139 lines
4.0 KiB
Ruby
139 lines
4.0 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
# BigBlueButton open source conferencing system - http://www.bigbluebutton.org/.
|
|
#
|
|
# Copyright (c) 2018 BigBlueButton Inc. and by respective authors (see below).
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify it under the
|
|
# terms of the GNU Lesser General Public License as published by the Free Software
|
|
# Foundation; either version 3.0 of the License, or (at your option) any later
|
|
# version.
|
|
#
|
|
# BigBlueButton is distributed in the hope that it will be useful, but WITHOUT ANY
|
|
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
|
|
# PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU Lesser General Public License along
|
|
# with BigBlueButton; if not, see <http://www.gnu.org/licenses/>.
|
|
|
|
require "rails_helper"
|
|
|
|
def random_valid_user_params
|
|
pass = Faker::Internet.password(8)
|
|
{
|
|
user: {
|
|
name: Faker::Name.first_name,
|
|
email: Faker::Internet.email,
|
|
password: pass,
|
|
password_confirmation: pass,
|
|
accepted_terms: true,
|
|
email_verified: true,
|
|
},
|
|
}
|
|
end
|
|
|
|
describe PasswordResetsController, type: :controller do
|
|
describe "POST #create" do
|
|
context "allow mail notifications" do
|
|
before { allow(Rails.configuration).to receive(:enable_email_verification).and_return(true) }
|
|
|
|
it "redirects to root url if email is sent" do
|
|
user = create(:user)
|
|
|
|
params = {
|
|
password_reset: {
|
|
email: user.email,
|
|
},
|
|
}
|
|
|
|
post :create, params: params
|
|
expect(response).to redirect_to(root_path)
|
|
end
|
|
|
|
it "reloads the page if no email exists in the database" do
|
|
params = {
|
|
password_reset: {
|
|
email: nil,
|
|
},
|
|
}
|
|
|
|
post :create, params: params
|
|
expect(response).to redirect_to(new_password_reset_path)
|
|
end
|
|
end
|
|
|
|
context "does not allow mail notifications" do
|
|
before { allow(Rails.configuration).to receive(:enable_email_verification).and_return(false) }
|
|
|
|
it "renders a 404 page upon if email notifications are disabled" do
|
|
get :create
|
|
expect(response).to redirect_to("/404")
|
|
end
|
|
end
|
|
end
|
|
|
|
describe "PATCH #update" do
|
|
before { allow(Rails.configuration).to receive(:enable_email_verification).and_return(true) }
|
|
|
|
context "valid user" do
|
|
it "reloads page with notice if password is empty" do
|
|
token = "reset_token"
|
|
|
|
controller.stub(:valid_user).and_return(nil)
|
|
controller.stub(:check_expiration).and_return(nil)
|
|
|
|
params = {
|
|
id: token,
|
|
user: {
|
|
password: nil,
|
|
},
|
|
}
|
|
|
|
patch :update, params: params
|
|
expect(response).to render_template(:edit)
|
|
end
|
|
|
|
it "reloads page with notice if password is confirmation doesn't match" do
|
|
token = "reset_token"
|
|
|
|
controller.stub(:valid_user).and_return(nil)
|
|
controller.stub(:check_expiration).and_return(nil)
|
|
|
|
params = {
|
|
id: token,
|
|
user: {
|
|
password: :password,
|
|
password_confirmation: nil,
|
|
},
|
|
}
|
|
|
|
patch :update, params: params
|
|
expect(response).to render_template(:edit)
|
|
end
|
|
|
|
it "updates attributes if the password update is a success" do
|
|
user = create(:user)
|
|
token = "reset_token"
|
|
|
|
cost = ActiveModel::SecurePassword.min_cost ? BCrypt::Engine::MIN_COST : BCrypt::Engine.cost
|
|
user.reset_digest = BCrypt::Password.create(token, cost: cost)
|
|
|
|
controller.stub(:valid_user).and_return(nil)
|
|
controller.stub(:check_expiration).and_return(nil)
|
|
controller.stub(:current_user).and_return(user)
|
|
|
|
params = {
|
|
id: token,
|
|
user: {
|
|
password: :password,
|
|
password_confirmation: :password,
|
|
},
|
|
}
|
|
|
|
patch :update, params: params
|
|
expect(response).to redirect_to(root_path)
|
|
end
|
|
end
|
|
end
|
|
end
|