test/models/password_test.rb in quo_vadis-2.1.0 vs test/models/password_test.rb in quo_vadis-2.1.1

@@ -118,9 +118,22 @@
     assert pw.reset('xxxxxxxxxxxx', 'xxxxxxxxxxxx')
     assert pw.authenticate 'xxxxxxxxxxxx'
   end
 
 
+  test 'passwords can only be updated via #change and #reset' do
+    user = User.create! name: 'bob', email: '[e-mail]', password: VALID_PASSWORD
+    pw = user.qv_account.password
+
+    refute pw.update password: 'secretsecret'
+    assert_equal ["must be updated via #change or #reset"], pw.errors[:password]
+
+    pw.password = VALID_PASSWORD
+    refute pw.save
+    assert_equal ["must be updated via #change or #reset"], pw.errors[:password]
+  end
+
+
   test 'cascade destroy' do
     user = User.create! name: 'bob', email: '[e-mail]', password: VALID_PASSWORD
     assert user.qv_account.persisted?
     assert user.qv_account.password.persisted?