pyramid-fullauth 0.4.0__py3.4.egg

tests/unit/test_validators.py

@@ -0,0 +1,44 @@
+"""Test various validators present on User class."""
+import pytest
+import transaction
+from pyramid.compat import text_type
+
+from pyramid_fullauth.models import User
+from pyramid_fullauth.exceptions import EmptyError, EmailValidationError
+
+
+@pytest.mark.parametrize('email', [
+    text_type('very.common@example.com'),
+    text_type('a.little.lengthy.but.fine@dept.example.com'),
+    text_type('disposable.style.email.with+symbol@example.com'),
+    text_type('"very.unusual.@.unusual.com"@example.com'),
+    text_type('!#$%&\'*+-/=?^_`{}|~@example.org'),
+    text_type('""@example.org'),
+    text_type('"much.more unusual"@example.com'),
+    text_type('"()<>[]:,;@\\\"!#$%&\'*+-/=?^_`{}| ~  ? ^_`{}|~.a"@example.org'),
+])
+def test_email_valid_formats(db_session, user, email):
+    """Check all valid formats of Email (RFC 5321) can be set by user."""
+    user = db_session.merge(user)
+
+    user.email = email
+    transaction.commit()
+
+    user = db_session.query(User).filter(
+        User.username == text_type('u1')).one()
+    assert user.email == email
+
+
+def test_email_empty(user):
+    """Test reaction of email validator for empty email."""
+    with pytest.raises(EmptyError):
+        user.email = text_type('')
+
+
+def test_email_invalid_formats(db_session, user, invalid_email):
+    """Check all invalid formats of Email (RFC 5321) can not be set by user."""
+    user = db_session.merge(user)
+
+    with pytest.raises(EmailValidationError):
+        user.email = invalid_email
+        transaction.commit()

tests/views/__init__.py

@@ -0,0 +1 @@
+"""Makes easier keeping some tests config with tests."""

tests/views/conftest.py

@@ -0,0 +1,20 @@
+"""General view fixtures."""
+import pytest
+import transaction
+
+from pyramid_fullauth.models import AuthenticationProvider
+
+
+def mock_translate(msg, *args, **kwargs):
+    """Mock translate function (simply returns message)."""
+    return msg
+
+
+@pytest.fixture
+def facebook_user(active_user, db_session):
+    """Facebook user."""
+    active_user = db_session.merge(active_user)
+    active_user.providers.append(
+        AuthenticationProvider(provider='facebook', provider_id='1234'))
+    transaction.commit()
+    return db_session.merge(active_user)

