Misago/misago/users/tests/test_auth_api.py

import json

from django.contrib.auth import get_user_model
from django.core.urlresolvers import reverse
from django.test import TestCase


class AuthenticateAPITests(TestCase):
    def test_api_invalid_credentials(self):
        """login api returns 400 on invalid POST"""
        response = self.client.post(
            reverse('misago:api:login'),
            data={'username': 'nope', 'password': 'nope'})

        self.assertEqual(response.status_code, 400)
        self.assertIn("Login or password is incorrect.", response.content)

        response = self.client.get(reverse('misago:api:auth_user'))
        self.assertEqual(response.status_code, 200)

        user_json = json.loads(response.content)
        self.assertIsNone(user_json['id'])

    def test_api_signin(self):
        """api signs user in"""
        User = get_user_model()
        user = User.objects.create_user('Bob', 'bob@test.com', 'Pass.123')

        response = self.client.post(
            reverse('misago:api:login'),
            data={'username': 'Bob', 'password': 'Pass.123'})

        self.assertEqual(response.status_code, 200)

        response = self.client.get(reverse('misago:index'))
        self.assertEqual(response.status_code, 200)

        response = self.client.get(reverse('misago:api:auth_user'))
        self.assertEqual(response.status_code, 200)

        user_json = json.loads(response.content)
        self.assertEqual(user_json['id'], user.id)
        self.assertEqual(user_json['username'], user.username)

    def test_api_signin_banned(self):
        """login api fails to sign banned user in"""
        raise NotImplemented("TODO: test_api_signin_banned")

    def test_api_signin_inactive(self):
        """login api fails to sign inactive user in"""
        raise NotImplemented("TODO: test_api_signin_inactive")