a_b 0.1.0
Sign up to get free protection for your applications and to get access to all the features.
- data/MIT-LICENSE +18 -0
- data/README.markdown +4 -0
- data/Rakefile +74 -0
- data/config.ru +3 -0
- data/config/database.example.yml +6 -0
- data/config/externals.yml +6 -0
- data/config/mail.example.yml +32 -0
- data/db/migrate/001_a_b_tests.rb +14 -0
- data/db/migrate/002_a_b_variants.rb +19 -0
- data/db/migrate/003_a_b_users.rb +25 -0
- data/db/migrate/004_a_b_tokens.rb +12 -0
- data/features/example.feature +10 -0
- data/features/support/env.rb +35 -0
- data/features/support/rspec.rb +11 -0
- data/features/support/webrat.rb +3 -0
- data/gemspec.rb +41 -0
- data/lib/a_b.rb +31 -0
- data/lib/a_b/boot.rb +30 -0
- data/lib/a_b/controller/api.rb +32 -0
- data/lib/a_b/controller/application.rb +6 -0
- data/lib/a_b/controller/index.rb +16 -0
- data/lib/a_b/controller/sessions.rb +28 -0
- data/lib/a_b/controller/tests.rb +37 -0
- data/lib/a_b/controller/variants.rb +14 -0
- data/lib/a_b/helper/api.rb +8 -0
- data/lib/a_b/helper/application.rb +56 -0
- data/lib/a_b/helper/index.rb +12 -0
- data/lib/a_b/model/a_b_test.rb +65 -0
- data/lib/a_b/model/a_b_variant.rb +131 -0
- data/lib/a_b/model/token.rb +22 -0
- data/lib/a_b/model/user.rb +5 -0
- data/lib/a_b/model/user_session.rb +4 -0
- data/lib/a_b/view/index.haml +129 -0
- data/lib/a_b/view/index.sass +55 -0
- data/lib/a_b/view/layout.haml +15 -0
- data/lib/a_b/view/layout.sass +34 -0
- data/lib/a_b/view/log_in.haml +15 -0
- data/lib/a_b/view/log_in.sass +11 -0
- data/public/css/blueprint/ie.css +35 -0
- data/public/css/blueprint/print.css +29 -0
- data/public/css/blueprint/screen.css +257 -0
- data/public/js/index.js +126 -0
- data/public/js/jquery.js +19 -0
- data/public/js/visit.js +59 -0
- data/script/console +2 -0
- data/script/env.rb +30 -0
- data/spec/spec.opts +1 -0
- data/spec/spec_helper.rb +16 -0
- data/vendor/authlogic/CHANGELOG.rdoc +345 -0
- data/vendor/authlogic/LICENSE +20 -0
- data/vendor/authlogic/README.rdoc +246 -0
- data/vendor/authlogic/Rakefile +42 -0
- data/vendor/authlogic/VERSION.yml +5 -0
- data/vendor/authlogic/authlogic.gemspec +217 -0
- data/vendor/authlogic/generators/session/session_generator.rb +9 -0
- data/vendor/authlogic/generators/session/templates/session.rb +2 -0
- data/vendor/authlogic/init.rb +1 -0
- data/vendor/authlogic/lib/authlogic.rb +57 -0
- data/vendor/authlogic/lib/authlogic/acts_as_authentic/base.rb +107 -0
- data/vendor/authlogic/lib/authlogic/acts_as_authentic/email.rb +110 -0
- data/vendor/authlogic/lib/authlogic/acts_as_authentic/logged_in_status.rb +60 -0
- data/vendor/authlogic/lib/authlogic/acts_as_authentic/login.rb +141 -0
- data/vendor/authlogic/lib/authlogic/acts_as_authentic/magic_columns.rb +24 -0
- data/vendor/authlogic/lib/authlogic/acts_as_authentic/password.rb +344 -0
- data/vendor/authlogic/lib/authlogic/acts_as_authentic/perishable_token.rb +105 -0
- data/vendor/authlogic/lib/authlogic/acts_as_authentic/persistence_token.rb +68 -0
- data/vendor/authlogic/lib/authlogic/acts_as_authentic/restful_authentication.rb +61 -0
- data/vendor/authlogic/lib/authlogic/acts_as_authentic/session_maintenance.rb +139 -0
- data/vendor/authlogic/lib/authlogic/acts_as_authentic/single_access_token.rb +65 -0
- data/vendor/authlogic/lib/authlogic/acts_as_authentic/validations_scope.rb +32 -0
- data/vendor/authlogic/lib/authlogic/authenticates_many/association.rb +42 -0
- data/vendor/authlogic/lib/authlogic/authenticates_many/base.rb +55 -0
- data/vendor/authlogic/lib/authlogic/controller_adapters/abstract_adapter.rb +67 -0
- data/vendor/authlogic/lib/authlogic/controller_adapters/merb_adapter.rb +30 -0
- data/vendor/authlogic/lib/authlogic/controller_adapters/rails_adapter.rb +48 -0
