daevin 1.0.0

package/Daevin_test/app/Containers/AppSection/Authentication/UI/API/Tests/Functional/RegisterUserTest.php

@@ -0,0 +1,208 @@
+<?php
+
+namespace App\Containers\AppSection\Authentication\UI\API\Tests\Functional;
+
+use App\Containers\AppSection\Authentication\Notifications\VerifyEmail;
+use App\Containers\AppSection\Authentication\Notifications\Welcome;
+use App\Containers\AppSection\Authentication\UI\API\Tests\ApiTestCase;
+use App\Containers\AppSection\User\Models\User;
+use Illuminate\Support\Facades\Notification;
+use Illuminate\Testing\Fluent\AssertableJson;
+
+/**
+ * Class RegisterUserTest.
+ *
+ * @group authentication
+ * @group api
+ */
+class RegisterUserTest extends ApiTestCase
+{
+    protected string $endpoint = 'post@v1/register';
+
+    protected bool $auth = false;
+
+    protected array $access = [
+        'permissions' => '',
+        'roles' => '',
+    ];
+
+    public function testGivenEmailVerificationEnabled_RegisterNewUserWithCredentials(): void
+    {
+        config(['appSection-authentication.require_email_verification' => true]);
+        config(['appSection-authentication.allowed-verify-email-urls' => 'http://some.test/known/url']);
+
+        $data = [
+            'email' => 'apiato@mail.test',
+            'password' => 's3cr3tPa$$',
+            'verification_url' => 'http://some.test/known/url',
+        ];
+
+        $response = $this->makeCall($data);
+
+        $response->assertStatus(200);
+        $response->assertJson(
+            fn (AssertableJson $json) => $json->has('data')
+                ->where('data.email', $data['email'])
+                ->etc()
+        );
+    }
+
+    public function testGivenEmailVerificationDisabled_RegisterNewUserWithCredentials(): void
+    {
+        config(['appSection-authentication.require_email_verification' => false]);
+        $data = [
+            'email' => 'apiato@mail.test',
+            'password' => 's3cr3tPa$$',
+        ];
+
+        $response = $this->makeCall($data);
+
+        $response->assertStatus(200);
+        $response->assertJson(
+            fn (AssertableJson $json) => $json->has('data')
+                ->where('data.email', $data['email'])
+                ->etc()
+        );
+    }
+
+    public function testRegisterNewUserUsingGetVerb(): void
+    {
+        $response = $this->endpoint('get@v1/register')->makeCall();
+
+        $response->assertStatus(405);
+        $response->assertJson(
+            fn (AssertableJson $json) => $json->has('message')
+                ->where('message', 'The GET method is not supported for route v1/register. Supported methods: POST.')
+                ->etc()
+        );
+    }
+
+    public function testRegisterExistingUser(): void
+    {
+        $userDetails = [
+            'email' => 'apiato@mail.test',
+            'password' => 'secret',
+        ];
+
+        $this->getTestingUser($userDetails);
+
+        $data = [
+            'email' => $userDetails['email'],
+            'password' => $userDetails['password'],
+        ];
+
+        $response = $this->makeCall($data);
+
+        $response->assertStatus(422);
+        $response->assertJson(
+            fn (AssertableJson $json) => $json->has('errors')
+                ->where('errors.email.0', 'The email has already been taken.')
+                ->etc()
+        );
+    }
+
+    public function testRegisterNewUserWithoutData(): void
+    {
+        $data = [];
+
+        $response = $this->makeCall($data);
+
+        $response->assertStatus(422);
+
+        if (config('appSection-authentication.require_email_verification')) {
+            $response->assertJson(
