Add admin-managed user creation

tests/Feature/Settings/SecurityTest.php

@@ -89,6 +89,17 @@ class SecurityTest extends TestCase
             );
     }
 
+    public function test_users_who_must_change_their_password_are_redirected_to_security_when_visiting_other_pages()
+    {
+        $user = User::factory()->create([
+            'must_change_password_on_next_login' => true,
+        ]);
+
+        $this->actingAs($user)
+            ->get(route('dashboard'))
+            ->assertRedirect(route('security.edit'));
+    }
+
     public function test_password_can_be_updated()
     {
         $user = User::factory()->create();
@@ -109,6 +120,26 @@ class SecurityTest extends TestCase
         $this->assertTrue(Hash::check('new-password', $user->refresh()->password));
     }
 
+    public function test_password_update_clears_the_forced_password_change_flag()
+    {
+        $user = User::factory()->create([
+            'must_change_password_on_next_login' => true,
+        ]);
+
+        $this
+            ->actingAs($user)
+            ->from(route('security.edit'))
+            ->put(route('user-password.update'), [
+                'current_password' => 'password',
+                'password' => 'new-password',
+                'password_confirmation' => 'new-password',
+            ])
+            ->assertSessionHasNoErrors()
+            ->assertRedirect(route('security.edit'));
+
+        $this->assertFalse((bool) $user->refresh()->must_change_password_on_next_login);
+    }
+
     public function test_correct_password_must_be_provided_to_update_password()
     {
         $user = User::factory()->create();