- data/vendor/authlogic/lib/authlogic/controller_adapters/sinatra_adapter.rb +61 -0
- data/vendor/authlogic/lib/authlogic/crypto_providers/aes256.rb +43 -0
- data/vendor/authlogic/lib/authlogic/crypto_providers/bcrypt.rb +90 -0
- data/vendor/authlogic/lib/authlogic/crypto_providers/md5.rb +34 -0
- data/vendor/authlogic/lib/authlogic/crypto_providers/sha1.rb +35 -0
- data/vendor/authlogic/lib/authlogic/crypto_providers/sha256.rb +50 -0
- data/vendor/authlogic/lib/authlogic/crypto_providers/sha512.rb +50 -0
- data/vendor/authlogic/lib/authlogic/crypto_providers/wordpress.rb +43 -0
- data/vendor/authlogic/lib/authlogic/i18n.rb +83 -0
- data/vendor/authlogic/lib/authlogic/i18n/translator.rb +15 -0
- data/vendor/authlogic/lib/authlogic/random.rb +33 -0
- data/vendor/authlogic/lib/authlogic/regex.rb +25 -0
- data/vendor/authlogic/lib/authlogic/session/activation.rb +58 -0
- data/vendor/authlogic/lib/authlogic/session/active_record_trickery.rb +61 -0
- data/vendor/authlogic/lib/authlogic/session/base.rb +37 -0
- data/vendor/authlogic/lib/authlogic/session/brute_force_protection.rb +96 -0
- data/vendor/authlogic/lib/authlogic/session/callbacks.rb +88 -0
- data/vendor/authlogic/lib/authlogic/session/cookies.rb +130 -0
- data/vendor/authlogic/lib/authlogic/session/existence.rb +93 -0
- data/vendor/authlogic/lib/authlogic/session/foundation.rb +63 -0
- data/vendor/authlogic/lib/authlogic/session/http_auth.rb +58 -0
- data/vendor/authlogic/lib/authlogic/session/id.rb +41 -0
- data/vendor/authlogic/lib/authlogic/session/klass.rb +78 -0
- data/vendor/authlogic/lib/authlogic/session/magic_columns.rb +95 -0
- data/vendor/authlogic/lib/authlogic/session/magic_states.rb +59 -0
- data/vendor/authlogic/lib/authlogic/session/params.rb +101 -0
- data/vendor/authlogic/lib/authlogic/session/password.rb +240 -0
- data/vendor/authlogic/lib/authlogic/session/perishable_token.rb +18 -0
- data/vendor/authlogic/lib/authlogic/session/persistence.rb +70 -0
- data/vendor/authlogic/lib/authlogic/session/priority_record.rb +34 -0
- data/vendor/authlogic/lib/authlogic/session/scopes.rb +101 -0
- data/vendor/authlogic/lib/authlogic/session/session.rb +62 -0
- data/vendor/authlogic/lib/authlogic/session/timeout.rb +82 -0
- data/vendor/authlogic/lib/authlogic/session/unauthorized_record.rb +50 -0
- data/vendor/authlogic/lib/authlogic/session/validation.rb +82 -0
- data/vendor/authlogic/lib/authlogic/test_case.rb +120 -0
- data/vendor/authlogic/lib/authlogic/test_case/mock_controller.rb +45 -0
- data/vendor/authlogic/lib/authlogic/test_case/mock_cookie_jar.rb +14 -0
- data/vendor/authlogic/lib/authlogic/test_case/mock_logger.rb +10 -0
- data/vendor/authlogic/lib/authlogic/test_case/mock_request.rb +19 -0
- data/vendor/authlogic/lib/authlogic/test_case/rails_request_adapter.rb +30 -0
- data/vendor/authlogic/rails/init.rb +1 -0
- data/vendor/authlogic/shoulda_macros/authlogic.rb +69 -0
- data/vendor/authlogic/test/acts_as_authentic_test/base_test.rb +18 -0
- data/vendor/authlogic/test/acts_as_authentic_test/email_test.rb +97 -0
- data/vendor/authlogic/test/acts_as_authentic_test/logged_in_status_test.rb +36 -0
- data/vendor/authlogic/test/acts_as_authentic_test/login_test.rb +109 -0
- data/vendor/authlogic/test/acts_as_authentic_test/magic_columns_test.rb +27 -0
- data/vendor/authlogic/test/acts_as_authentic_test/password_test.rb +236 -0
- data/vendor/authlogic/test/acts_as_authentic_test/perishable_token_test.rb +90 -0
- data/vendor/authlogic/test/acts_as_authentic_test/persistence_token_test.rb +55 -0
- data/vendor/authlogic/test/acts_as_authentic_test/restful_authentication_test.rb +40 -0
- data/vendor/authlogic/test/acts_as_authentic_test/session_maintenance_test.rb +84 -0
- data/vendor/authlogic/test/acts_as_authentic_test/single_access_test.rb +44 -0
- data/vendor/authlogic/test/authenticates_many_test.rb +16 -0
