kschrader-authlogic 2.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- data/.gitignore +9 -0
- data/CHANGELOG.rdoc +346 -0
- data/LICENSE +20 -0
- data/README.rdoc +245 -0
- data/Rakefile +49 -0
- data/VERSION.yml +4 -0
- data/authlogic.gemspec +205 -0
- data/generators/session/session_generator.rb +9 -0
- data/generators/session/templates/session.rb +2 -0
- data/init.rb +1 -0
- data/lib/authlogic.rb +55 -0
- data/lib/authlogic/acts_as_authentic/base.rb +112 -0
- data/lib/authlogic/acts_as_authentic/email.rb +110 -0
- data/lib/authlogic/acts_as_authentic/logged_in_status.rb +60 -0
- data/lib/authlogic/acts_as_authentic/login.rb +141 -0
- data/lib/authlogic/acts_as_authentic/magic_columns.rb +24 -0
- data/lib/authlogic/acts_as_authentic/password.rb +344 -0
- data/lib/authlogic/acts_as_authentic/perishable_token.rb +105 -0
- data/lib/authlogic/acts_as_authentic/persistence_token.rb +68 -0
- data/lib/authlogic/acts_as_authentic/restful_authentication.rb +61 -0
- data/lib/authlogic/acts_as_authentic/session_maintenance.rb +139 -0
- data/lib/authlogic/acts_as_authentic/single_access_token.rb +65 -0
- data/lib/authlogic/acts_as_authentic/validations_scope.rb +32 -0
- data/lib/authlogic/authenticates_many/association.rb +42 -0
- data/lib/authlogic/authenticates_many/base.rb +55 -0
- data/lib/authlogic/controller_adapters/abstract_adapter.rb +67 -0
- data/lib/authlogic/controller_adapters/merb_adapter.rb +30 -0
- data/lib/authlogic/controller_adapters/rails_adapter.rb +48 -0
- data/lib/authlogic/crypto_providers/aes256.rb +43 -0
- data/lib/authlogic/crypto_providers/bcrypt.rb +89 -0
- data/lib/authlogic/crypto_providers/md5.rb +34 -0
- data/lib/authlogic/crypto_providers/sha1.rb +35 -0
- data/lib/authlogic/crypto_providers/sha512.rb +50 -0
- data/lib/authlogic/i18n.rb +63 -0
- data/lib/authlogic/random.rb +33 -0
- data/lib/authlogic/regex.rb +25 -0
- data/lib/authlogic/session/activation.rb +58 -0
- data/lib/authlogic/session/active_record_trickery.rb +55 -0
- data/lib/authlogic/session/base.rb +37 -0
- data/lib/authlogic/session/brute_force_protection.rb +92 -0
- data/lib/authlogic/session/callbacks.rb +87 -0
- data/lib/authlogic/session/cookies.rb +130 -0
- data/lib/authlogic/session/existence.rb +93 -0
- data/lib/authlogic/session/foundation.rb +63 -0
- data/lib/authlogic/session/http_auth.rb +58 -0
- data/lib/authlogic/session/id.rb +41 -0
- data/lib/authlogic/session/klass.rb +75 -0
- data/lib/authlogic/session/magic_columns.rb +94 -0
- data/lib/authlogic/session/magic_states.rb +58 -0
- data/lib/authlogic/session/params.rb +100 -0
- data/lib/authlogic/session/password.rb +231 -0
- data/lib/authlogic/session/perishable_token.rb +18 -0
- data/lib/authlogic/session/persistence.rb +70 -0
- data/lib/authlogic/session/priority_record.rb +34 -0
- data/lib/authlogic/session/scopes.rb +101 -0
- data/lib/authlogic/session/session.rb +60 -0
- data/lib/authlogic/session/timeout.rb +82 -0
- data/lib/authlogic/session/unauthorized_record.rb +50 -0
- data/lib/authlogic/session/validation.rb +80 -0
- data/lib/authlogic/test_case.rb +114 -0
- data/lib/authlogic/test_case/mock_controller.rb +45 -0
- data/lib/authlogic/test_case/mock_cookie_jar.rb +14 -0