tests/views/test_activation.py

@@ -0,0 +1,86 @@
+# -*- coding: utf-8 -*-
+"""Account activation related tests."""
+try:
+    from urllib import quote
+    # python3
+except ImportError:
+    from urllib.parse import quote
+
+import transaction
+
+from pyramid_fullauth.models import User
+from tests.tools import authenticate, is_user_logged
+
+
+def test_account_activation(user, db_session, default_app):
+    """Activate user."""
+    user = db_session.merge(user)
+
+    default_app.get('/register/activate/' + user.activate_key)
+    transaction.commit()
+    user = db_session.query(User).filter(User.email == user.email).one()
+
+    assert not user.activate_key
+    assert user.is_active
+    assert user.activated_at
+
+    authenticate(default_app)
+    assert is_user_logged(default_app) is True
+
+
+def test_account_activation_wrong_key(user, db_session, default_app):
+    """Activate user with wrong key."""
+    user = db_session.merge(user)
+    activate_key = user.activate_key
+    res = default_app.get('/register/activate/' + activate_key[:-5], status=200)
+    transaction.commit()
+
+    assert 'Invalid activation code' in res.body.decode('unicode_escape')
+
+    user = db_session.query(User).filter(User.email == user.email).one()
+    assert user.activate_key == activate_key
+    assert user.activate_key is not None
+    assert not user.activated_at
+    # User should not have active account at this moment
+    assert not user.is_active
+
+
+def test_account_activation_key_with_trash_chars(user, db_session, default_app):
+    """Strange characters in activation key."""
+    user = db_session.merge(user)
+
+    activate_key = user.activate_key
+    res = default_app.get(
+        '/register/activate/' + quote(
+            # ąśðłĸ곶→łęóħó³→←śðđ[]}³½ĸżćŋðń→↓ŧ¶ħ→ĸł¼²³↓←ħ@ĸđśðĸ@ł¼ęłśħđó[³²½łðśđħ - already decoded
+            '\xc4\x85\xc5\x9b\xc3\xb0\xc5\x82\xc4\xb8\xc4\x99\xc5\x82\xc2\xb6\xe2\x86\x92\xc5\x82\xc4\x99\xc3\xb3\xc4\xa7\xc3\xb3\xc2\xb3\xe2\x86\x92\xe2\x86\x90\xc5\x9b\xc3\xb0\xc4\x91[]}\xc2\xb3\xc2\xbd\xc4\xb8\xc5\xbc\xc4\x87\xc5\x8b\xc3\xb0\xc5\x84\xe2\x86\x92\xe2\x86\x93\xc5\xa7\xc2\xb6\xc4\xa7\xe2\x86\x92\xc4\xb8\xc5\x82\xc2\xbc\xc2\xb2\xc2\xb3\xe2\x86\x93\xe2\x86\x90\xc4\xa7@\xc4\xb8\xc4\x91\xc5\x9b\xc3\xb0\xc4\xb8@\xc5\x82\xc2\xbc\xc4\x99\xc5\x82\xc5\x9b\xc4\xa7\xc4\x91\xc3\xb3[\xc2\xb3\xc2\xb2\xc2\xbd\xc5\x82\xc3\xb0\xc5\x9b\xc4\x91\xc4\xa7'
+        ),
+        status=200
+    )
+    transaction.commit()
+
+    assert 'Invalid activation code' in res.body.decode('unicode_escape')
+    user = db_session.query(User).filter(User.email == user.email).one()
+
+    assert user.activate_key == activate_key
+    assert user.activate_key is not None
+    assert not user.activated_at
+    # User should not have active account at this moment
+    assert not user.is_active
+
+
+def test_account_activation_twice(user, db_session, default_app):
+    """Click activation link twice."""
+    user = db_session.merge(user)
+
+    activate_key = user.activate_key
+    res = default_app.get('/register/activate/' + activate_key)
+    transaction.commit()
+    user = db_session.query(User).filter(User.email == user.email).one()
+
+    assert not user.activate_key
+    assert user.is_active
+    assert user.activated_at
+
+    res = default_app.get('/register/activate/' + activate_key, status=200)
+    assert 'Invalid activation code' in res.body.decode('unicode_escape')