- data/vendor/authlogic/test/crypto_provider_test/aes256_test.rb +14 -0
- data/vendor/authlogic/test/crypto_provider_test/bcrypt_test.rb +14 -0
- data/vendor/authlogic/test/crypto_provider_test/sha1_test.rb +23 -0
- data/vendor/authlogic/test/crypto_provider_test/sha256_test.rb +14 -0
- data/vendor/authlogic/test/crypto_provider_test/sha512_test.rb +14 -0
- data/vendor/authlogic/test/fixtures/companies.yml +5 -0
- data/vendor/authlogic/test/fixtures/employees.yml +17 -0
- data/vendor/authlogic/test/fixtures/projects.yml +3 -0
- data/vendor/authlogic/test/fixtures/users.yml +24 -0
- data/vendor/authlogic/test/i18n_test.rb +33 -0
- data/vendor/authlogic/test/libs/affiliate.rb +7 -0
- data/vendor/authlogic/test/libs/company.rb +6 -0
- data/vendor/authlogic/test/libs/employee.rb +7 -0
- data/vendor/authlogic/test/libs/employee_session.rb +2 -0
- data/vendor/authlogic/test/libs/ldaper.rb +3 -0
- data/vendor/authlogic/test/libs/ordered_hash.rb +9 -0
- data/vendor/authlogic/test/libs/project.rb +3 -0
- data/vendor/authlogic/test/libs/user.rb +5 -0
- data/vendor/authlogic/test/libs/user_session.rb +6 -0
- data/vendor/authlogic/test/random_test.rb +49 -0
- data/vendor/authlogic/test/session_test/activation_test.rb +43 -0
- data/vendor/authlogic/test/session_test/active_record_trickery_test.rb +36 -0
- data/vendor/authlogic/test/session_test/brute_force_protection_test.rb +101 -0
- data/vendor/authlogic/test/session_test/callbacks_test.rb +6 -0
- data/vendor/authlogic/test/session_test/cookies_test.rb +112 -0
- data/vendor/authlogic/test/session_test/credentials_test.rb +0 -0
- data/vendor/authlogic/test/session_test/existence_test.rb +64 -0
- data/vendor/authlogic/test/session_test/http_auth_test.rb +28 -0
- data/vendor/authlogic/test/session_test/id_test.rb +17 -0
- data/vendor/authlogic/test/session_test/klass_test.rb +40 -0
- data/vendor/authlogic/test/session_test/magic_columns_test.rb +62 -0
- data/vendor/authlogic/test/session_test/magic_states_test.rb +60 -0
- data/vendor/authlogic/test/session_test/params_test.rb +53 -0
- data/vendor/authlogic/test/session_test/password_test.rb +106 -0
- data/vendor/authlogic/test/session_test/perishability_test.rb +15 -0
- data/vendor/authlogic/test/session_test/persistence_test.rb +21 -0
- data/vendor/authlogic/test/session_test/scopes_test.rb +60 -0
- data/vendor/authlogic/test/session_test/session_test.rb +59 -0
- data/vendor/authlogic/test/session_test/timeout_test.rb +52 -0
- data/vendor/authlogic/test/session_test/unauthorized_record_test.rb +13 -0
- data/vendor/authlogic/test/session_test/validation_test.rb +23 -0
- data/vendor/authlogic/test/test_helper.rb +182 -0
- metadata +325 -0
@@ -0,0 +1,109 @@
|
|
1
|
+
require File.dirname(__FILE__) + '/../test_helper.rb'
|
2
|
+
|
3
|
+
module ActsAsAuthenticTest
|
4
|
+
class LoginTest < ActiveSupport::TestCase
|
5
|
+
def test_login_field_config
|
6
|
+
assert_equal :login, User.login_field
|
7
|
+
assert_nil Employee.login_field
|
8
|
+
|
9
|
+
User.login_field = :nope
|
10
|
+
assert_equal :nope, User.login_field
|
11
|
+
User.login_field :login
|
12
|
+
assert_equal :login, User.login_field
|
13
|
+
end
|
14
|
+
|
15
|
+
def test_validate_login_field_config
|
16
|
+
assert User.validate_login_field
|
17
|
+
assert Employee.validate_login_field
|
18
|
+
|
19
|
+
User.validate_login_field = false
|
20
|
+
assert !User.validate_login_field
|
21
|
+
User.validate_login_field true
|
22
|
+
assert User.validate_login_field
|
23
|
+
end
|
24
|
+
|
25
|
+
def test_validates_length_of_login_field_options_config
|
26
|
+
assert_equal({:within => 3..100}, User.validates_length_of_login_field_options)
|
27
|
+
assert_equal({:within => 3..100}, Employee.validates_length_of_login_field_options)
|
28
|
+
|
29
|
+