- data/lib/authlogic/test_case/mock_logger.rb +10 -0
- data/lib/authlogic/test_case/mock_request.rb +19 -0
- data/lib/authlogic/test_case/rails_request_adapter.rb +30 -0
- data/rails/init.rb +1 -0
- data/shoulda_macros/authlogic.rb +13 -0
- data/test/acts_as_authentic_test/base_test.rb +18 -0
- data/test/acts_as_authentic_test/email_test.rb +97 -0
- data/test/acts_as_authentic_test/logged_in_status_test.rb +36 -0
- data/test/acts_as_authentic_test/login_test.rb +109 -0
- data/test/acts_as_authentic_test/magic_columns_test.rb +27 -0
- data/test/acts_as_authentic_test/password_test.rb +236 -0
- data/test/acts_as_authentic_test/perishable_token_test.rb +90 -0
- data/test/acts_as_authentic_test/persistence_token_test.rb +55 -0
- data/test/acts_as_authentic_test/restful_authentication_test.rb +40 -0
- data/test/acts_as_authentic_test/session_maintenance_test.rb +84 -0
- data/test/acts_as_authentic_test/single_access_test.rb +44 -0
- data/test/authenticates_many_test.rb +16 -0
- data/test/crypto_provider_test/aes256_test.rb +14 -0
- data/test/crypto_provider_test/bcrypt_test.rb +14 -0
- data/test/crypto_provider_test/sha1_test.rb +23 -0
- data/test/crypto_provider_test/sha512_test.rb +14 -0
- data/test/fixtures/companies.yml +5 -0
- data/test/fixtures/employees.yml +17 -0
- data/test/fixtures/projects.yml +3 -0
- data/test/fixtures/users.yml +24 -0
- data/test/libs/affiliate.rb +7 -0
- data/test/libs/company.rb +6 -0
- data/test/libs/employee.rb +7 -0
- data/test/libs/employee_session.rb +2 -0
- data/test/libs/ldaper.rb +3 -0
- data/test/libs/ordered_hash.rb +9 -0
- data/test/libs/project.rb +3 -0
- data/test/libs/user.rb +5 -0
- data/test/libs/user_session.rb +2 -0
- data/test/random_test.rb +49 -0
- data/test/session_test/activation_test.rb +43 -0
- data/test/session_test/active_record_trickery_test.rb +27 -0
- data/test/session_test/brute_force_protection_test.rb +101 -0
- data/test/session_test/callbacks_test.rb +6 -0
- data/test/session_test/cookies_test.rb +107 -0
- data/test/session_test/credentials_test.rb +0 -0
- data/test/session_test/existence_test.rb +64 -0
- data/test/session_test/http_auth_test.rb +28 -0
- data/test/session_test/id_test.rb +17 -0
- data/test/session_test/klass_test.rb +35 -0
- data/test/session_test/magic_columns_test.rb +62 -0
- data/test/session_test/magic_states_test.rb +60 -0
- data/test/session_test/params_test.rb +53 -0
- data/test/session_test/password_test.rb +106 -0
- data/test/session_test/perishability_test.rb +15 -0
- data/test/session_test/persistence_test.rb +21 -0
- data/test/session_test/scopes_test.rb +60 -0
- data/test/session_test/session_test.rb +59 -0
- data/test/session_test/timeout_test.rb +52 -0
- data/test/session_test/unauthorized_record_test.rb +13 -0
- data/test/session_test/validation_test.rb +23 -0
- data/test/test_helper.rb +174 -0
- metadata +229 -0
@@ -0,0 +1,114 @@
|
|
1
|
+
require File.dirname(__FILE__) + "/test_case/rails_request_adapter"
|
2
|
+
require File.dirname(__FILE__) + "/test_case/mock_cookie_jar"
|
3
|
+
require File.dirname(__FILE__) + "/test_case/mock_controller"
|
4
|
+
require File.dirname(__FILE__) + "/test_case/mock_logger"
|
5
|
+
require File.dirname(__FILE__) + "/test_case/mock_request"
