kellyfelkins-clearance 0.5.6

data/lib/clearance/test/functional/sessions_controller_test.rb

@@ -0,0 +1,187 @@
+module Clearance
+  module Test
+    module Functional
+      module SessionsControllerTest
+
+        def self.included(controller_test)
+          controller_test.class_eval do
+
+            should_filter_params :password
+
+            context "on GET to /sessions/new" do
+              setup { get :new }
+
+              should_respond_with    :success
+              should_render_template :new
+              should_not_set_the_flash
+              should_display_a_sign_in_form
+            end
+
+            context "a POST to #create with unconfirmed credentials" do
+              setup do
+                @user = Factory(:user)
+                ActionMailer::Base.deliveries.clear
+                post :create, :session => {
+                                :email    => @user.email,
+                                :password => @user.password }
+              end
+
+              should_deny_access(:flash => /User has not confirmed email. Confirmation email will be resent./i)
+
+              should "send the confirmation email" do
+                assert_not_nil email = ActionMailer::Base.deliveries[0]
+                assert_match /account confirmation/i, email.subject
+              end
+            end
+
+            context "a POST to #create with good credentials" do
+              setup do
+                @user = Factory(:email_confirmed_user)
+                post :create, :session => {
+                                :email    => @user.email,
+                                :password => @user.password }
+              end
+
+              should_set_the_flash_to /success/i
+              should_redirect_to_url_after_create
+              should_be_signed_in_as { @user }
+            end
+
+            context "a POST to #create with good credentials and remember me" do
+              setup do
+                @user = Factory(:email_confirmed_user)
+                post :create, :session => {
+                                :email       => @user.email,
+                                :password    => @user.password,
+                                :remember_me => '1' }
+              end
+
+              should_set_the_flash_to /success/i
+              should_redirect_to_url_after_create
+              should_be_signed_in_as { @user }
+
+              should 'set the cookie' do
+                assert ! cookies['remember_token'].empty?
+              end
+
+              should 'set the token in users table' do
+                assert_not_nil @user.reload.token
+                assert_not_nil @user.reload.token_expires_at
+              end
+            end
+
+            context "a POST to #create with good credentials and a session return url" do
+              setup do
+                @user = Factory(:email_confirmed_user)
+                @return_url = '/url_in_the_session'
+                @request.session[:return_to] = @return_url
+                post :create, :session => {
+                                :email    => @user.email,
+                                :password => @user.password }
+              end
+
+              should_redirect_to("the return URL") { @return_url }
+            end
+
+            context "a POST to #create with good credentials and a request return url" do
+              setup do
+                @user = Factory(:email_confirmed_user)
+                @return_url = '/url_in_the_request'
+                post :create, :session => {
+                                :email => @user.email,
+                                :password => @user.password },
+                                :return_to => @return_url
+              end
+
+              should_redirect_to("the return URL") { @return_url }
+            end
+
+            context "a POST to #create with good credentials and a session return url and request return url" do
+              setup do
+                @user = Factory(:email_confirmed_user)
+                @return_url = '/url_in_the_session'
+                @request.session[:return_to] = @return_url
+                post :create, :session => {
+                                :email    => @user.email,
+                                :password => @user.password },
+                                :return_to => '/url_in_the_request'
+              end
+
+              should_redirect_to("the return URL") { @return_url }
+            end
+
+            context "a POST to #create with bad credentials" do
+              setup do
+                post :create, :session => {
+                                :email    => 'bad.email@example.com',
+                                :password => "bad value" }
+              end
+
+              should_set_the_flash_to /bad/i
+              should_respond_with    :unauthorized
+              should_render_template :new
+              should_not_be_signed_in
+            end
+
+            context "a POST to #create with bad credentials and remember me" do
+              setup do
+                post :create, :session => {
+                                :email       => 'bad.email@example.com',
+                                :password    => "bad value",
+                                :remember_me => '1' }
+              end
+
+              should_set_the_flash_to /bad/i
+              should_respond_with    :unauthorized
+              should_render_template :new
+              should_not_be_signed_in
+
+              should 'not create the cookie' do
+                assert_nil cookies['remember_token']
+              end
+            end
+
+            context "signing out given a signed out user" do
+              setup do
+                sign_out
+                delete :destroy
+              end
+              should_redirect_to_url_after_destroy
+            end
+
+            context "a DELETE to #destroy without a cookie" do
+              setup do
+                sign_in_as
+                delete :destroy
+              end
+
+              should_set_the_flash_to(/signed out/i)
+              should_redirect_to_url_after_destroy
+            end
+
+            context 'a DELETE to #destroy with a cookie' do
+              setup do
+                @user = Factory(:email_confirmed_user)
+                cookies['remember_token'] = CGI::Cookie.new('token', 'value')
+                sign_in_as @user
+                delete :destroy
+              end
+
+              should 'delete the cookie' do
+                assert cookies['remember_token'].nil? || # Rails >= 2.3
+                       cookies['remember_token'].empty?  # Rails <  2.3
+              end
+
+              should 'delete the remember me token in users table' do
+                assert_nil @user.reload.token
+                assert_nil @user.reload.token_expires_at
+              end
+            end
+
+          end
+        end
+
+      end
+    end
+  end
+end