+                fn (AssertableJson $json) => $json->hasAll(['message', 'errors' => 3])
+                    ->has(
+                        'errors',
+                        fn (AssertableJson $json) => $json->where('email.0', 'The email field is required.')
+                            ->where('password.0', 'The password field is required.')
+                            ->where('verification_url.0', 'The verification url field is required.')
+                    )
+            );
+        } else {
+            $response->assertJson(
+                fn (AssertableJson $json) => $json->hasAll(['message', 'errors' => 2])
+                    ->has(
+                        'errors',
+                        fn (AssertableJson $json) => $json->where('email.0', 'The email field is required.')
+                            ->where('password.0', 'The password field is required.')
+                    )
+            );
+        }
+    }
+
+    public function testRegisterNewUserWithInvalidEmail(): void
+    {
+        $data = [
+            'email' => 'missing-at.test',
+        ];
+
+        $response = $this->makeCall($data);
+
+        $response->assertStatus(422);
+        $response->assertJson(
+            fn (AssertableJson $json) => $json->has('errors')
+                ->where('errors.email.0', 'The email must be a valid email address.')
+                ->etc()
+        );
+    }
+
+    public function testRegisterNewUserWithInvalidPassword(): void
+    {
+        $data = [
+            'password' => '((((()))))',
+        ];
+
+        $response = $this->makeCall($data);
+
+        $response->assertStatus(422);
+        $response->assertJson(
+            fn (AssertableJson $json) => $json->has('errors')
+                ->has(
+                    'errors.password',
+                    fn (AssertableJson $json) => $json
+                        ->where('0', 'The password must contain at least one uppercase and one lowercase letter.')
+                        ->where('1', 'The password must contain at least one letter.')
+                        ->where('2', 'The password must contain at least one number.')
+                )
+                ->etc()
+        );
+    }
+
+    public function testRegisterNewUserWithNotAllowedVerificationUrl(): void
+    {
+        config(['appSection-authentication.require_email_verification' => true]);
+
+        $data = [
+            'email' => 'test@test.test',
+            'password' => 's3cr3tPa$$',
+            'verification_url' => 'http://notallowed.test/wrong/hopyfuly/noone/make/a/route/like/this',
+        ];
+
+        $response = $this->makeCall($data);
+
+        $response->assertStatus(422);
+        $response->assertJson(
+            fn (AssertableJson $json) => $json->hasAll(['message', 'errors' => 1])
+                ->where('errors.verification_url.0', 'The selected verification url is invalid.')
+        );
+    }
+
+    public function testGivenEmailVerificationDisabled_ShouldNotSendVerificationEmail(): void
+    {
+        config(['appSection-authentication.require_email_verification' => false]);
+
+        Notification::fake();
+        $data = [
+            'email' => 'test@test.test',
+            'password' => 's3cr3tPa$$',
+            'verification_url' => config('appSection-authentication.allowed-verify-email-urls')[0],
+        ];
+
+        $response = $this->makeCall($data);
+        $registeredUser = User::find($this->decode($response->json()['data']['id']));
+        $response->assertStatus(200);
+        Notification::assertSentTo($registeredUser, Welcome::class);
+        Notification::assertNotSentTo($registeredUser, VerifyEmail::class);
+    }
+}

