devise_invitable 1.1.8 → 1.3.0

data/test/generators_test.rb

@@ -0,0 +1,34 @@
+$LOAD_PATH.unshift(File.join(File.dirname(__FILE__), '..'))
+require 'test_helper'
+require 'rails/generators'
+require 'generators/devise_invitable/devise_invitable_generator'
+
+class GeneratorsTest < ActiveSupport::TestCase
+  RAILS_APP_PATH = File.expand_path("../rails_app", __FILE__)
+
+  test "rails g should include the 6 generators" do
+    @output     = `cd #{RAILS_APP_PATH} && rails g`
+    generators  = %w/devise_invitable devise_invitable:form_for devise_invitable:install devise_invitable:invitation_views devise_invitable:simple_form_for devise_invitable:views/
+
+    generators.each do |generator|
+      @output.include? generator
+    end
+  end
+
+  test "rails g devise_invitable:install" do
+    @output = `cd #{RAILS_APP_PATH} && rails g devise_invitable:install -p`
+    assert @output.match(%r{(inject|insert).+  config/initializers/devise\.rb\n})
+    assert @output.match(%r|create.+  config/locales/devise_invitable\.en\.yml\n|)
+  end
+
+  test "rails g devise_invitable Octopussy" do
+    @output = `cd #{RAILS_APP_PATH} && rails g devise_invitable Octopussy -p`
+    assert @output.match(%r{(inject|insert).+  app/models/octopussy\.rb\n})
+    assert @output.match(%r|invoke.+  #{DEVISE_ORM}\n|)
+    if DEVISE_ORM == :active_record
+      assert @output.match(%r|create.+  db/migrate/\d{14}_devise_invitable_add_to_octopussies\.rb\n|)
+    elsif DEVISE_ORM == :mongoid
+      assert !@output.match(%r|create.+  db/migrate/\d{14}_devise_invitable_add_to_octopussies\.rb\n|)
+    end
+  end
+end

data/test/integration/invitation_remove_test.rb

@@ -0,0 +1,29 @@
+require 'test_helper'
+require 'integration_tests_helper'
+
+class InvitationRemoveTest < ActionDispatch::IntegrationTest
+
+  test 'invited user can choose to remove his account/invite' do
+    user = User.invite!(:email => "valid@email.com")
+
+    # remove!
+    visit remove_user_invitation_path(:invitation_token => Thread.current[:token])
+    assert_equal root_path, current_path
+    assert page.has_css?('p#notice', :text => 'Your invitation was removed.')
+    
+    # try to remove again!
+    visit remove_user_invitation_path(:invitation_token => Thread.current[:token])
+    assert_equal root_path, current_path
+    assert page.has_css?('p#alert', :text => 'The invitation token provided is not valid!')
+  end
+
+  test 'accepted user cannot remove his account (by using the original invitation token)' do
+    user = User.invite!(:email => "valid@email.com")
+    saved_token = Thread.current[:token]
+    user.accept_invitation!
+    
+    visit remove_user_invitation_path(:invitation_token =>  saved_token)
+    assert_equal root_path, current_path
+    assert page.has_css?('p#alert', :text => 'The invitation token provided is not valid!')
+  end
+end

