Refactor authentication system (#2602)

Make auth configuration available via UI, remove FOSUserBundle and SAML-Bundle dependency

tests/Controller/Security/PasswordResetControllerTest.php

@@ -0,0 +1,80 @@
+<?php
+
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Tests\Controller\Security;
+
+use App\Tests\Controller\ControllerBaseTest;
+
+/**
+ * @group integration
+ */
+class PasswordResetControllerTest extends ControllerBaseTest
+{
+    private function testResetActionWithDeactivatedFeature(string $route, string $method = 'GET')
+    {
+        $client = self::createClient();
+        $this->setSystemConfiguration('user.password_reset', false);
+        $this->request($client, $route, $method);
+        $this->assertRouteNotFound($client);
+    }
+
+    public function testResetRequestWithDeactivatedFeature()
+    {
+        $this->testResetActionWithDeactivatedFeature('/resetting/request');
+    }
+
+    public function testSendEmailRequestWithDeactivatedFeature()
+    {
+        $this->testResetActionWithDeactivatedFeature('/resetting/send-email', 'POST');
+    }
+
+    public function testCheckEmailWithDeactivatedFeature()
+    {
+        $this->testResetActionWithDeactivatedFeature('/resetting/check-email');
+    }
+
+    public function testResetWithDeactivatedFeature()
+    {
+        $this->testResetActionWithDeactivatedFeature('/resetting/reset/1234567890');
+    }
+
+    public function testResetRequestPageIsRendered()
+    {
+        $client = self::createClient();
+
+        $this->setSystemConfiguration('user.password_reset', true);
+        $this->request($client, '/resetting/request');
+
+        $response = $client->getResponse();
+        $this->assertTrue($response->isSuccessful());
+
+        $content = $response->getContent();
+        $this->assertStringContainsString('<title>Kimai – Time Tracking</title>', $content);
+        $this->assertStringContainsString('Reset your password', $content);
+        $this->assertStringContainsString('<form action="/en/resetting/send-email" method="POST" class="fos_user_resetting_request">', $content);
+        $this->assertStringContainsString('<input type="text"', $content);
+        $this->assertStringContainsString('id="username" name="username" required="required"', $content);
+        $this->assertStringContainsString('>Reset your password</button>', $content);
+
+        $form = $client->getCrawler()->filter('form.fos_user_resetting_request')->form();
+        $client->submit($form, [
+            'username' => 'john_user',
+        ]);
+
+        $this->assertIsRedirect($client, $this->createUrl('/resetting/check-email?username=john_user'));
+        $client->followRedirect();
+        $this->assertTrue($client->getResponse()->isSuccessful());
+
+        $user = $this->loadUserFromDatabase('john_user');
+        $token = $user->getConfirmationToken();
+
+        $this->request($client, '/resetting/reset/' . $token);
+        $this->assertTrue($client->getResponse()->isSuccessful());
+    }
+}