railsware-authlogic 2.1.6.1

data/test/acts_as_authentic_test/password_test.rb

@@ -0,0 +1,236 @@
+require 'test_helper'
+
+module ActsAsAuthenticTest
+  class PasswordTest < ActiveSupport::TestCase
+    def test_crypted_password_field_config
+      assert_equal :crypted_password, User.crypted_password_field
+      assert_equal :crypted_password, Employee.crypted_password_field
+      
+      User.crypted_password_field = :nope
+      assert_equal :nope, User.crypted_password_field
+      User.crypted_password_field :crypted_password
+      assert_equal :crypted_password, User.crypted_password_field
+    end
+    
+    def test_password_salt_field_config
+      assert_equal :password_salt, User.password_salt_field
+      assert_equal :password_salt, Employee.password_salt_field
+      
+      User.password_salt_field = :nope
+      assert_equal :nope, User.password_salt_field
+      User.password_salt_field :password_salt
+      assert_equal :password_salt, User.password_salt_field
+    end
+    
+    def test_ignore_blank_passwords_config
+      assert User.ignore_blank_passwords
+      assert Employee.ignore_blank_passwords
+      
+      User.ignore_blank_passwords = false
+      assert !User.ignore_blank_passwords
+      User.ignore_blank_passwords true
+      assert User.ignore_blank_passwords
+    end
+    
+    def test_check_passwords_against_database
+      assert User.check_passwords_against_database
+      User.check_passwords_against_database = false
+      assert !User.check_passwords_against_database
+      User.check_passwords_against_database true
+      assert User.check_passwords_against_database
+    end
+    
+    def test_validate_password_field_config
+      assert User.validate_password_field
+      assert Employee.validate_password_field
+      
+      User.validate_password_field = false
+      assert !User.validate_password_field
+      User.validate_password_field true
+      assert User.validate_password_field
+    end
+    
+    def test_validates_length_of_password_field_options_config
+      default = {:minimum => 4, :if => :require_password?}
+      assert_equal default, User.validates_length_of_password_field_options
+      assert_equal default, Employee.validates_length_of_password_field_options
+      
+      User.validates_length_of_password_field_options = {:yes => "no"}
+      assert_equal({:yes => "no"}, User.validates_length_of_password_field_options)
+      User.validates_length_of_password_field_options default
+      assert_equal default, User.validates_length_of_password_field_options
+    end
+    
+    def test_validates_confirmation_of_password_field_options_config
+      default = {:if => :require_password?}
+      assert_equal default, User.validates_confirmation_of_password_field_options
+      assert_equal default, Employee.validates_confirmation_of_password_field_options
+      
+      User.validates_confirmation_of_password_field_options = {:yes => "no"}
+      assert_equal({:yes => "no"}, User.validates_confirmation_of_password_field_options)
+      User.validates_confirmation_of_password_field_options default
+      assert_equal default, User.validates_confirmation_of_password_field_options
+    end
+    
+    def test_validates_length_of_password_confirmation_field_options_config
+      default = {:minimum => 4, :if => :require_password?}
+      assert_equal default, User.validates_length_of_password_confirmation_field_options
+      assert_equal default, Employee.validates_length_of_password_confirmation_field_options
+      
+      User.validates_length_of_password_confirmation_field_options = {:yes => "no"}
+      assert_equal({:yes => "no"}, User.validates_length_of_password_confirmation_field_options)
+      User.validates_length_of_password_confirmation_field_options default
+      assert_equal default, User.validates_length_of_password_confirmation_field_options
+    end
+    
+    def test_crypto_provider_config
+      assert_equal Authlogic::CryptoProviders::Sha512, User.crypto_provider
+      assert_equal Authlogic::CryptoProviders::AES256, Employee.crypto_provider
+      
+      User.crypto_provider = Authlogic::CryptoProviders::BCrypt
+      assert_equal Authlogic::CryptoProviders::BCrypt, User.crypto_provider
+      User.crypto_provider Authlogic::CryptoProviders::Sha512
+      assert_equal Authlogic::CryptoProviders::Sha512, User.crypto_provider
+    end
+    
+    def test_transition_from_crypto_providers_config
+      assert_equal [], User.transition_from_crypto_providers
+      assert_equal [], Employee.transition_from_crypto_providers
+      
+      User.transition_from_crypto_providers = [Authlogic::CryptoProviders::BCrypt]
+      assert_equal [Authlogic::CryptoProviders::BCrypt], User.transition_from_crypto_providers