data/test/integration/invitation_test.rb

@@ -0,0 +1,222 @@
+require 'test_helper'
+require 'integration_tests_helper'
+
+class InvitationTest < ActionDispatch::IntegrationTest
+  def teardown
+    Capybara.reset_sessions!
+  end
+
+  def send_invitation(url = new_user_invitation_path, &block)
+    visit url
+
+    fill_in 'user_email', :with => 'user@test.com'
+    yield if block_given?
+    click_button 'Send an invitation'
+  end
+
+  def set_password(options={}, &block)
+    unless options[:visit] == false
+      visit accept_user_invitation_path(:invitation_token => options[:invitation_token])
+    end
+
+    fill_in 'user_password', :with => '987654321'
+    fill_in 'user_password_confirmation', :with => '987654321'
+    yield if block_given?
+    click_button options[:button] || 'Set my password'
+  end
+
+  test 'not authenticated user should be able to send a free invitation' do
+    send_invitation new_free_invitation_path
+    assert_equal root_path, current_path
+    assert page.has_css?('p#notice', :text => 'An invitation email has been sent to user@test.com.')
+  end
+
+  test 'not authenticated user should not be able to send an invitation' do
+    get new_user_invitation_path
+    assert_redirected_to new_user_session_path
+  end
+
+  test 'authenticated user should be able to send an invitation' do
+    sign_in_as_user
+
+    send_invitation
+    assert_equal root_path, current_path
+    assert page.has_css?('p#notice', :text => 'An invitation email has been sent to user@test.com.')
+  end
+
+  test 'authenticated user with existing email should receive an error message' do
+    user = create_full_user
+    sign_in_as_user(user)
+    send_invitation do
+      fill_in 'user_email', :with => user.email
+    end
+
+    assert_equal user_invitation_path, current_path
+    assert page.has_css?("input[type=text][value='#{user.email}']")
+    assert page.has_css?('#error_explanation li', :text => 'Email has already been taken')
+  end
+
+  test 'authenticated user should not be able to visit edit invitation page' do
+    sign_in_as_user
+
+    visit accept_user_invitation_path
+
+    assert_equal root_path, current_path
+  end
+
+  test 'not authenticated user with invalid invitation token should not be able to set his password' do
+    user = User.invite!(:email => "valid@email.com")
+    user.accept_invitation!
+    visit accept_user_invitation_path(:invitation_token => 'invalid_token')
+
+    assert_equal root_path, current_path
+    assert page.has_css?('p#alert', :text => 'The invitation token provided is not valid!')
+  end
+
+  test 'not authenticated user with valid invitation token but invalid password should not be able to set his password' do
+    user = User.invite!(:email => "valid@email.com")
+    set_password :invitation_token => Thread.current[:token] do
+      fill_in 'Password confirmation', :with => 'other_password'
+    end
+    assert_equal user_invitation_path, current_path
+    assert page.has_css?('#error_explanation li', :text => /Password .*doesn\'t match/)
+    assert_blank user.encrypted_password
+  end
+
+  test 'not authenticated user with valid data should be able to change his password' do
+    user = User.invite!(:email => "valid@email.com")
+    set_password :invitation_token => Thread.current[:token]
+
+    assert_equal root_path, current_path
+    assert page.has_css?('p#notice', :text => 'Your password was set successfully. You are now signed in.')
+    assert user.reload.valid_password?('987654321')
+  end
+
+  test 'after entering invalid data user should still be able to set his password' do
+    user = User.invite!(:email => "valid@email.com")
+    set_password :invitation_token => Thread.current[:token] do
+      fill_in 'Password confirmation', :with => 'other_password'
+    end
+    assert_equal user_invitation_path, current_path
+    assert page.has_css?('#error_explanation')
+    assert_blank user.encrypted_password
+
+    set_password :visit => false
+    assert page.has_css?('p#notice', :text => 'Your password was set successfully. You are now signed in.')