|
6
|
+
|
7
|
+
module Authlogic
|
8
|
+
# This module is a collection of methods and classes that help you easily test Authlogic. In fact,
|
9
|
+
# I use these same tools to test the internals of Authlogic.
|
10
|
+
#
|
11
|
+
# === The quick and dirty
|
12
|
+
#
|
13
|
+
# require "authlogic/test_case" # include at the top of test_helper.rb
|
14
|
+
# setup :activate_authlogic # run before tests are executed
|
15
|
+
# UserSession.create(users(:whomever)) # logs a user in
|
16
|
+
#
|
17
|
+
# For a more detailed explanation, see below.
|
18
|
+
#
|
19
|
+
# === Setting up
|
20
|
+
#
|
21
|
+
# Authlogic comes with some simple testing tools. To get these, you need to first require Authlogic's TestCase. If
|
22
|
+
# you are doing this in a rails app, you would require this file at the top of your test_helper.rb file:
|
23
|
+
#
|
24
|
+
# require "authlogic/test_case"
|
25
|
+
#
|
26
|
+
# If you are using Test::Unit::TestCase, the standard testing library that comes with ruby, then you can skip this next part.
|
27
|
+
# If you are not, you need to include the Authlogic::TestCase into your testing suite as follows:
|
28
|
+
#
|
29
|
+
# include Authlogic::TestCase
|
30
|
+
#
|
31
|
+
# Now that everything is ready to go, let's move onto actually testing. Here is the basic idea behind testing:
|
32
|
+
#
|
33
|
+
# Authlogic requires a "connection" to your controller to activate it. In the same manner that ActiveRecord requires a connection to
|
34
|
+
# your database. It can't do anything until it gets connnected. That being said, Authlogic will raise an
|
35
|
+
# Authlogic::Session::Activation::NotActivatedError any time you try to instantiate an object without a "connection".
|
36
|
+
# So before you do anything with Authlogic, you need to activate / connect Authlogic. Let's walk through how to do this in tests:
|
37
|
+
#
|
38
|
+
# === Fixtures / Factories
|
39
|
+
#
|
40
|
+
# Creating users via fixtures / factories is easy. Here's an example of a fixture:
|
41
|
+
#
|
42
|
+
# ben:
|
43
|
+
# email: whatever@whatever.com
|
44
|
+
# password_salt: <%= salt = Authlogic::Random.hex_token %>
|
45
|
+
# crypted_password: <%= Authlogic::CryptoProviders::Sha512.encrypt("benrocks" + salt) %>
|
46
|
+
# persistence_token: <%= Authlogic::Random.hex_token %>
|
47
|
+
# single_access_token: <%= Authlogic::Random.friendly_token %>
|
48
|
+
# perishable_token: <%= Authlogic::Random.friendly_token %>
|
49
|
+
#
|
50
|
+
# Notice the crypted_password value. Just supplement that with whatever crypto provider you are using, if you are not using the default.
