require 'test_helper' class RegistrationTest < ActionController::IntegrationTest test 'a guest admin should be able to sign in successfully' do get new_admin_session_path click_link 'Sign up' assert_template 'registrations/new' fill_in 'email', :with => 'new_user@test.com' fill_in 'password', :with => 'new_user123' fill_in 'password confirmation', :with => 'new_user123' click_button 'Sign up' assert_contain 'Welcome! You have signed up successfully.' assert warden.authenticated?(:admin) assert_current_url "/admin_area/home" admin = Admin.last :order => "id" assert_equal admin.email, 'new_user@test.com' end test 'a guest admin should be able to sign in and be redirected to a custom location' do Devise::RegistrationsController.any_instance.stubs(:after_sign_up_path_for).returns("/?custom=1") get new_admin_session_path click_link 'Sign up' fill_in 'email', :with => 'new_user@test.com' fill_in 'password', :with => 'new_user123' fill_in 'password confirmation', :with => 'new_user123' click_button 'Sign up' assert_contain 'Welcome! You have signed up successfully.' assert warden.authenticated?(:admin) assert_current_url "/?custom=1" end test 'a guest user should be able to sign up successfully and be blocked by confirmation' do get new_user_registration_path fill_in 'email', :with => 'new_user@test.com' fill_in 'password', :with => 'new_user123' fill_in 'password confirmation', :with => 'new_user123' click_button 'Sign up' assert_contain 'You have signed up successfully. However, we could not sign you in because your account is unconfirmed.' assert_not_contain 'You have to confirm your account before continuing' assert_current_url "/" assert_not warden.authenticated?(:user) user = User.last :order => "id" assert_equal user.email, 'new_user@test.com' assert_not user.confirmed? end test 'a guest user should be blocked by confirmation and redirected to a custom path' do Devise::RegistrationsController.any_instance.stubs(:after_inactive_sign_up_path_for).returns("/?custom=1") get new_user_registration_path fill_in 'email', :with => 'new_user@test.com' fill_in 'password', :with => 'new_user123' fill_in 'password confirmation', :with => 'new_user123' click_button 'Sign up' assert_current_url "/?custom=1" assert_not warden.authenticated?(:user) end test 'a guest user cannot sign up with invalid information' do # Dirty tracking behavior prevents email validations from being applied: # https://github.com/mongoid/mongoid/issues/756 (pending "Fails on Mongoid < 2.1"; break) if defined?(Mongoid) && Mongoid::VERSION.to_f < 2.1 get new_user_registration_path fill_in 'email', :with => 'invalid_email' fill_in 'password', :with => 'new_user123' fill_in 'password confirmation', :with => 'new_user321' click_button 'Sign up' assert_template 'registrations/new' assert_have_selector '#error_explanation' assert_contain "Email is invalid" assert_contain "Password doesn't match confirmation" assert_contain "2 errors prohibited" assert_nil User.first assert_not warden.authenticated?(:user) end test 'a guest should not sign up with email/password that already exists' do # Dirty tracking behavior prevents email validations from being applied: # https://github.com/mongoid/mongoid/issues/756 (pending "Fails on Mongoid < 2.1"; break) if defined?(Mongoid) && Mongoid::VERSION.to_f < 2.1 user = create_user get new_user_registration_path fill_in 'email', :with => 'user@test.com' fill_in 'password', :with => '123456' fill_in 'password confirmation', :with => '123456' click_button 'Sign up' assert_current_url '/users' assert_contain(/Email.*already.*taken/) assert_not warden.authenticated?(:user) end test 'a guest should not be able to change account' do get edit_user_registration_path assert_redirected_to new_user_session_path follow_redirect! assert_contain 'You need to sign in or sign up before continuing.' end test 'a signed in user should not be able to access sign up' do sign_in_as_user get new_user_registration_path assert_redirected_to root_path end test 'a signed in user should be able to edit his account' do sign_in_as_user get edit_user_registration_path fill_in 'email', :with => 'user.new@example.com' fill_in 'current password', :with => '123456' click_button 'Update' assert_current_url '/' assert_contain 'You updated your account successfully.' assert_equal "user.new@example.com", User.first.email end test 'a signed in user should still be able to use the website after changing his password' do sign_in_as_user get edit_user_registration_path fill_in 'password', :with => '12345678' fill_in 'password confirmation', :with => '12345678' fill_in 'current password', :with => '123456' click_button 'Update' assert_contain 'You updated your account successfully.' get users_path assert warden.authenticated?