hamedandClaude Opus 4.8
76f9fbe88f
Fill the three previously-placeholder settings sections so every menu item is now a real page inside the settings shell: - حساب کاربری: new authenticated POST /api/v1/user/change-password (verifies current password, ≥8 chars, must differ) + account page with a profile summary and change-password form. - برچسبها: new per-tenant TenantTag domain (entity/repo/controller + migration) with tenant-scoped CRUD at /api/v1/tenant-tag(s), plus a tags management page (list + color + add/edit/delete). - مدیریت نوبت دهی: export the existing WeeklyScheduleTab from DoctorDetailPage and reuse it in a standalone AppointmentSettingsPage (current doctor's uuid + addresses). Wire all three menu entries to their routes. Backend covered by PHPUnit (change-password, tenant-tag CRUD + ownership); FE covered by Vitest. API docs updated (auth.md, tag.md). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
72 lines
2.3 KiB
PHP
72 lines
2.3 KiB
PHP
<?php
|
|
|
|
namespace App\Tests\Auth;
|
|
|
|
use App\Auth\Entity\User;
|
|
use App\Tests\ApiTestCase;
|
|
use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
|
|
|
|
/**
|
|
* POST /api/v1/user/change-password — authenticated password change.
|
|
*/
|
|
class ChangePasswordTest extends ApiTestCase
|
|
{
|
|
private function userWithPassword(string $password): User
|
|
{
|
|
$user = $this->createUser(['ROLE_DOCTOR']);
|
|
$hasher = static::getContainer()->get(UserPasswordHasherInterface::class);
|
|
$user->setPasswordHash($hasher->hashPassword($user, $password));
|
|
$this->em->flush();
|
|
return $user;
|
|
}
|
|
|
|
public function testChangesPasswordWithCorrectCurrent(): void
|
|
{
|
|
$user = $this->userWithPassword('oldpass12');
|
|
|
|
$this->authJson('POST', '/api/v1/user/change-password', $user, [
|
|
'current_password' => 'oldpass12',
|
|
'new_password' => 'newpass34',
|
|
]);
|
|
self::assertSame(200, $this->responseCode());
|
|
|
|
$hasher = static::getContainer()->get(UserPasswordHasherInterface::class);
|
|
$this->em->clear();
|
|
$reloaded = $this->em->getRepository(User::class)->find($user->getId());
|
|
self::assertTrue($hasher->isPasswordValid($reloaded, 'newpass34'));
|
|
}
|
|
|
|
public function testRejectsWrongCurrentPassword(): void
|
|
{
|
|
$user = $this->userWithPassword('oldpass12');
|
|
|
|
$this->authJson('POST', '/api/v1/user/change-password', $user, [
|
|
'current_password' => 'wrongpass',
|
|
'new_password' => 'newpass34',
|
|
]);
|
|
self::assertSame(422, $this->responseCode());
|
|
}
|
|
|
|
public function testRejectsShortNewPassword(): void
|
|
{
|
|
$user = $this->userWithPassword('oldpass12');
|
|
|
|
$this->authJson('POST', '/api/v1/user/change-password', $user, [
|
|
'current_password' => 'oldpass12',
|
|
'new_password' => 'short',
|
|
]);
|
|
self::assertSame(422, $this->responseCode());
|
|
}
|
|
|
|
public function testRejectsSameAsCurrent(): void
|
|
{
|
|
$user = $this->userWithPassword('oldpass12');
|
|
|
|
$this->authJson('POST', '/api/v1/user/change-password', $user, [
|
|
'current_password' => 'oldpass12',
|
|
'new_password' => 'oldpass12',
|
|
]);
|
|
self::assertSame(422, $this->responseCode());
|
|
}
|
|
}
|