|
51
|
+
#
|
52
|
+
# === Functional tests
|
53
|
+
#
|
54
|
+
# Activating Authlogic isn't a problem here, because making a request will activate Authlogic for you. The problem is
|
55
|
+
# logging users in so they can access restricted areas. Solving this is simple, just do this:
|
56
|
+
#
|
57
|
+
# setup :activate_authlogic
|
58
|
+
#
|
59
|
+
# For those of you unfamiliar with TestUnit, the setup method bascially just executes a method before any test is ran.
|
60
|
+
# It is essentially "setting up" your tests.
|
61
|
+
#
|
62
|
+
# Once you have done this, just log users in like usual:
|
63
|
+
#
|
64
|
+
# UserSession.create(users(:whomever))
|
65
|
+
# # access my restricted area here
|
66
|
+
#
|
67
|
+
# Do this before you make your request and it will act as if that user is logged in.
|
68
|
+
#
|
69
|
+
# === Integration tests
|
70
|
+
#
|
71
|
+
# Again, just like functional tests, you don't have to do anything. As soon as you make a request, Authlogic will be
|
72
|
+
# conntected. If you want to activate Authlogic before making a request follow the same steps described in the
|
73
|
+
# "functional tests" section above. It works in the same manner.
|
74
|
+
#
|
75
|
+
# === Unit tests
|
76
|
+
#
|
77
|
+
# The only time you need to do any trickiness here is if you want to test Authlogic models. Maybe you added some custom
|
78
|
+
# code or methods in your Authlogic models. Maybe you are writing a plugin or a library that extends Authlogic.
|
79
|
+
#
|
80
|
+
# That being said, in this environment there is no controller. So you need to use a "mock" controller. Something
|
81
|
+
# that looks like a controller, acts like a controller, but isn't a "real" controller. You are essentially connecting
|
82
|
+
# Authlogic to your "mock" controller, then you can test off of the mock controller to make sure everything is functioning
|
83
|
+
# properly.
|
84
|
+
#
|
85
|
+
# I use a mock controller to test Authlogic myself. It's part of the Authlogic library that you can easily use. It's as simple
|
86
|
+
# as functional and integration tests. Just do the following:
|
87
|
+
#
|
88
|
+
# setup :activate_authlogic
|
89
|
+
#
|
90
|
+
# You also get a controller method that you can test off of. For example:
|
91
|
+
#
|
92
|
+
# ben = users(:ben)
|
93
|
+
# assert_nil controller.session["user_credentials"]
|
94
|
+
# assert UserSession.create(ben)
|
95
|
+
# assert_equal controller.session["user_credentials"], ben.persistence_token
|
96
|
+
#
|
97
|
+
# See how I am checking that Authlogic is interacting with the controller properly? That's the idea here.
|
98
|
+
module TestCase
|
99
|
+
# Activates authlogic so that you can use it in your tests. You should call this method in your test's setup. Ex:
|
100
|
+
#
|
101
|
+
# setup :activate_authlogic
|
102
|
+
def activate_authlogic
|
103
|
+
Authlogic::Session::Base.controller = (@request && Authlogic::TestCase::RailsRequestAdapter.new(@request)) || controller
|
104
|
+
end
|
105
|
+
|
106
|
+
# The Authlogic::TestCase::MockController object passed to Authlogic to activate it. You can access this in your test.
|
107
|
+
# See the module description for an example.
|
108
|
+
def controller
|
109
|
+
@controller ||= Authlogic::TestCase::MockController.new
|
110
|
+
end
|
111
|
+
end
|
112
|
+
|
113
|
+
::Test::Unit::TestCase.send(:include, TestCase) if defined?(::Test::Unit::TestCase)
|
114
|
+
end
|
@@ -0,0 +1,45 @@
|
|
1
|
+
module Authlogic
|
2
|
+
module TestCase
|
3
|
+
# Basically acts like a controller but doesn't do anything. Authlogic can interact with this, do it's thing and then you
|
4
|
+
# can look at the controller object to see if anything changed.
|
5
|
+
class MockController < ControllerAdapters::AbstractAdapter
|
6
|
+
attr_accessor :http_user, :http_password
|
7
|
+
attr_writer :request_content_type
|
8
|
+
|
9
|
+
def initialize
|
10
|
+
end
|
11
|
+
|
12
|
+
def authenticate_with_http_basic(&block)
|
13
|
+
yield http_user, http_password
|
14
|
+
end
|
15
|
+
|
16
|
+
def cookies
|
17
|
+
@cookies ||= MockCookieJar.new
|
18
|
+
end
|
19
|
+
|
20
|
+
def cookie_domain
|
21
|
+
nil
|
22
|
+
end
|
23
|
+
|
24
|
+
def logger
|
25
|
+
@logger ||= MockLogger.new
|
26
|
+
end
|
27
|
+
|
28
|
+
def params
|
29
|
+
@params ||= {}
|
30
|
+
end
|
31
|
+
|
32
|
+
def request
|
33
|
+
@request ||= MockRequest.new(controller)
|
34
|
+
end
|
35
|
+
|
36
|
+
def request_content_type
|
37
|
+
@request_content_type ||= "text/html"
|
38
|
+
end
|
39
|
+
|
40
|
+
def session
|
41
|
+
@session ||= {}
|
42
|
+
end
|
43
|
+
end
|
44
|
+
end
|
45
|
+
end
|
@@ -0,0 +1,19 @@
|
|
1
|
+
module Authlogic
|
2
|
+
module TestCase
|
3
|
+
class MockRequest # :nodoc:
|
4
|
+
attr_accessor :controller
|
5
|
+
|
6
|
+
def initialize(controller)
|
7
|
+
self.controller = controller
|
8
|
+
end
|
9
|
+
|
10
|
+
def remote_ip
|
11
|
+
(controller && controller.respond_to?(:env) && controller.env.is_a?(Hash) && controller.env['REMOTE_ADDR']) || "1.1.1.1"
|
12
|
+
end
|
13
|
+
|
14
|
+
private
|
15
|
+
def method_missing(*args, &block)
