skipUnlessFortifyHas(Features::emailVerification()); } public function test_email_verification_screen_can_be_rendered(): void { $user = User::factory()->unverified()->create(); $response = $this->actingAs($user)->get(route('verification.notice')); $response->assertOk(); } public function test_email_can_be_verified(): void { $user = User::factory()->unverified()->create(); Event::fake(); $verificationUrl = (new TestVerifyEmail)->urlFor($user); $response = $this->actingAs($user)->get($verificationUrl); Event::assertDispatched(Verified::class); $this->assertTrue($user->fresh()->hasVerifiedEmail()); $response->assertRedirect(route('dashboard', absolute: false) . '?verified=1'); } public function test_email_is_not_verified_with_invalid_hash(): void { $user = User::factory()->unverified()->create(); $verificationUrl = URL::temporarySignedRoute( 'verification.verify', now()->addMinutes(60), ['id' => $user->id, 'hash' => hash('sha256', 'wrong-email')], ); $this->actingAs($user)->get($verificationUrl); $this->assertFalse($user->fresh()->hasVerifiedEmail()); } public function test_already_verified_user_visiting_verification_link_is_redirected_without_firing_event_again(): void { $user = User::factory()->create([ 'email_verified_at' => now(), ]); Event::fake(); $verificationUrl = (new TestVerifyEmail)->urlFor($user); $this->actingAs($user)->get($verificationUrl) ->assertRedirect(route('dashboard', absolute: false) . '?verified=1'); $this->assertTrue($user->fresh()->hasVerifiedEmail()); Event::assertNotDispatched(Verified::class); } } final class TestVerifyEmail extends VerifyEmail { public function urlFor(User $user): string { return $this->verificationUrl($user); } }