public function PasswordResetBehaviorsTest::testPasswordResetBehaviors in Password Policy 8.3

Test password reset behaviors.

File

tests/src/Functional/PasswordResetBehaviorsTest.php, line 73

Class

PasswordResetBehaviorsTest

Tests password reset behaviors.

Namespace

Drupal\Tests\password_policy\Functional

Code

public function testPasswordResetBehaviors() {

  // Create user with permission to create policy.
  // Below causes a custom role to be created that has no entity storage.
  // This makes the CMI layer barf and changing CMI fail.
  $user1 = $this
    ->drupalCreateUser([
    'administer site configuration',
    'administer users',
    'administer permissions',
    'manage password reset',
    'administer account settings',
    'administer user fields',
    'administer user form display',
    'access administration pages',
  ]);
  $this
    ->drupalLogin($user1);

  // Assert that user attributes were created and unexpired.
  $user_instance = User::load($user1
    ->id());
  $this
    ->assertNotNull($user_instance
    ->get('field_last_password_reset')[0]->value, 'Last password reset was not set on user add');
  self::assertEquals($user_instance
    ->get('field_password_expiration')[0]->value, '0', 'Password expiration field is not set to zero on user add');

  // Create a new role.
  $rid = $this
    ->drupalCreateRole([]);

  // Create user with test role.
  $this
    ->drupalGet('admin/people/create');
  $edit = [
    'roles[' . $rid . ']' => $rid,
    'mail' => 'example12@example.com',
    'name' => 'testuser1',
    'pass[pass1]' => 'pass',
    'pass[pass2]' => 'pass',
  ];
  $this
    ->submitForm($edit, 'Create new account');

  // Grab the user info.
  $user_array = \Drupal::entityTypeManager()
    ->getStorage('user')
    ->loadByProperties([
    'name' => 'testuser1',
  ]);
  $user2 = array_shift($user_array);

  // Edit the user password reset date.
  $this
    ->drupalGet('user/' . $user2
    ->id() . '/edit');
  $edit = [
    'field_last_password_reset[0][value][date]' => date('Y-m-d', strtotime('-90 days')),
  ];
  $this
    ->submitForm($edit, 'Save');

  // Create new password reset policy for role.
  $this
    ->drupalGet('admin/config/security/password-policy/add');
  $edit = [
    'id' => 'test',
    'label' => 'test',
    'password_reset' => '1',
  ];

  // Set reset and policy info.
  $this
    ->submitForm($edit, 'Next');

  // No constraints needed for reset, continue.
  $this
    ->submitForm([], 'Next');

  // Set the roles for the policy.
  $edit = [
    'roles[' . $rid . ']' => $rid,
  ];
  $this
    ->submitForm($edit, 'Finish');

  // Time to kick this popsicle stand.
  $this
    ->drupalLogout();

  // Run cron to trigger expiration.
  $this
    ->cronRun();

  // User should be redirected to the user entity edit page after login.
  $this
    ->drupalGet('user/login');
  $this
    ->submitForm([
    'name' => 'testuser1',
    'pass' => 'pass',
  ], 'Log in');
  $this
    ->assertUrl($user2
    ->toUrl('edit-form'), [], 'User should be sent to their account form after expiration');
  $this
    ->drupalLogout();

  // Create a new node type.
  $type1 = $this
    ->drupalCreateContentType();

  // Create a node of that type.
  $node_title = $this
    ->randomMachineName();
  $node_body = $this
    ->randomMachineName();
  $edit = [
    'type' => $type1
      ->get('type'),
    'title' => $node_title,
    'body' => [
      [
        'value' => $node_body,
      ],
    ],
    'langcode' => 'en',
  ];
  $node = $this
    ->drupalCreateNode($edit);

  // Verify if user tries to go to node, they are forced back.
  $this
    ->drupalGet('user/login');
  $this
    ->submitForm([
    'name' => 'testuser1',
    'pass' => 'pass',
  ], 'Log in');
  $this
    ->drupalGet($node
    ->toUrl()
    ->toString());

  // Workaround for webtest sometimes returning an extra leading value in the
  // route base path.  Does not seem to ever happen on local testing, only on
  // Jenkins simpletest runner. E.g. /checkout/user, not /user.
  $current_url = urldecode($this
    ->getUrl());
  $pos = strpos($current_url, '/user');
  if ($pos !== 0) {
    $current_url = substr($current_url, $pos);
  }
  self::assertEquals($current_url, '/user/' . $user2
    ->id() . '/edit', 'User should be sent back to their account form instead of the node');

  // Change password.
  $this
    ->drupalGet('user/' . $user2
    ->id() . '/edit');
  $edit = [];
  $edit['pass[pass1]'] = '1';
  $edit['pass[pass2]'] = '1';
  $edit['current_pass'] = 'pass';
  $this
    ->submitForm($edit, 'Save');

  // Verify expiration is unset.
  $user_instance = User::load($user2
    ->id());
  self::assertEquals($user_instance
    ->get('field_password_expiration')[0]->value, '0', 'Password expiration field should be empty after changing password');

  // Verify if user tries to go to node, they are allowed.
  $this
    ->drupalGet($node
    ->toUrl()
    ->toString());

  // Workaround for webtest sometimes returning an extra leading value in the
  // route base path.  Does not seem to ever happen on local testing, only on
  // Jenkins simpletest runner.  E.g. /checkout/node, not /node.
  $current_url = urldecode($this
    ->getUrl());
  $pos = strpos($current_url, '/node');
  if ($pos !== 0) {
    $current_url = substr($current_url, $pos);
  }
  self::assertEquals($current_url, '/node/' . $node
    ->id(), 'User should have access to the node now');
  $this
    ->drupalLogout();
}