User Notifications

​

Overview

​

Notification Classes

​

WelcomeNotification

public function __construct()
// No parameters required

• Subject: ”🎉 ¡Bienvenido a NutriFit!”
• Greeting: “¡Hola !”
• Message: Welcome message and account creation confirmation
• Features Highlighted:
  • ✅ Agendar citas con nutricionistas profesionales
  • ✅ Mantener tu historial clínico organizado
  • ✅ Recibir seguimiento continuo de tu progreso
• Call to Action: “Explorar NutriFit” → /paciente/dashboard
• Additional Note: Invitation to contact support if needed
• Salutation: “¡Bienvenido al equipo! NutriFit”

use App\Notifications\WelcomeNotification;

// After user registration
$user->notify(new WelcomeNotification());

​

VerifyEmailNotification

• Subject: ”✅ Verifica tu Correo Electrónico - NutriFit”
• Greeting: “¡Hola !”
• Message: Verification request with instructions
• Call to Action: “Verificar Correo Electrónico” → {verification_url}
• Expiration Notice: Link expires in 60 minutes
• Security Note: Safe to ignore if user didn’t register
• Salutation: “¡Te esperamos! NutriFit”

$verificationUrl = $this->verificationUrl($notifiable);

use App\Notifications\VerifyEmailNotification;

// Send verification email
$user->notify(new VerifyEmailNotification());

// Or use Laravel's built-in method
$user->sendEmailVerificationNotification();

​

ResetPasswordNotification

public function __construct(
    string $token // Password reset token
)

• Subject: “Restablecer Contraseña - NutriFit”
• Greeting: “¡Hola!”
• Message: Explanation that password reset was requested
• Call to Action: “Restablecer Contraseña” → {reset_url}
• Expiration Notice: Link expires in 60 minutes
• Security Note: No action needed if request wasn’t made by user
• Salutation: “Saludos, NutriFit”

$url = url(route('password.reset', [
    'token' => $token,
    'email' => $notifiable->getEmailForPasswordReset(),
], false));

use App\Notifications\ResetPasswordNotification;
use Illuminate\Support\Facades\Password;

// Laravel handles this automatically, but you can customize:
$token = Password::createToken($user);
$user->notify(new ResetPasswordNotification($token));

​

PasswordChangedNotification

public function __construct()
// No parameters required

• Subject: ”🔐 Contraseña Actualizada - NutriFit”
• Greeting: “¡Hola !”
• Message: Confirmation of password update
• Security Alert: Instructions if change was unauthorized
• Timestamp: Date and time of password change (formatted as d/m/Y H:i:s)
• Call to Action: “Ir a Mi Cuenta” → /paciente/perfil
• Security Reminder: Never share password
• Salutation: “Saludos, NutriFit”

[
    'changed_at' => now()->toDateTimeString(),
]

use App\Notifications\PasswordChangedNotification;

// After password update
$user->password = Hash::make($newPassword);
$user->save();

$user->notify(new PasswordChangedNotification());

​

UserAccountEnabledNotification

public function __construct()
// No parameters required

• Subject: ”✅ Tu cuenta ha sido habilitada - NutriFit”
• Greeting: “¡Hola !”
• Message: Account has been enabled/reactivated
• Permissions Restored:
  • ✅ Iniciar sesión en la plataforma
  • ✅ Acceder a todas las funcionalidades
  • ✅ Continuar usando tu cuenta con normalidad
• Call to Action: “Ir a mi Dashboard” → Role-based dashboard URL
• Salutation: “Bienvenido nuevamente, NutriFit”

'administrador' => '/admin/dashboard'
'nutricionista' => '/nutricionista/dashboard'
'paciente' => '/paciente/dashboard'
default => '/dashboard'

use App\Notifications\UserAccountEnabledNotification;

// When admin enables account
$user->is_active = true;
$user->save();

$user->notify(new UserAccountEnabledNotification());