package/Daevin_test/app/Containers/AppSection/Authentication/UI/API/Tests/Functional/ResetPasswordTest.php

@@ -0,0 +1,79 @@
+<?php
+
+namespace App\Containers\AppSection\Authentication\UI\API\Tests\Functional;
+
+use App\Containers\AppSection\Authentication\Tasks\CreatePasswordResetTokenTask;
+use App\Containers\AppSection\Authentication\UI\API\Tests\ApiTestCase;
+use Illuminate\Testing\Fluent\AssertableJson;
+
+/**
+ * Class ResetPasswordTest.
+ *
+ * @group authentication
+ * @group api
+ */
+class ResetPasswordTest extends ApiTestCase
+{
+    protected string $endpoint = 'post@v1/password/reset';
+
+    protected array $access = [
+        'permissions' => '',
+        'roles' => '',
+    ];
+
+    public function testResetPassword(): void
+    {
+        $this->getTestingUser([
+            'email' => 'someone@something.test',
+            'password' => 'old pass',
+        ]);
+        $token = app(CreatePasswordResetTokenTask::class)->run($this->testingUser);
+        $data = [
+            'email' => $this->testingUser->email,
+            'password' => 's3cr3tPa$$',
+            'token' => $token,
+        ];
+
+        $response = $this->makeCall($data);
+
+        $response->assertStatus(204);
+    }
+
+    public function testResetPasswordWithInvalidEmail(): void
+    {
+        $data = [
+            'email' => 'missing-at.test',
+        ];
+
+        $response = $this->makeCall($data);
+
+        $response->assertStatus(422);
+        $response->assertJson(
+            fn(AssertableJson $json) => $json->has('errors')
+                ->where('errors.email.0', 'The email must be a valid email address.')
+                ->etc()
+        );
+    }
+
+    public function testResetPasswordWithInvalidPassword(): void
+    {
+        $data = [
+            'password' => '((((()))))',
+        ];
+
+        $response = $this->makeCall($data);
+
+        $response->assertStatus(422);
+        $response->assertJson(
+            fn(AssertableJson $json) => $json->has('errors')
+                ->has(
+                    'errors.password',
+                    fn(AssertableJson $json) => $json
+                        ->where('0', 'The password must contain at least one uppercase and one lowercase letter.')
+                        ->where('1', 'The password must contain at least one letter.')
+                        ->where('2', 'The password must contain at least one number.')
+                )
+                ->etc()
+        );
+    }
+}

package/Daevin_test/app/Containers/AppSection/Authentication/UI/API/Tests/Functional/SendVerificationEmailTest.php

@@ -0,0 +1,95 @@
+<?php
+
+namespace App\Containers\AppSection\Authentication\UI\API\Tests\Functional;
+
+use App\Containers\AppSection\Authentication\Notifications\VerifyEmail;
+use App\Containers\AppSection\Authentication\UI\API\Tests\ApiTestCase;
+use App\Containers\AppSection\User\Models\User;
+use Illuminate\Support\Facades\Notification;
+use Illuminate\Testing\Fluent\AssertableJson;
+
+/**
+ * Class SendVerificationEmailTest.
+ *
+ * @group authentication
+ * @group api
+ */
+class SendVerificationEmailTest extends ApiTestCase
+{
+    protected string $endpoint = 'post@v1/email/verification-notification';
+
+    protected array $access = [
+        'permissions' => '',
+        'roles' => '',
+    ];
+
+    public function testGivenEmailVerificationEnabled_SendVerificationEmail(): void
+    {
+        if (!config('appSection-authentication.require_email_verification')) {
+            $this->markTestSkipped();
+        }
+        Notification::fake();
+        $this->testingUser = User::factory()->unverified()->create();
+
+        $data = [
+            'verification_url' => config('appSection-authentication.allowed-verify-email-urls')[0],
+        ];
+
+        $response = $this->makeCall($data);
+
+        $response->assertStatus(202);
+        Notification::assertSentTo($this->testingUser, VerifyEmail::class);
+    }
+
+    public function testSendingWithoutRequiredData_ShouldThrowError(): void
+    {
+        if (!config('appSection-authentication.require_email_verification')) {
+            $this->markTestSkipped();
+        }
+        $data = [];
+
+        $response = $this->makeCall($data);
+
+        $response->assertStatus(422);
+
+        $response->assertJson(
+            fn (AssertableJson $json) => $json->hasAll(['message', 'errors' => 1])
+                ->has(
+                    'errors',
+                    fn (AssertableJson $json) => $json->where('verification_url.0', 'The verification url field is required.')
+                )
+        );
+    }
+
+    public function testRegisterNewUserWithNotAllowedVerificationUrl(): void
+    {
+        if (!config('appSection-authentication.require_email_verification')) {
+            $this->markTestSkipped();
+        }
+        $data = [
+            'email' => 'test@test.test',
+            'password' => 's3cr3tPa$$',
+            'name' => 'Bruce Lee',
+            'verification_url' => 'http://notallowed.test/wrong',
+        ];
+
+        $response = $this->makeCall($data);
+
+        $response->assertStatus(422);
+        $response->assertJson(
+            fn (AssertableJson $json) => $json->hasAll(['message', 'errors' => 1])
+                ->where('errors.verification_url.0', 'The selected verification url is invalid.')
+        );
+    }
+
+    public function testGivenEmailVerificationIsDisabled_ShouldThrow404(): void
+    {
+        if (config('appSection-authentication.require_email_verification')) {
+            $this->markTestSkipped();
+        }
+        $response = $this->makeCall([]);
+
+        $response->assertStatus(404);
+
+    }
+}

package/Daevin_test/app/Containers/AppSection/Authentication/UI/API/Tests/Functional/Stubs/oauth-private.key

