test_user_editdetails_api.py 4.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138
  1. from django.contrib.auth import get_user_model
  2. from django.urls import reverse
  3. from misago.acl.test import patch_user_acl
  4. from misago.users.testutils import AuthenticatedUserTestCase
  5. UserModel = get_user_model()
  6. class UserEditDetailsApiTests(AuthenticatedUserTestCase):
  7. def setUp(self):
  8. super().setUp()
  9. self.api_link = reverse(
  10. 'misago:api:user-edit-details',
  11. kwargs={
  12. 'pk': self.user.pk,
  13. }
  14. )
  15. def get_profile_fields(self):
  16. return UserModel.objects.get(pk=self.user.pk).profile_fields
  17. def test_api_has_no_showstoppers(self):
  18. """api outputs response for freshly created user"""
  19. response = self.client.get(self.api_link)
  20. self.assertEqual(response.status_code, 200)
  21. def test_api_has_no_showstoppers_old_user(self):
  22. """api outputs response for freshly created user"""
  23. response = self.client.get(self.api_link)
  24. self.assertEqual(response.status_code, 200)
  25. def test_other_user(self):
  26. """api handles scenario when its other user looking at profile"""
  27. test_user = UserModel.objects.create_user('BobBoberson', 'bob@test.com', 'bob123456')
  28. api_link = reverse(
  29. 'misago:api:user-edit-details',
  30. kwargs={
  31. 'pk': test_user.pk,
  32. }
  33. )
  34. # moderator has permission to edit details
  35. with patch_user_acl({'can_moderate_profile_details': True}):
  36. response = self.client.get(api_link)
  37. self.assertEqual(response.status_code, 200)
  38. # non-moderator has no permission to edit details
  39. with patch_user_acl({'can_moderate_profile_details': False}):
  40. response = self.client.get(api_link)
  41. self.assertEqual(response.status_code, 403)
  42. def test_nonexistant_user(self):
  43. """api handles nonexistant users"""
  44. api_link = reverse(
  45. 'misago:api:user-edit-details',
  46. kwargs={
  47. 'pk': self.user.pk + 123,
  48. }
  49. )
  50. response = self.client.get(api_link)
  51. self.assertEqual(response.status_code, 404)
  52. def test_api_updates_text_field(self):
  53. """api updates text field"""
  54. response = self.client.post(self.api_link, data={
  55. 'bio': 'I have some, as is tradition.'
  56. })
  57. self.assertEqual(response.status_code, 200)
  58. profile_fields = self.get_profile_fields()
  59. self.assertEqual(profile_fields['bio'], 'I have some, as is tradition.')
  60. response_json = response.json()
  61. self.assertEqual(response_json['id'], self.user.id)
  62. self.assertTrue(response_json['edit'])
  63. self.assertTrue(response_json['groups'])
  64. def test_api_updates_select_field(self):
  65. """api updates select field"""
  66. response = self.client.post(self.api_link, data={
  67. 'gender': 'female',
  68. })
  69. self.assertEqual(response.status_code, 200)
  70. profile_fields = self.get_profile_fields()
  71. self.assertEqual(profile_fields['gender'], 'female')
  72. response_json = response.json()
  73. self.assertEqual(response_json['id'], self.user.id)
  74. self.assertTrue(response_json['edit'])
  75. self.assertTrue(response_json['groups'])
  76. def test_api_validates_url_field(self):
  77. """api runs basic validation against url fields"""
  78. response = self.client.post(self.api_link, data={
  79. 'website': 'noturl',
  80. })
  81. self.assertEqual(response.status_code, 400)
  82. self.assertEqual(response.json(), {'website': ['Enter a valid URL.']})
  83. def test_api_cleans_url_field(self):
  84. """api cleans url fields"""
  85. response = self.client.post(self.api_link, data={
  86. 'website': 'onet.pl',
  87. })
  88. self.assertEqual(response.status_code, 200)
  89. profile_fields = self.get_profile_fields()
  90. self.assertEqual(profile_fields['website'], 'http://onet.pl')
  91. response_json = response.json()
  92. self.assertEqual(response_json['id'], self.user.id)
  93. self.assertTrue(response_json['edit'])
  94. self.assertTrue(response_json['groups'])
  95. def test_api_custom_cleans_url_field(self):
  96. """api calls fields clean method"""
  97. response = self.client.post(self.api_link, data={
  98. 'twitter': '@Weebl',
  99. })
  100. self.assertEqual(response.status_code, 200)
  101. profile_fields = self.get_profile_fields()
  102. self.assertEqual(profile_fields['twitter'], 'Weebl')
  103. response_json = response.json()
  104. self.assertEqual(response_json['id'], self.user.id)
  105. self.assertTrue(response_json['edit'])
  106. self.assertTrue(response_json['groups'])