|
16
|
+
end
|
17
|
+
end
|
18
|
+
end
|
19
|
+
end
|
@@ -0,0 +1,30 @@
|
|
1
|
+
module Authlogic
|
2
|
+
module TestCase
|
3
|
+
# Adapts authlogic to work with the @request object when testing. This way Authlogic can set cookies and what not before
|
4
|
+
# a request is made, ultimately letting you log in users in functional tests.
|
5
|
+
class RailsRequestAdapter < ControllerAdapters::AbstractAdapter
|
6
|
+
def authenticate_with_http_basic(&block)
|
7
|
+
end
|
8
|
+
|
9
|
+
def cookies
|
10
|
+
new_cookies = MockCookieJar.new
|
11
|
+
super.each do |key, value|
|
12
|
+
new_cookies[key] = value[:value]
|
13
|
+
end
|
14
|
+
new_cookies
|
15
|
+
end
|
16
|
+
|
17
|
+
def cookie_domain
|
18
|
+
nil
|
19
|
+
end
|
20
|
+
|
21
|
+
def request
|
22
|
+
@request ||= MockRequest.new(controller)
|
23
|
+
end
|
24
|
+
|
25
|
+
def request_content_type
|
26
|
+
request.format.to_s
|
27
|
+
end
|
28
|
+
end
|
29
|
+
end
|
30
|
+
end
|
data/rails/init.rb
ADDED
@@ -0,0 +1 @@
|
|
1
|
+
require "authlogic"
|
@@ -0,0 +1,13 @@
|
|
1
|
+
module Authlogic
|
2
|
+
module ShouldaMacros
|
3
|
+
class Test::Unit::TestCase
|
4
|
+
def self.should_be_authentic
|
5
|
+
klass = described_type rescue model_class
|
6
|
+
should "acts as authentic" do
|
7
|
+
assert klass.new.respond_to?(:password=)
|
8
|
+
assert klass.new.respond_to?(:valid_password?)
|
9
|
+
end
|
10
|
+
end
|
11
|
+
end
|
12
|
+
end
|
13
|
+
end
|
@@ -0,0 +1,18 @@
|
|
1
|
+
require File.dirname(__FILE__) + '/../test_helper.rb'
|
2
|
+
|
3
|
+
module ActsAsAuthenticTest
|
4
|
+
class BaseTest < ActiveSupport::TestCase
|
5
|
+
def test_acts_as_authentic
|
6
|
+
assert_nothing_raised do
|
7
|
+
User.acts_as_authentic do
|
8
|
+
end
|
9
|
+
end
|
10
|
+
end
|
11
|
+
|
12
|
+
def test_acts_as_authentic_with_old_config
|
13
|
+
assert_raise(ArgumentError) do
|
14
|
+
User.acts_as_authentic({})
|
15
|
+
end
|
16
|
+
end
|
17
|
+
end
|
18
|
+
end
|
@@ -0,0 +1,97 @@
|
|
1
|
+
require File.dirname(__FILE__) + '/../test_helper.rb'
|
2
|
+
|
3
|
+
module ActsAsAuthenticTest
|
4
|
+
class EmailTest < ActiveSupport::TestCase
|
5
|
+
def test_email_field_config
|
6
|
+
assert_equal :email, User.email_field
|
7
|
+
assert_equal :email, Employee.email_field
|
8
|
+
|
9
|
+
User.email_field = :nope
|
10
|
+
assert_equal :nope, User.email_field
|
11
|
+
User.email_field :email
|
12
|
+
assert_equal :email, User.email_field
|
13
|
+
end
|
14
|
+
|
15
|
+
def test_validate_email_field_config
|
16
|
+
assert User.validate_email_field
|
17
|
+
assert Employee.validate_email_field
|
18
|
+
|
19
|
+
User.validate_email_field = false
|
20
|
+
assert !User.validate_email_field
|
21
|
+
User.validate_email_field true
|
22
|
+
assert User.validate_email_field
|
23
|
+
end
|
24
|
+
|
25
|
+
def test_validates_length_of_email_field_options_config
|
26
|
+