+      User.transition_from_crypto_providers []
+      assert_equal [], User.transition_from_crypto_providers
+    end
+    
+    def test_validates_length_of_password
+      u = User.new
+      u.password_confirmation = "test2"
+      assert !u.valid?
+      assert u.errors[:password].size > 0
+      
+      u.password = "test"
+      assert !u.valid?
+      assert u.errors[:password_confirmation].size == 0
+    end
+    
+    def test_validates_confirmation_of_password
+      u = User.new
+      u.password = "test"
+      u.password_confirmation = "test2"
+      assert !u.valid?
+      assert u.errors[:password].size > 0
+      
+      u.password_confirmation = "test"
+      assert !u.valid?
+      assert u.errors[:password].size == 0
+    end
+    
+    def test_validates_length_of_password_confirmation
+      u = User.new
+      
+      u.password = "test"
+      u.password_confirmation = ""
+      assert !u.valid?
+      assert u.errors[:password_confirmation].size > 0
+      
+      u.password_confirmation = "test"
+      assert !u.valid?
+      assert u.errors[:password_confirmation].size == 0
+      
+      ben = users(:ben)
+      assert ben.valid?
+      
+      ben.password = "newpass"
+      assert !ben.valid?
+      assert ben.errors[:password_confirmation].size > 0
+      
+      ben.password_confirmation = "newpass"
+      assert ben.valid?
+    end
+    
+    def test_password
+      u = User.new
+      old_password_salt = u.password_salt
+      old_crypted_password = u.crypted_password
+      u.password = "test"
+      assert_not_equal old_password_salt, u.password_salt
+      assert_not_equal old_crypted_password, u.crypted_password
+    end
+    
+    def test_transitioning_password
+      ben = users(:ben)
+      transition_password_to(Authlogic::CryptoProviders::BCrypt, ben)
+      transition_password_to(Authlogic::CryptoProviders::Sha1, ben, [Authlogic::CryptoProviders::Sha512, Authlogic::CryptoProviders::BCrypt])
+      transition_password_to(Authlogic::CryptoProviders::Sha512, ben, [Authlogic::CryptoProviders::Sha1, Authlogic::CryptoProviders::BCrypt])
+    end
+    
+    def test_checks_password_against_database
+      ben = users(:ben)
+      ben.password = "new pass"
+      assert !ben.valid_password?("new pass")
+      assert ben.valid_password?("benrocks")
+    end
+    
+    def test_checks_password_against_database_and_always_fails_on_new_records
+      user = User.new
+      user.password = "new pass"
+      assert !user.valid_password?("new pass")
+    end
+    
+    def test_checks_password_against_object
+      ben = users(:ben)
+      ben.password = "new pass"
+      assert ben.valid_password?("new pass", false)
+      assert !ben.valid_password?("benrocks", false)
+    end
+    
+    def test_reset_password
+      ben = users(:ben)
+      old_crypted_password = ben.crypted_password
+      old_password_salt = ben.password_salt
+      
+      # soft reset
+      ben.reset_password
+      assert_not_equal old_crypted_password, ben.crypted_password
+      assert_not_equal old_password_salt, ben.password_salt
+      
+      # make sure it didn't go into the db
+      ben.reload
+      assert_equal old_crypted_password, ben.crypted_password
+      assert_equal old_password_salt, ben.password_salt
+      
+      # hard reset
+      assert ben.reset_password!
+      assert_not_equal old_crypted_password, ben.crypted_password
+      assert_not_equal old_password_salt, ben.password_salt
+      
+      # make sure it did go into the db
+      ben.reload
+      assert_not_equal old_crypted_password, ben.crypted_password
+      assert_not_equal old_password_salt, ben.password_salt
+    end
+    
+    private
+      def transition_password_to(crypto_provider, records, from_crypto_providers = Authlogic::CryptoProviders::Sha512)
+        records = [records] unless records.is_a?(Array)
+        User.acts_as_authentic do |c|
+          c.crypto_provider = crypto_provider
+          c.transition_from_crypto_providers = from_crypto_providers
+        end
+        records.each do |record|
+          old_hash = record.crypted_password
+          old_persistence_token = record.persistence_token
+          assert record.valid_password?(password_for(record))
+          assert_not_equal old_hash.to_s, record.crypted_password.to_s
+          assert_not_equal old_persistence_token.to_s, record.persistence_token.to_s
+          
+          old_hash = record.crypted_password
+          old_persistence_token = record.persistence_token
+          assert record.valid_password?(password_for(record))
+          assert_equal old_hash.to_s, record.crypted_password.to_s
+          assert_equal old_persistence_token.to_s, record.persistence_token.to_s
+        end
+      end
+  end
+end

