3 use BookStack\Notifications\ConfirmEmail;
5 use Illuminate\Support\Facades\Notification;
7 class AuthTest extends BrowserKitTest
10 public function test_auth_working()
13 ->seePageIs('/login');
16 public function test_login()
18 $this->login('admin@admin.com', 'password')
22 public function test_public_viewing()
24 $settings = app('BookStack\Services\SettingService');
25 $settings->put('app-public', 'true');
31 public function test_registration_showing()
33 // Ensure registration form is showing
34 $this->setSettings(['registration-enabled' => 'true']);
35 $this->visit('/login')
38 ->seePageIs('/register');
41 public function test_normal_registration()
43 // Set settings and get user instance
44 $this->setSettings(['registration-enabled' => 'true']);
45 $user = factory(User::class)->make();
47 // Test form and ensure user is created
48 $this->visit('/register')
50 ->type($user->name, '#name')
51 ->type($user->email, '#email')
52 ->type($user->password, '#password')
53 ->press('Create Account')
56 ->seeInDatabase('users', ['name' => $user->name, 'email' => $user->email]);
59 public function test_empty_registration_redirects_back_with_errors()
61 // Set settings and get user instance
62 $this->setSettings(['registration-enabled' => 'true']);
64 // Test form and ensure user is created
65 $this->visit('/register')
66 ->press('Create Account')
67 ->see('The name field is required')
68 ->seePageIs('/register');
72 public function test_confirmed_registration()
77 // Set settings and get user instance
78 $this->setSettings(['registration-enabled' => 'true', 'registration-confirmation' => 'true']);
79 $user = factory(User::class)->make();
81 // Go through registration process
82 $this->visit('/register')
84 ->type($user->name, '#name')
85 ->type($user->email, '#email')
86 ->type($user->password, '#password')
87 ->press('Create Account')
88 ->seePageIs('/register/confirm')
89 ->seeInDatabase('users', ['name' => $user->name, 'email' => $user->email, 'email_confirmed' => false]);
91 // Ensure notification sent
92 $dbUser = User::where('email', '=', $user->email)->first();
93 Notification::assertSentTo($dbUser, ConfirmEmail::class);
95 // Test access and resend confirmation email
96 $this->login($user->email, $user->password)
97 ->seePageIs('/register/confirm/awaiting')
100 ->seePageIs('/register/confirm/awaiting')
101 ->press('Resend Confirmation Email');
103 // Get confirmation and confirm notification matches
104 $emailConfirmation = \DB::table('email_confirmations')->where('user_id', '=', $dbUser->id)->first();
105 Notification::assertSentTo($dbUser, ConfirmEmail::class, function($notification, $channels) use ($emailConfirmation) {
106 return $notification->token === $emailConfirmation->token;
109 // Check confirmation email confirmation activation.
110 $this->visit('/register/confirm/' . $emailConfirmation->token)
113 ->notSeeInDatabase('email_confirmations', ['token' => $emailConfirmation->token])
114 ->seeInDatabase('users', ['name' => $dbUser->name, 'email' => $dbUser->email, 'email_confirmed' => true]);
117 public function test_restricted_registration()
119 $this->setSettings(['registration-enabled' => 'true', 'registration-confirmation' => 'true', 'registration-restrict' => 'example.com']);
120 $user = factory(User::class)->make();
121 // Go through registration process
122 $this->visit('/register')
123 ->type($user->name, '#name')
124 ->type($user->email, '#email')
125 ->type($user->password, '#password')
126 ->press('Create Account')
127 ->seePageIs('/register')
128 ->dontSeeInDatabase('users', ['email' => $user->email])
129 ->see('That email domain does not have access to this application');
131 $user->email = 'barry@example.com';
133 $this->visit('/register')
134 ->type($user->name, '#name')
135 ->type($user->email, '#email')
136 ->type($user->password, '#password')
137 ->press('Create Account')
138 ->seePageIs('/register/confirm')
139 ->seeInDatabase('users', ['name' => $user->name, 'email' => $user->email, 'email_confirmed' => false]);
141 $this->visit('/')->seePageIs('/login')
142 ->type($user->email, '#email')
143 ->type($user->password, '#password')
145 ->seePageIs('/register/confirm/awaiting')
146 ->seeText('Email Address Not Confirmed');
149 public function test_restricted_registration_with_confirmation_disabled()
151 $this->setSettings(['registration-enabled' => 'true', 'registration-confirmation' => 'false', 'registration-restrict' => 'example.com']);