(:user) end test 'a signed in user should not change his current user with invalid password' do sign_in_as_user get edit_user_registration_path fill_in 'email', :with => 'user.new@example.com' fill_in 'current password', :with => 'invalid' click_button 'Update' assert_template 'registrations/edit' assert_contain 'user@test.com' assert_have_selector 'form input[value="user.new@example.com"]' assert_equal "user@test.com", User.first.email end test 'a signed in user should be able to edit his password' do sign_in_as_user get edit_user_registration_path fill_in 'password', :with => 'pas123' fill_in 'password confirmation', :with => 'pas123' fill_in 'current password', :with => '123456' click_button 'Update' assert_current_url '/' assert_contain 'You updated your account successfully.' assert User.first.valid_password?('pas123') end test 'a signed in user should not be able to edit his password with invalid confirmation' do sign_in_as_user get edit_user_registration_path fill_in 'password', :with => 'pas123' fill_in 'password confirmation', :with => '' fill_in 'current password', :with => '123456' click_button 'Update' assert_contain "Password doesn't match confirmation" assert_not User.first.valid_password?('pas123') end test 'a signed in user should be able to cancel his account' do sign_in_as_user get edit_user_registration_path click_link "Cancel my account", :method => :delete assert_contain "Bye! Your account was successfully cancelled. We hope to see you again soon." assert User.all.empty? end test 'a user should be able to cancel sign up by deleting data in the session' do get "/set" assert_equal "something", @request.session["devise.foo_bar"] get "/users/sign_up" assert_equal "something", @request.session["devise.foo_bar"] get "/users/cancel" assert_nil @request.session["devise.foo_bar"] assert_redirected_to new_user_registration_path end test 'a user with XML sign up stub' do get new_user_registration_path(:format => 'xml') assert_response :success assert_match %(\n), response.body assert_no_match(/ 'json') assert_response :success assert_match %({"user":), response.body assert_no_match(/"confirmation_token"/, response.body) end test 'an admin sign up with valid information in XML format should return valid response' do post admin_registration_path(:format => 'xml'), :admin => { :email => 'new_user@test.com', :password => 'new_user123', :password_confirmation => 'new_user123' } assert_response :success assert response.body.include? %(\n) admin = Admin.last :order => "id" assert_equal admin.email, 'new_user@test.com' end test 'a user sign up with valid information in XML format should return valid response' do post user_registration_path(:format => 'xml'), :user => { :email => 'new_user@test.com', :password => 'new_user123', :password_confirmation => 'new_user123' } assert_response :success assert response.body.include? %(\n) user = User.last :order => "id" assert_equal user.email, 'new_user@test.com' end test 'a user sign up with invalid information in XML format should return invalid response' do post user_registration_path(:format => 'xml'), :user => { :email => 'new_user@test.com', :password => 'new_user123', :password_confirmation => 'invalid' } assert_response :unprocessable_entity assert response.body.include? %(\n) end test 'a user update information with valid data in XML format should return valid response' do user = sign_in_as_user put user_registration_path(:format => 'xml'), :user => { :current_password => '123456', :email => 'user.new@test.com' } assert_response :success assert_equal user.reload.email, 'user.new@test.com' end test 'a user update information with invalid data in XML format should return invalid response' do user = sign_in_as_user put user_registration_path(:format => 'xml'), :user => { :current_password => 'invalid', :email => 'user.new@test.com' } assert_response :unprocessable_entity assert_equal user.reload.email, 'user@test.com' end test 'a user cancel his account in XML format should return valid response' do user = sign_in_as_user delete user_registration_path(:format => 'xml') assert_response :success assert_equal User.count, 0 end end