data/lib/clearance/test/functional/users_controller_test.rb

@@ -0,0 +1,60 @@
+module Clearance
+  module Test
+    module Functional
+      module UsersControllerTest
+
+        def self.included(controller_test)
+          controller_test.class_eval do
+
+            should_filter_params :password
+
+            public_context do
+              context "When getting new User view" do
+                setup { get :new }
+
+                should_respond_with :success
+                should_render_template :new
+                should_not_set_the_flash
+
+                should_display_a_sign_up_form
+              end
+
+              context "Given email parameter when getting new User view" do
+                setup do
+                  @email = "a@example.com"
+                  get :new, :user => { :email => @email }
+                end
+
+                should "set assigned user's email" do
+                  assert_equal @email, assigns(:user).email
+                end
+              end
+
+              context "Given valid attributes when creating a new user" do
+                setup do
+                  user_attributes = Factory.attributes_for(:user)
+                  post :create, :user => user_attributes
+                end
+
+                should_create_user_successfully
+              end
+            end
+
+            signed_in_user_context do
+              context "GET to new" do
+                setup { get :new }
+                should_redirect_to("the home page") { root_url }
+              end
+
+              context "POST to create" do
+                setup { post :create, :user => {} }
+                should_redirect_to("the home page") { root_url }
+              end
+            end
+
+          end
+        end
+      end
+    end
+  end
+end

data/lib/clearance/test/unit/clearance_mailer_test.rb

@@ -0,0 +1,65 @@
+module Clearance
+  module Test
+    module Unit
+      module ClearanceMailerTest
+
+        def self.included(mailer_test)
+          mailer_test.class_eval do
+
+            context "A change password email" do
+              setup do
+                @user  = Factory(:user)
+                @email = ClearanceMailer.create_change_password @user
+              end
+
+              should "set its from address to DO_NOT_REPLY" do
+                assert_equal DO_NOT_REPLY, @email.from[0]
+              end
+
+              should "contain a link to edit the user's password" do
+                host = ActionMailer::Base.default_url_options[:host]
+                regexp = %r{http://#{host}/users/#{@user.id}/password/edit\?token=#{@user.token}}
+                assert_match regexp, @email.body
+              end
+
+              should "be sent to the user" do
+                assert_equal [@user.email], @email.to
+              end
+
+              should "set its subject" do
+                assert_match /Change your password/, @email.subject
+              end
+            end
+
+            context "A confirmation email" do
+              setup do
+                @user  = Factory(:user)
+                @email = ClearanceMailer.create_confirmation @user
+              end
+
+              should "set its recipient to the given user" do
+                assert_equal @user.email, @email.to[0]
+              end
+
+              should "set its subject" do
+                assert_match /Account confirmation/, @email.subject
+              end
+
+              should "set its from address to DO_NOT_REPLY" do
+                assert_equal DO_NOT_REPLY, @email.from[0]
+              end
+
+              should "contain a link to confirm the user's account" do
+                host = ActionMailer::Base.default_url_options[:host]
+                regexp = %r{http://#{host}/users/#{@user.id}/confirmation/new\?token=#{@user.token}}
+                assert_match regexp, @email.body
+              end
+            end
+
+          end
+        end
+
+      end
+    end
+  end
+end