152 $user = factory(User::class)->make();
153 // Go through registration process
154 $this->visit('/register')
155 ->type($user->name, '#name')
156 ->type($user->email, '#email')
157 ->type($user->password, '#password')
158 ->press('Create Account')
159 ->seePageIs('/register')
160 ->dontSeeInDatabase('users', ['email' => $user->email])
161 ->see('That email domain does not have access to this application');
163 $user->email = 'barry@example.com';
165 $this->visit('/register')
166 ->type($user->name, '#name')
167 ->type($user->email, '#email')
168 ->type($user->password, '#password')
169 ->press('Create Account')
170 ->seePageIs('/register/confirm')
171 ->seeInDatabase('users', ['name' => $user->name, 'email' => $user->email, 'email_confirmed' => false]);
173 $this->visit('/')->seePageIs('/login')
174 ->type($user->email, '#email')
175 ->type($user->password, '#password')
177 ->seePageIs('/register/confirm/awaiting')
178 ->seeText('Email Address Not Confirmed');
181 public function test_user_creation()
183 $user = factory(User::class)->make();
186 ->visit('/settings/users')
187 ->click('Add New User')
188 ->type($user->name, '#name')
189 ->type($user->email, '#email')
190 ->check('roles[admin]')
191 ->type($user->password, '#password')
192 ->type($user->password, '#password-confirm')
194 ->seePageIs('/settings/users')
195 ->seeInDatabase('users', $user->toArray())
199 public function test_user_updating()
201 $user = $this->getNormalUser();
202 $password = $user->password;
204 ->visit('/settings/users')
206 ->seePageIs('/settings/users/' . $user->id)
208 ->type('Barry Scott', '#name')
210 ->seePageIs('/settings/users')
211 ->seeInDatabase('users', ['id' => $user->id, 'name' => 'Barry Scott', 'password' => $password])
212 ->notSeeInDatabase('users', ['name' => $user->name]);
215 public function test_user_password_update()
217 $user = $this->getNormalUser();
218 $userProfilePage = '/settings/users/' . $user->id;
220 ->visit($userProfilePage)
221 ->type('newpassword', '#password')
223 ->seePageIs($userProfilePage)
224 ->see('Password confirmation required')
226 ->type('newpassword', '#password')
227 ->type('newpassword', '#password-confirm')
229 ->seePageIs('/settings/users');
231 $userPassword = User::find($user->id)->password;
232 $this->assertTrue(\Hash::check('newpassword', $userPassword));
235 public function test_user_deletion()
237 $userDetails = factory(User::class)->make();
238 $user = $this->getEditor($userDetails->toArray());
241 ->visit('/settings/users/' . $user->id)
242 ->click('Delete User')
245 ->seePageIs('/settings/users')
246 ->notSeeInDatabase('users', ['name' => $user->name]);
249 public function test_user_cannot_be_deleted_if_last_admin()
251 $adminRole = \BookStack\Role::getRole('admin');
252 // Ensure we currently only have 1 admin user
253 $this->assertEquals(1, $adminRole->users()->count());
254 $user = $adminRole->users->first();
256 $this->asAdmin()->visit('/settings/users/' . $user->id)
257 ->click('Delete User')
259 ->seePageIs('/settings/users/' . $user->id)
260 ->see('You cannot delete the only admin');
263 public function test_logout()
270 ->seePageIs('/login');
273 public function test_reset_password_flow()
276 Notification::fake();
278 $this->visit('/login')->click('Forgot Password?')
279 ->seePageIs('/password/email')
280 ->type('admin@admin.com', 'email')
281 ->press('Send Reset Link')
282 ->see('A password reset link has been sent to admin@admin.com');
284 $this->seeInDatabase('password_resets', [
285 'email' => 'admin@admin.com'
288 $user = User::where('email', '=', 'admin@admin.com')->first();
290 Notification::assertSentTo($user, \BookStack\Notifications\ResetPassword::class);
291 $n = Notification::sent($user, \BookStack\Notifications\ResetPassword::class);
293 $this->visit('/password/reset/' . $n->first()->token)
294 ->see('Reset Password')
295 ->submitForm('Reset Password', [
296 'email' => 'admin@admin.com',
297 'password' => 'randompass',
298 'password_confirmation' => 'randompass'
300 ->see('Your password has been successfully reset');
303 public function test_reset_password_page_shows_sign_links()
305 $this->setSettings(['registration-enabled' => 'true']);
306 $this->visit('/password/email')
308 ->seeLink('Sign up');
313 * @param string $email
314 * @param string $password
317 protected function login($email, $password)
319 return $this->visit('/login')
320 ->type($email, '#email')
321 ->type($password, '#password')