authenticate 0.2.3 → 0.3.0

data/spec/features/password_reset_spec.rb

@@ -0,0 +1,69 @@
+require 'spec_helper'
+require 'support/features/feature_helpers'
+
+feature 'visitor requests password reset' do
+  before(:each) do
+    ActionMailer::Base.deliveries.clear
+  end
+
+  scenario 'navigates to Forgot Password page' do
+    visit sign_in_path
+    click_link 'Forgot Password'
+    expect(current_path).to eq new_password_path
+  end
+
+  scenario 'uses valid email' do
+    user = create(:user)
+    request_password_reset_for user.email
+
+    expect_password_change_request_success_message
+    expect_user_to_have_password_reset_attributes user
+    expect_password_reset_email_for user
+  end
+
+  scenario 'with a non-user-account email' do
+    request_password_reset_for 'fake.email@example.com'
+
+    expect_password_change_request_success_message
+    expect_mailer_to_have_no_deliveries
+  end
+
+  scenario 'with invalid email' do
+    request_password_reset_for 'not_an_email_address'
+
+    expect_password_change_request_success_message
+    expect_mailer_to_have_no_deliveries
+  end
+end
+
+
+def request_password_reset_for email
+  visit new_password_path
+  fill_in 'password_email', with: email
+  click_button 'Reset password'
+end
+
+def expect_password_change_request_success_message
+  expect(page).to have_content I18n.t('passwords.create.description')
+end
+
+def expect_user_to_have_password_reset_attributes user
+  user.reload
+  expect(user.password_reset_token).not_to be_blank
+  expect(user.password_reset_sent_at).not_to be_blank
+end
+
+def expect_password_reset_email_for user
+  recipient = user.email
+  token = user.password_reset_token
+  expect(ActionMailer::Base.deliveries).not_to be_empty
+  ActionMailer::Base.deliveries.any? do |email|
+    email.to == [recipient] &&
+        email.html_part.body =~ /#{token}/ &&
+        email.text_part.body =~ /#{token}/
+  end
+end
+
+def expect_mailer_to_have_no_deliveries
+  expect(ActionMailer::Base.deliveries).to be_empty
+end

data/spec/features/password_update_spec.rb

@@ -0,0 +1,41 @@
+require 'spec_helper'
+require 'support/features/feature_helpers'
+
+feature 'visitor updates password' do
+  before(:each) do
+    @user = create(:user, :with_password_reset_token_and_timestamp)
+  end
+
+  scenario 'with a valid password' do
+    update_password @user, 'newpassword'
+
+    expect_user_to_be_signed_in
+  end
+
+  scenario 'with a blank password' do
+    update_password @user, ''
+
+    expect(page).to have_content I18n.t('flashes.failure_after_update')
+    expect_user_to_be_signed_out
+  end
+
+  scenario 'signs in with new password' do
+    update_password @user, 'newpassword'
+
+    sign_out
+    sign_in_with @user.email, 'newpassword'
+    expect_user_to_be_signed_in
+  end
+end
+
+
+def update_password(user, password)
+  visit_password_reset_page_for user
+  fill_in 'password_reset_password', with: password
+  click_button 'Save this password'
+end
+
+def visit_password_reset_page_for(user)
+  visit edit_users_password_path(id: user, token: user.password_reset_token)
+end
+

data/spec/features/sign_in_spec.rb

@@ -0,0 +1,29 @@
+require 'spec_helper'
+require 'support/features/feature_helpers'
+
+feature 'visitor signs in' do
+  scenario 'with valid email and password' do
+    user = create(:user)
+    sign_in_with user.email, user.password
+    expect_user_to_be_signed_in
+  end
+
+  scenario 'with valid mixed-case email and password' do
+    user = create(:user, email: 'test.user@example.com')
+    sign_in_with 'Test.USER@example.com', user.password
+    expect_user_to_be_signed_in
+  end
+
+  scenario 'with invalid password' do
+    user = create(:user)
+    sign_in_with user.email, 'invalid password'
+    expect_page_to_display_sign_in_error
+    expect_user_to_be_signed_out
+  end
+
+  scenario 'with invalid email' do
+    sign_in_with 'unknown@example.com', 'password'
+    expect_page_to_display_sign_in_error
+    expect_user_to_be_signed_out
+  end
+end

