create([ 'email' => 'test@example.com', ]); $timezone = app(TimezoneService::class)->getTimezones()[0]; $this->actingAs($user); // Act $response = $this->put('/user/profile-information', [ 'name' => 'Test Name', 'email' => 'test@example.com', 'timezone' => $timezone, 'week_start' => Weekday::Sunday->value, ]); // Assert $response->assertStatus(403); $user = $user->fresh(); $this->assertEquals($user->name, $user->name); } public function test_pending_email_verification_redirects_with_danger_banner_when_email_already_in_use(): void { // Arrange User::factory()->create([ 'email' => 'taken@example.com', 'is_placeholder' => false, ]); $user = User::factory()->create([ 'email' => 'current@example.com', 'pending_email' => 'taken@example.com', ]); $this->actingAs($user); $verificationUrl = URL::temporarySignedRoute( 'users.verify-email-change', now()->addMinutes(60), [ 'user' => $user->getKey(), 'email' => 'taken@example.com', ], false ); // Act $response = $this->get($verificationUrl); // Assert $response->assertRedirect(route('dashboard')); $response->assertSessionHas('bannerStyle', 'danger'); $response->assertSessionHas('bannerText', 'The email address is already in use.'); $user = $user->fresh(); $this->assertEquals('current@example.com', $user->email); $this->assertEquals('taken@example.com', $user->pending_email); } public function test_stale_pending_email_verification_link_is_rejected(): void { // Arrange $user = User::factory()->create([ 'email' => 'current@example.com', 'pending_email' => 'newer@example.com', ]); $this->actingAs($user); $verificationUrl = URL::temporarySignedRoute( 'users.verify-email-change', now()->addMinutes(60), [ 'user' => $user->getKey(), 'email' => 'older@example.com', ], false ); // Act $response = $this->get($verificationUrl); // Assert $response->assertForbidden(); $user = $user->fresh(); $this->assertEquals('current@example.com', $user->email); $this->assertEquals('newer@example.com', $user->pending_email); } }