mirror of
https://github.com/coollabsio/coolify.git
synced 2026-11-06 15:39:59 +00:00
Andras Bacsai
96ed09f0cc
An invited user who set a password with Forgot password kept the forced reset flag. A re-invite then replaced the password, and a revoked or expired invitation deleted the account.
35 lines
1.1 KiB
PHP
35 lines
1.1 KiB
PHP
<?php
|
|
|
|
use App\Models\InstanceSettings;
|
|
use App\Models\User;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
use Illuminate\Support\Facades\Hash;
|
|
use Illuminate\Support\Facades\Password;
|
|
|
|
uses(RefreshDatabase::class);
|
|
|
|
beforeEach(function () {
|
|
config()->set('app.maintenance.store', 'array');
|
|
InstanceSettings::unguarded(fn () => InstanceSettings::firstOrCreate(['id' => 0]));
|
|
});
|
|
|
|
it('clears the forced password reset of an invited user who resets the password', function () {
|
|
$user = User::factory()->create([
|
|
'email' => 'invitee@example.com',
|
|
'email_verified_at' => null,
|
|
'force_password_reset' => true,
|
|
]);
|
|
|
|
$this->post(route('password.update'), [
|
|
'token' => Password::createToken($user),
|
|
'email' => $user->email,
|
|
'password' => 'Own-Passw0rd!',
|
|
'password_confirmation' => 'Own-Passw0rd!',
|
|
])->assertSessionHasNoErrors();
|
|
|
|
$user->refresh();
|
|
expect(Hash::check('Own-Passw0rd!', $user->password))->toBeTrue()
|
|
->and($user->force_password_reset)->toBeFalse()
|
|
->and($user->isUnusedInvitedAccount())->toBeFalse();
|
|
});
|