+    assert user.reload.valid_password?('987654321')
+  end
+
+  test 'sign in user automatically after setting it\'s password' do
+    user = User.invite!(:email => "valid@email.com")
+    set_password :invitation_token => Thread.current[:token]
+    assert_equal root_path, current_path
+  end
+
+  test 'clear token and set invitation_accepted_at after recover password instead of accept_invitation' do
+    user = User.invite!(:email => "valid@email.com")
+
+    visit new_user_password_path
+    fill_in 'user_email', :with => 'valid@email.com'
+    click_button 'Send me reset password instructions'
+
+    visit edit_user_password_path(:reset_password_token => Thread.current[:token])
+    set_password :visit => false, :button => 'Change my password'
+
+    user.reload
+    assert_nil user.invitation_token
+    assert user.invitation_accepted_at
+  end
+
+  test 'user with invites left should be able to send an invitation' do
+    User.stubs(:invitation_limit).returns(1)
+
+    user = create_full_user
+    user.invitation_limit = 1
+    user.save!
+    sign_in_as_user(user)
+
+    assert_difference 'User.count' do
+      send_invitation
+    end
+    assert_equal root_path, current_path
+    assert page.has_css?('p#notice', :text => 'An invitation email has been sent to user@test.com.')
+    user = User.find(user.id)
+    assert !user.has_invitations_left?
+  end
+
+  test 'user with no invites left should not be able to send an invitation' do
+    User.stubs(:invitation_limit).returns(1)
+
+    user = create_full_user
+    user.invitation_limit = 0
+    user.save!
+    sign_in_as_user(user)
+
+    assert_no_difference 'User.count' do
+      send_invitation
+    end
+    assert_equal user_invitation_path, current_path
+    assert page.has_css?('p#alert', :text => 'No invitations remaining')
+  end
+
+  test 'user with nil invitation_limit should default to User.invitation_limit' do
+    User.stubs(:invitation_limit).returns(3)
+
+    user = create_full_user
+    assert_nil user[:invitation_limit]
+    assert_equal 3, user.invitation_limit
+    sign_in_as_user(user)
+
+    send_invitation
+    assert_equal root_path, current_path
+    assert page.has_css?('p#notice', :text => 'An invitation email has been sent to user@test.com.')
+    user = User.find(user.id)
+    assert_equal 2, user.invitation_limit
+  end
+
+  test 'should not decrement invitation limit when trying to invite again a user which is invited' do
+    User.stubs(:invitation_limit).returns(3)
+
+    user = create_full_user
+    assert_nil user[:invitation_limit]
+    assert_equal 3, user.invitation_limit
+    sign_in_as_user(user)
+
+    send_invitation
+    assert_equal root_path, current_path
+    assert page.has_css?('p#notice', :text => 'An invitation email has been sent to user@test.com.')
+    user = User.find(user.id)
+    assert_equal 2, user.invitation_limit
+
+    send_invitation
+    assert_equal root_path, current_path
+    assert page.has_css?('p#notice', :text => 'An invitation email has been sent to user@test.com.')
+    user = User.find(user.id)
+    assert_equal 2, user.invitation_limit
+  end
+
+  test 'invited_by should be set when user invites someone' do
+    user = create_full_user
+    sign_in_as_user(user)
+    send_invitation
+
+    invited_user = User.where(:email => 'user@test.com').first
+    assert invited_user
+    assert_equal user, invited_user.invited_by
+  end
+
+  test 'authenticated user should not be able to send an admin invitation' do
+    sign_in_as_user
+
+    get new_admin_path
+    assert_redirected_to new_admin_session_path
+  end
+
+  test 'authenticated admin should be able to send an admin invitation' do
+    sign_in_as_user Admin.create(:email => 'admin@test.com', :password => '123456', :password_confirmation => '123456')
+
+    send_invitation new_admin_path
+    assert_equal root_path, current_path
+    assert page.has_css?('p#notice', :text => 'An invitation email has been sent to user@test.com.')
+  end
+end

