test_user_editdetails_api.py 4.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145
  1. from django.contrib.auth import get_user_model
  2. from django.urls import reverse
  3. from misago.acl.testutils import override_acl
  4. from misago.users.testutils import AuthenticatedUserTestCase
  5. UserModel = get_user_model()
  6. class UserEditDetailsApiTests(AuthenticatedUserTestCase):
  7. def setUp(self):
  8. super().setUp()
  9. self.api_link = reverse(
  10. 'misago:api:user-edit-details',
  11. kwargs={
  12. 'pk': self.user.pk,
  13. }
  14. )
  15. def get_profile_fields(self):
  16. return UserModel.objects.get(pk=self.user.pk).profile_fields
  17. def test_api_has_no_showstoppers(self):
  18. """api outputs response for freshly created user"""
  19. response = self.client.get(self.api_link)
  20. self.assertEqual(response.status_code, 200)
  21. def test_api_has_no_showstoppers_old_user(self):
  22. """api outputs response for freshly created user"""
  23. response = self.client.get(self.api_link)
  24. self.assertEqual(response.status_code, 200)
  25. def test_other_user(self):
  26. """api handles scenario when its other user looking at profile"""
  27. test_user = UserModel.objects.create_user('BobBoberson', 'bob@test.com', 'bob123456')
  28. api_link = reverse(
  29. 'misago:api:user-edit-details',
  30. kwargs={
  31. 'pk': test_user.pk,
  32. }
  33. )
  34. # moderator has permission to edit details
  35. override_acl(self.user, {
  36. 'can_moderate_profile_details': True,
  37. })
  38. response = self.client.get(api_link)
  39. self.assertEqual(response.status_code, 200)
  40. # non-moderator has no permission to edit details
  41. override_acl(self.user, {
  42. 'can_moderate_profile_details': False,
  43. })
  44. response = self.client.get(api_link)
  45. self.assertEqual(response.status_code, 403)
  46. def test_nonexistant_user(self):
  47. """api handles nonexistant users"""
  48. api_link = reverse(
  49. 'misago:api:user-edit-details',
  50. kwargs={
  51. 'pk': self.user.pk + 123,
  52. }
  53. )
  54. response = self.client.get(api_link)
  55. self.assertEqual(response.status_code, 404)
  56. def test_api_updates_text_field(self):
  57. """api updates text field"""
  58. response = self.client.post(self.api_link, data={
  59. 'bio': 'I have some, as is tradition.'
  60. })
  61. self.assertEqual(response.status_code, 200)
  62. profile_fields = self.get_profile_fields()
  63. self.assertEqual(profile_fields['bio'], 'I have some, as is tradition.')
  64. response_json = response.json()
  65. self.assertEqual(response_json['id'], self.user.id)
  66. self.assertTrue(response_json['edit'])
  67. self.assertTrue(response_json['groups'])
  68. def test_api_updates_select_field(self):
  69. """api updates select field"""
  70. response = self.client.post(self.api_link, data={
  71. 'gender': 'female',
  72. })
  73. self.assertEqual(response.status_code, 200)
  74. profile_fields = self.get_profile_fields()
  75. self.assertEqual(profile_fields['gender'], 'female')
  76. response_json = response.json()
  77. self.assertEqual(response_json['id'], self.user.id)
  78. self.assertTrue(response_json['edit'])
  79. self.assertTrue(response_json['groups'])
  80. def test_api_validates_url_field(self):
  81. """api runs basic validation against url fields"""
  82. response = self.client.post(self.api_link, data={
  83. 'website': 'noturl',
  84. })
  85. self.assertEqual(response.status_code, 400)
  86. self.assertEqual(response.json(), {'website': ['Enter a valid URL.']})
  87. def test_api_cleans_url_field(self):
  88. """api cleans url fields"""
  89. response = self.client.post(self.api_link, data={
  90. 'website': 'onet.pl',
  91. })
  92. self.assertEqual(response.status_code, 200)
  93. profile_fields = self.get_profile_fields()
  94. self.assertEqual(profile_fields['website'], 'http://onet.pl')
  95. response_json = response.json()
  96. self.assertEqual(response_json['id'], self.user.id)
  97. self.assertTrue(response_json['edit'])
  98. self.assertTrue(response_json['groups'])
  99. def test_api_custom_cleans_url_field(self):
  100. """api calls fields clean method"""
  101. response = self.client.post(self.api_link, data={
  102. 'twitter': '@Weebl',
  103. })
  104. self.assertEqual(response.status_code, 200)
  105. profile_fields = self.get_profile_fields()
  106. self.assertEqual(profile_fields['twitter'], 'Weebl')
  107. response_json = response.json()
  108. self.assertEqual(response_json['id'], self.user.id)
  109. self.assertTrue(response_json['edit'])
  110. self.assertTrue(response_json['groups'])