get('/user')->assertRedirect('auth/login'); $this->assertGuest(); // Normal user $this->actAs('normal') ->assertAuthenticated(); // Banned User $this->actAs('banned') ->get('/user') ->assertSee('banned') ->assertStatus(403); // Binding email $noEmailUser = factory(\App\Models\User::class)->create(['email' => '']); $this->actingAs($noEmailUser) ->get('/user') ->assertSee('Bind') ->assertDontSee('User Center'); $this->actingAs($noEmailUser) ->get('/user?email=email') ->assertSee('Bind'); $other = factory(User::class)->create(); $this->actingAs($noEmailUser) ->get('/user?email='.$other->email) ->assertSee(trans('auth.bind.registered')); $this->actingAs($noEmailUser) ->get('/user?email=a@b.c') ->assertSee('User Center'); $this->assertEquals('a@b.c', User::find($noEmailUser->uid)->email); } public function testCheckUserVerified() { $unverified = factory(User::class)->create(['verified' => false]); option(['require_verification' => false]); $this->actingAs($unverified) ->get('/skinlib/upload') ->assertSuccessful(); option(['require_verification' => true]); $this->actingAs($unverified) ->get('/skinlib/upload') ->assertStatus(403) ->assertSee(trans('auth.check.verified')); $this->actAs('normal') ->get('/skinlib/upload') ->assertSuccessful(); } public function testCheckAdministrator() { // Without logged in $this->get('/admin')->assertRedirect('/auth/login'); // Normal user $this->actAs('normal') ->get('/admin') ->assertStatus(403); // Admin $this->actAs('admin') ->get('/admin') ->assertSuccessful(); // Super admin $this->actAs('superAdmin') ->get('/admin') ->assertSuccessful(); } public function testCheckSuperAdmin() { // Admin $this->actAs('admin') ->get('/admin/plugins/manage') ->assertForbidden(); // Super admin $this->actAs('superAdmin') ->get('/admin/plugins/manage') ->assertSuccessful(); } public function testCheckInstallation() { $this->get('/setup')->assertSee('Already installed'); $tables = [ 'user_closet', 'migrations', 'options', 'players', 'textures', 'users', ]; array_walk($tables, function ($table) { Schema::dropIfExists($table); }); $this->get('/setup')->assertSee(trans( 'setup.wizard.welcome.text', ['version' => config('app.version')] )); } public function testCheckPlayerExist() { $this->getJson('/nope.json') ->assertStatus(404) ->assertSee(trans('general.unexistent-player')); $this->get('/skin/nope.png') ->assertStatus(404) ->assertSee(trans('general.unexistent-player')); Option::set('return_204_when_notfound', true); $this->getJson('/nope.json')->assertStatus(204); $player = factory(\App\Models\Player::class)->create(); $this->getJson("/{$player->name}.json") ->assertJson(['username' => $player->name]); // Default is CSL API $this->expectsEvents(\App\Events\CheckPlayerExists::class); $this->getJson("/{$player->name}.json"); $player = factory(\App\Models\Player::class)->create(); $user = $player->user; $this->actingAs($user) ->postJson('/user/player/rename/-1', ['name' => 'name']) ->assertJson([ 'code' => 1, 'message' => trans('general.unexistent-player'), ]); } public function testCheckPlayerOwner() { $other_user = factory(\App\Models\User::class)->create(); $player = factory(\App\Models\Player::class)->create(); $owner = $player->user; $this->actingAs($other_user) ->get('/user/player') ->assertSuccessful(); $this->actingAs($other_user) ->postJson('/user/player/rename/'.$player->pid) ->assertJson([ 'code' => 1, 'message' => trans('admin.players.no-permission'), ]); } public function testRedirectIfAuthenticated() { $this->get('/auth/login') ->assertViewIs('auth.login') ->assertDontSee(trans('general.user-center')); $this->actingAs(factory(User::class)->create()) ->get('/auth/login') ->assertRedirect('/user'); } public function testRequireBindPlayer() { $user = factory(User::class)->create(); $this->actingAs($user)->get('/user')->assertViewIs('user.index'); $this->get('/user/player/bind')->assertRedirect('/user'); option(['single_player' => true]); $this->getJson('/user/player/list')->assertHeader('content-type', 'application/json'); $this->get('/user/player/bind')->assertViewIs('user.bind'); $this->get('/user')->assertRedirect('/user/player/bind'); factory(Player::class)->create(['uid' => $user->uid]); $this->get('/user')->assertViewIs('user.index'); $this->get('/user/player/bind')->assertRedirect('/user'); } public function testForbiddenIE() { $this->get('/', ['user-agent' => 'MSIE'])->assertSee(trans('errors.http.ie')); $this->get('/', ['user-agent' => 'Trident'])->assertSee(trans('errors.http.ie')); } }