data/test/acts_as_authentic_test/perishable_token_test.rb

@@ -0,0 +1,90 @@
+require 'test_helper'
+
+module ActsAsAuthenticTest
+  class PerishableTokenTest < ActiveSupport::TestCase
+    def test_perishable_token_valid_for_config
+      assert_equal 10.minutes.to_i, User.perishable_token_valid_for
+      assert_equal 10.minutes.to_i, Employee.perishable_token_valid_for
+      
+      User.perishable_token_valid_for = 1.hour
+      assert_equal 1.hour.to_i, User.perishable_token_valid_for
+      User.perishable_token_valid_for 10.minutes
+      assert_equal 10.minutes.to_i, User.perishable_token_valid_for
+    end
+    
+    def test_disable_perishable_token_maintenance_config
+      assert !User.disable_perishable_token_maintenance
+      assert !Employee.disable_perishable_token_maintenance
+      
+      User.disable_perishable_token_maintenance = true
+      assert User.disable_perishable_token_maintenance
+      User.disable_perishable_token_maintenance false
+      assert !User.disable_perishable_token_maintenance
+    end
+    
+    def test_validates_uniqueness_of_perishable_token
+      u = User.new
+      u.perishable_token = users(:ben).perishable_token
+      assert !u.valid?
+      assert u.errors[:perishable_token].size > 0
+    end
+    
+    def test_before_save_reset_perishable_token
+      ben = users(:ben)
+      old_perishable_token = ben.perishable_token
+      assert ben.save
+      assert_not_equal old_perishable_token, ben.perishable_token
+    end
+    
+    def test_reset_perishable_token
+      ben = users(:ben)
+      old_perishable_token = ben.perishable_token
+      
+      assert ben.reset_perishable_token
+      assert_not_equal old_perishable_token, ben.perishable_token
+      
+      ben.reload
+      assert_equal old_perishable_token, ben.perishable_token
+      
+      assert ben.reset_perishable_token!
+      assert_not_equal old_perishable_token, ben.perishable_token
+      
+      ben.reload
+      assert_not_equal old_perishable_token, ben.perishable_token
+    end
+    
+    def test_find_using_perishable_token
+      ben = users(:ben)
+      assert_equal ben, User.find_using_perishable_token(ben.perishable_token)
+    end
+    
+    def test_find_using_perishable_token_when_perished
+      ben = users(:ben)
+      ActiveRecord::Base.connection.execute("UPDATE users set updated_at = '#{1.week.ago.to_s(:db)}' where id = #{ben.id}")
+      assert_nil User.find_using_perishable_token(ben.perishable_token)
+    end
+    
+    def test_find_using_perishable_token_when_perished
+      User.perishable_token_valid_for = 1.minute
+      ben = users(:ben)
+      ActiveRecord::Base.connection.execute("UPDATE users set updated_at = '#{2.minutes.ago.to_s(:db)}' where id = #{ben.id}")
+      assert_nil User.find_using_perishable_token(ben.perishable_token)
+      User.perishable_token_valid_for = 10.minutes
+    end
+    
+    def test_find_using_perishable_token_when_passing_threshold
+      User.perishable_token_valid_for = 1.minute
+      ben = users(:ben)
+      ActiveRecord::Base.connection.execute("UPDATE users set updated_at = '#{10.minutes.ago.to_s(:db)}' where id = #{ben.id}")
+      assert_nil User.find_using_perishable_token(ben.perishable_token, 5.minutes)
+      assert_equal ben, User.find_using_perishable_token(ben.perishable_token, 20.minutes)
+      User.perishable_token_valid_for = 10.minutes
+    end
+
+    def test_find_perishable_token_with_bang
+      assert_raises ActiveRecord::RecordNotFound do
+        User.find_using_perishable_token!('some_bad_value')
+      end
+    end
+  end
+end

