wantTo('ensure that password recovery works'); $I->haveFixtures(['user' => UserFixture::className(), 'token' => TokenFixture::className()]); $I->amGoingTo('try to request recovery token for unconfirmed account'); $page = RecoveryPage::openBy($I); $user = $I->grabFixture('user', 'unconfirmed'); $page->recover($user->email); $I->see('An email has been sent with instructions for resetting your password'); $I->amGoingTo('try to request recovery token'); $page = RecoveryPage::openBy($I); $user = $I->grabFixture('user', 'user'); $page->recover($user->email); $I->see('An email has been sent with instructions for resetting your password'); $user = $I->grabRecord(User::className(), ['email' => $user->email]); $token = $I->grabRecord(Token::className(), ['user_id' => $user->id, 'type' => Token::TYPE_RECOVERY]); /** @var yii\swiftmailer\Message $message */ $message = $I->grabLastSentEmail(); //$I->assertArrayHasKey($user->email, $message->getTo()); //$I->assertContains(Html::encode($token->getUrl()), utf8_encode(quoted_printable_decode($message->getSwiftMessage()->toString()))); //$I->amGoingTo('reset password with invalid token'); //$user = $I->grabFixture('user', 'user_with_expired_recovery_token'); //$token = $I->grabRecord(Token::className(), ['user_id' => $user->id, 'type' => Token::TYPE_RECOVERY]); //$I->amOnPage(Url::toRoute(['/user/recovery/reset', 'id' => $user->id, 'code' => $token->code])); //$I->see('Recovery link is invalid or expired. Please try requesting a new one.'); //$I->amGoingTo('reset password'); //$user = $I->grabFixture('user', 'user_with_recovery_token'); //$token = $I->grabRecord(Token::className(), ['user_id' => $user->id, 'type' => Token::TYPE_RECOVERY]); //$I->amOnPage(Url::toRoute(['/user/recovery/reset', 'id' => $user->id, 'code' => $token->code])); //$I->fillField('#recoveryform-password', 'newpass'); //$I->click('Finish'); //$I->see('Your password has been changed successfully.'); //$page = LoginPage::openBy($I); //$page->login($user->email, 'qwerty'); //$I->see('Invalid login or password'); //$page->login($user->email, 'newpass'); //$I->dontSee('Invalid login or password');