forme 1.8.0 → 1.12.0

data/spec/rails_integration_spec.rb

@@ -3,31 +3,48 @@ require File.join(File.dirname(File.expand_path(__FILE__)), 'sequel_helper.rb')
 
 require 'rubygems'
 begin
-require 'action_controller/railtie'
-rescue LoadError
-  warn "unable to load rails, skipping rails spec"
-else
-begin
-  require 'active_pack/gem_version'
-rescue LoadError
-end
-require 'forme/rails'
+  require 'action_controller/railtie'
 
-class FormeRails < Rails::Application
-  routes.append do
-    %w'index inputs_block inputs_block_wrapper nest nest_sep nest_inputs nest_seq hash legend combined noblock noblock_post safe_buffer'.each do |action|
-      get action, :controller=>'forme', :action=>action
-    end
+  begin
+    require 'active_pack/gem_version'
+  rescue LoadError
   end
-  config.active_support.deprecation = :stderr
-  config.middleware.delete(ActionDispatch::ShowExceptions)
-  config.middleware.delete(Rack::Lock)
-  config.secret_key_base = 'foo'*15
-  config.secret_token = 'secret token'*15 if Rails.respond_to?(:version) && Rails.version < '5.2' 
-  config.eager_load = true
-  initialize!
-end
+  require 'forme/rails'
 
+  if Rails.respond_to?(:version) && Rails.version.start_with?('4')
+    # Work around issue in backported openssl environments where
+    # secret is 64 bytes intead of 32 bytes
+    require 'active_support/message_encryptor'
+    ActiveSupport::MessageEncryptor.send :prepend, Module.new {
+      def initialize(secret, *signature_key_or_options)
+        secret = secret[0, 32]
+        super
+      end
+    }
+  end
+
+  class FormeRails < Rails::Application
+    routes.append do
+      %w'index inputs_block inputs_block_wrapper nest nest_sep nest_inputs nest_seq hash legend combined noblock noblock_post safe_buffer'.each do |action|
+        get action, :controller=>'forme', :action=>action
+      end
+    end
+    config.active_support.deprecation = :stderr
+    config.middleware.delete(ActionDispatch::HostAuthorization) if defined?(ActionDispatch::HostAuthorization)
+    config.middleware.delete(ActionDispatch::ShowExceptions)
+    config.middleware.delete(Rack::Lock)
+    config.secret_key_base = 'foo'*15
+    config.secret_token = 'secret token'*15 if Rails.respond_to?(:version) && Rails.version < '5.2' 
+    config.eager_load = true
+    begin
+      initialize!
+    rescue NoMethodError
+      raise LoadError
+    end
+  end
+rescue LoadError
+  warn "unable to load or setup rails, skipping rails spec"
+else
 class FormeController < ActionController::Base
   helper Forme::Rails::ERB
 
@@ -219,20 +236,20 @@ describe "Forme Rails integration" do
   end
 
   it "#form should correctly handle situation where multiple templates are used with same form object" do
-    sin_get('/nest_sep').must_equal "0 <form action=\"/baz\"> 1 <p>FBB</p> 2 n1 <div> n2 <input id=\"first\" name=\"first\" type=\"text\" value=\"foo\"/> <input id=\"last\" name=\"last\" type=\"text\" value=\"bar\"/> n3 </div> n4 <fieldset class=\"inputs\"><legend>Foo</legend><input id=\"first\" name=\"first\" type=\"text\" value=\"foo\"/><input id=\"last\" name=\"last\" type=\"text\" value=\"bar\"/></fieldset> n5 3 </form>4"
+    sin_get('/nest_sep').must_equal '0 <form action="/baz"> 1 <p>FBB</p> 2 n1 <div> n2 <input id="first" name="first" type="text" value="foo"/> <input id="last" name="last" type="text" value="bar"/> n3 </div> n4 <fieldset class="inputs"><legend>Foo</legend><input id="first" name="first" type="text" value="foo"/><input id="last" name="last" type="text" value="bar"/></fieldset> n5 3 </form>4'
   end
 