​

UserAccountDisabledNotification

public function __construct()
// No parameters required

• Subject: “⚠️ Tu cuenta ha sido deshabilitada - NutriFit”
• Greeting: “Hola ,”
• Message: Account has been disabled by administrator
• Consequences Explained:
  • • No podrás iniciar sesión en la plataforma
  • • No podrás agendar nuevas citas
  • • Tus citas pendientes podrían verse afectadas
• Call to Action: “Contactar Soporte” → /contacto
• Additional Note: Instructions to contact administrator if it’s an error
• Salutation: “Atentamente, NutriFit”

use App\Notifications\UserAccountDisabledNotification;

// When admin disables account
$user->is_active = false;
$user->save();

$user->notify(new UserAccountDisabledNotification());

​

Additional User Notifications

​

PersonalDataCreatedNotification

​

ContactFormNotification

​

Authentication Flow

​

Registration Flow

1. User submits registration form
2. WelcomeNotification sent immediately
3. VerifyEmailNotification sent immediately
4. User clicks verification link
5. Account becomes fully active

​

Password Reset Flow

1. User requests password reset
2. ResetPasswordNotification sent with token
3. User clicks reset link (valid for 60 minutes)
4. User submits new password
5. PasswordChangedNotification sent as confirmation

​

Account Status Flow

1. Administrator changes account status
2. UserAccountEnabledNotification or UserAccountDisabledNotification sent
3. User receives email explaining the change
4. User can contact support if needed

​

Security Considerations

​

Email Verification

• Verification links are signed URLs with timestamp and hash
• Links expire after 60 minutes
• Laravel validates signature before allowing verification
• Prevents tampering and replay attacks

​

Password Reset

• Reset tokens are stored hashed in database
• Tokens expire after 60 minutes
• Tokens are single-use only
• Old tokens invalidated when new one requested

​

Password Change Notification

• Always sent after password change
• Helps detect unauthorized access
• Includes timestamp for audit trail
• Instructs user to contact admin if unauthorized

​

Account Status Changes

• Clear communication about access restrictions
• Provides contact information for support
• Documents reason for change where applicable

​

Best Practices

1. Always send password change notifications for security
2. Make verification links time-limited to prevent abuse
3. Use signed URLs for sensitive actions
4. Provide clear next steps in every notification
5. Include support contact information when access is restricted
6. Use role-based URLs for better user experience
7. Implement rate limiting on password reset requests
8. Log all account status changes for audit trail
9. Test email delivery in staging before production
10. Monitor failed notification deliveries for email issues

​

Testing

​

Test Email Verification

use App\Notifications\VerifyEmailNotification;

public function test_email_verification_notification()
{
    Notification::fake();
    
    $user = User::factory()->unverified()->create();
    $user->sendEmailVerificationNotification();
    
    Notification::assertSentTo($user, VerifyEmailNotification::class);
}

​

Test Password Reset

use App\Notifications\ResetPasswordNotification;

public function test_password_reset_notification()
{
    Notification::fake();
    
    $user = User::factory()->create();
    Password::sendResetLink(['email' => $user->email]);
    
    Notification::assertSentTo(
        $user,
        ResetPasswordNotification::class,
        function ($notification) {
            return $notification->token !== null;
        }
    );
}

​

Test Account Status Notifications

use App\Notifications\UserAccountDisabledNotification;
use App\Notifications\UserAccountEnabledNotification;

public function test_account_disabled_notification()
{
    Notification::fake();
    
    $user = User::factory()->create(['is_active' => true]);
    $user->is_active = false;
    $user->save();
    $user->notify(new UserAccountDisabledNotification());
    
    Notification::assertSentTo($user, UserAccountDisabledNotification::class);
}

public function test_account_enabled_notification()
{
    Notification::fake();
    
    $user = User::factory()->create(['is_active' => false]);
    $user->is_active = true;
    $user->save();
    $user->notify(new UserAccountEnabledNotification());
    
    Notification::assertSentTo($user, UserAccountEnabledNotification::class);
}