data/spec/features/sign_out_spec.rb

@@ -0,0 +1,22 @@
+require 'spec_helper'
+require 'support/features/feature_helpers'
+
+feature 'visitor signs out' do
+  before do
+    @user = create(:user)
+  end
+
+  scenario 'sign in and sign out' do
+    sign_in_with(@user.email, @user.password)
+    sign_out
+    expect_user_to_be_signed_out
+  end
+
+  scenario 'sign out and sign out again' do
+    sign_in_with(@user.email, @user.password)
+    visit sign_out_path
+    visit sign_out_path
+    expect_user_to_be_signed_out
+  end
+
+end

data/spec/features/sign_up_spec.rb

@@ -0,0 +1,42 @@
+require 'spec_helper'
+require 'support/features/feature_helpers'
+
+feature 'visitor signs up' do
+  scenario 'navigates to sign up page' do
+    visit sign_in_path
+    click_link 'Sign Up'
+    expect_sign_up_page
+  end
+
+  scenario 'signs up with valid email and password' do
+    sign_up_with 'valid@example.com', 'password'
+    expect_user_to_be_signed_in
+  end
+
+  scenario 'signs up with invalid email' do
+    sign_up_with 'bad_email', 'password'
+    expect_user_to_be_signed_out
+  end
+
+  scenario 'signs up with invalid short password' do
+    sign_up_with 'bad_email', '111'
+    expect_user_to_be_signed_out
+  end
+
+  scenario 'signs up with blank password' do
+    sign_up_with 'bad_email', ''
+    expect_user_to_be_signed_out
+  end
+end
+
+
+def expect_sign_up_page
+  expect(current_path).to eq sign_up_path
+end
+
+def sign_up_with(email, password)
+  visit sign_up_path
+  fill_in 'user_email', with: email
+  fill_in 'user_password', with: password
+  click_button 'Sign up'
+end

data/spec/features/timeoutable_spec.rb

@@ -0,0 +1,30 @@
+require 'spec_helper'
+require 'support/features/feature_helpers'
+
+feature 'visitor session time' do
+  before do
+    @user = create(:user)
+  end
+
+  scenario 'visitor logs in, subsequent click within timeout' do
+    sign_in_with @user.email, @user.password
+    expect_user_to_be_signed_in
+
+    Timecop.travel 10.minutes do
+      visit root_path
+      expect_user_to_be_signed_in
+    end
+  end
+
+  scenario 'visitor logs in, subsequent click after session times out' do
+    sign_in_with @user.email, @user.password
+    expect_user_to_be_signed_in
+
+    Timecop.travel 21.minutes do
+      visit root_path
+      expect(current_path).to eq sign_in_path
+      expect_user_to_be_signed_out
+    end
+  end
+
+end

data/spec/model/brute_force_spec.rb

@@ -3,61 +3,58 @@ require 'authenticate/model/brute_force'
 
 
 describe Authenticate::Model::BruteForce do
-  before {
-    Authenticate.configure do |config|
-      config.max_consecutive_bad_logins_allowed = 2
-      config.bad_login_lockout_period = 2.minutes
-    end
-  }
+  before(:each) do
+    @user = create(:user)
+  end
+
+  it 'responds to locked?' do
+    expect(@user).to respond_to :locked?
+  end
 
   it 'knows when it is locked' do
-    user = User.new
-    expect(user.locked?).to be_falsey
-    user.lock!
-    expect(user.locked?).to be_truthy
+    expect(@user.locked?).to be_falsey
+    @user.lock!
+    expect(@user.locked?).to be_truthy
   end
 
   context '#register_failed_login!' do
     it 'locks when failed login count reaches max' do
-      user = User.new
-      user.register_failed_login!
-      user.register_failed_login!
-      expect(user.locked?).to be_truthy
+      @user.register_failed_login!
+      @user.register_failed_login!
+      @user.register_failed_login!
+      expect(@user.locked?).to be_truthy
     end
 
     it 'sets lockout period' do
-      user = User.new
-      user.register_failed_login!
-      user.register_failed_login!
-      expect(user.lock_expires_at).to_not be_nil
+      @user.register_failed_login!
+      @user.register_failed_login!
+      @user.register_failed_login!
+      expect(@user.lock_expires_at).to_not be_nil
     end
   end
 