assert_equal({:within => 6..100}, User.validates_length_of_email_field_options)
|
27
|
+
assert_equal({:within => 6..100}, Employee.validates_length_of_email_field_options)
|
28
|
+
|
29
|
+
User.validates_length_of_email_field_options = {:yes => "no"}
|
30
|
+
assert_equal({:yes => "no"}, User.validates_length_of_email_field_options)
|
31
|
+
User.validates_length_of_email_field_options({:within => 6..100})
|
32
|
+
assert_equal({:within => 6..100}, User.validates_length_of_email_field_options)
|
33
|
+
end
|
34
|
+
|
35
|
+
def test_validates_format_of_email_field_options_config
|
36
|
+
default = {:with => Authlogic::Regex.email, :message => I18n.t('error_messages.email_invalid', :default => "should look like an email address.")}
|
37
|
+
assert_equal default, User.validates_format_of_email_field_options
|
38
|
+
assert_equal default, Employee.validates_format_of_email_field_options
|
39
|
+
|
40
|
+
User.validates_format_of_email_field_options = {:yes => "no"}
|
41
|
+
assert_equal({:yes => "no"}, User.validates_format_of_email_field_options)
|
42
|
+
User.validates_format_of_email_field_options default
|
43
|
+
assert_equal default, User.validates_format_of_email_field_options
|
44
|
+
end
|
45
|
+
|
46
|
+
def test_validates_uniqueness_of_email_field_options_config
|
47
|
+
default = {:case_sensitive => false, :scope => Employee.validations_scope, :if => "#{Employee.email_field}_changed?".to_sym}
|
48
|
+
assert_equal default, Employee.validates_uniqueness_of_email_field_options
|
49
|
+
|
50
|
+
Employee.validates_uniqueness_of_email_field_options = {:yes => "no"}
|
51
|
+
assert_equal({:yes => "no"}, Employee.validates_uniqueness_of_email_field_options)
|
52
|
+
Employee.validates_uniqueness_of_email_field_options default
|
53
|
+
assert_equal default, Employee.validates_uniqueness_of_email_field_options
|
54
|
+
end
|
55
|
+
|
56
|
+
def test_validates_length_of_email_field
|
57
|
+
u = User.new
|
58
|
+
u.email = "a@a.a"
|
59
|
+
assert !u.valid?
|
60
|
+
assert u.errors[:email].size > 0
|
61
|
+
|
62
|
+
u.email = "a@a.com"
|
63
|
+
assert !u.valid?
|
64
|
+
assert u.errors[:email].size == 0
|
65
|
+
end
|
66
|
+
|
67
|
+
def test_validates_format_of_email_field
|
68
|
+
u = User.new
|
69
|
+
u.email = "aaaaaaaaaaaaa"
|
70
|
+
assert !u.valid?
|
71
|
+
assert u.errors[:email].size > 0
|
72
|
+
|
73
|
+
u.email = "a@a.com"
|
74
|
+
assert !u.valid?
|
75
|
+
assert u.errors[:email].size == 0
|
76
|
+
|
77
|
+
u.email = "dakota.dux+1@gmail.com"
|
78
|
+
assert !u.valid?
|
79
|
+
assert u.errors[:email].size == 0
|
80
|
+
end
|
81
|
+
|
82
|
+
def test_validates_uniqueness_of_email_field
|
83
|
+
u = User.new
|
84
|
+
u.email = "bjohnson@binarylogic.com"
|
85
|
+
assert !u.valid?
|
86
|
+
assert u.errors[:email].size > 0
|
87
|
+
|
88
|
+
u.email = "BJOHNSON@binarylogic.com"
|
89
|
+
assert !u.valid?