   it "#form should correctly handle situation where multiple templates are used with same form object" do
-    sin_get('/nest_inputs').must_equal "0 <form action=\"/baz\"> 1 <p>FBB</p> 2 n1 <fieldset class=\"inputs\"> n2 <input id=\"first\" name=\"first\" type=\"text\" value=\"foo\"/> <input id=\"last\" name=\"last\" type=\"text\" value=\"bar\"/> n3 </fieldset> n4 <fieldset class=\"inputs\"><legend>Foo</legend><input id=\"first\" name=\"first\" type=\"text\" value=\"foo\"/><input id=\"last\" name=\"last\" type=\"text\" value=\"bar\"/></fieldset> n5 3 </form>4"
+    sin_get('/nest_inputs').must_equal '0 <form action="/baz"> 1 <p>FBB</p> 2 n1 <fieldset class="inputs"> n2 <input id="first" name="first" type="text" value="foo"/> <input id="last" name="last" type="text" value="bar"/> n3 </fieldset> n4 <fieldset class="inputs"><legend>Foo</legend><input id="first" name="first" type="text" value="foo"/><input id="last" name="last" type="text" value="bar"/></fieldset> n5 3 </form>4'
   end
 
   unless defined?(JRUBY_VERSION) && JRUBY_VERSION =~ /\A9\.0/ && defined?(ActionPack::VERSION::STRING) && ActionPack::VERSION::STRING >= '5.1'
     it "#form should correctly handle situation Sequel integration with subforms where multiple templates are used with same form object" do
-      sin_get('/nest_seq').sub(%r{<input name=\"authenticity_token\" type=\"hidden\" value=\"([^\"]+)\"/>}, "<input name=\"authenticity_token\" type=\"hidden\" value=\"csrf\"/>").must_equal "0 <form action=\"/baz\" class=\"forme album\" method=\"post\"><input name=\"authenticity_token\" type=\"hidden\" value=\"csrf\"/> 1 <input id=\"album_artist_attributes_id\" name=\"album[artist_attributes][id]\" type=\"hidden\" value=\"2\"/><fieldset class=\"inputs\"><legend>Foo</legend><label>Name: <input id=\"album_artist_attributes_name\" name=\"album[artist_attributes][name]\" type=\"text\" value=\"A\"/></label></fieldset> 2 n1 <input id=\"album_artist_attributes_id\" name=\"album[artist_attributes][id]\" type=\"hidden\" value=\"2\"/><fieldset class=\"inputs\"><legend>Artist</legend> n2 <label>Name2: <input id=\"album_artist_attributes_name2\" name=\"album[artist_attributes][name2]\" type=\"text\" value=\"A2\"/></label> n3 </fieldset> n4 <input id=\"album_artist_attributes_id\" name=\"album[artist_attributes][id]\" type=\"hidden\" value=\"2\"/><fieldset class=\"inputs\"><legend>Bar</legend><label>Name3: <input id=\"album_artist_attributes_name3\" name=\"album[artist_attributes][name3]\" type=\"text\" value=\"A3\"/></label></fieldset> n5 3 </form>4"
+      sin_get('/nest_seq').sub(%r{<input name="authenticity_token" type="hidden" value="([^"]+)"/>}, '<input name="authenticity_token" type="hidden" value="csrf"/>').must_equal '0 <form action="/baz" class="forme album" method="post"><input name="authenticity_token" type="hidden" value="csrf"/> 1 <input id="album_artist_attributes_id" name="album[artist_attributes][id]" type="hidden" value="2"/><fieldset class="inputs"><legend>Foo</legend><label>Name: <input id="album_artist_attributes_name" maxlength="255" name="album[artist_attributes][name]" type="text" value="A"/></label></fieldset> 2 n1 <input id="album_artist_attributes_id" name="album[artist_attributes][id]" type="hidden" value="2"/><fieldset class="inputs"><legend>Artist</legend> n2 <label>Name2: <input id="album_artist_attributes_name2" name="album[artist_attributes][name2]" type="text" value="A2"/></label> n3 </fieldset> n4 <input id="album_artist_attributes_id" name="album[artist_attributes][id]" type="hidden" value="2"/><fieldset class="inputs"><legend>Bar</legend><label>Name3: <input id="album_artist_attributes_name3" name="album[artist_attributes][name3]" type="text" value="A3"/></label></fieldset> n5 3 </form>4'
     end
 
