();
+        $this->entityManager = self::getContainer()->get(EntityManagerInterface::class);
+    }
+
+    public function testRequestPageLoads(): void
+    {
+        $this->client->request(Request::METHOD_GET, '/reset-password');
+
+        $this->assertResponseIsSuccessful();
+        $this->assertSelectorExists('form');
+    }
+
+    public function testRequestWithUnknownEmailRedirectsToCheckEmail(): void
+    {
+        $this->client->request(Request::METHOD_GET, '/reset-password');
+        $form = $this->client->getCrawler()->filter('form')->form([
+            'reset_password_request_form[email]' => 'unknown@example.org',
+        ]);
+        $this->client->submit($form);
+
+        $this->assertResponseRedirects('/reset-password/check-email');
+    }
+
+    public function testRequestWithKnownEmailRedirectsToCheckEmail(): void
+    {
+        $this->client->request(Request::METHOD_GET, '/reset-password');
+        $form = $this->client->getCrawler()->filter('form')->form([
+            'reset_password_request_form[email]' => 'test@example.org',
+        ]);
+        $this->client->submit($form);
+
+        $this->assertResponseRedirects('/reset-password/check-email');
+    }
+
+    public function testCheckEmailPageLoads(): void
+    {
+        $this->client->request(Request::METHOD_GET, '/reset-password/check-email');
+
+        $this->assertResponseIsSuccessful();
+    }
+
+    public function testResetWithInvalidTokenRedirectsToRequest(): void
+    {
+        $this->client->request(Request::METHOD_GET, '/reset-password/reset/invalidtoken');
+        $this->client->followRedirect();
+
+        $this->assertResponseRedirects('/reset-password');
+    }
+
+    public function testFullResetFlow(): void
+    {
+        $user = $this->entityManager->getRepository(User::class)->findOneBy(['email' => 'test@example.org']);
+        $this->assertInstanceOf(User::class, $user);
+
+        /** @var ResetPasswordHelperInterface $helper */
+        $helper = self::getContainer()->get(ResetPasswordHelperInterface::class);
+        $resetToken = $helper->generateResetToken($user);
+
+        $this->client->request(Request::METHOD_GET, '/reset-password/reset/'.$resetToken->getToken());
+        $this->assertResponseRedirects('/reset-password/reset');
+
+        $this->client->followRedirect();
+        $this->assertResponseIsSuccessful();
+
+        $form = $this->client->getCrawler()->filter('form')->form([
+            'change_password_form[plainPassword][first]' => 'NewPass123!',
+            'change_password_form[plainPassword][second]' => 'NewPass123!',
+        ]);
+        $this->client->submit($form);
+        $this->assertResponseRedirects('/backoffice/');
+
+        $this->entityManager->clear();
+        $updatedUser = $this->entityManager->getRepository(User::class)->findOneBy(['email' => 'test@example.org']);
+        $this->assertInstanceOf(User::class, $updatedUser);
+
+        $hasher = self::getContainer()->get(UserPasswordHasherInterface::class);
+        $this->assertTrue($hasher->isPasswordValid($updatedUser, 'NewPass123!'));
+    }
+}