feat: add testing infrastructure for login MFA flow and E2E suite

Signed-off-by: romanetar <roman_ag@hotmail.com>

Author: romanetar

.github/workflows/pull_request_unit_tests.yml

@@ -37,6 +37,8 @@ jobs:
       PHP_VERSION: 8.3
       OTEL_SDK_DISABLED: true
       OTEL_SERVICE_ENABLED: false
+      TURNSTILE_SITE_KEY: '1x00000000000000000000AA'
+      TURNSTILE_SECRET_KEY: '1x0000000000000000000000000000000AA'
     services:
       mysql:
         image: mysql:8.0

tests/TwoFactorLoginFlowTest.php

@@ -16,6 +16,7 @@
 use App\libs\Auth\Models\TwoFactorAuditLog;
 use App\libs\Auth\Models\UserRecoveryCode;
 use App\libs\Auth\Models\UserTrustedDevice;
+use App\Mail\OAuth2PasswordlessOTPMail;
 use App\Services\Auth\IDeviceTrustService;
 use App\Services\Auth\ITwoFactorAuditService;
 use Auth\AuthHelper;
@@ -25,6 +26,7 @@
 use Illuminate\Support\Facades\Cache;
 use Illuminate\Support\Facades\Config;
 use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\Mail;
 use Illuminate\Support\Facades\Session;
 use App\libs\OAuth2\Repositories\IOAuth2OTPRepository;
 use LaravelDoctrine\ORM\Facades\EntityManager;
@@ -90,6 +92,33 @@ public function testNonAdminWithoutMFALogsInNormally(): void
         $this->assertTrue(Auth::check(), 'a non-MFA user must get an authenticated session');
     }
 
+    // -------------------------------------------------------------------------
+    // email delivery
+    // -------------------------------------------------------------------------
+
+    public function testMFAChallengeQueuesEmailWithCorrectOTPCode(): void
+    {
+        $this->postLogin(self::ADMIN_EMAIL, self::SEED_PASSWORD);
+
+        $dbCode = $this->latestOtpCode(self::ADMIN_EMAIL);
+
+        Mail::assertQueued(
+            OAuth2PasswordlessOTPMail::class,
+            function (OAuth2PasswordlessOTPMail $mail) use ($dbCode): bool {
+                return $mail->email === self::ADMIN_EMAIL
+                    && $mail->otp === $dbCode;
+            }
+        );
+    }
+
+    public function testResendMFAChallengeQueuesAdditionalEmail(): void
+    {
+        $this->postLogin(self::ADMIN_EMAIL, self::SEED_PASSWORD);
+        $this->resend();
+
+        Mail::assertQueued(OAuth2PasswordlessOTPMail::class, 2);
+    }
+
     // -------------------------------------------------------------------------
     // verify2FA
     // -------------------------------------------------------------------------