|
90
|
+
assert u.errors[:email].size > 0
|
91
|
+
|
92
|
+
u.email = "a@a.com"
|
93
|
+
assert !u.valid?
|
94
|
+
assert u.errors[:email].size == 0
|
95
|
+
end
|
96
|
+
end
|
97
|
+
end
|
@@ -0,0 +1,36 @@
|
|
1
|
+
require File.dirname(__FILE__) + '/../test_helper.rb'
|
2
|
+
|
3
|
+
module ActsAsAuthenticTest
|
4
|
+
class LoggedInStatusTest < ActiveSupport::TestCase
|
5
|
+
def test_logged_in_timeout_config
|
6
|
+
assert_equal 10.minutes.to_i, User.logged_in_timeout
|
7
|
+
assert_equal 10.minutes.to_i, Employee.logged_in_timeout
|
8
|
+
|
9
|
+
User.logged_in_timeout = 1.hour
|
10
|
+
assert_equal 1.hour.to_i, User.logged_in_timeout
|
11
|
+
User.logged_in_timeout 10.minutes
|
12
|
+
assert_equal 10.minutes.to_i, User.logged_in_timeout
|
13
|
+
end
|
14
|
+
|
15
|
+
def test_named_scope_logged_in
|
16
|
+
assert_equal 0, User.logged_in.count
|
17
|
+
User.first.update_attribute(:last_request_at, Time.zone.now)
|
18
|
+
assert_equal 1, User.logged_in.count
|
19
|
+
end
|
20
|
+
|
21
|
+
def test_named_scope_logged_out
|
22
|
+
assert_equal 2, User.logged_out.count
|
23
|
+
User.first.update_attribute(:last_request_at, Time.zone.now)
|
24
|
+
assert_equal 1, User.logged_out.count
|
25
|
+
end
|
26
|
+
|
27
|
+
def test_logged_in_logged_out
|
28
|
+
u = User.first
|
29
|
+
assert !u.logged_in?
|
30
|
+
assert u.logged_out?
|
31
|
+
u.last_request_at = Time.zone.now
|
32
|
+
assert u.logged_in?
|
33
|
+
assert !u.logged_out?
|
34
|
+
end
|
35
|
+
end
|
36
|
+
end
|
@@ -0,0 +1,109 @@
|
|
1
|
+
require File.dirname(__FILE__) + '/../test_helper.rb'
|
2
|
+
|
3
|
+
module ActsAsAuthenticTest
|
4
|
+
class LoginTest < ActiveSupport::TestCase
|
5
|
+
def test_login_field_config
|
6
|
+
assert_equal :login, User.login_field
|
7
|
+
assert_nil Employee.login_field
|
8
|
+
|
9
|
+
User.login_field = :nope
|
10
|
+
assert_equal :nope, User.login_field
|
11
|
+
User.login_field :login
|
12
|
+
assert_equal :login, User.login_field
|
13
|
+
end
|
14
|
+
|
15
|
+
def test_validate_login_field_config
|
16
|
+
assert User.validate_login_field
|
17
|
+
assert Employee.validate_login_field
|
18
|
+
|
19
|
+
User.validate_login_field = false
|
20
|
+
assert !User.validate_login_field
|
21
|
+
User.validate_login_field true
|
22
|
+
assert User.validate_login_field
|
23
|
+
end
|
24
|
+
|
25
|
+
def test_validates_length_of_login_field_options_config
|
26
|
+
assert_equal({:within => 3..100}, User.validates_length_of_login_field_options)
|
27
|
+
assert_equal({:within => 3..100}, Employee.validates_length_of_login_field_options)
|
28
|
+
|
29
|
+
User.validates_length_of_login_field_options = {:yes => "no"}
|
30
|
+
assert_equal({:yes => "no"}, User.validates_length_of_login_field_options)
|
31
|
+
User.validates_length_of_login_field_options({:within => 3..100})
|
32
|
+
assert_equal({:within => 3..100}, User.validates_length_of_login_field_options)
|
33
|
+
end
|
34
|
+
|
35
|
+
def test_validates_format_of_login_field_options_config
|
36
|
+