     it "#form should work without a block with hidden tags" do
-      sin_get('/noblock_post').sub(%r{<input name=\"authenticity_token\" type=\"hidden\" value=\"([^\"]+)\"/>}, "<input name=\"authenticity_token\" type=\"hidden\" value=\"csrf\"/>").must_equal '<form method="post"><input name="authenticity_token" type="hidden" value="csrf"/><input type="submit" value="xyz"/></form>'
+      sin_get('/noblock_post').sub(%r{<input name="authenticity_token" type="hidden" value="([^"]+)"/>}, '<input name="authenticity_token" type="hidden" value="csrf"/>').must_equal '<form method="post"><input name="authenticity_token" type="hidden" value="csrf"/><input type="submit" value="xyz"/></form>'
     end
   end
 

data/spec/roda_integration_spec.rb

@@ -20,7 +20,15 @@ rescue LoadError
 end
 
 class FormeRodaTest < Roda
-  use Rack::Session::Cookie, :secret => "__a_very_long_string__"
+  opts[:check_dynamic_arity] = opts[:check_arity] = :warn
+  
+  if defined?(Roda::RodaVersionNumber) && Roda::RodaVersionNumber >= 30100
+    require 'roda/session_middleware'
+    opts[:sessions_convert_symbols] = true
+    use RodaSessionMiddleware, :secret=>SecureRandom.random_bytes(64), :key=>'rack.session'
+  else
+    use Rack::Session::Cookie, :secret => "__a_very_long_string__"
+  end
 
