239 lines
6.3 KiB
Ruby
239 lines
6.3 KiB
Ruby
require 'test/test_helper'
|
|
|
|
class AuthenticationTest < ActionController::IntegrationTest
|
|
|
|
test 'home should be accessible without signed in' do
|
|
visit '/'
|
|
assert_response :success
|
|
assert_template 'home/index'
|
|
end
|
|
|
|
test 'sign in as user should not authenticate admin scope' do
|
|
sign_in_as_user
|
|
|
|
assert warden.authenticated?(:user)
|
|
assert_not warden.authenticated?(:admin)
|
|
end
|
|
|
|
test 'sign in as admin should not authenticate user scope' do
|
|
sign_in_as_admin
|
|
|
|
assert warden.authenticated?(:admin)
|
|
assert_not warden.authenticated?(:user)
|
|
end
|
|
|
|
test 'sign in as both user and admin at same time' do
|
|
sign_in_as_user
|
|
sign_in_as_admin
|
|
|
|
assert warden.authenticated?(:user)
|
|
assert warden.authenticated?(:admin)
|
|
end
|
|
|
|
test 'sign out as user should not touch admin authentication' do
|
|
sign_in_as_user
|
|
sign_in_as_admin
|
|
|
|
get destroy_user_session_path
|
|
assert_not warden.authenticated?(:user)
|
|
assert warden.authenticated?(:admin)
|
|
end
|
|
|
|
test 'sign out as admin should not touch user authentication' do
|
|
sign_in_as_user
|
|
sign_in_as_admin
|
|
|
|
get destroy_admin_session_path
|
|
assert_not warden.authenticated?(:admin)
|
|
assert warden.authenticated?(:user)
|
|
end
|
|
|
|
test 'not signed in as admin should not be able to access admins actions' do
|
|
get admins_path
|
|
|
|
assert_redirected_to new_admin_session_path(:unauthenticated => true)
|
|
assert_not warden.authenticated?(:admin)
|
|
end
|
|
|
|
test 'signed in as user should not be able to access admins actions' do
|
|
sign_in_as_user
|
|
assert warden.authenticated?(:user)
|
|
assert_not warden.authenticated?(:admin)
|
|
|
|
get admins_path
|
|
assert_redirected_to new_admin_session_path(:unauthenticated => true)
|
|
end
|
|
|
|
test 'signed in as admin should be able to access admin actions' do
|
|
sign_in_as_admin
|
|
assert warden.authenticated?(:admin)
|
|
assert_not warden.authenticated?(:user)
|
|
|
|
get admins_path
|
|
|
|
assert_response :success
|
|
assert_template 'admins/index'
|
|
assert_contain 'Welcome Admin'
|
|
end
|
|
|
|
test 'sign in as user should not authenticate if not using proper authentication keys' do
|
|
swap Devise, :authentication_keys => [:username] do
|
|
sign_in_as_user
|
|
assert_not warden.authenticated?(:user)
|
|
end
|
|
end
|
|
|
|
test 'admin signing in with invalid email should return to sign in form with error message' do
|
|
sign_in_as_admin do
|
|
fill_in 'email', :with => 'wrongemail@test.com'
|
|
end
|
|
|
|
assert_contain 'Invalid email or password'
|
|
assert_not warden.authenticated?(:admin)
|
|
end
|
|
|
|
test 'admin signing in with invalid pasword should return to sign in form with error message' do
|
|
sign_in_as_admin do
|
|
fill_in 'password', :with => 'abcdef'
|
|
end
|
|
|
|
assert_contain 'Invalid email or password'
|
|
assert_not warden.authenticated?(:admin)
|
|
end
|
|
|
|
test 'error message is configurable by resource name' do
|
|
store_translations :en, :devise => {
|
|
:sessions => { :admin => { :invalid => "Invalid credentials" } }
|
|
} do
|
|
sign_in_as_admin do
|
|
fill_in 'password', :with => 'abcdef'
|
|
end
|
|
|
|
assert_contain 'Invalid credentials'
|
|
end
|
|
end
|
|
|
|