data/test/acts_as_authentic_test/persistence_token_test.rb

@@ -0,0 +1,55 @@
+require 'test_helper'
+
+module ActsAsAuthenticTest
+  class PersistenceTokenTest < ActiveSupport::TestCase
+    def test_after_password_set_reset_persistence_token
+      ben = users(:ben)
+      old_persistence_token = ben.persistence_token
+      ben.password = "newpass"
+      assert_not_equal old_persistence_token, ben.persistence_token
+    end
+    
+    def test_after_password_verification_reset_persistence_token
+      ben = users(:ben)
+      old_persistence_token = ben.persistence_token
+      assert ben.valid_password?(password_for(ben))
+      assert_equal old_persistence_token, ben.persistence_token
+      
+      # only update it if it is nil
+      assert ben.update_attribute(:persistence_token, nil)
+      assert ben.valid_password?(password_for(ben))
+      assert_not_equal old_persistence_token, ben.persistence_token
+    end
+    
+    def test_before_validate_reset_persistence_token
+      u = User.new
+      assert !u.valid?
+      assert_not_nil u.persistence_token
+    end
+    
+    def test_forget_all
+      http_basic_auth_for(users(:ben)) { UserSession.find }
+      http_basic_auth_for(users(:zack)) { UserSession.find(:ziggity_zack) }
+      assert UserSession.find
+      assert UserSession.find(:ziggity_zack)
+      User.forget_all
+      assert !UserSession.find
+      assert !UserSession.find(:ziggity_zack)
+    end
+    
+    def test_forget
+      ben = users(:ben)
+      zack = users(:zack)
+      http_basic_auth_for(ben) { UserSession.find }
+      http_basic_auth_for(zack) { UserSession.find(:ziggity_zack) }
+
+      assert ben.reload.logged_in?
+      assert zack.reload.logged_in?
+
+      ben.forget!
+
+      assert !UserSession.find
+      assert UserSession.find(:ziggity_zack)
+    end
+  end
+end

data/test/acts_as_authentic_test/restful_authentication_test.rb

@@ -0,0 +1,40 @@
+require 'test_helper'
+
+module ActsAsAuthenticTest
+  class RestfulAuthenticationTest < ActiveSupport::TestCase
+    def test_act_like_restful_authentication_config
+      assert !User.act_like_restful_authentication
+      assert !Employee.act_like_restful_authentication
+  
+      User.act_like_restful_authentication = true
+      assert User.act_like_restful_authentication
+      assert_equal Authlogic::CryptoProviders::Sha1, User.crypto_provider
+      assert defined?(::REST_AUTH_SITE_KEY)
+      assert_equal '', ::REST_AUTH_SITE_KEY
+      assert_equal 1, Authlogic::CryptoProviders::Sha1.stretches
+
+      User.act_like_restful_authentication false
+      assert !User.act_like_restful_authentication
+  
+      User.crypto_provider = Authlogic::CryptoProviders::Sha512
+      User.transition_from_crypto_providers = []
+    end
+
+    def test_transition_from_restful_authentication_config
+      assert !User.transition_from_restful_authentication
+      assert !Employee.transition_from_restful_authentication
+      
+      User.transition_from_restful_authentication = true
+      assert User.transition_from_restful_authentication
+      assert defined?(::REST_AUTH_SITE_KEY)
+      assert_equal '', ::REST_AUTH_SITE_KEY
+      assert_equal 1, Authlogic::CryptoProviders::Sha1.stretches
+  
+      User.transition_from_restful_authentication false
+      assert !User.transition_from_restful_authentication
+  
+      User.crypto_provider = Authlogic::CryptoProviders::Sha512
+      User.transition_from_crypto_providers = []
+    end
+  end
+end