   def erb(s, opts={})
     render(opts.merge(:inline=>s))
@@ -114,6 +122,354 @@ else
       sin_get('/csrf/0').wont_include '<input name="_csrf" type="hidden" value="'
     end
   end
+
+  describe "Forme Roda ERB Sequel integration with roda forme_set plugin and route_csrf plugin with #{plugin_opts}" do
+    before do
+      @app = Class.new(FormeRodaTest)
+      @app.plugin :route_csrf, plugin_opts
+      @app.plugin(:forme_set, :secret=>'1'*64)
+
+      @ab = Album.new
+    end
+
+    def forme_parse(*args, &block)
+      _forme_set(:forme_parse, *args, &block)
+    end
+
+    def forme_set(*args, &block)
+      _forme_set(:forme_set, *args, &block)
+    end
+
+    def forme_call(params)
+      @app.call('REQUEST_METHOD'=>'POST', 'rack.input'=>StringIO.new, :params=>params)
+    end
+
+    def _forme_set(meth, obj, orig_hash, *form_args, &block)
+      hash = {}
+      forme_set_block = orig_hash.delete(:forme_set_block)
+      orig_hash.each{|k,v| hash[k.to_s] = v}
+      album = @ab
+      ret, _, data, hmac = nil
+      
+      @app.route do |r|
+        r.get do
+          form(*env[:args], &env[:block]).to_s
+        end
+        r.post do
+          r.params.replace(env[:params])
+          ret = send(meth, album, &forme_set_block)
+          nil
+        end
+      end
+      body = @app.call('REQUEST_METHOD'=>'GET', :args=>[album, *form_args], :block=>block)[2].join
+      body =~ %r|<input name="_csrf" type="hidden" value="([^"]+)"/>.*<input name="_forme_set_data" type="hidden" value="([^"]+)"/><input name="_forme_set_data_hmac" type="hidden" value="([^"]+)"/>|n
+      csrf = $1
+      data = $2
+      hmac = $3
+      data.gsub!("&quot;", '"') if data
+      h = {"album"=>hash,  "_forme_set_data"=>data, "_forme_set_data_hmac"=>hmac, "_csrf"=>csrf}
+      if data && hmac
+        forme_call(h)
+      end
+      meth == :forme_parse ? ret : h
+    end
+
+    it "#forme_set should include HMAC values if form includes inputs for obj" do
+      h = forme_set(@ab, :name=>'Foo')
+      proc{forme_call(h)}.must_raise Roda::RodaPlugins::FormeSet::Error
+      @ab.name.must_be_nil
+      @ab.copies_sold.must_be_nil
+
+      h = forme_set(@ab, :name=>'Foo'){|f| f.input(:name)}
+      hmac = h.delete("_forme_set_data_hmac")
+      proc{forme_call(h)}.must_raise Roda::RodaPlugins::FormeSet::Error
+      proc{forme_call(h.merge("_forme_set_data_hmac"=>hmac+'1'))}.must_raise Roda::RodaPlugins::FormeSet::Error
+      data = h["_forme_set_data"]
+      data.sub!(/"csrf":\["_csrf","./, "\"csrf\":[\"_csrf\",\"|")
+      hmac = OpenSSL::HMAC.hexdigest(OpenSSL::Digest::SHA512.new, '1'*64, data)
+      proc{forme_call(h.merge("_forme_set_data_hmac"=>hmac))}.must_raise Roda::RodaPlugins::FormeSet::Error
+      @ab.name.must_equal 'Foo'
+      @ab.copies_sold.must_be_nil
+
+      forme_set(@ab, :copies_sold=>100){|f| f.input(:name)}
+      @ab.name.must_be_nil
+      @ab.copies_sold.must_be_nil
+    end
+
+    it "#forme_set should handle custom form namespaces" do
+      forme_set(@ab, {"album"=>{"name"=>'Foo', 'copies_sold'=>'100'}}, {}, :namespace=>'album'){|f| f.input(:name); f.input(:copies_sold)}
+      @ab.name.must_equal 'Foo'
+      @ab.copies_sold.must_equal 100
+
+      proc{forme_set(@ab, {"a"=>{"name"=>'Foo'}}, {}, :namespace=>'album'){|f| f.input(:name); f.input(:copies_sold)}}.must_raise Roda::RodaPlugins::FormeSet::Error
+    end
+
+    it "#forme_set should call plugin block if there is an error with the form submission hmac not matching data" do
+      @app.plugin :forme_set do |error_type, _|