User.validates_length_of_login_field_options = {:yes => "no"}
|
30
|
+
assert_equal({:yes => "no"}, User.validates_length_of_login_field_options)
|
31
|
+
User.validates_length_of_login_field_options({:within => 3..100})
|
32
|
+
assert_equal({:within => 3..100}, User.validates_length_of_login_field_options)
|
33
|
+
end
|
34
|
+
|
35
|
+
def test_validates_format_of_login_field_options_config
|
36
|
+
default = {:with => /\A\w[\w\.+\-_@ ]+$/, :message => I18n.t('error_messages.login_invalid', :default => "should use only letters, numbers, spaces, and .-_@ please.")}
|
37
|
+
assert_equal default, User.validates_format_of_login_field_options
|
38
|
+
assert_equal default, Employee.validates_format_of_login_field_options
|
39
|
+
|
40
|
+
User.validates_format_of_login_field_options = {:yes => "no"}
|
41
|
+
assert_equal({:yes => "no"}, User.validates_format_of_login_field_options)
|
42
|
+
User.validates_format_of_login_field_options default
|
43
|
+
assert_equal default, User.validates_format_of_login_field_options
|
44
|
+
end
|
45
|
+
|
46
|
+
def test_validates_uniqueness_of_login_field_options_config
|
47
|
+
default = {:case_sensitive => false, :scope => User.validations_scope, :if => "#{User.login_field}_changed?".to_sym}
|
48
|
+
assert_equal default, User.validates_uniqueness_of_login_field_options
|
49
|
+
|
50
|
+
User.validates_uniqueness_of_login_field_options = {:yes => "no"}
|
51
|
+
assert_equal({:yes => "no"}, User.validates_uniqueness_of_login_field_options)
|
52
|
+
User.validates_uniqueness_of_login_field_options default
|
53
|
+
assert_equal default, User.validates_uniqueness_of_login_field_options
|
54
|
+
end
|
55
|
+
|
56
|
+
def test_validates_length_of_login_field
|
57
|
+
u = User.new
|
58
|
+
u.login = "a"
|
59
|
+
assert !u.valid?
|
60
|
+
assert u.errors[:login].size > 0
|
61
|
+
|
62
|
+
u.login = "aaaaaaaaaa"
|
63
|
+
assert !u.valid?
|
64
|
+
assert u.errors[:login].size == 0
|
65
|
+
end
|
66
|
+
|
67
|
+
def test_validates_format_of_login_field
|
68
|
+
u = User.new
|
69
|
+
u.login = "fdsf@^&*"
|
70
|
+
assert !u.valid?
|
71
|
+
assert u.errors[:login].size > 0
|
72
|
+
|
73
|
+
u.login = "fdsfdsfdsfdsfs"
|
74
|
+
assert !u.valid?
|
75
|
+
assert u.errors[:login].size == 0
|
76
|
+
|
77
|
+
u.login = "dakota.dux+1@gmail.com"
|
78
|
+
assert !u.valid?
|
79
|
+
assert u.errors[:login].size == 0
|
80
|
+
end
|
81
|
+
|
82
|
+
def test_validates_uniqueness_of_login_field
|
83
|
+
u = User.new
|
84
|
+
u.login = "bjohnson"
|
85
|
+
assert !u.valid?
|
86
|
+
assert u.errors[:login].size > 0
|
87
|
+
|
88
|
+
u.login = "BJOHNSON"
|
89
|
+
assert !u.valid?
|
90
|
+
assert u.errors[:login].size > 0
|
91
|
+
|
92
|
+
u.login = "fdsfdsf"
|
93
|
+
assert !u.valid?
|
94
|
+
assert u.errors[:login].size == 0
|
95
|
+
end
|
96
|
+
|
97
|
+
def test_find_by_smart_case_login_field
|
98
|
+
ben = users(:ben)
|
99
|
+
assert_equal ben, User.find_by_smart_case_login_field("bjohnson")
|
100
|
+
assert_equal ben, User.find_by_smart_case_login_field("BJOHNSON")
|
101
|
+
assert_equal ben, User.find_by_smart_case_login_field("Bjohnson")
|
102
|
+
|
103
|
+
drew = employees(:drew)
|
104
|
+
assert_equal drew, Employee.find_by_smart_case_login_field("dgainor@binarylogic.com")
|
105
|
+
assert_equal drew, Employee.find_by_smart_case_login_field("Dgainor@binarylogic.com")
|
106
|
+
assert_equal drew, Employee.find_by_smart_case_login_field("DGAINOR@BINARYLOGIC.COM")
|
107
|
+
end
|
108
|
+
end
|
109
|
+
end
|
@@ -0,0 +1,27 @@
|
|
1
|
+
require File.dirname(__FILE__) + '/../test_helper.rb'
|
2
|
+
|
3
|
+
module ActsAsAuthenticTest
|
4
|
+
class MagicColumnsTest < ActiveSupport::TestCase
|
5
|
+
def test_validates_numericality_of_login_count
|
6
|
+
u = User.new
|
7
|
+
u.login_count = -1
|
8
|
+
assert !u.valid?