data/test/acts_as_authentic_test/session_maintenance_test.rb

@@ -0,0 +1,84 @@
+require 'test_helper'
+
+module ActsAsAuthenticTest
+  class SessionMaintenanceTest < ActiveSupport::TestCase
+    def test_maintain_sessions_config
+      assert User.maintain_sessions
+      User.maintain_sessions = false
+      assert !User.maintain_sessions
+      User.maintain_sessions true
+      assert User.maintain_sessions
+    end
+    
+    def test_login_after_create
+      assert User.create(:login => "awesome", :password => "saweet", :password_confirmation => "saweet", :email => "awesome@awesome.com")
+      assert UserSession.find
+    end
+    
+    def test_updating_session_with_failed_magic_state
+      ben = users(:ben)
+      ben.confirmed = false
+      ben.password = "newpass"
+      ben.password_confirmation = "newpass"
+      assert ben.save
+    end
+
+    def test_update_session_after_password_modify
+      ben = users(:ben)
+      UserSession.create(ben)
+      old_session_key = controller.session["user_credentials"]
+      old_cookie_key = controller.cookies["user_credentials"]
+      ben.password = "newpass"
+      ben.password_confirmation = "newpass"
+      assert ben.save
+      assert controller.session["user_credentials"]
+      assert controller.cookies["user_credentials"]
+      assert_not_equal controller.session["user_credentials"], old_session_key
+      assert_not_equal controller.cookies["user_credentials"], old_cookie_key
+    end
+
+    def test_no_session_update_after_modify
+      ben = users(:ben)
+      UserSession.create(ben)
+      old_session_key = controller.session["user_credentials"]
+      old_cookie_key = controller.cookies["user_credentials"]
+      ben.first_name = "Ben"
+      assert ben.save
+      assert_equal controller.session["user_credentials"], old_session_key
+      assert_equal controller.cookies["user_credentials"], old_cookie_key
+    end
+    
+    def test_creating_other_user
+      ben = users(:ben)
+      UserSession.create(ben)
+      old_session_key = controller.session["user_credentials"]
+      old_cookie_key = controller.cookies["user_credentials"]
+      assert User.create(:login => "awesome", :password => "saweet", :password_confirmation => "saweet", :email => "awesome@saweet.com")
+      assert_equal controller.session["user_credentials"], old_session_key
+      assert_equal controller.cookies["user_credentials"], old_cookie_key
+    end
+
+    def test_updating_other_user
+      ben = users(:ben)
+      UserSession.create(ben)
+      old_session_key = controller.session["user_credentials"]
+      old_cookie_key = controller.cookies["user_credentials"]
+      zack = users(:zack)
+      zack.password = "newpass"
+      zack.password_confirmation = "newpass"
+      assert zack.save
+      assert_equal controller.session["user_credentials"], old_session_key
+      assert_equal controller.cookies["user_credentials"], old_cookie_key
+    end
+
+    def test_resetting_password_when_logged_out
+      ben = users(:ben)
+      assert !UserSession.find
+      ben.password = "newpass"
+      ben.password_confirmation = "newpass"
+      assert ben.save
+      assert UserSession.find
+      assert_equal ben, UserSession.find.record
+    end
+  end
+end