default = {:with => /\A\w[\w\.+\-_@ ]+\z/, :message => I18n.t('error_messages.login_invalid', :default => "should use only letters, numbers, spaces, and .-_@ please.")}
|
37
|
+
assert_equal default, User.validates_format_of_login_field_options
|
38
|
+
assert_equal default, Employee.validates_format_of_login_field_options
|
39
|
+
|
40
|
+
User.validates_format_of_login_field_options = {:yes => "no"}
|
41
|
+
assert_equal({:yes => "no"}, User.validates_format_of_login_field_options)
|
42
|
+
User.validates_format_of_login_field_options default
|
43
|
+
assert_equal default, User.validates_format_of_login_field_options
|
44
|
+
end
|
45
|
+
|
46
|
+
def test_validates_uniqueness_of_login_field_options_config
|
47
|
+
default = {:case_sensitive => false, :scope => User.validations_scope, :if => "#{User.login_field}_changed?".to_sym}
|
48
|
+
assert_equal default, User.validates_uniqueness_of_login_field_options
|
49
|
+
|
50
|
+
User.validates_uniqueness_of_login_field_options = {:yes => "no"}
|
51
|
+
assert_equal({:yes => "no"}, User.validates_uniqueness_of_login_field_options)
|
52
|
+
User.validates_uniqueness_of_login_field_options default
|
53
|
+
assert_equal default, User.validates_uniqueness_of_login_field_options
|
54
|
+
end
|
55
|
+
|
56
|
+
def test_validates_length_of_login_field
|
57
|
+
u = User.new
|
58
|
+
u.login = "a"
|
59
|
+
assert !u.valid?
|
60
|
+
assert u.errors[:login].size > 0
|
61
|
+
|
62
|
+
u.login = "aaaaaaaaaa"
|
63
|
+
assert !u.valid?
|
64
|
+
assert u.errors[:login].size == 0
|
65
|
+
end
|
66
|
+
|
67
|
+
def test_validates_format_of_login_field
|
68
|
+
u = User.new
|
69
|
+
u.login = "fdsf@^&*"
|
70
|
+
assert !u.valid?
|
71
|
+
assert u.errors[:login].size > 0
|
72
|
+
|
73
|
+
u.login = "fdsfdsfdsfdsfs"
|
74
|
+
assert !u.valid?
|
75
|
+
assert u.errors[:login].size == 0
|
76
|
+
|
77
|
+
u.login = "dakota.dux+1@gmail.com"
|
78
|
+
assert !u.valid?
|
79
|
+
assert u.errors[:login].size == 0
|
80
|
+
end
|
81
|
+
|
82
|
+
def test_validates_uniqueness_of_login_field
|
83
|
+
u = User.new
|
84
|
+
u.login = "bjohnson"
|
85
|
+
assert !u.valid?
|
86
|
+
assert u.errors[:login].size > 0
|
87
|
+
|
88
|
+
u.login = "BJOHNSON"
|
89
|
+
assert !u.valid?
|
90
|
+
assert u.errors[:login].size > 0
|
91
|
+
|
92
|
+
u.login = "fdsfdsf"
|
93
|
+
assert !u.valid?
|
94
|
+
assert u.errors[:login].size == 0
|
95
|
+
end
|
96
|
+
|
97
|
+
def test_find_by_smart_case_login_field
|
98
|
+
ben = users(:ben)
|
99
|
+
assert_equal ben, User.find_by_smart_case_login_field("bjohnson")
|
100
|
+
assert_equal ben, User.find_by_smart_case_login_field("BJOHNSON")
|
101
|
+
assert_equal ben, User.find_by_smart_case_login_field("Bjohnson")
|
102
|
+
|
103
|
+
drew = employees(:drew)
|
104
|
+
assert_equal drew, Employee.find_by_smart_case_login_field("dgainor@binarylogic.com")
|
105
|
+
assert_equal drew, Employee.find_by_smart_case_login_field("Dgainor@binarylogic.com")
|
106
|
+
assert_equal drew, Employee.find_by_smart_case_login_field("DGAINOR@BINARYLOGIC.COM")
|
107
|
+
end
|
108
|
+
end
|
109
|
+
end
|