|
9
|
+
assert u.errors[:login_count].size > 0
|
10
|
+
|
11
|
+
u.login_count = 0
|
12
|
+
assert !u.valid?
|
13
|
+
assert u.errors[:login_count].size == 0
|
14
|
+
end
|
15
|
+
|
16
|
+
def test_validates_numericality_of_failed_login_count
|
17
|
+
u = User.new
|
18
|
+
u.failed_login_count = -1
|
19
|
+
assert !u.valid?
|
20
|
+
assert u.errors[:failed_login_count].size > 0
|
21
|
+
|
22
|
+
u.failed_login_count = 0
|
23
|
+
assert !u.valid?
|
24
|
+
assert u.errors[:failed_login_count].size == 0
|
25
|
+
end
|
26
|
+
end
|
27
|
+
end
|
@@ -0,0 +1,236 @@
|
|
1
|
+
require File.dirname(__FILE__) + '/../test_helper.rb'
|
2
|
+
|
3
|
+
module ActsAsAuthenticTest
|
4
|
+
class PasswordTest < ActiveSupport::TestCase
|
5
|
+
def test_crypted_password_field_config
|
6
|
+
assert_equal :crypted_password, User.crypted_password_field
|
7
|
+
assert_equal :crypted_password, Employee.crypted_password_field
|
8
|
+
|
9
|
+
User.crypted_password_field = :nope
|
10
|
+
assert_equal :nope, User.crypted_password_field
|
11
|
+
User.crypted_password_field :crypted_password
|
12
|
+
assert_equal :crypted_password, User.crypted_password_field
|
13
|
+
end
|
14
|
+
|
15
|
+
def test_password_salt_field_config
|
16
|
+
assert_equal :password_salt, User.password_salt_field
|
17
|
+
assert_equal :password_salt, Employee.password_salt_field
|
18
|
+
|
19
|
+
User.password_salt_field = :nope
|
20
|
+
assert_equal :nope, User.password_salt_field
|
21
|
+
User.password_salt_field :password_salt
|
22
|
+
assert_equal :password_salt, User.password_salt_field
|
23
|
+
end
|
24
|
+
|
25
|
+
def test_ignore_blank_passwords_config
|
26
|
+
assert User.ignore_blank_passwords
|
27
|
+
assert Employee.ignore_blank_passwords
|
28
|
+
|
29
|
+
User.ignore_blank_passwords = false
|
30
|
+
assert !User.ignore_blank_passwords
|
31
|
+
User.ignore_blank_passwords true
|
32
|
+
assert User.ignore_blank_passwords
|
33
|
+
end
|
34
|
+
|
35
|
+
def test_check_passwords_against_database
|
36
|
+
assert User.check_passwords_against_database
|
37
|
+
User.check_passwords_against_database = false
|
38
|
+
assert !User.check_passwords_against_database
|
39
|
+
User.check_passwords_against_database true
|
40
|
+
assert User.check_passwords_against_database
|
41
|
+
end
|
42
|
+
|
43
|
+
def test_validate_password_field_config
|
44
|
+
assert User.validate_password_field
|
45
|
+
assert Employee.validate_password_field
|
46
|
+
|
47
|
+
User.validate_password_field = false
|
48
|
+
assert !User.validate_password_field
|
49
|
+
User.validate_password_field true
|
50
|
+
assert User.validate_password_field
|
51
|
+
end
|
52
|
+
|
53
|
+
def test_validates_length_of_password_field_options_config
|
54
|
+
default = {:minimum => 4, :if => :require_password?}
|
55
|
+
assert_equal default, User.validates_length_of_password_field_options
|
56
|
+
assert_equal default, Employee.validates_length_of_password_field_options
|
57
|
+
|
58
|
+
User.validates_length_of_password_field_options = {:yes => "no"}
|
59
|
+
assert_equal({:yes => "no"}, User.validates_length_of_password_field_options)
|
60
|
+
User.validates_length_of_password_field_options default
|
61
|
+
assert_equal default, User.validates_length_of_password_field_options
|
62
|
+
end
|
63
|
+
|
64
|
+
def test_validates_confirmation_of_password_field_options_config
|
65
|
+
default = {:if => :require_password?}
|
66
|
+
assert_equal default, User.validates_confirmation_of_password_field_options
|
67
|
+
assert_equal default, Employee.validates_confirmation_of_password_field_options
