AccountStatusCheckerTest.php

<?php

declare(strict_types=1);

namespace App\Tests\Unit\Security;

use App\Entity\User;
use App\Enum\UserStatus;
use App\Security\AccountStatusChecker;
use PHPUnit\Framework\TestCase;
use Symfony\Component\Security\Core\Exception\CustomUserMessageAccountStatusException;
use Symfony\Component\Security\Core\User\UserInterface;

final class AccountStatusCheckerTest extends TestCase
{
    // Tests that an Approved user passes the pre-auth hook without raising.
    public function testApprovedUserPassesPreAuth(): void
    {
        $user = (new User())
            ->setName('Alice')
            ->setStatus(UserStatus::Approved);

        (new AccountStatusChecker())->checkPreAuth($user);

        // No exception thrown is the assertion; explicit to keep PHPUnit happy.
        self::assertTrue(true);
    }

    // Ensures a Pending user is rejected with the 'account.pending' message key.
    public function testPendingUserIsRejectedWithLocalisedMessage(): void
    {
        $user = (new User())
            ->setName('Pending')
            ->setStatus(UserStatus::Pending);

        $this->expectException(CustomUserMessageAccountStatusException::class);
        $this->expectExceptionMessage('account.pending');

        (new AccountStatusChecker())->checkPreAuth($user);
    }

    // Ensures a Blocked user is rejected with the 'account.blocked' message key.
    public function testBlockedUserIsRejectedWithLocalisedMessage(): void
    {
        $user = (new User())
            ->setName('Blocked')
            ->setStatus(UserStatus::Blocked);

        $this->expectException(CustomUserMessageAccountStatusException::class);
        $this->expectExceptionMessage('account.blocked');

        (new AccountStatusChecker())->checkPreAuth($user);
    }

    // Verifies non-App User implementations fall through to the password checker.
    public function testForeignUserImplementationsAreIgnored(): void
    {
        $foreignUser = $this->createMock(UserInterface::class);

        (new AccountStatusChecker())->checkPreAuth($foreignUser);

        self::assertTrue(true);
    }

    // Tests that checkPostAuth does nothing (required by the interface).
    public function testCheckPostAuthIsANoOp(): void
    {
        $user = (new User())->setStatus(UserStatus::Approved);

        (new AccountStatusChecker())->checkPostAuth($user);

        self::assertTrue(true);
    }
}