+        request.on{error_type.to_s}
+      end
+
+      h = forme_set(@ab, :name=>'Foo')
+      forme_call(h)[2].must_equal ['missing_data']
+
+      h = forme_set(@ab, :name=>'Foo'){|f| f.input(:name)}
+      hmac = h.delete("_forme_set_data_hmac")
+      forme_call(h)[2].must_equal ['missing_hmac']
+
+      forme_call(h.merge("_forme_set_data_hmac"=>hmac+'1'))[2].must_equal ['hmac_mismatch']
+
+      data = h["_forme_set_data"]
+      data.sub!(/"csrf":\["_csrf","./, "\"csrf\":[\"_csrf\",\"|")
+      hmac = OpenSSL::HMAC.hexdigest(OpenSSL::Digest::SHA512.new, '1'*64, data)
+      forme_call(h.merge("_forme_set_data_hmac"=>hmac))[2].must_equal ['csrf_mismatch']
+
+      h = forme_set(@ab, :name=>'Foo')
+      h.delete('album')
+      forme_call(h)[2].must_equal ['missing_namespace']
+    end
+
+    it "#forme_set should raise if plugin block does not raise or throw" do
+      @app.plugin :forme_set do |_, obj|
+        obj
+      end
+      h = forme_set(@ab, :name=>'Foo'){|f| f.input(:name)}
+      h.delete("_forme_set_data_hmac")
+      proc{forme_call(h)}.must_raise Roda::RodaPlugins::FormeSet::Error
+    end
+
+    it "#forme_set should only set values in the form" do
+      forme_set(@ab, :name=>'Foo')
+      @ab.name.must_be_nil
+
+      forme_set(@ab, :name=>'Foo'){|f| f.input(:name)}
+      @ab.name.must_equal 'Foo'
+
+      forme_set(@ab, 'copies_sold'=>'1'){|f| f.input(:name)}
+      @ab.name.must_be_nil
+      @ab.copies_sold.must_be_nil
+
+      forme_set(@ab, 'name'=>'Bar', 'copies_sold'=>'1'){|f| f.input(:name); f.input(:copies_sold)}
+      @ab.name.must_equal 'Bar'
+      @ab.copies_sold.must_equal 1
+    end
+
+    it "#forme_set should handle form_versions" do
+      h = forme_set(@ab, {:name=>'Foo'}){|f| f.input(:name)}
+      @ab.name.must_equal 'Foo'
+
+      obj = nil
+      version = nil
+      name = nil
+      forme_set_block = proc do |v, o|
+        obj = o
+        name = o.name
+        version = v
+      end
+      h2 = forme_set(@ab, {:name=>'Foo', :forme_set_block=>forme_set_block}, {}, :form_version=>1){|f| f.input(:name)}
+      obj.must_be_same_as @ab
+      name.must_equal 'Foo'
+      version.must_equal 1
+
+      forme_call(h)
+      obj.must_be_same_as @ab
+      version.must_be_nil
+
+      forme_set(@ab, {:name=>'Bar', :forme_set_block=>forme_set_block}, {}, :form_version=>2){|f| f.input(:name)}
+      obj.must_be_same_as @ab
+      name.must_equal 'Bar'
+      version.must_equal 2
+
+      h['album']['name'] = 'Baz'
+      forme_call(h)
+      obj.must_be_same_as @ab
+      name.must_equal 'Baz'
+      version.must_be_nil
+
+      forme_call(h2)
+      obj.must_be_same_as @ab
+      version.must_equal 1
+    end
+
+    it "#forme_set should work for forms without blocks" do
+      forme_set(@ab, {:name=>'Foo'}, {}, :inputs=>[:name])
+      @ab.name.must_equal 'Foo'
+    end
+
+    it "#forme_set should handle different ways to specify parameter names" do
+      [{:attr=>{:name=>'foo'}}, {:attr=>{'name'=>:foo}}, {:name=>'foo'}, {:name=>'bar[foo]'}, {:key=>:foo}].each do |opts|
+        forme_set(@ab, name=>'Foo'){|f| f.input(:name, opts)}
+        @ab.name.must_be_nil
+
+        forme_set(@ab, 'foo'=>'Foo'){|f| f.input(:name, opts)}
+        @ab.name.must_equal 'Foo'
+      end
+    end
+
+    it "#forme_set should ignore values where key is explicitly set to nil" do
+      forme_set(@ab, :name=>'Foo'){|f| f.input(:name, :key=>nil)}
+      @ab.forme_set(:name=>'Foo')
+      @ab.name.must_be_nil
+      @ab.forme_set(nil=>'Foo')
+      @ab.name.must_be_nil