|
68
|
+
|
69
|
+
User.validates_confirmation_of_password_field_options = {:yes => "no"}
|
70
|
+
assert_equal({:yes => "no"}, User.validates_confirmation_of_password_field_options)
|
71
|
+
User.validates_confirmation_of_password_field_options default
|
72
|
+
assert_equal default, User.validates_confirmation_of_password_field_options
|
73
|
+
end
|
74
|
+
|
75
|
+
def test_validates_length_of_password_confirmation_field_options_config
|
76
|
+
default = {:minimum => 4, :if => :require_password?}
|
77
|
+
assert_equal default, User.validates_length_of_password_confirmation_field_options
|
78
|
+
assert_equal default, Employee.validates_length_of_password_confirmation_field_options
|
79
|
+
|
80
|
+
User.validates_length_of_password_confirmation_field_options = {:yes => "no"}
|
81
|
+
assert_equal({:yes => "no"}, User.validates_length_of_password_confirmation_field_options)
|
82
|
+
User.validates_length_of_password_confirmation_field_options default
|
83
|
+
assert_equal default, User.validates_length_of_password_confirmation_field_options
|
84
|
+
end
|
85
|
+
|
86
|
+
def test_crypto_provider_config
|
87
|
+
assert_equal Authlogic::CryptoProviders::Sha512, User.crypto_provider
|
88
|
+
assert_equal Authlogic::CryptoProviders::AES256, Employee.crypto_provider
|
89
|
+
|
90
|
+
User.crypto_provider = Authlogic::CryptoProviders::BCrypt
|
91
|
+
assert_equal Authlogic::CryptoProviders::BCrypt, User.crypto_provider
|
92
|
+
User.crypto_provider Authlogic::CryptoProviders::Sha512
|
93
|
+
assert_equal Authlogic::CryptoProviders::Sha512, User.crypto_provider
|
94
|
+
end
|
95
|
+
|
96
|
+
def test_transition_from_crypto_providers_config
|
97
|
+
assert_equal [], User.transition_from_crypto_providers
|
98
|
+
assert_equal [], Employee.transition_from_crypto_providers
|
99
|
+
|
100
|
+
User.transition_from_crypto_providers = [Authlogic::CryptoProviders::BCrypt]
|
101
|
+
assert_equal [Authlogic::CryptoProviders::BCrypt], User.transition_from_crypto_providers
|
102
|
+
User.transition_from_crypto_providers []
|
103
|
+
assert_equal [], User.transition_from_crypto_providers
|
104
|
+
end
|
105
|
+
|
106
|
+
def test_validates_length_of_password
|
107
|
+
u = User.new
|
108
|
+
u.password_confirmation = "test2"
|
109
|
+
assert !u.valid?
|
110
|
+
assert u.errors[:password].size > 0
|
111
|
+
|
112
|
+
u.password = "test"
|
113
|
+
assert !u.valid?
|
114
|
+
assert u.errors[:password_confirmation].size == 0
|
115
|
+
end
|
116
|
+
|
117
|
+
def test_validates_confirmation_of_password
|
118
|
+
u = User.new
|
119
|
+
u.password = "test"
|
120
|
+
u.password_confirmation = "test2"
|
121
|
+
assert !u.valid?
|
122
|
+
assert u.errors[:password].size > 0
|
123
|
+
|
124
|
+
u.password_confirmation = "test"
|
125
|
+
assert !u.valid?
|
126
|
+
assert u.errors[:password].size == 0
|
127
|
+
end
|
128
|
+
|
129
|
+
def test_validates_length_of_password_confirmation
|
130
|
+
u = User.new
|
131
|
+
|
132
|
+
u.password = "test"
|
133
|
+
u.password_confirmation = ""
|
134
|
+
assert !u.valid?
|
135
|
+
assert u.errors[:password_confirmation].size > 0
|
136
|
+
|
137
|
+
u.password_confirmation = "test"
|
138
|
+
assert !u.valid?
|
139
|
+
assert u.errors[:password_confirmation].size == 0
|
140
|
+
|
141
|
+
ben = users(:ben)
|
142
|
+
assert ben.valid?
|
143
|
+
|
144
|
+
ben.password = "newpass"
|
145
|
+
assert !ben.valid?
|
146
|
+
assert ben.errors[:password_confirmation].size > 0
|
147
|
+
|
148
|
+
ben.password_confirmation = "newpass"
|
149
|
+
assert ben.valid?
