generateSecret(); $this->assertEquals(16, strlen($secret)); $this->assertMatchesRegularExpression('/^[A-Z2-7]+$/', $secret); } public function test_it_verifies_correct_code(): void { $service = new TotpService(); $secret = 'JBSWY3DPEHPK3PXP'; // Known secret // We can't easily test the code without a time mocker or calculation // but we can check if it fails with an obviously wrong code $this->assertFalse($service->verify($secret, '000000')); } }