tests/views/test_email.py

@@ -0,0 +1,175 @@
+"""Email change views."""
+import pytest
+import transaction
+
+from sqlalchemy.orm.exc import NoResultFound
+from pyramid.compat import text_type
+from pyramid_fullauth.models import User
+
+from tests.tools import authenticate, DEFAULT_USER
+
+
+def test_email_view_not_logged(default_app):
+    """Try to access email change view anonymously."""
+    app = default_app
+    res = app.get('/email/change')
+    assert res.status_code == 302
+    assert res.location == 'http://localhost/login?after=%2Femail%2Fchange'
+
+
+def test_email_view_logged(db_session, active_user, default_app):
+    """Simple get for change email view."""
+    app = default_app
+    db_session.close()
+    # Session are de-syncronised
+
+    # login user
+    authenticate(app)
+
+    res = app.get('/email/change')
+    assert res.status_code == 200
+    assert res.form
+    assert res.form['email']
+
+
+def test_email_valid(db_session, active_user, default_app):
+    """Change email with valid data."""
+    app = default_app
+
+    authenticate(app)
+    email = DEFAULT_USER['email']
+    new_email = 'email@email.com'
+
+    user = db_session.query(User).filter(User.email == email).one()
+
+    res = app.get('/email/change')
+    form = res.form
+    form['email'] = new_email
+    res = form.submit()
+    assert res
+
+    transaction.commit()
+
+    user = db_session.query(User).filter(User.email == email).one()
+    assert user.new_email == new_email
+    assert user.email == email
+    assert user.email_change_key is not None
+
+
+def test_email_valid_xhr(db_session, active_user, default_app):
+    """Change email with valid data."""
+    app = default_app
+
+    authenticate(app)
+    email = DEFAULT_USER['email']
+    new_email = 'email@email.com'
+
+    user = db_session.query(User).filter(User.email == email).one()
+
+    res = app.get('/email/change')
+    res = app.post(
+        '/email/change',
+        {
+            'csrf_token': res.form['csrf_token'].value,
+            'email': new_email},
+        xhr=True)
+    assert res.json['status'] is True
+
+    transaction.commit()
+
+    user = db_session.query(User).filter(User.email == email).one()
+    assert user.new_email == new_email
+    assert user.email == email
+    assert user.email_change_key is not None
+
+
+def test_wrong_email(db_session, active_user, default_app, invalid_email):
+    """Change email with incorrect email."""
+    app = default_app
+    # login user
+    authenticate(app)
+
+    res = app.get('/email/change')
+    form = res.form
+    form['email'] = invalid_email
+    res = form.submit()
+    assert 'Error! Incorrect e-mail format' in res
+
+
+def test_empty_email(db_session, active_user, default_app):
+    """Try to change email with empty value."""
+    app = default_app
+    # login user
+    authenticate(app)
+
+    res = app.get('/email/change')
+    form = res.form
+    form['email'] = ''
+    res = form.submit()
+    assert 'Error! E-mail is empty' in res
+
+
+def test_existing_email(db_session, active_user, default_app):
+    """Try to change email to existing one email."""
+    # add other user
+    existing_email = text_type("existing@email.eg")
+    db_session.add(
+        User(
+            email=existing_email,
+            password=text_type("somepassword"),
+            address_ip=DEFAULT_USER['address_ip']
+        ))
+    transaction.commit()
+    # login user
+    authenticate(default_app)
+
+    # submit request!
+    res = default_app.get('/email/change')
+    form = res.form
+    form['email'] = existing_email
+    res = form.submit()
+    assert 'Error! User with this email exists' in res
+
+
+def test_email_proceed(db_session, active_user, default_app):
+    """Confirm email change view."""
+    app = default_app
+    # login user
+    authenticate(app)
+
+    email = DEFAULT_USER['email']
+    user = db_session.query(User).filter(User.email == email).one()
+
+    new_email = text_type('email2@email.com')
+    user.set_new_email(new_email)
+    transaction.commit()
+
+    user = db_session.merge(user)
+    res = app.get('/email/change/' + user.email_change_key)
+    assert res.status_code == 303
+
+    with pytest.raises(NoResultFound):
+        # there is no user with old email
+        db_session.query(User).filter(User.email == email).one()
+
+    user = db_session.query(User).filter(User.email == new_email).one()
+    assert not user.email_change_key
+
+
+def test_email_proceed_wrong_key(db_session, active_user, default_app):
+    """Try to confirm email change view with wrong key."""
+    app = default_app
+    # login user
+    authenticate(app)
+
+    email = DEFAULT_USER['email']
+    user = db_session.query(User).filter(User.email == email).one()
+
+    new_email = text_type('email2@email.com')
+    user.set_new_email(new_email)
+    transaction.commit()
+
+    user = db_session.merge(user)
+    res = app.get(
+        '/email/change/' + user.email_change_key + 'randomchars', status=404)
+    assert res.status_code == 404