|
150
|
+
end
|
151
|
+
|
152
|
+
def test_password
|
153
|
+
u = User.new
|
154
|
+
old_password_salt = u.password_salt
|
155
|
+
old_crypted_password = u.crypted_password
|
156
|
+
u.password = "test"
|
157
|
+
assert_not_equal old_password_salt, u.password_salt
|
158
|
+
assert_not_equal old_crypted_password, u.crypted_password
|
159
|
+
end
|
160
|
+
|
161
|
+
def test_transitioning_password
|
162
|
+
ben = users(:ben)
|
163
|
+
transition_password_to(Authlogic::CryptoProviders::BCrypt, ben)
|
164
|
+
transition_password_to(Authlogic::CryptoProviders::Sha1, ben, [Authlogic::CryptoProviders::Sha512, Authlogic::CryptoProviders::BCrypt])
|
165
|
+
transition_password_to(Authlogic::CryptoProviders::Sha512, ben, [Authlogic::CryptoProviders::Sha1, Authlogic::CryptoProviders::BCrypt])
|
166
|
+
end
|
167
|
+
|
168
|
+
def test_checks_password_against_database
|
169
|
+
ben = users(:ben)
|
170
|
+
ben.password = "new pass"
|
171
|
+
assert !ben.valid_password?("new pass")
|
172
|
+
assert ben.valid_password?("benrocks")
|
173
|
+
end
|
174
|
+
|
175
|
+
def test_checks_password_against_database_and_always_fails_on_new_records
|
176
|
+
user = User.new
|
177
|
+
user.password = "new pass"
|
178
|
+
assert !user.valid_password?("new pass")
|
179
|
+
end
|
180
|
+
|
181
|
+
def test_checks_password_against_object
|
182
|
+
ben = users(:ben)
|
183
|
+
ben.password = "new pass"
|
184
|
+
assert ben.valid_password?("new pass", false)
|
185
|
+
assert !ben.valid_password?("benrocks", false)
|
186
|
+
end
|
187
|
+
|
188
|
+
def test_reset_password
|
189
|
+
ben = users(:ben)
|
190
|
+
old_crypted_password = ben.crypted_password
|
191
|
+
old_password_salt = ben.password_salt
|
192
|
+
|
193
|
+
# soft reset
|
194
|
+
ben.reset_password
|
195
|
+
assert_not_equal old_crypted_password, ben.crypted_password
|
196
|
+
assert_not_equal old_password_salt, ben.password_salt
|
197
|
+
|
198
|
+
# make sure it didn't go into the db
|
199
|
+
ben.reload
|
200
|
+
assert_equal old_crypted_password, ben.crypted_password
|
201
|
+
assert_equal old_password_salt, ben.password_salt
|
202
|
+
|
203
|
+
# hard reset
|
204
|
+
assert ben.reset_password!
|
205
|
+
assert_not_equal old_crypted_password, ben.crypted_password
|
206
|
+
assert_not_equal old_password_salt, ben.password_salt
|
207
|
+
|
208
|
+
# make sure it did go into the db
|
209
|
+
ben.reload
|
210
|
+
assert_not_equal old_crypted_password, ben.crypted_password
|
211
|
+
assert_not_equal old_password_salt, ben.password_salt
|
212
|
+
end
|
213
|
+
|
214
|
+
private
|
215
|
+
def transition_password_to(crypto_provider, records, from_crypto_providers = Authlogic::CryptoProviders::Sha512)
|
216
|
+
records = [records] unless records.is_a?(Array)
|
217
|
+
User.acts_as_authentic do |c|
|
218
|
+
c.crypto_provider = crypto_provider
|
219
|
+
c.transition_from_crypto_providers = from_crypto_providers
|
220
|
+
end
|
221
|
+
records.each do |record|
|
222
|
+
old_hash = record.crypted_password
|
223
|
+
old_persistence_token = record.persistence_token
|
224
|
+
assert record.valid_password?(password_for(record))
|
225
|
+
assert_not_equal old_hash.to_s, record.crypted_password.to_s
|
226
|
+
assert_not_equal old_persistence_token.to_s, record.persistence_token.to_s
|
227
|
+
|
228
|
+
old_hash = record.crypted_password
|
229
|
+
old_persistence_token = record.persistence_token
|
230
|
+
assert record.valid_password?(password_for(record))
|
231
|
+
assert_equal old_hash.to_s, record.crypted_password.to_s
|
232
|
+
assert_equal old_persistence_token.to_s, record.persistence_token.to_s
|
233
|
+
end
|
234
|
+
end
|
235
|
+
end
|
236
|
+
end
|
@@ -0,0 +1,90 @@
|
|
1
|
+
require File.dirname(__FILE__) + '/../test_helper.rb'
|
2
|
+
|
3
|
+
module ActsAsAuthenticTest
|
4
|
+
class PerishableTokenTest < ActiveSupport::TestCase
|
5
|
+
def test_perishable_token_valid_for_config
|
6
|
+
assert_equal 10.minutes.to_i, User.perishable_token_valid_for
|
7
|
+
assert_equal 10.minutes.to_i, Employee.perishable_token_valid_for
|
8
|
+
|
9
|
+
User.perishable_token_valid_for = 1.hour
|
10
|
+
assert_equal 1.hour.to_i, User.perishable_token_valid_for
|
11
|
+
User.perishable_token_valid_for 10.minutes
|
12
|
+
assert_equal 10.minutes.to_i, User.perishable_token_valid_for
|
13
|
+
end
|
14
|
+
|
15
|
+
def test_disable_perishable_token_maintenance_config
|
16
|
+
assert !User.disable_perishable_token_maintenance
|
17
|
+
assert !Employee.disable_perishable_token_maintenance
|
18
|
+
|
19
|
+
User.disable_perishable_token_maintenance = true
|
20
|
+
assert User.disable_perishable_token_maintenance
|
21
|
+
User.disable_perishable_token_maintenance false
|
22
|
+
assert !User.disable_perishable_token_maintenance
|
23
|
+
end
|
24
|
+
|
25
|
+
def test_validates_uniqueness_of_perishable_token
|
26
|
+
u = User.new
|
27
|
+
u.perishable_token = users(:ben).perishable_token
|
28
|
+
assert !u.valid?
