Create tests for MFA pages [temp]

Author: codedmonkey

tests/FunctionalTests/Controller/Dashboard/DashboardAccountControllerTest.php

@@ -28,7 +28,7 @@ public function testMfaUnauthenticated(): void
         $this->assertResponseRedirects('/login', Response::HTTP_FOUND);
     }
 
-    #[RequiresFunction('\Safe\unpack')] // todo test fails with Lowest Composer dependencies
+    // #[RequiresFunction('\Safe\unpack')] // todo test fails with Lowest Composer dependencies
     public function testMfaSetup(): void
     {
         $client = static::createClient();
@@ -48,9 +48,58 @@ public function testMfaSetup(): void
 
         $this->assertResponseRedirects('/account', Response::HTTP_FOUND);
 
+        $user = $this->getService(EntityManagerInterface::class)->find(User::class, $user->getId());
+
         $this->assertNotNull($user->getTotpSecret());
     }
 
+    public function testMfaSetupWrongPassword(): void
+    {
+        $client = static::createClient();
+        $totpFactory = $this->getService(TotpFactory::class, 'scheb_two_factor.security.totp_factory');
+
+        $user = $this->createMockUser();
+        $this->persistEntities($user);
+
+        $client->loginUser($user);
+
+        $client->request('GET', '/account/mfa');
+
+        $client->submitForm('Enable MFA authentication', [
+            'mfa_setup_form[currentPassword]' => 'OddPassword11',
+            'mfa_setup_form[totpCode]' => $totpFactory->createTotpForUser($user)->now(),
+        ]);
+
+        $this->assertResponseStatusCodeSame(Response::HTTP_UNPROCESSABLE_ENTITY);
+
+        $user = $this->getService(EntityManagerInterface::class)->find(User::class, $user->getId());
+
+        $this->assertNull($user->getTotpSecret());
+    }
+
+    public function testMfaSetupWrongTotpCode(): void
+    {
+        $client = static::createClient();
+
+        $user = $this->createMockUser();
+        $this->persistEntities($user);
+
+        $client->loginUser($user);
+
+        $client->request('GET', '/account/mfa');
+
+        $client->submitForm('Enable MFA authentication', [
+            'mfa_setup_form[currentPassword]' => 'PlainPassword99',
+            'mfa_setup_form[totpCode]' => 'abcdef',
+        ]);
+
+        $this->assertResponseStatusCodeSame(Response::HTTP_UNPROCESSABLE_ENTITY);
+
+        $user = $this->getService(EntityManagerInterface::class)->find(User::class, $user->getId());
+
+        $this->assertNull($user->getTotpSecret());
+    }
+
     public function testMfaClear(): void
     {
         $client = static::createClient();
@@ -73,6 +122,28 @@ public function testMfaClear(): void
         $this->assertNull($user->getTotpSecret());
     }
 
+    public function testMfaClearWrongPassword(): void
+    {
+        $client = static::createClient();
+
+        $user = $this->createMockUser(mfaEnabled: true);
+        $this->persistEntities($user);
+
+        $client->loginUser($user);
+
+        $client->request('GET', '/account/mfa');
+
+        $client->submitForm('Disable MFA authentication', [
+            'mfa_clear_form[currentPassword]' => 'OddPassword11',,
+        ]);
+
+        $this->assertResponseStatusCodeSame(Response::HTTP_UNPROCESSABLE_ENTITY);
+
+        $user = $this->getService(EntityManagerInterface::class)->find(User::class, $user->getId());
+
+        $this->assertNotNull($user->getTotpSecret());
+    }
+
     public function testMfaQrCodeUnauthenticated(): void
     {
         $client = static::createClient();