from django.contrib.auth import get_user_model from django.core import mail from django.urls import reverse from misago.users.testutils import AuthenticatedUserTestCase class UserChangePasswordTests(AuthenticatedUserTestCase): """ tests for user change password RPC (/api/users/1/change-password/) """ def setUp(self): super(UserChangePasswordTests, self).setUp() self.link = '/api/users/%s/change-password/' % self.user.pk def test_unsupported_methods(self): """api isn't supporting GET""" response = self.client.get(self.link) self.assertEqual(response.status_code, 405) def test_empty_input(self): """api errors correctly for empty input""" response = self.client.post(self.link, data={}) self.assertEqual(response.status_code, 400) self.assertEqual(response.json(), { 'new_password': [ "This field is required." ], 'password': [ "This field is required." ], }) def test_invalid_password(self): """api errors correctly for invalid password""" response = self.client.post(self.link, data={ 'new_password': 'N3wP@55w0rd', 'password': 'Lor3mIpsum' }) self.assertEqual(response.status_code, 400) self.assertEqual(response.json(), { 'password': [ "Entered password is invalid." ], }) def test_blank_input(self): """api errors correctly for blank input""" response = self.client.post(self.link, data={ 'new_password': '', 'password': self.USER_PASSWORD }) self.assertEqual(response.status_code, 400) self.assertEqual(response.json(), { 'new_password': [ "This field may not be blank." ], }) def test_short_new_pasword(self): """api errors correctly for short new password""" response = self.client.post(self.link, data={ 'new_password': 'n', 'password': self.USER_PASSWORD }) self.assertEqual(response.status_code, 400) self.assertEqual(response.json(), { 'new_password': [ "This password is too short. It must contain at least 7 characters." ], }) def test_change_password(self): """api allows users to change their passwords""" new_password = 'N3wP@55w0rd' response = self.client.post(self.link, data={ 'new_password': new_password, 'password': self.USER_PASSWORD }) self.assertEqual(response.status_code, 200) self.assertIn('Confirm password change', mail.outbox[0].subject) for line in [l.strip() for l in mail.outbox[0].body.splitlines()]: if line.startswith('http://'): token = line.rstrip('/').split('/')[-1] break else: self.fail("E-mail sent didn't contain confirmation url") response = self.client.get(reverse('misago:options-confirm-password-change', kwargs={ 'token': token })) self.assertEqual(response.status_code, 200) self.reload_user() self.assertTrue(self.user.check_password(new_password))