|
29
|
+
assert u.errors[:perishable_token].size > 0
|
30
|
+
end
|
31
|
+
|
32
|
+
def test_before_save_reset_perishable_token
|
33
|
+
ben = users(:ben)
|
34
|
+
old_perishable_token = ben.perishable_token
|
35
|
+
assert ben.save
|
36
|
+
assert_not_equal old_perishable_token, ben.perishable_token
|
37
|
+
end
|
38
|
+
|
39
|
+
def test_reset_perishable_token
|
40
|
+
ben = users(:ben)
|
41
|
+
old_perishable_token = ben.perishable_token
|
42
|
+
|
43
|
+
assert ben.reset_perishable_token
|
44
|
+
assert_not_equal old_perishable_token, ben.perishable_token
|
45
|
+
|
46
|
+
ben.reload
|
47
|
+
assert_equal old_perishable_token, ben.perishable_token
|
48
|
+
|
49
|
+
assert ben.reset_perishable_token!
|
50
|
+
assert_not_equal old_perishable_token, ben.perishable_token
|
51
|
+
|
52
|
+
ben.reload
|
53
|
+
assert_not_equal old_perishable_token, ben.perishable_token
|
54
|
+
end
|
55
|
+
|
56
|
+
def test_find_using_perishable_token
|
57
|
+
ben = users(:ben)
|
58
|
+
assert_equal ben, User.find_using_perishable_token(ben.perishable_token)
|
59
|
+
end
|
60
|
+
|
61
|
+
def test_find_using_perishable_token_when_perished
|
62
|
+
ben = users(:ben)
|
63
|
+
ActiveRecord::Base.connection.execute("UPDATE users set updated_at = '#{1.week.ago.to_s(:db)}' where id = #{ben.id}")
|
64
|
+
assert_nil User.find_using_perishable_token(ben.perishable_token)
|
65
|
+
end
|
66
|
+
|
67
|
+
def test_find_using_perishable_token_when_perished
|
68
|
+
User.perishable_token_valid_for = 1.minute
|
69
|
+
ben = users(:ben)
|
70
|
+
ActiveRecord::Base.connection.execute("UPDATE users set updated_at = '#{2.minutes.ago.to_s(:db)}' where id = #{ben.id}")
|
71
|
+
assert_nil User.find_using_perishable_token(ben.perishable_token)
|
72
|
+
User.perishable_token_valid_for = 10.minutes
|
73
|
+
end
|
74
|
+
|
75
|
+
def test_find_using_perishable_token_when_passing_threshold
|
76
|
+
User.perishable_token_valid_for = 1.minute
|
77
|
+
ben = users(:ben)
|
78
|
+
ActiveRecord::Base.connection.execute("UPDATE users set updated_at = '#{10.minutes.ago.to_s(:db)}' where id = #{ben.id}")
|
79
|
+
assert_nil User.find_using_perishable_token(ben.perishable_token, 5.minutes)
|
80
|
+
assert_equal ben, User.find_using_perishable_token(ben.perishable_token, 20.minutes)
|
81
|
+
User.perishable_token_valid_for = 10.minutes
|
82
|
+
end
|
83
|
+
|
84
|
+
def test_find_perishable_token_with_bang
|
85
|
+
assert_raises ActiveRecord::RecordNotFound do
|
86
|
+
User.find_using_perishable_token!('some_bad_value')
|
87
|
+
end
|
88
|
+
end
|
89
|
+
end
|
90
|
+
end
|