+    end
+    
+    it "#forme_set should skip inputs with disabled/readonly formatter set on input" do
+      [:disabled, :readonly, ::Forme::Formatter::Disabled, ::Forme::Formatter::ReadOnly].each do |formatter|
+        forme_set(@ab, :name=>'Foo'){|f| f.input(:name, :formatter=>formatter)}
+        @ab.name.must_be_nil
+      end
+
+      forme_set(@ab, :name=>'Foo'){|f| f.input(:name, :formatter=>:default)}
+      @ab.name.must_equal 'Foo'
+    end
+    
+    it "#forme_set should skip inputs with disabled/readonly formatter set on Form" do
+      [:disabled, :readonly, ::Forme::Formatter::Disabled, ::Forme::Formatter::ReadOnly].each do |formatter|
+        forme_set(@ab, {:name=>'Foo'}, {}, :formatter=>:disabled){|f| f.input(:name)}
+        @ab.name.must_be_nil
+      end
+
+      forme_set(@ab, {:name=>'Foo'}, {}, :formatter=>:default){|f| f.input(:name)}
+      @ab.name.must_equal 'Foo'
+    end
+    
+    it "#forme_set should skip inputs with disabled/readonly formatter set using with_opts" do
+      [:disabled, :readonly, ::Forme::Formatter::Disabled, ::Forme::Formatter::ReadOnly].each do |formatter|
+        forme_set(@ab, :name=>'Foo'){|f| f.with_opts(:formatter=>formatter){f.input(:name)}}
+        @ab.name.must_be_nil
+      end
+
+      forme_set(@ab, :name=>'Foo'){|f| f.with_opts(:formatter=>:default){f.input(:name)}}
+      @ab.name.must_equal 'Foo'
+    end
+
+    it "#forme_set should prefer input formatter to with_opts formatter" do
+      forme_set(@ab, :name=>'Foo'){|f| f.with_opts(:formatter=>:default){f.input(:name, :formatter=>:readonly)}}
+      @ab.name.must_be_nil
+
+      forme_set(@ab, :name=>'Foo'){|f| f.with_opts(:formatter=>:readonly){f.input(:name, :formatter=>:default)}}
+      @ab.name.must_equal 'Foo'
+    end
+
+    it "#forme_set should prefer with_opts formatter to form formatter" do
+      forme_set(@ab, {:name=>'Foo'}, {}, :formatter=>:default){|f| f.with_opts(:formatter=>:readonly){f.input(:name)}}
+      @ab.name.must_be_nil
+
+      forme_set(@ab, {:name=>'Foo'}, {}, :formatter=>:readonly){|f| f.with_opts(:formatter=>:default){f.input(:name)}}
+      @ab.name.must_equal 'Foo'
+    end
+    
+    it "#forme_set should handle setting values for associated objects" do
+      forme_set(@ab, :artist_id=>'1')
+      @ab.artist_id.must_be_nil
+
+      forme_set(@ab, :artist_id=>'1'){|f| f.input(:artist)}
+      @ab.artist_id.must_equal 1
+
+      forme_set(@ab, 'tag_pks'=>%w'1 2'){|f| f.input(:artist)}
+      @ab.artist_id.must_be_nil
+      @ab.tag_pks.must_equal []
+
+      forme_set(@ab, 'artist_id'=>'1', 'tag_pks'=>%w'1 2'){|f| f.input(:artist); f.input(:tags)}
+      @ab.artist_id.must_equal 1
+      @ab.tag_pks.must_equal [1, 2]
+    end
+    
+    it "#forme_set should handle validations for filtered associations" do
+      [
+        [{:dataset=>proc{|ds| ds.exclude(:id=>1)}},
+         {:dataset=>proc{|ds| ds.exclude(:id=>1)}}],
+        [{:options=>Artist.exclude(:id=>1).select_order_map([:name, :id])},
+         {:options=>Tag.exclude(:id=>1).select_order_map(:id), :name=>'tag_pks[]'}],
+        [{:options=>Artist.exclude(:id=>1).all, :text_method=>:name, :value_method=>:id},
+         {:options=>Tag.exclude(:id=>1).all, :text_method=>:name, :value_method=>:id}],
+      ].each do |artist_opts, tag_opts|
+        @ab.forme_validations.clear
+        forme_set(@ab, 'artist_id'=>'1', 'tag_pks'=>%w'1 2'){|f| f.input(:artist, artist_opts); f.input(:tags, tag_opts)}
+        @ab.artist_id.must_equal 1
+        @ab.tag_pks.must_equal [1, 2]
