Projektgrundlage: Laravel 13 mit Livewire-Starter-Kit und Sail

- Livewire-Starter-Kit (Livewire 4, Flux, Fortify) mit Pest
- Sail mit PHP 8.5, MySQL 8.4, Redis, Meilisearch 1.54.2, Mailpit
- Registrierung deaktiviert, 2FA und Passkeys verfügbar
- Spatie laravel-permission
- gitleaks als Pre-Commit-Hook (.githooks)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tests/Feature/Auth/TwoFactorChallengeTest.php

@@ -0,0 +1,42 @@
+<?php
+
+namespace Tests\Feature\Auth;
+
+use App\Models\User;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Laravel\Fortify\Features;
+use Tests\TestCase;
+
+class TwoFactorChallengeTest extends TestCase
+{
+    use RefreshDatabase;
+
+    protected function setUp(): void
+    {
+        parent::setUp();
+
+        $this->skipUnlessFortifyHas(Features::twoFactorAuthentication());
+    }
+
+    public function test_two_factor_challenge_redirects_to_login_when_not_authenticated(): void
+    {
+        $response = $this->get(route('two-factor.login'));
+
+        $response->assertRedirect(route('login'));
+    }
+
+    public function test_two_factor_challenge_can_be_rendered(): void
+    {
+        Features::twoFactorAuthentication([
+            'confirm' => true,
+            'confirmPassword' => true,
+        ]);
+
+        $user = User::factory()->withTwoFactor()->create();
+
+        $this->post(route('login.store'), [
+            'email' => $user->email,
+            'password' => 'password',
+        ])->assertRedirect(route('two-factor.login'));
+    }
+}