Setting up Laravel 12 testing (PHPUnit + Pest) and writing tests for JWT authorization

There is a ready Laravel 12 project deployed in Docker. On the frontend — Nuxt.js, all authorization and logic work through API (Tymon JWT). It is necessary to configure parallel execution of PHPUnit and Pest in PhpStorm and write tests for JWT authorization (login via form and via API). Small code adjustments are allowed if needed for tests to pass.

Tasks

1. Environment configuration for tests in PhpStorm (on the client side)
   

   • Ensure that both PHPUnit and Pest are available in the Docker container.

   • Set up two run configurations in PhpStorm:

     • PHPUnit

     • Pest

   • Configure so that both test sets can be run in parallel (simultaneously) from PhpStorm.

   • Prepare and provide configuration files/templates for PhpStorm (Run/Debug Configurations) to run PHPUnit and Pest.

2. Writing tests for JWT authorization

   • Test via web form:

     1. Open the page /login (or your form route).

     2. Send valid user credentials.

     3. Ensure that after successful login, the server returns a correct JWT token (in cookies or in header).

     4. Check that the user is automatically redirected (or receives a response) to the protected route.

   • API tests (Pest or PHPUnit):

     1. POST /api/auth/login with real user data → response contains token field and status 200.

     2. Using the obtained JWT, make a request to the protected GET /api/user (or similar route) → status 200 and user data returned.

     3. Attempt to access the same API without a token → status 401.

     4. Attempt to login with incorrect password → status 422 (or 401, depending on settings).

3. If necessary — code adjustments

   • If JWT authorization in controllers or middleware is configured non-standardly, make minimal adjustments (for example, specify the correct guard, token field name, avoid unnecessary redirects).

   • Pay attention to the configuration of config/auth.php and config/jwt.php (adjust if necessary).

   • Review the entire project code and provide recommendations for improving architecture, readability, and security.

Requirements for the contractor

• Confident experience with Laravel 12, Docker environment, and PhpStorm.

• Knowledge of Pest and PHPUnit: installation, configuration, running in IDE.

• Experience testing JWT authorization (Tymon JWT).

• Skill in editing Laravel code for correct test operation (middleware, guards).

• Understanding how to test HTTP controllers and API routes.

Materials and accesses

• Link to Git repository (access will be provided after agreement).

• Docker Compose file with current environment.

• File composer.json with dependencies (Pest, tymon/jwt-auth, etc.).

• List of routes for login and API (for example, /login, /api/auth/login, /api/user).