mirror of
https://github.com/heartcombo/devise.git
synced 2022-11-09 12:18:31 -05:00
122 lines
3.7 KiB
Ruby
122 lines
3.7 KiB
Ruby
|
require 'test_helper'
|
||
|
|
||
|
class PasswordRecoveryTest < ActionController::IntegrationTest
|
||
|
|
||
|
def visit_new_password_path
|
||
|
visit '/session/new'
|
||
|
click_link 'Forgot password?'
|
||
|
end
|
||
|
|
||
|
def request_forgot_password(&block)
|
||
|
visit_new_password_path
|
||
|
|
||
|
fill_in 'email', :with => 'test@test.com'
|
||
|
yield if block_given?
|
||
|
click_button 'Send me reset password instructions'
|
||
|
end
|
||
|
|
||
|
test 'authenticated user should not be able to visit forgot password page' do
|
||
|
sign_in
|
||
|
|
||
|
get new_password_path
|
||
|
|
||
|
assert_response :redirect
|
||
|
assert_redirected_to root_path
|
||
|
assert warden.authenticated?
|
||
|
end
|
||
|
|
||
|
test 'not authenticated user should be able to visit forgot password page' do
|
||
|
visit_new_password_path
|
||
|
|
||
|
assert_response :success
|
||
|
assert_template 'passwords/new'
|
||
|
assert !warden.authenticated?
|
||
|
end
|
||
|
|
||
|
test 'not authenticated user should be able to request a forgot password' do
|
||
|
create_user
|
||
|
request_forgot_password
|
||
|
|
||
|
assert_template 'sessions/new'
|
||
|
# TODO: what's going on with webrat? It's not detecting redirects
|
||
|
# assert_response :redirect
|
||
|
# assert_redirected_to new_session_path
|
||
|
assert_contain 'You will receive an email with instructions about how to reset your password in a few minutes.'
|
||
|
end
|
||
|
|
||
|
test 'not authenticated user with invalid email should receive an error message' do
|
||
|
request_forgot_password do
|
||
|
fill_in 'email', :with => 'invalid.test@test.com'
|
||
|
end
|
||
|
|
||
|
assert_response :success
|
||
|
assert_template 'passwords/new'
|
||
|
assert_have_selector 'input[type=text][value=\'invalid.test@test.com\']'
|
||
|
assert_contain 'Email not found'
|
||
|
end
|
||
|
|
||
|
# test 'request forgot password should send an email to the user' do
|
||
|
# ActionMailer::Base.deliveries = []
|
||
|
# request_forgot_password
|
||
|
# assert_equal 1, ActionMailer::Base.deliveries.size
|
||
|
# end
|
||
|
|
||
|
test 'authenticated user should not be able to visit edit password page' do
|
||
|
sign_in
|
||
|
|
||
|
get edit_password_path
|
||
|
|
||
|
assert_response :redirect
|
||
|
assert_redirected_to root_path
|
||
|
assert warden.authenticated?
|
||
|
end
|
||
|
|
||
|
test 'not authenticated with invalid perishable token should not be able to change his password' do
|
||
|
create_user
|
||
|
visit edit_password_path(:perishable_token => 'invalid_perishable')
|
||
|
assert_response :success
|
||
|
assert_template 'passwords/edit'
|
||
|
|
||
|
fill_in 'Password', :with => '987654321'
|
||
|
fill_in 'Password confirmation', :with => '987654321'
|
||
|
click_button 'Change my password'
|
||
|
|
||
|
assert_response :success
|
||
|
assert_template 'passwords/edit'
|
||
|
assert_have_selector '#errorExplanation'
|
||
|
assert_contain 'invalid confirmation'
|
||
|
assert !@user.reload.valid_password?('987654321')
|
||
|
end
|
||
|
|
||
|
test 'not authenticated with valid perisable token but invalid password should not be able to change his password' do
|
||
|
create_user
|
||
|
visit edit_password_path(:perishable_token => @user.perishable_token)
|
||
|
|
||
|
fill_in 'Password', :with => '987654321'
|
||
|
fill_in 'Password confirmation', :with => 'other_password'
|
||
|
click_button 'Change my password'
|
||
|
|
||
|
assert_response :success
|
||
|
assert_template 'passwords/edit'
|
||
|
assert_have_selector '#errorExplanation'
|
||
|
assert_contain 'Password doesn\'t match confirmation'
|
||
|
assert !@user.reload.valid_password?('987654321')
|
||
|
end
|
||
|
|
||
|
test 'not authenticated with valid data should be able to change his password' do
|
||
|
create_user
|
||
|
visit edit_password_path(:perishable_token => @user.perishable_token)
|
||
|
|
||
|
fill_in 'Password', :with => '987654321'
|
||
|
fill_in 'Password confirmation', :with => '987654321'
|
||
|
click_button 'Change my password'
|
||
|
|
||
|
# TODO: revisit this
|
||
|
assert_template 'sessions/new'
|
||
|
# assert_response :redirect
|
||
|
# assert_redirected_to new_session_path
|
||
|
assert_contain 'Your password was changed successfully.'
|
||
|
assert @user.reload.valid_password?('987654321')
|
||
|
end
|
||
|
end
|