edan_f0/tests/functional/customer/test_auth.py

import re

from django.core import mail
from django.urls import reverse
from django_webtest import WebTest

from oscar.core.compat import get_user_model
from oscar.test import factories
from oscar.test.testcases import WebTestCase

User = get_user_model()


class TestAUserWhoseForgottenHerPassword(WebTest):
    def test_can_reset_her_password(self):
        username, email, password = "lucy", "lucy@example.com", "password"
        User.objects.create_user(username, email, password)

        # Fill in password reset form
        page = self.app.get(reverse("password-reset"))
        form = page.forms["password_reset_form"]
        form["email"] = email
        response = form.submit()

        # Response should be a redirect and an email should have been sent
        self.assertEqual(302, response.status_code)
        self.assertEqual(1, len(mail.outbox))

        # Extract URL from email
        email_body = mail.outbox[0].body
        urlfinder = re.compile(r"http://example.com(?P<path>[-A-Za-z0-9\/\._]+)")
        matches = urlfinder.search(email_body, re.MULTILINE)
        self.assertTrue("path" in matches.groupdict())
        path = matches.groupdict()["path"]

        # Reset password and check we get redirected
        reset_page_redirect = self.app.get(path)
        # The link in the email will redirect us to the password reset view
        reset_page = self.app.get(reset_page_redirect.location)
        form = reset_page.forms["password_reset_form"]
        form["new_password1"] = "crazymonkey"
        form["new_password2"] = "crazymonkey"
        response = form.submit()
        self.assertEqual(302, response.status_code)

        # Now attempt to login with new password
        url = reverse("customer:login")
        form = self.app.get(url).forms["login_form"]
        form["login-username"] = email
        form["login-password"] = "crazymonkey"
        response = form.submit("login_submit")
        self.assertEqual(302, response.status_code)


class TestAnAuthenticatedUser(WebTestCase):
    is_anonymous = False

    def test_receives_an_email_when_their_password_is_changed(self):
        page = self.get(reverse("customer:change-password"))
        form = page.forms["change_password_form"]
        form["old_password"] = self.password
        form["new_password1"] = "anotherfancypassword"
        form["new_password2"] = "anotherfancypassword"
        page = form.submit()

        self.assertEqual(len(mail.outbox), 1)
        self.assertIn("your password has been changed", mail.outbox[0].body)

    def test_cannot_access_reset_password_page(self):
        response = self.get(reverse("password-reset"), status=403)
        self.assertEqual(403, response.status_code)

    def test_does_not_receive_an_email_when_their_profile_is_updated_but_email_address_not_changed(
        self,
    ):
        page = self.get(reverse("customer:profile-update"))
        form = page.forms["profile_form"]
        form["first_name"] = "Terry"
        form.submit()
        self.assertEqual(len(mail.outbox), 0)

    def test_receives_an_email_when_their_email_address_is_changed(self):
        page = self.get(reverse("customer:profile-update"))
        form = page.forms["profile_form"]

        new_email = "a.new.email@user.com"
        form["email"] = new_email
        page = form.submit()

        self.assertEqual(len(mail.outbox), 1)
        self.assertEqual(mail.outbox[0].to[0], self.email)
        self.assertEqual(User.objects.get(id=self.user.id).email, new_email)
        self.assertIn("your email address has been changed", mail.outbox[0].body)


class TestAnAnonymousUser(WebTestCase):
    is_anonymous = True

    def assertCanLogin(self, email, password):
        url = reverse("customer:login")
        form = self.app.get(url).forms["login_form"]
        form["login-username"] = email
        form["login-password"] = password
        response = form.submit("login_submit")
        self.assertRedirectsTo(response, "customer:summary")

    def test_can_login(self):
        email, password = "d@d.com", "mypassword"
        User.objects.create_user("_", email, password)
        self.assertCanLogin(email, password)

    def test_can_login_with_email_containing_capitals_in_local_part(self):
        email, password = "Andrew.Smith@test.com", "mypassword"
        User.objects.create_user("_", email, password)
        self.assertCanLogin(email, password)

    def test_can_login_with_email_containing_capitals_in_host(self):
        email, password = "Andrew.Smith@teSt.com", "mypassword"
        User.objects.create_user("_", email, password)
        self.assertCanLogin(email, password)

    def test_can_register(self):
        url = reverse("customer:register")
        form = self.app.get(url).forms["register_form"]
        form["email"] = "terry@boom.com"
        form["password1"] = form["password2"] = "hedgehog"
        response = form.submit()
        self.assertRedirectsTo(response, "customer:summary")

    def test_casing_of_local_part_of_email_is_preserved(self):
        url = reverse("customer:register")
        form = self.app.get(url).forms["register_form"]
        form["email"] = "Terry@Boom.com"
        form["password1"] = form["password2"] = "hedgehog"
        form.submit()
        user = User.objects.all()[0]
        self.assertEqual(user.email, "Terry@boom.com")


class TestAStaffUser(WebTestCase):
    is_anonymous = True
    password = "testing"

    def setUp(self):
        self.staff = factories.UserFactory.create(password=self.password, is_staff=True)
        super().setUp()

    def test_gets_redirected_to_the_dashboard_when_they_login(self):
        page = self.get(reverse("customer:login"))
        form = page.forms["login_form"]
        form["login-username"] = self.staff.email
        form["login-password"] = self.password
        response = form.submit("login_submit")

        self.assertRedirectsTo(response, "dashboard:index")