data/test/integration_tests_helper.rb

@@ -0,0 +1,48 @@
+class ActionController::IntegrationTest
+
+  def warden
+    request.env['warden']
+  end
+  
+  def create_full_user
+    @user ||= begin
+      user = User.create!(
+        :username              => 'usertest',
+        :email                 => 'fulluser@test.com',
+        :password              => '123456',
+        :password_confirmation => '123456',
+        :created_at            => Time.now.utc
+      )
+      user.confirm!
+      user
+    end
+  end
+
+  def sign_in_as_user(user = nil)
+    user ||= create_full_user
+    resource_name = user.class.name.underscore
+    visit send("new_#{resource_name}_session_path")
+    fill_in "#{resource_name}_email", :with => user.email
+    fill_in "#{resource_name}_password", :with => user.password
+    click_button 'Sign in'
+  end
+
+  # Fix assert_redirect_to in integration sessions because they don't take into
+  # account Middleware redirects.
+  #
+  def assert_redirected_to(url)
+    assert [301, 302].include?(@integration_session.status),
+           "Expected status to be 301 or 302, got #{@integration_session.status}"
+
+    url = prepend_host(url)
+    location = prepend_host(@integration_session.headers["Location"])
+    assert_equal url, location
+  end
+
+  protected
+
+    def prepend_host(url)
+      url = "http://#{request.host}#{url}" if url[0] == ?/
+      url
+    end
+end

data/test/mailers/invitation_mail_test.rb

@@ -0,0 +1,69 @@
+require 'test_helper'
+require 'model_tests_helper'
+
+class InvitationMailTest < ActionMailer::TestCase
+
+  def setup
+    setup_mailer
+    Devise.mailer_sender = 'test@example.com'
+  end
+
+  def user
+    @user ||= User.invite!(:email => "valid@email.com")
+  end
+
+  def mail
+    @mail ||= begin
+      user
+      ActionMailer::Base.deliveries.last
+    end
+  end
+
+  test 'email sent after reseting the user password' do
+    assert_not_nil mail
+  end
+
+  test 'content type should be set to html' do
+    assert_equal 'text/html; charset=UTF-8', mail.content_type
+  end
+
+  test 'send invitation to the user email' do
+    assert_equal [user.email], mail.to
+  end
+
+  test 'setup sender from configuration' do
+    assert_equal ['test@example.com'], mail.from
+  end
+
+  test 'setup subject from I18n' do
+    store_translations :en, :devise => { :mailer => { :invitation_instructions => { :subject => 'Localized Invitation' } } } do
+      assert_equal 'Localized Invitation', mail.subject
+    end
+  end
+
+  test 'subject namespaced by model' do
+    store_translations :en, :devise => { :mailer => { :invitation_instructions => { :user_subject => 'User Invitation' } } } do
+      assert_equal 'User Invitation', mail.subject
+    end
+  end
+
+  test 'body should have user info' do
+    assert_match /#{user.email}/, mail.body.decoded
+  end
+
+  test 'body should have link to confirm the account' do
+    host = ActionMailer::Base.default_url_options[:host]
+    body = mail.body.decoded
+    invitation_url_regexp = %r{<a href=\"http://#{host}/users/invitation/accept\?invitation_token=#{Thread.current[:token]}">}
+    assert_match invitation_url_regexp, body
+  end
+
+  test 'body should have link to confirm the account on resend' do
+    host = ActionMailer::Base.default_url_options[:host]
+    user
+    @user = User.find(user.id).invite!
+    body = mail.body.decoded
+    invitation_url_regexp = %r{<a href=\"http://#{host}/users/invitation/accept\?invitation_token=#{Thread.current[:token]}">}
+    assert_match invitation_url_regexp, body
+  end
+end

data/test/model_tests_helper.rb

@@ -0,0 +1,33 @@
+class ActiveSupport::TestCase
+  def setup_mailer
+    ActionMailer::Base.deliveries = []
+  end
+
+  def store_translations(locale, translations, &block)
+    begin
+      I18n.backend.store_translations locale, translations
+      yield
+    ensure
+      I18n.reload!
+    end
+  end
+
+  # Helpers for creating new users
+  #
+  def generate_unique_email
+    @@email_count ||= 0
+    @@email_count += 1
+    "test#{@@email_count}@email.com"
+  end
+
+  def valid_attributes(attributes={})
+    { :email => generate_unique_email,
+      :password => '123456',
+      :password_confirmation => '123456' }.update(attributes)
+  end
+
+  def new_user(attributes={})
+    User.new(valid_attributes(attributes))
+  end
+
+end