preventStrayRequest) {
Http::fake([URL::to('.env') => Http::response(null, 404)]);
}
return $this->get('/setup');
}
public function testView(): void
{
$this->getSetUpPageResponse()->assertOk()->assertViewIs('setup.index');
}
public function testWillShowErrorMessageWhenDatabaseConnectionCannotBeEstablished(): void
{
Event::listen(function (QueryExecuted $query) {
if ($query->sql === 'select 2 + 2') {
throw new PDOException("SQLSTATE[HY000] [1045] Access denied for user ''@'localhost' (using password: NO)");
}
});
$this->getSetUpPageResponse()->assertOk();
$this->assertSeeDatabaseConnectionErrorMessage();
}
protected function assertSeeDatabaseConnectionErrorMessage(bool $shouldSee = true): void
{
$errorMessage = "D'oh! Looks like we can't connect to your database. Please update your database settings in your .env file.";
$successMessage = sprintf('Great work! Connected to %s', DB::connection()->getDatabaseName());
if ($shouldSee) {
self::$latestResponse->assertSee($errorMessage, false)->assertDontSee($successMessage, false);
return;
}
self::$latestResponse->assertSee($successMessage, false)->assertDontSee($errorMessage, false);
}
public function testWillNotShowErrorMessageWhenDatabaseIsConnected(): void
{
$this->getSetUpPageResponse()->assertOk();
$this->assertSeeDatabaseConnectionErrorMessage(false);
}
public function testWillShowErrorMessageWhenDebugModeIsEnabledAndAppEnvironmentIsSetToProduction(): void
{
config(['app.debug' => true]);
$this->app->bind('env', fn () => 'production');
$this->getSetUpPageResponse()->assertOk();
$this->assertSeeDebugModeMisconfigurationErrorMessage();
}
protected function assertSeeDebugModeMisconfigurationErrorMessage(bool $shouldSee = true): void
{
$errorMessage = 'Yikes! You should turn off debug mode unless you encounter any issues. Please update your APP_DEBUG settings in your .env file';
$successMessage = "Awesomesauce. Debug is either turned off, or you're running this in a non-production environment. (Don't forget to turn it off when you're ready to go live.)";
if ($shouldSee) {
self::$latestResponse->assertSee($errorMessage, false)->assertDontSee($successMessage, false);
return;
}
self::$latestResponse->assertSee($successMessage, false)->assertDontSee($errorMessage, false);
}
public function testWillNotShowErrorWhenDebugModeIsEnabledAndAppEnvironmentIsSetToLocal(): void
{
config(['app.debug' => true]);
$this->app->bind('env', fn () => 'local');
$this->getSetUpPageResponse()->assertOk();
$this->assertSeeDebugModeMisconfigurationErrorMessage(false);
}
public function testWillNotShowErrorWhenDebugModeIsDisabledAndAppEnvironmentIsSetToProduction(): void
{
config(['app.debug' => false]);
$this->app->bind('env', fn () => 'production');
$this->getSetUpPageResponse()->assertOk();
$this->assertSeeDebugModeMisconfigurationErrorMessage(false);
}
public function testWillShowErrorWhenEnvironmentIsLocal(): void
{
$this->app->bind('env', fn () => 'local');
$this->getSetUpPageResponse()->assertOk();
$this->assertSeeEnvironmentMisconfigurationErrorMessage();
}
protected function assertSeeEnvironmentMisconfigurationErrorMessage(bool $shouldSee = true): void
{
$errorMessage = 'Your app is set local instead of production mode.';
$successMessage = 'Your app is set to production mode. Rock on!';
if ($shouldSee) {
self::$latestResponse->assertSee($errorMessage, false)->assertDontSee($successMessage, false);
return;
}
self::$latestResponse->assertSee($successMessage, false)->assertDontSee($errorMessage, false);
}
public function testWillNotShowErrorWhenEnvironmentIsProduction(): void
{
$this->app->bind('env', fn () => 'production');
$this->getSetUpPageResponse()->assertOk();
$this->assertSeeEnvironmentMisconfigurationErrorMessage(false);
}
public function testWillCheckDotEnvFileVisibility(): void
{
$this->getSetUpPageResponse()->assertOk();
Http::assertSent(function (Request $request) {
$this->assertEquals('GET', $request->method());
$this->assertEquals(URL::to('.env'), $request->url());
return true;
});
}
/**
* @dataProvider willShowErrorWhenDotEnvFileIsAccessibleViaHttpData
*/
public function testWillShowErrorWhenDotEnvFileIsAccessibleViaHttp(int $statusCode): void
{
$this->preventStrayRequest = false;
Http::fake([URL::to('.env') => Http::response(null, $statusCode)]);
$this->getSetUpPageResponse()->assertOk();
Http::assertSent(function (Request $request, Response $response) use ($statusCode) {
$this->assertEquals($statusCode, $response->status());
return true;
});
$this->assertSeeDotEnvFileExposedErrorMessage();
}
public static function willShowErrorWhenDotEnvFileIsAccessibleViaHttpData(): array
{
return collect([200, 202, 204, 206])
->mapWithKeys(fn (int $code) => ["StatusCode: {$code}" => [$code]])
->all();
}
protected function assertSeeDotEnvFileExposedErrorMessage(bool $shouldSee = true): void
{
$errorMessage = "We cannot determine if your config file is exposed to the outside world, so you will have to manually verify this. You don't ever want anyone able to see that file. Ever. Ever ever. An exposed .env file can disclose sensitive data about your system and database.";
$successMessage = "Sweet. It doesn't look like your .env file is exposed to the outside world. (You should double check this in a browser though. You don't ever want anyone able to see that file. Ever. Ever ever.) Click here to check now (This should return a file not found or forbidden error.)";
if ($shouldSee) {
self::$latestResponse->assertSee($errorMessage, false)->assertDontSee($successMessage, false);
return;
}
self::$latestResponse->assertSee($successMessage, false)->assertDontSee($errorMessage, false);
}
public function testWillNotShowErrorWhenDotEnvFileIsNotAccessibleViaHttp(): void
{
$this->getSetUpPageResponse()->assertOk();
$this->assertSeeDotEnvFileExposedErrorMessage(false);
}
public function testWillShowErrorWhenDotEnvFileVisibilityCheckRequestFails(): void
{
$this->preventStrayRequest = false;
Http::fake([URL::to('.env') => fn () => throw new ConnectionException('Some curl error message.')]);
Log::setEventDispatcher(Event::fake());
$this->getSetUpPageResponse()->assertOk();
$this->assertSeeDotEnvFileExposedErrorMessage();
Event::assertDispatched(function (MessageLogged $event) {
$this->assertEquals('debug', $event->level);
$this->assertEquals('Some curl error message.', $event->message);
return true;
});
}
}