@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----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==
+-----END RSA PRIVATE KEY-----

package/Daevin_test/app/Containers/AppSection/Authentication/UI/API/Tests/Functional/Stubs/oauth-public.key

@@ -0,0 +1,14 @@
+-----BEGIN PUBLIC KEY-----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+-----END PUBLIC KEY-----

package/Daevin_test/app/Containers/AppSection/Authentication/UI/API/Tests/Functional/VerifyEmailTest.php

@@ -0,0 +1,84 @@
+<?php
+
+namespace App\Containers\AppSection\Authentication\UI\API\Tests\Functional;
+
+use App\Containers\AppSection\Authentication\Notifications\EmailVerified;
+use App\Containers\AppSection\Authentication\UI\API\Tests\ApiTestCase;
+use App\Containers\AppSection\User\Models\User;
+use Illuminate\Support\Facades\Notification;
+use Illuminate\Support\Facades\URL;
+
+/**
+ * Class VerifyEmailTest.
+ *
+ * @group authentication
+ * @group api
+ */
+class VerifyEmailTest extends ApiTestCase
+{
+    protected string $endpoint = 'post@v1/email/verify/{id}/{hash}';
+
+    protected array $access = [
+        'roles' => '',
+        'permissions' => '',
+    ];
+
+    public function testVerifyEmail(): void
+    {
+        Notification::fake();
+        $unverifiedUser = User::factory()->unverified()->create();
+        $hashedEmail = sha1($unverifiedUser->getEmailForVerification());
+        // enable email verification
+        config(['appSection-authentication.require_email_verification' => true]);
+        $url = URL::temporarySignedRoute(
+            'verification.verify',
+            now()->addMinutes(30),
+            [
+                'id' => $unverifiedUser->getHashedKey(),
+                'hash' => $hashedEmail,
+            ]
+        );
+
+        $match = [];
+        $expires = $match[preg_match('/expires=(.*?)&/', $url, $match)];
+        $signature = $match[preg_match('/signature=(.*)/', $url, $match)];
+
+        $response = $this->injectId($unverifiedUser->id)
+            ->injectId($hashedEmail, skipEncoding: true, replace: '{hash}')
+            ->endpoint($this->endpoint . "?expires=$expires&signature=$signature")
+            ->makeCall();
+
+        $response->assertStatus(200);
+        $unverifiedUser->refresh();
+        $this->assertTrue($unverifiedUser->hasVerifiedEmail());
+        Notification::assertSentTo($unverifiedUser, EmailVerified::class);
+    }
+
+    public function testVerifyEmailShouldNotBeAcceptedIfRoutesSignatureIsNotVerified(): void
+    {
+        Notification::fake();
+        $unverifiedUser = User::factory()->unverified()->create();
+        $hashedEmail = sha1($unverifiedUser->getEmailForVerification());
+        // enable email verification
+        config(['appSection-authentication.require_email_verification' => true]);
+        $url = URL::temporarySignedRoute(
+            'verification.verify',
+            now()->addMinutes(30),
+            [
+                'id' => $unverifiedUser->getHashedKey(),
+                'hash' => $hashedEmail,
+            ]
+        );
+
+        $match = [];
+        $expires = $match[preg_match('/expires=(.*?)&/', $url, $match)];
+        $signature = 'invalid_sig';
+
+        $response = $this->injectId($unverifiedUser->id)
+            ->injectId($hashedEmail, skipEncoding: true, replace: '{hash}')
+            ->endpoint($this->endpoint . "?expires=$expires&signature=$signature")
+            ->makeCall();
+
+        $response->assertStatus(403);
+    }
+}

package/Daevin_test/app/Containers/AppSection/Authentication/UI/WEB/Controllers/LoginController.php

