nagybence-clearance 0.4.1

data/lib/clearance/test/functional/passwords_controller_test.rb

@@ -0,0 +1,175 @@
+module Clearance
+  module Test
+    module Functional
+      module PasswordsControllerTest
+
+        def self.included(controller_test)
+          controller_test.class_eval do
+
+            should_route :get, '/users/1/password/edit', 
+              :action  => 'edit', :user_id => '1'
+
+            context "with a user" do
+              setup { @user = Factory(:registered_user) }
+
+              context 'A GET to #new' do
+                setup { get :new, :user_id => @user.to_param }
+
+                should_respond_with :success
+                should_render_template "new"
+              end
+
+              context "A POST to #create" do
+                context "with an existing user's email address" do
+                  setup do
+                    ActionMailer::Base.deliveries.clear
+
+                    post :create, :password => { :email => @user.email }
+                  end
+                  
+                  should "send the change your password email" do
+                    assert_sent_email do |email|
+                      email.subject =~ /change your password/i
+                    end
+                  end
+                  
+                  should "set a :notice flash" do
+                    assert_match /details/i, flash[:notice]
+                  end
+
+                  should_redirect_to_url_after_create
+                end
+
+                context "with a non-existent email address" do
+                  setup do
+                    email = "user1@example.com"
+                    assert ! User.exists?(['email = ?', email])
+                    ActionMailer::Base.deliveries.clear
+
+                    post :create, :password => { :email => email }
+                  end
+
+                  should "not send a password reminder email" do
+                    assert ActionMailer::Base.deliveries.empty?
+                  end
+
+                  should "set a :notice flash" do
+                    assert_not_nil flash.now[:notice]
+                  end
+
+                  should_render_template "new"
+                end
+              end
+
+              context "A GET to #edit" do
+                context "with an existing user's id and password" do
+                  setup do
+                    get :edit, 
+                      :user_id  => @user.to_param, 
+                      :password => @user.encrypted_password, 
+                      :email    => @user.email
+                  end
+
+                  should "find the user with the given id and password" do
+                    assert_equal @user, assigns(:user)
+                  end
+
+                  should_respond_with :success
+                  should_render_template "edit"
+
+                  should "have a form for the user's email, password, and password confirm" do
+                    update_path = ERB::Util.h(user_password_path(@user,
+                          :password => @user.encrypted_password,
+                          :email    => @user.email))
+
+                    assert_select 'form[action=?]', update_path do
+                      assert_select 'input[name=_method][value=?]', 'put'
+                      assert_select 'input[name=?]', 'user[password]'
+                      assert_select 'input[name=?]', 'user[password_confirmation]'
+                    end
+                  end
+                end
+
+                context "with an existing user's id but not password" do
+                  setup do
+                    get :edit, :user_id => @user.to_param, :password => ""
+                  end
+
+                  should_respond_with :not_found
+                  should_render_nothing
+                end
+              end
+
+              context "A PUT to #update" do
+                context "with an existing user's id but not password" do
+                  setup do
+                    put :update, :user_id => @user.to_param, :password => ""
+                  end
+
+                  should "not update the user's password" do
+                    assert_not_equal @encrypted_new_password, @user.encrypted_password
+                  end
+
+                  should_not_be_signed_in
+                  should_respond_with :not_found
+                  should_render_nothing
+                end
+
+                context "with a matching password and password confirmation" do
+                  setup do
+                    new_password = "new_password"
+                    @encrypted_new_password = @user.encrypt(new_password)
+                    assert_not_equal @encrypted_new_password, @user.encrypted_password
+
+                    put(:update,
+                        :user_id  => @user,
+                        :email    => @user.email,
+                        :password => @user.encrypted_password,
+                        :user => {
+                          :password              => new_password,
+                          :password_confirmation => new_password
+                        })
+                    @user.reload
+                  end
+
+                  should "update the user's password" do
+                    assert_equal @encrypted_new_password, @user.encrypted_password
+                  end
+
+                  should_be_signed_in_as { @user }
+                  should_redirect_to_url_after_update
+                end
+
+                context "with password but blank password confirmation" do
+                  setup do
+                    new_password = "new_password"
+                    @encrypted_new_password = @user.encrypt(new_password)
+
+                    put(:update,
+                        :user_id => @user.to_param,
+                        :password => @user.encrypted_password,
+                        :user => {
+                          :password => new_password,
+                          :password_confirmation => ''
+                        })
+                    @user.reload
+                  end
+
+                  should "not update the user's password" do
+                    assert_not_equal @encrypted_new_password, @user.encrypted_password
+                  end
+
+                  should_not_be_signed_in
+                  should_respond_with :not_found
+                  should_render_nothing
+                end
+              end
+            end
+          
+          end
+        end
+
+      end
+    end
+  end
+end

