spec/mods/standard/sets/right/account_spec.rb in wagn-1.12.13 vs spec/mods/standard/sets/right/account_spec.rb in wagn-1.13.0.pre

@@ -1,6 +1,90 @@
 # -*- encoding : utf-8 -*-
-require 'wagn/spec_helper'
 
 describe Card::Set::Right::Account do
-  # SPECSTUB (low priority)
+  
+  describe '#create' do
+    context "valid user" do
+      #note - much of this is tested in account_request_spec
+      before do
+        Card::Auth.as_bot do
+          @user_card = Card.create! :name=>'TmpUser', :type_id=>Card::UserID, '+*account'=>{ 
+            '+*email'=>'[e-mail]', '+*password'=>'tmp_pass'
+          }
+        end
+      
+      end
+      
+      it 'should create an authenticable password' do
+        Card::Auth.password_authenticated?( @user_card.account, 'tmp_pass').should be_true
+      end
+    end
+    
+    it "should check accountability of 'accounted' card" do
+      @unaccountable = Card.create :name=>'BasicUnaccountable', '+*account'=>{ '+*email'=>'[e-mail]', '+*password'=>'tmp_pass' }
+      @unaccountable.errors['+*account'].first.should == 'not allowed on this card'
+    end
+    
+    it "should require email" do
+      @no_email = Card.create :name=>'TmpUser', :type_id=>Card::UserID, '+*account'=>{ '+*password'=>'tmp_pass' }
+      @no_email.errors['+*account'].first.should =~ /email required/
+    end
+    
+  end
+  
+  describe '#update_attributes' do
+    before :each do
+      @user_card = Card::Auth[ '[e-mail]' ]
+    end
+
+    it 'should reset password' do
+      @user_card.account.password_card.update_attributes!(:content => 'new password')
+      assert_equal @user_card.id, Card::Auth.authenticate('[e-mail]', 'new password')
+    end
+  
+    it 'should not rehash password when updating email' do
+      @user_card.account.email_card.update_attributes!(:content => '[e-mail]')
+      assert_equal @user_card.id, Card::Auth.authenticate('[e-mail]', 'joe_pass')
+    end
+  end
+  
+  
+  describe '#reset_password' do
+    before :each do
+      @email = '[e-mail]'
+      @account = Card::Auth[@email].account
+      @account.send_reset_password_token
+      @token = @account.token
+      Card::Env.params[:reset_token] = @token
+      Card::Auth.current_id = Card::AnonymousID
+    end
+
+    it 'should authenticate with correct token and delete token card' do
+      Card::Auth.current_id.should == Card::AnonymousID
+      @account.save.should == true
+      Card::Auth.current_id.should == @account.left_id
+      @account = @account.refresh force=true
+      @account.fetch(:trait => :token).should be_nil
+      @account.save.should == false
+    end
+  
+    it 'should not work if token is expired' do
+      @account.token_card.update_column :updated_at, 3.days.ago.strftime("%F %T")
+      @account.token_card.expire
+      
+      result = @account.save
+      result.should == true                 # successfully completes save
+      @account.token.should_not == @token   # token gets updated
+      success = Card::Env.params[:success]
+      success[:message].should =~ /expired/ # user notified of expired token
+    end
+    
+    it 'should not work if token is wrong' do
+      Card::Env.params[:reset_token] = @token + 'xxx'
+      @account.save
+      @account.errors[:abort].first.should =~ /token_not_found/
+    end  
+    
+  end
+  
 end
+