wantTo('ensure that password recovery works'); $I->haveFixtures(['user' => UserFixture::className(), 'token' => TokenFixture::className()]); $I->amGoingTo('try to request recovery token for unconfirmed account'); $page = RecoveryPage::openBy($I); $user = $I->grabFixture('user', 'unconfirmed'); $page->recover($user->email); $I->see('An email has been sent with instructions for resetting your password'); $I->amGoingTo('try to request recovery token'); $page = RecoveryPage::openBy($I); $user = $I->grabFixture('user', 'user'); $page->recover($user->email); $I->see('An email has been sent with instructions for resetting your password'); $user = $I->grabRecord(User::className(), ['email' => $user->email]); $token = $I->grabRecord(Token::className(), ['user_id' => $user->id, 'type' => Token::TYPE_RECOVERY]); /** @var yii\swiftmailer\Message $message */ $message = $I->grabLastSentEmail(); $I->assertArrayHasKey($user->email, $message->getTo()); $I->assertContains(Html::encode($token->getUrl()), utf8_encode(quoted_printable_decode($message->getSwiftMessage()->toString()))); $I->amGoingTo('reset password with invalid token'); $user = $I->grabFixture('user', 'user_with_expired_recovery_token'); $token = $I->grabRecord(Token::className(), ['user_id' => $user->id, 'type' => Token::TYPE_RECOVERY]); $I->amOnPage(Url::toRoute(['/user/recovery/reset', 'id' => $user->id, 'code' => $token->code])); $I->see('Recovery link is invalid or expired. Please try requesting a new one.'); $I->amGoingTo('reset password'); $user = $I->grabFixture('user', 'user_with_recovery_token'); $token = $I->grabRecord(Token::className(), ['user_id' => $user->id, 'type' => Token::TYPE_RECOVERY]); $I->amOnPage(Url::toRoute(['/user/recovery/reset', 'id' => $user->id, 'code' => $token->code])); $I->fillField('#recovery-form-password', 'newpass'); $I->click('Finish'); $I->see('Your password has been changed successfully.'); $page = LoginPage::openBy($I); $page->login($user->email, 'qwerty'); $I->see('Invalid login or password'); $page->login($user->email, 'newpass'); $I->dontSee('Invalid login or password');