@@ -0,0 +1,39 @@
+<?php
+
+namespace App\Containers\AppSection\Authentication\UI\WEB\Controllers;
+
+use App\Containers\AppSection\Authentication\Actions\WebLoginAction;
+use App\Containers\AppSection\Authentication\UI\WEB\Requests\LoginRequest;
+use App\Ship\Parents\Controllers\WebController;
+use App\Ship\Providers\RouteServiceProvider;
+use Exception;
+use Illuminate\Contracts\Foundation\Application;
+use Illuminate\Contracts\View\Factory;
+use Illuminate\Contracts\View\View;
+use Illuminate\Http\RedirectResponse;
+
+class LoginController extends WebController
+{
+    /**
+     * @return Factory|View|Application
+     */
+    public function showLoginPage(): Factory|View|Application
+    {
+        return view('appSection@authentication::login');
+    }
+
+    /**
+     * @param LoginRequest $request
+     * @return RedirectResponse
+     */
+    public function login(LoginRequest $request): RedirectResponse
+    {
+        try {
+            app(WebLoginAction::class)->run($request);
+        } catch (Exception $e) {
+            return redirect()->route(RouteServiceProvider::LOGIN)->with('login', $e->getMessage());
+        }
+
+        return redirect()->intended();
+    }
+}

package/Daevin_test/app/Containers/AppSection/Authentication/UI/WEB/Controllers/LogoutController.php

@@ -0,0 +1,25 @@
+<?php
+
+namespace App\Containers\AppSection\Authentication\UI\WEB\Controllers;
+
+use App\Containers\AppSection\Authentication\Actions\WebLogoutAction;
+use App\Containers\AppSection\Authentication\UI\WEB\Requests\LogoutRequest;
+use App\Ship\Parents\Controllers\WebController;
+use App\Ship\Providers\RouteServiceProvider;
+use Illuminate\Contracts\Foundation\Application;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Routing\Redirector;
+
+class LogoutController extends WebController
+{
+    /**
+     * @param LogoutRequest $request
+     * @return Redirector|Application|RedirectResponse
+     */
+    public function logout(LogoutRequest $request): Redirector|Application|RedirectResponse
+    {
+        app(WebLogoutAction::class)->run();
+
+        return redirect()->route(RouteServiceProvider::HOME);
+    }
+}

package/Daevin_test/app/Containers/AppSection/Authentication/UI/WEB/Requests/LoginRequest.php

@@ -0,0 +1,54 @@
+<?php
+
+namespace App\Containers\AppSection\Authentication\UI\WEB\Requests;
+
+use App\Containers\AppSection\Authentication\Classes\LoginCustomAttribute;
+use App\Ship\Parents\Requests\Request as ParentRequest;
+
+class LoginRequest extends ParentRequest
+{
+    /**
+     * Define which Roles and/or Permissions has access to this request.
+     */
+    protected array $access = [
+        'permissions' => null,
+        'roles' => null,
+    ];
+
+    /**
+     * Id's that needs decoding before applying the validation rules.
+     */
+    protected array $decode = [
+
+    ];
+
+    /**
+     * Defining the URL parameters (`/stores/999/items`) allows applying
+     * validation rules on them and allows accessing them like request data.
+     */
+    protected array $urlParameters = [
+
+    ];
+
+    /**
+     * Get the validation rules that apply to the request.
+     */
+    public function rules(): array
+    {
+        $rules = [
+            'password' => 'required|min:3|max:30',
+        ];
+
+        return LoginCustomAttribute::mergeValidationRules($rules);
+    }
+
+    /**
+     * Determine if the user is authorized to make this request.
+     */
+    public function authorize(): bool
+    {
+        return $this->check([
+            'hasAccess',
+        ]);
+    }
+}