+        @ab.valid?.must_equal false
+        @ab.errors[:artist_id].must_equal ['invalid value submitted']
+        @ab.errors[:tag_pks].must_equal ['invalid value submitted']
+
+        @ab.forme_validations.clear
+        forme_set(@ab, 'artist_id'=>'1', 'tag_pks'=>%w'2'){|f| f.input(:artist, artist_opts); f.input(:tags, tag_opts)}
+        @ab.forme_set('artist_id'=>'1', 'tag_pks'=>['2'])
+        @ab.artist_id.must_equal 1
+        @ab.tag_pks.must_equal [2]
+        @ab.valid?.must_equal false
+        @ab.errors[:artist_id].must_equal ['invalid value submitted']
+        @ab.errors[:tag_pks].must_be_nil
+
+        @ab.forme_validations.clear
+        forme_set(@ab, 'artist_id'=>'2', 'tag_pks'=>%w'2'){|f| f.input(:artist, artist_opts); f.input(:tags, tag_opts)}
+        @ab.valid?.must_equal true
+      end
+    end
+
+    it "#forme_set should not require associated values for many_to_one association with select boxes" do
+      forme_set(@ab, {}){|f| f.input(:artist)}
+      @ab.valid?.must_equal true
+
+      forme_set(@ab, {'artist_id'=>nil}){|f| f.input(:artist)}
+      @ab.valid?.must_equal true
+
+      forme_set(@ab, {'artist_id'=>''}){|f| f.input(:artist)}
+      @ab.valid?.must_equal true
+    end
+
+    it "#forme_set should not require associated values for many_to_one association with radio buttons" do
+      forme_set(@ab, {}){|f| f.input(:artist, :as=>:radio)}
+      @ab.valid?.must_equal true
+    end
+
+    it "#forme_set should require associated values for many_to_one association with select boxes when :required is used" do
+      forme_set(@ab, {}){|f| f.input(:artist, :required=>true)}
+      @ab.valid?.must_equal false
+      @ab.errors[:artist_id].must_equal ['invalid value submitted']
+    end
+
+    it "#forme_set should require associated values for many_to_one association with radio buttons when :required is used" do
+      forme_set(@ab, {}){|f| f.input(:artist, :as=>:radio, :required=>true)}
+      @ab.valid?.must_equal false
+      @ab.errors[:artist_id].must_equal ['invalid value submitted']
+    end
+
+    it "#forme_set should handle cases where currently associated values is nil" do
+      def @ab.tag_pks; nil; end
+      forme_set(@ab, :tag_pks=>['1']){|f| f.input(:tags)}
+      @ab.valid?.must_equal true
+    end
+
+    it "#forme_parse should return hash with values and validations" do
+      forme_parse(@ab, :name=>'Foo'){|f| f.input(:name)}.must_equal(:values=>{:name=>'Foo'}, :validations=>{}, :form_version=>nil)
+
+      hash = forme_parse(@ab, :name=>'Foo', 'artist_id'=>'1') do |f|
+        f.input(:name)
+        f.input(:artist, :dataset=>proc{|ds| ds.exclude(:id=>1)})
+      end
+      hash.must_equal(:values=>{:name=>'Foo', :artist_id=>'1'}, :validations=>{:artist_id=>[:valid, false]}, :form_version=>nil)
+
+      @ab.set(hash[:values])
+      @ab.valid?.must_equal true
+
+      @ab.forme_validations.merge!(hash[:validations])
+      @ab.valid?.must_equal false
+      @ab.errors[:artist_id].must_equal ['invalid value submitted']
+
+      @ab = Album.new
+      hash = forme_parse(@ab, {:name=>'Foo', 'artist_id'=>'1'}, {}, :form_version=>1) do |f|
+        f.input(:name)
+        f.input(:artist, :dataset=>proc{|ds| ds.exclude(:id=>2)})
+      end
+      hash.must_equal(:values=>{:name=>'Foo', :artist_id=>'1'}, :validations=>{:artist_id=>[:valid, true]}, :form_version=>1)
+      @ab.set(hash[:values])
+      @ab.valid?.must_equal true
+
+      @ab.forme_validations.merge!(hash[:validations])
+      @ab.valid?.must_equal true
+    end
+  end
 end
 end
 end