data/lib/clearance/test/functional/sessions_controller_test.rb

@@ -0,0 +1,194 @@
+module Clearance
+  module Test
+    module Functional
+      module SessionsControllerTest
+    
+        def self.included(controller_test)
+          controller_test.class_eval do
+            
+            should_filter_params :password
+
+            context "on GET to /sessions/new" do
+              setup { get :new }
+        
+              should_respond_with :success
+              should_render_template :new
+              should_not_set_the_flash
+              
+              should 'display a "sign in" form' do
+                assert_select "form[action=#{session_path}][method=post]", 
+                  true, "There must be a form to sign in" do
+                    assert_select "input[type=text][name=?]", 
+                      "session[email]", true, "There must be an email field"
+                    assert_select "input[type=password][name=?]", 
+                      "session[password]", true, "There must be a password field"
+                    assert_select "input[type=checkbox][name=?]", 
+                      "session[remember_me]", true, "There must be a 'remember me' check box"
+                    assert_select "input[type=submit]", true, 
+                      "There must be a submit button"
+                end                
+              end
+            end
+
+            context "Given a registered user" do
+              setup { @user = Factory(:registered_user) }
+
+              context "a POST to #create with good credentials" do
+                setup do
+                  ActionMailer::Base.deliveries.clear
+                  post :create, :session => {
+                                  :email    => @user.email,
+                                  :password => @user.password }
+                end
+
+                should_deny_access(:flash => /confirm/i)
+              end
+            end
+
+            context "Given an email confirmed user" do
+              setup { @user = Factory(:email_confirmed_user) }
+
+              context "a POST to #create with good credentials" do
+                setup do
+                  post :create, :session => { 
+                                  :email    => @user.email, 
+                                  :password => @user.password }
+                end
+
+                should_set_the_flash_to /success/i
+                should_redirect_to_url_after_create
+                should_be_signed_in_as { @user }
+              end
+
+              context "a POST to #create with bad credentials" do
+                setup do
+                  post :create, :session => { 
+                                  :email    => @user.email, 
+                                  :password => "bad value" }
+                end
+
+                should_set_the_flash_to /bad/i
+                should_render_template :new
+                should_not_be_signed_in
+              end
+          
+              context "a POST to #create with good credentials and remember me" do
+                setup do
+                  post :create, :session => { 
+                                  :email       => @user.email, 
+                                  :password    => @user.password, 
+                                  :remember_me => '1' }
+                end
+
+                should_set_the_flash_to /success/i
+                should_redirect_to_url_after_create
+                should_be_signed_in_as { @user }
+                
+                should 'set the cookie' do
+                  assert ! cookies['remember_token'].empty?
+                end
+
+                should 'set the remember me token in users table' do
+                  assert_not_nil @user.reload.remember_token
+                  assert_not_nil @user.reload.remember_token_expires_at
+                end
+              end
+              
+              context "a POST to #create with bad credentials and remember me" do
+                setup do
+                  post :create, :session => { 
+                                  :email       => @user.email, 
+                                  :password    => "bad value", 
+                                  :remember_me => '1' }
+                end
+
+                should_set_the_flash_to /bad/i
+                should_render_template :new
+                should_return_from_session :user_id, "nil"
+                
+                should 'not create the cookie' do
+                  assert_nil cookies['remember_token']
+                end
+
+                should 'not set the remember me token in users table' do
+                  assert_nil @user.reload.remember_token
+                  assert_nil @user.reload.remember_token_expires_at
+                end
+              end
+              
+              context "a POST to #create with good credentials and A URL to return back" do
+                context "in the session" do
+                  setup do
+                    @request.session[:return_to] = '/url_in_the_session'
+                    post :create, :session => { 
+                                    :email    => @user.email, 
+                                    :password => @user.password }                    
+                  end
+                  
+                  should_redirect_to "'/url_in_the_session'"
+                end
+                
+                context "in the request" do
+                  setup do
+                    post :create, :session => { 
+                                    :email => @user.email, 
+                                    :password => @user.password },
+                                   :return_to => '/url_in_the_request'                    
+                  end
+                  
+                  should_redirect_to "'/url_in_the_request'"
+                end   
+                             
+                context "in the request and in the session" do
+                  setup do
+                    @request.session[:return_to] = '/url_in_the_session'
+                    post :create, :session => { 
+                                    :email    => @user.email, 
+                                    :password => @user.password },
+                                  :return_to => '/url_in_the_request'                    
+                  end
+                  
+                  should_redirect_to "'/url_in_the_session'"
+                end
+              end              
+            end
+
+            public_context do
+              context "logging out again" do
+                setup { delete :destroy }
+                should_redirect_to_url_after_destroy
+              end
+            end
+
+            signed_in_user_context do
+              context "a DELETE to #destroy without a cookie" do
+                setup { delete :destroy }
+
+                should_set_the_flash_to(/signed out/i)
+                should_redirect_to_url_after_destroy
+              end
+
+              context 'a DELETE to #destroy with a cookie' do
+                setup do
+                  cookies['remember_token'] = CGI::Cookie.new 'token', 'value'
+                  delete :destroy
+                end
+
+                should 'delete the cookie' do
+                  assert cookies['remember_token'].empty?
+                end
+
+                should 'delete the remember me token in users table' do
+                  assert_nil @user.reload.remember_token
+                  assert_nil @user.reload.remember_token_expires_at
+                end
+              end
+            end
+          
+          end
+        end
+
+      end
+    end
+  end
+end