data/lib/clearance/test/unit/user_test.rb

@@ -0,0 +1,243 @@
+module Clearance
+  module Test
+    module Unit
+      module UserTest
+
+        def self.included(unit_test)
+          unit_test.class_eval do
+
+            should_not_allow_mass_assignment_of :email_confirmed,
+              :salt, :encrypted_password,
+              :token, :token_expires_at
+
+            # signing up
+
+            context "When signing up" do
+              should_validate_presence_of :email, :password
+              should_allow_values_for     :email, "foo@example.com"
+              should_not_allow_values_for :email, "foo"
+              should_not_allow_values_for :email, "example.com"
+
+              should "require password confirmation on create" do
+                user = Factory.build(:user, :password              => 'blah',
+                                            :password_confirmation => 'boogidy')
+                assert ! user.save
+                assert user.errors.on(:password)
+              end
+
+              should "require non nil password confirmation on create" do
+                user = Factory.build(:user, :password              => 'blah',
+                                            :password_confirmation => nil)
+                assert ! user.save
+                assert user.errors.on(:password_confirmation)
+              end
+
+              should "initialize salt" do
+                assert_not_nil Factory(:user).salt
+              end
+
+              should "initialize token without expiry date" do
+                assert_not_nil Factory(:user).token
+                assert_nil     Factory(:user).token_expires_at
+              end
+
+              context "encrypt password" do
+                setup do
+                  @salt = "salt"
+                  @user = Factory.build(:user, :salt => @salt)
+                  def @user.initialize_salt; end
+                  @user.save!
+                  @password = @user.password
+
+                  @user.encrypt(@password)
+                  @expected = Digest::SHA1.hexdigest("--#{@salt}--#{@password}--")
+                end
+
+                should "create an encrypted password using SHA1 encryption" do
+                  assert_equal @expected, @user.encrypted_password
+                end
+              end
+
+              should "store email in exact case" do
+                user = Factory(:user, :email => "John.Doe@example.com")
+                assert_equal "John.Doe@example.com", user.email
+              end
+            end
+
+            context "When multiple users have signed up" do
+              setup { @user = Factory(:user) }
+              should_validate_uniqueness_of :email
+            end
+
+            # confirming email
+
+            context "A user without email confirmation" do
+              setup do
+                @user = Factory(:user)
+                assert ! @user.email_confirmed?
+              end
+
+              context "after #confirm_email!" do
+                setup do
+                  assert @user.confirm_email!
+                  @user.reload
+                end
+
+                should "have confirmed their email" do
+                  assert @user.email_confirmed?
+                end
+
+                should "reset token" do
+                  assert_nil @user.token
+                end
+              end
+            end
+
+            # authenticating
+
+            context "A user" do
+              setup do
+                @user     = Factory(:user)
+                @password = @user.password
+              end
+
+              should "authenticate with good credentials" do
+                assert User.authenticate(@user.email, @password)
+                assert @user.authenticated?(@password)
+              end
+
+              should "not authenticate with bad credentials" do
+                assert ! User.authenticate(@user.email, 'bad_password')
+                assert ! @user.authenticated?('bad_password')
+              end
+            end
+
+            # remember me
+
+            context "When authenticating with remember_me!" do
+              setup do
+                @user = Factory(:email_confirmed_user)
+                @token = @user.token
+                assert_nil @user.token_expires_at
+                @user.remember_me!
+              end
+
+              should "set the remember token and expiration date" do
+                assert_not_equal @token, @user.token
+                assert_not_nil   @user.token_expires_at
+              end
+
+              should "remember user when token expires in the future" do
+                @user.update_attribute :token_expires_at,
+                  2.weeks.from_now.utc
+                assert @user.remember?
+              end
+
+              should "not remember user when token has already expired" do
+                @user.update_attribute :token_expires_at,
+                  2.weeks.ago.utc
+                assert ! @user.remember?
+              end
+
+              should "not remember user when token expiry date is not set" do
+                @user.update_attribute :token_expires_at, nil
+                assert ! @user.remember?
+              end
+
+              # logging out
+
+              context "forget_me!" do
+                setup { @user.forget_me! }
+
+                should "unset the remember token and expiration date" do
+                  assert_nil @user.token
+                  assert_nil @user.token_expires_at
+                end
+
+                should "not remember user" do
+                  assert ! @user.remember?
+                end
+              end
+            end
+
+            # updating password
+
+            context "An email confirmed user" do
+              setup do
+                @user = Factory(:email_confirmed_user)
+                @old_encrypted_password = @user.encrypted_password
+              end
+
+              context "who updates password with confirmation" do
+                setup do
+                  @user.update_password("new_password", "new_password")
+                end
+
+                should "change encrypted password" do
+                  assert_not_equal @user.encrypted_password,
+                                   @old_encrypted_password
+                end
+              end
+            end
+
+            # recovering forgotten password
+
+            context "An email confirmed user" do
+              setup do
+                @user = Factory(:email_confirmed_user)
+                @old_encrypted_password = @user.encrypted_password
+                @user.confirm_email!
+              end
+
+              context "who requests password reminder" do
+                setup do
+                  assert_nil @user.token
+                  @user.forgot_password!
+                end
+
+                should "generate token" do
+                  assert_not_nil @user.token
+                end
+
+                context "and then updates password" do
+                  context 'with confirmation' do
+                    setup do
+                      @user.update_password("new_password", "new_password")
+                    end
+
+                    should "change encrypted password" do
+                      assert_not_equal @user.encrypted_password,
+                                       @old_encrypted_password
+                    end
+
+                    should "clear token" do
+                      assert_nil @user.token
+                    end
+                  end
+
+                  context 'without confirmation' do
+                    setup do
+                      @user.update_password("new_password", "")
+                    end
+
+                    should "not change encrypted password" do
+                      assert_equal @user.encrypted_password,
+                                   @old_encrypted_password
+                    end
+
+                    should "not clear token" do
+                      assert_not_nil @user.token
+                    end
+                  end
+                end
+              end
+
+            end
+
+          end
+        end
+
+      end
+    end
+  end
+end