Replace hand-rolled auth with Laravel Breeze (Livewire stack)

Adds the auth Breeze scaffolds that were missing before: password reset and email verification, plus a profile page (update name/email, change password, delete account). User now implements MustVerifyEmail so verification is actually enforced, not just scaffolded. This does mean accepting Tailwind v3 (postcss/tailwind.config.js) over the v4 CSS-first setup the app started with, and Livewire drops from ^4.3 to ^3.6.4 — both forced by Breeze/Volt's current compatibility requirements. Restored the Instrument Sans font Breeze's installer dropped so styling stays close to what we had. Reconciliation, since Breeze's installer assumes a blank-slate app: - Deleted the hand-rolled Login/Register Livewire components/views/ test — superseded by Breeze's Volt-based auth pages (resources/views/livewire/pages/auth/*), which also cover forgot-password, reset-password, verify-email, and confirm-password. - Deleted Breeze's own default welcome/dashboard views and its separate app layout + nav component — kept our existing components/layouts/app.blade.php as the one real app layout, used Breeze's minimal layouts/guest.blade.php only for the auth pages. - Rewrote routes/web.php merging our routes (home, sites, discover) with routes/auth.php; replaced every hardcoded route('dashboard') reference (5 Blade files plus, easy to miss, a plain PHP controller VerifyEmailController) with sites.index. - Logout: Breeze's Actions\Logout::__invoke() returns void, so wired directly as a route it silently no-ops instead of redirecting; fixed with a thin closure that calls it then redirects. - Fixed Breeze's own generated tests (Auth/AuthenticationTest, RegistrationTest, EmailVerificationTest, PasswordConfirmationTest) where they assumed the deleted dashboard route/nav component. Verified: full suite (28 tests, including Breeze's Registration/ Authentication/PasswordReset/PasswordConfirmation/PasswordUpdate/ EmailVerification/Profile tests plus our own GuestPreviewTest) passes against the huginn_testing MySQL database. Also smoke-tested for real: all key pages return 200, /profile redirects guests to /login, guest preview capping still works, and a real password-reset email was generated and logged with correct branding and a working link.
2026-07-25 15:36:43 +03:00
parent f5c9129774
commit 6435bccb20
54 changed files with 2878 additions and 321 deletions
@@ -0,0 +1,101 @@
+<?php
+
+namespace Tests\Feature;
+
+use App\Models\User;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Livewire\Volt\Volt;
+use Tests\TestCase;
+
+class ProfileTest extends TestCase
+{
+    use RefreshDatabase;
+
+    public function test_profile_page_is_displayed(): void
+    {
+        $user = User::factory()->create();
+
+        $response = $this->actingAs($user)->get('/profile');
+
+        $response
+            ->assertOk()
+            ->assertSeeVolt('profile.update-profile-information-form')
+            ->assertSeeVolt('profile.update-password-form')
+            ->assertSeeVolt('profile.delete-user-form');
+    }
+
+    public function test_profile_information_can_be_updated(): void
+    {
+        $user = User::factory()->create();
+
+        $this->actingAs($user);
+
+        $component = Volt::test('profile.update-profile-information-form')
+            ->set('name', 'Test User')
+            ->set('email', 'test@example.com')
+            ->call('updateProfileInformation');
+
+        $component
+            ->assertHasNoErrors()
+            ->assertNoRedirect();
+
+        $user->refresh();
+
+        $this->assertSame('Test User', $user->name);
+        $this->assertSame('test@example.com', $user->email);
+        $this->assertNull($user->email_verified_at);
+    }
+
+    public function test_email_verification_status_is_unchanged_when_the_email_address_is_unchanged(): void
+    {
+        $user = User::factory()->create();
+
+        $this->actingAs($user);
+
+        $component = Volt::test('profile.update-profile-information-form')
+            ->set('name', 'Test User')
+            ->set('email', $user->email)
+            ->call('updateProfileInformation');
+
+        $component
+            ->assertHasNoErrors()
+            ->assertNoRedirect();
+
+        $this->assertNotNull($user->refresh()->email_verified_at);
+    }
+
+    public function test_user_can_delete_their_account(): void
+    {
+        $user = User::factory()->create();
+
+        $this->actingAs($user);
+
+        $component = Volt::test('profile.delete-user-form')
+            ->set('password', 'password')
+            ->call('deleteUser');
+
+        $component
+            ->assertHasNoErrors()
+            ->assertRedirect('/');
+
+        $this->assertGuest();
+        $this->assertNull($user->fresh());
+    }
+
+    public function test_correct_password_must_be_provided_to_delete_account(): void
+    {
+        $user = User::factory()->create();
+
+        $this->actingAs($user);
+
+        $component = Volt::test('profile.delete-user-form')
+            ->set('password', 'wrong-password')
+            ->call('deleteUser');
+
+        $component
+            ->assertHasErrors('password')
+            ->assertNoRedirect();
+
+        $this->assertNotNull($user->fresh());
+    }
+}