data/lib/clearance/test/functional/users_controller_test.rb

@@ -0,0 +1,72 @@
+module Clearance
+  module Test
+    module Functional
+      module UsersControllerTest
+
+        def self.included(controller_test)
+          controller_test.class_eval do
+            
+            should_filter_params :password
+            
+            public_context do
+              context "When getting new User view" do
+                setup { get :new }
+                
+                should_respond_with :success
+                should_render_template :new
+                should_not_set_the_flash
+                
+                should "display a form to register" do
+                 assert_select "form[action=#{users_path}][method=post]", 
+                  true, "There must be a form to register" do
+                    assert_select "input[type=text][name=?]", 
+                      "user[email]", true, "There must be an email field"
+                    assert_select "input[type=password][name=?]", 
+                      "user[password]", true, "There must be a password field"
+                    assert_select "input[type=password][name=?]", 
+                      "user[password_confirmation]", true, "There must be a password confirmation field"                      
+                    assert_select "input[type=submit]", true, 
+                      "There must be a submit button"
+                 end
+                end
+              end
+              
+              context "Given email parameter when getting new User view" do
+                setup do
+                  @email = "a@example.com"
+                  get :new, :user => { :email => @email }
+                end
+
+                should "set assigned user's email" do
+                  assert_equal @email, assigns(:user).email
+                end
+              end
+
+              context "Given valid attributes when creating a new user" do
+                setup do
+                  user_attributes = Factory.attributes_for(:registered_user)
+                  post :create, :user => user_attributes
+                end
+            
+                should_create_user_successfully
+              end
+            end
+
+            signed_in_user_context do
+              context "GET to new" do
+                setup { get :new }
+                should_redirect_to "root_url"
+              end
+
+              context "POST to create" do
+                setup { post :create, :user => {} }
+                should_redirect_to "root_url"
+              end
+            end
+          
+          end
+        end
+      end
+    end
+  end
+end

data/lib/clearance/test/test_helper.rb

@@ -0,0 +1,28 @@
+module Clearance 
+  module Test
+    module TestHelper
+    
+      def self.included(test_helper)
+        test_helper.class_eval do
+          
+          def sign_in_as(user = nil)
+            unless user
+              user = Factory(:registered_user)
+              user.confirm_email!
+            end
+            @request.session[:user_id] = user.id
+            @request.session[:salt]    = user.salt
+            return user
+          end
+
+          def sign_out 
+            @request.session[:user_id] = nil
+            @request.session[:salt]    = nil
+          end
+          
+        end
+      end
+ 
+    end 
+  end
+end

data/lib/clearance/test/unit/clearance_mailer_test.rb

@@ -0,0 +1,65 @@
+module Clearance
+  module Test
+    module Unit
+      module ClearanceMailerTest
+  
+        def self.included(mailer_test)
+          mailer_test.class_eval do
+            
+            context "A change password email" do
+              setup do
+                @user  = Factory(:registered_user)
+                @email = ClearanceMailer.create_change_password @user
+              end
+
+              should "set its from address to DO_NOT_REPLY" do
+                assert_equal DO_NOT_REPLY, @email.from[0]
+              end
+
+              should "contain a link to edit the user's password" do
+                host = ActionMailer::Base.default_url_options[:host]
+                regexp = %r{http://#{host}/users/#{@user.id}/password/edit\?email=#{@user.email.gsub("@", "%40")}&password=#{@user.encrypted_password}}
+                assert_match regexp, @email.body
+              end
+
+              should "be sent to the user" do
+                assert_equal [@user.email], @email.to
+              end
+
+              should "set its subject" do
+                assert_match /Change your password/, @email.subject
+              end
+            end
+            
+            context "A confirmation email" do
+              setup do
+                @user  = Factory(:registered_user)
+                @email = ClearanceMailer.create_confirmation @user
+              end
+
+              should "set its recipient to the given user" do
+                assert_equal @user.email, @email.to[0]
+              end
+
+              should "set its subject" do
+                assert_match /Account confirmation/, @email.subject
+              end
+
+              should "set its from address to DO_NOT_REPLY" do
+                assert_equal DO_NOT_REPLY, @email.from[0]
+              end
+
+              should "contain a link to confirm the user's account" do
+                host = ActionMailer::Base.default_url_options[:host]
+                regexp = %r{http://#{host}/users/#{@user.id}/confirmation/new\?salt=#{@user.salt}}
+                assert_match regexp, @email.body
+              end
+            end
+          
+          end
+        end
+
+      end
+    end  
+  end
+end