Laravel Fortify Unit Test

I trying to write a test case for user to confirm password, activate 2FA then confirm with code. I however am struggling generating the code. My test snippet is this

test('confirm 2FA', function () {
    $user = User::factory()->create([
        'password' => Hash::make('Password1#'),
    ]);

    // Confirm User Password with Fortify route
    $this->actingAs($user)->post('/user/confirm-password', [
        'password' => 'Password1#',
    ]);

    // Activate 2FA
    $this->actingAs($user)->post('/user/two-factor-authentication');

    // Confirm 2FA
    $response = $this->actingAs($user)->post('/user/confirmed-two-factor-authentication', [
        'code' => '',
    ]);

    $response->assertStatus(302);

    $user->refresh();
});

ChatGPT suggested I use PragmaRX\Google2FA\Google2FA but the methods to generate the code are undefined. How can I generate the code to confirm 2FA with?

isaachatilima

1 year ago

Level 1

I figured it out, turns out I need to decrypt the two_factor_secrete then use it to generate the code.


test('confirm 2FA', function () {
    $user = User::factory()->create([
        'password' => Hash::make('Password1#'),
    ]);

    // Confirm User Password with Fortify route
    $this->actingAs($user)->post('/user/confirm-password', [
        'password' => 'Password1#',
    ]);

    // Activate 2FA
    $this->actingAs($user)->post('/user/two-factor-authentication');

    $decryptedSecret = Crypt::decrypt($user->two_factor_secret);

    // Initialize Google2FA
    $google2fa = new Google2FA;
    $otp = $google2fa->getCurrentOtp($decryptedSecret);
    
    $response = $this->actingAs($user)->post('/user/confirmed-two-factor-authentication', [
        'code' => $otp,
    ]);
    
    $response->assertStatus(302);
    
    $this->assertEquals(session('status'), 'two-factor-authentication-confirmed');

    $user->refresh();
    
    $this->assertNotNull($user->two_factor_confirmed_at);
});

OussamaMater

1 year ago

Level 37

The point of using first party packages, and framework helpers in general is that they are already tested and battle ready. So I see no point in testing a tested code tbh. Here is the 2FA test in fortify

https://github.com/laravel/fortify/blob/1.x/tests/TwoFactorAuthenticationControllerTest.php

Please or to participate in this conversation.