   context '#lock!' do
     it 'before lock, locked_expires_at is nil' do
-      user = User.new
-      expect(user.lock_expires_at).to be_nil
+      expect(@user.lock_expires_at).to be_nil
     end
 
     it 'sets locked_expires_at' do
-      user = User.new
-      user.lock!
-      expect(user.lock_expires_at).to_not be_nil
-      expect(user.lock_expires_at).to be_utc
+      @user.lock!
+      expect(@user.lock_expires_at).to_not be_nil
+      expect(@user.lock_expires_at).to be_utc
     end
   end
 
   context '#unlock!' do
-    let(:user) { User.new }
     before(:each) {
-      user.lock!
-      user.unlock!
+      @user.lock!
+      @user.unlock!
     }
     it 'zeros failed_logins_count' do
-      expect(user.failed_logins_count).to be(0)
+      expect(@user.failed_logins_count).to be(0)
     end
     it 'nils lock_expires_at' do
-      expect(user.lock_expires_at).to be_nil
+      expect(@user.lock_expires_at).to be_nil
     end
   end
 end

data/spec/model/configuration_spec.rb

@@ -0,0 +1,61 @@
+require 'spec_helper'
+require 'authenticate/configuration'
+
+describe Authenticate::Configuration do
+
+  context 'user model' do
+    module Gug
+      class Profile
+        extend ActiveModel::Naming
+      end
+    end
+
+    before(:each) do
+      @conf = Authenticate::Configuration.new
+      @conf.user_model = 'Gug::Profile'
+    end
+
+    it 'gets a class for a user model' do
+      expect(@conf.user_model_class).to be(Gug::Profile)
+    end
+
+    it 'get a route key for a user model' do
+      expect(@conf.user_model_route_key).to eq('gug_profiles')
+    end
+
+    it 'get a param key for a user model' do
+      expect(@conf.user_model_param_key).to eq('gug_profile')
+    end
+
+    describe '#authentication_strategy' do
+      context 'with no strategy set' do
+        it 'defaults to email' do
+          expect(@conf.authentication_strategy).to eq :email
+        end
+        it 'includes email in modules' do
+          expect(@conf.modules).to include :email
+        end
+        it 'does not include username in modules' do
+          expect(@conf.modules).to_not include :username
+        end
+      end
+
+      context 'with strategy set to username' do
+        before do
+            @conf.authentication_strategy = :username
+        end
+        it 'includes username in modules' do
+          expect(@conf.modules).to include :username
+        end
+        it 'does not include email in modules' do
+          expect(@conf.modules).to_not include :email
+        end
+      end
+
+    end
+
+  end
+
+
+
+end

data/spec/model/db_password_spec.rb

@@ -4,7 +4,6 @@ require 'authenticate/model/db_password'
 
 describe Authenticate::Model::DbPassword do
   describe 'Passwords' do
-
     context '#password_match?' do
       subject { create(:user, password: 'password') }
 
@@ -26,12 +25,6 @@ describe Authenticate::Model::DbPassword do
     end
 
     describe 'Validations' do
-      before(:all) {
-        Authenticate.configure do |config|
-          config.password_length = 8..128
-        end
-      }
-
       context 'on a new user' do
         it 'should not be valid without a password' do
           user = build(:user, :without_password)
@@ -39,12 +32,16 @@ describe Authenticate::Model::DbPassword do
         end
 
         it 'should be not be valid with a short password' do
-          user = build(:user, password: 'short')
+          user = build(:user)
+          user.password = 'short'
+          user.password_changing = true
           expect(user).to_not be_valid
         end
 
         it 'is valid with a long password' do
-          user = build(:user, password: 'thisisalongpassword')
+          user = build(:user)
+          user.password = 'thisisalongpassword'
+          user.password_changing = true
           expect(user).to be_valid
         end
       end
@@ -56,11 +53,13 @@ describe Authenticate::Model::DbPassword do
 
         it 'should not be valid with an empty password' do
           subject.password = ''
+          subject.password_changing = true
           expect(subject).to_not be_valid
         end
 
         it 'should be valid with a new (valid) password' do
           subject.password = 'new password'
+          subject.password_changing = true
           expect(subject).to be_valid
         end
       end