test 'authenticated admin should not be able to sign as admin again' do
|
|
sign_in_as_admin
|
|
get new_admin_session_path
|
|
|
|
assert_response :redirect
|
|
assert_redirected_to admin_root_path
|
|
assert warden.authenticated?(:admin)
|
|
end
|
|
|
|
test 'authenticated admin should be able to sign out' do
|
|
sign_in_as_admin
|
|
assert warden.authenticated?(:admin)
|
|
|
|
get destroy_admin_session_path
|
|
assert_response :redirect
|
|
assert_redirected_to root_path
|
|
|
|
get root_path
|
|
assert_contain 'Signed out successfully'
|
|
assert_not warden.authenticated?(:admin)
|
|
end
|
|
|
|
test 'unauthenticated admin does not set message on sign out' do
|
|
get destroy_admin_session_path
|
|
assert_response :redirect
|
|
assert_redirected_to root_path
|
|
|
|
get root_path
|
|
assert_not_contain 'Signed out successfully'
|
|
end
|
|
|
|
test 'redirect from warden shows sign in or sign up message' do
|
|
get admins_path
|
|
|
|
warden_path = new_admin_session_path(:unauthenticated => true)
|
|
assert_redirected_to warden_path
|
|
|
|
get warden_path
|
|
assert_contain 'You need to sign in or sign up before continuing.'
|
|
end
|
|
|
|
test 'return to default url if no other was requested' do
|
|
sign_in_as_user
|
|
|
|
assert_template 'home/index'
|
|
assert_nil session[:return_to]
|
|
end
|
|
|
|
test 'return to given url after sign in' do
|
|
get users_path
|
|
assert_redirected_to new_user_session_path(:unauthenticated => true)
|
|
assert_equal users_path, session[:"user.return_to"]
|
|
follow_redirect!
|
|
|
|
sign_in_as_user :visit => false
|
|
assert_template 'users/index'
|
|
assert_nil session[:"user.return_to"]
|
|
end
|
|
|
|
test 'return to configured home path after sign in' do
|
|
sign_in_as_admin
|
|
assert_equal "/admin_area/home", @request.path
|
|
end
|
|
|
|
test 'allows session to be set by a given scope' do
|
|
sign_in_as_user
|
|
visit 'users/index'
|
|
assert_equal "Cart", @controller.user_session[:cart]
|
|
end
|
|
|
|
test 'destroyed account is logged out' do
|
|
sign_in_as_user
|
|
visit 'users/index'
|
|
User.destroy_all
|
|
visit 'users/index'
|
|
assert_redirected_to '/users/sign_in?unauthenticated=true'
|
|
end
|
|
|
|
test 'renders the scoped view if turned on and view is available' do
|
|
swap Devise, :scoped_views => true do
|
|
assert_raise Webrat::NotFoundError do
|
|
sign_in_as_user
|
|
end
|
|
assert_match /Special user view/, response.body
|
|
end
|
|
end
|
|
|
|
test 'does not render the scoped view if turned off' do
|
|
swap Devise, :scoped_views => false do
|
|
assert_nothing_raised do
|
|
sign_in_as_user
|
|
end
|
|
end
|
|
end
|
|
|
|
test 'does not render the scoped view if not available' do
|
|
swap Devise, :scoped_views => true do
|
|
assert_nothing_raised do
|
|
sign_in_as_admin
|
|
end
|
|
end
|
|
end
|
|
|
|
test 'render 404 on roles without permission' do
|
|
get 'admin_area/password/new'
|
|
assert_response :not_found
|
|
assert_not_contain 'Send me reset password instructions'
|
|
end
|
|
|
|
test 'render 404 on roles without mapping' do
|
|
get 'sign_in'
|
|
assert_response :not_found
|
|
assert_not_contain 'Sign in'
|
|
end
|
|
|
|
test 'uses the mapping from the default scope if specified' do
|
|
swap Devise, :use_default_scope => true do
|
|
get 'sign_in'
|
|
assert_response :ok
|
|
assert_contain 'Sign in'
|
|
end
|
|
end
|
|
end
|