Misago/misago/threads/tests/test_poll_api.py

import json

from django.core.urlresolvers import reverse

from misago.acl.testutils import override_acl
from misago.categories.models import Category
from misago.users.testutils import AuthenticatedUserTestCase

from .. import testutils
from ..models import Poll
from ..serializers.poll import MAX_POLL_OPTIONS


class ThreadPollApiTestCase(AuthenticatedUserTestCase):
    def setUp(self):
        super(ThreadPollApiTestCase, self).setUp()

        self.category = Category.objects.get(slug='first-category')
        self.thread = testutils.post_thread(self.category, poster=self.user)
        self.override_acl()

        self.api_link = reverse('misago:api:thread-poll-list', kwargs={
            'thread_pk': self.thread.pk
        })

    def post(self, url, data=None):
        return self.client.post(url, json.dumps(data or {}), content_type='application/json')

    def override_acl(self, user=None, category=None):
        new_acl = self.user.acl
        new_acl['categories'][self.category.pk].update({
            'can_see': 1,
            'can_browse': 1,
            'can_close_threads': 0,
        })

        new_acl.update({
            'can_start_polls': 1,
            'can_edit_polls': 1,
            'can_delete_polls': 1,
            'poll_edit_time': 0,
            'can_always_see_poll_voters': 0
        })

        if user:
            new_acl.update(user)
        if category:
            new_acl['categories'][self.category.pk].update(category)

        override_acl(self.user, new_acl)


class ThreadPollCreateTests(ThreadPollApiTestCase):
    def test_anonymous(self):
        """api requires you to sign in to create poll"""
        self.logout_user()

        response = self.post(self.api_link)
        self.assertEqual(response.status_code, 403)

    def test_invalid_thread_id(self):
        """api validates that thread id is integer"""
        api_link = reverse('misago:api:thread-poll-list', kwargs={
            'thread_pk': 'kjha6dsa687sa'
        })

        response = self.post(api_link)
        self.assertEqual(response.status_code, 404)

    def test_nonexistant_thread_id(self):
        """api validates that thread exists"""
        api_link = reverse('misago:api:thread-poll-list', kwargs={
            'thread_pk': self.thread.pk + 1
        })

        response = self.post(api_link)
        self.assertEqual(response.status_code, 404)

    def test_no_permission(self):
        """api validates that user has permission to start poll in thread"""
        self.override_acl({
            'can_start_polls': 0
        })

        response = self.post(self.api_link)
        self.assertContains(response, "can't start polls", status_code=403)

    def test_no_permission_closed_thread(self):
        """api validates that user has permission to start poll in closed thread"""
        self.override_acl(category={
            'can_close_threads': 0
        })

        self.thread.is_closed = True
        self.thread.save()

        response = self.post(self.api_link)
        self.assertContains(response, "thread is closed", status_code=403)

        self.override_acl(category={
            'can_close_threads': 1
        })

        response = self.post(self.api_link)
        self.assertEqual(response.status_code, 400)

    def test_no_permission_closed_thread(self):
        """api validates that user has permission to start poll in closed category"""
        self.override_acl(category={
            'can_close_threads': 0
        })

        self.category.is_closed = True
        self.category.save()

        response = self.post(self.api_link)
        self.assertContains(response, "category is closed", status_code=403)

        self.override_acl(category={
            'can_close_threads': 1
        })

        response = self.post(self.api_link)
        self.assertEqual(response.status_code, 400)

    def test_no_permission_other_user_thread(self):
        """api validates that user has permission to start poll in other user's thread"""
        self.override_acl({
            'can_start_polls': 1
        })

        self.thread.starter = None
        self.thread.save()

        response = self.post(self.api_link)
        self.assertContains(response, "can't start polls in other users threads", status_code=403)

        self.override_acl({
            'can_start_polls': 2
        })

        response = self.post(self.api_link)
        self.assertEqual(response.status_code, 400)

    def test_no_permission_poll_exists(self):
        """api validates that user can't start second poll in thread"""
        self.thread.poll = Poll.objects.create(
            thread=self.thread,
            category=self.category,
            poster_name='Test',
            poster_slug='test',
            poster_ip='127.0.0.1',
            length=30,
            question='Test',
            choices=[{'hash': 't3st'}],
            allowed_choices=1
        )

        response = self.post(self.api_link)
        self.assertContains(response, "There's already a poll in this thread.", status_code=403)

    def test_empty_data(self):
        """api handles empty request data"""
        response = self.post(self.api_link)
        self.assertEqual(response.status_code, 400)

        response_json = response.json()
        self.assertEqual(len(response_json), 4)

    def test_length_validation(self):
        """api validates poll's length"""
        response = self.post(self.api_link, data={
            'length': -1
        })
        self.assertEqual(response.status_code, 400)

        response_json = response.json()
        self.assertEqual(response_json['length'], [
            "Ensure this value is greater than or equal to 0."
        ])

        response = self.post(self.api_link, data={
            'length': 200
        })
        self.assertEqual(response.status_code, 400)

        response_json = response.json()
        self.assertEqual(response_json['length'], [
            "Ensure this value is less than or equal to 180."
        ])

    def test_question_validation(self):
        """api validates question length"""
        response = self.post(self.api_link, data={
            'question': 'abcd' * 255
        })
        self.assertEqual(response.status_code, 400)

        response_json = response.json()
        self.assertEqual(response_json['question'], [
            "Ensure this field has no more than 255 characters."
        ])

    def test_validate_choice_length(self):
        """api validates single choice length"""
        response = self.post(self.api_link, data={
            'choices': [
                {
                    'hash': 'qwertyuiopas',
                    'label': ''
                }
            ]
        })
        self.assertEqual(response.status_code, 400)

        response_json = response.json()
        self.assertEqual(response_json['choices'], [
            "One or more poll choices are invalid."
        ])

        response = self.post(self.api_link, data={
            'choices': [
                {
                    'hash': 'qwertyuiopas',
                    'label': 'abcd' * 255
                }
            ]
        })
        self.assertEqual(response.status_code, 400)

        response_json = response.json()
        self.assertEqual(response_json['choices'], [
            "One or more poll choices are invalid."
        ])

    def test_validate_two_choices(self):
        """api validates that there are at least two choices in poll"""
        response = self.post(self.api_link, data={
            'choices': [
                {
                    'label': 'Choice'
                }
            ]
        })
        self.assertEqual(response.status_code, 400)

        response_json = response.json()
        self.assertEqual(response_json['choices'], [
            "You need to add at least two choices to a poll."
        ])

    def test_validate_max_choices(self):
        """api validates that there are no more choices in poll than allowed number"""
        response = self.post(self.api_link, data={
            'choices': [
                {
                    'label': 'Choice'
                }
            ] * (MAX_POLL_OPTIONS + 1)
        })
        self.assertEqual(response.status_code, 400)

        error_formats = (MAX_POLL_OPTIONS, MAX_POLL_OPTIONS + 1)

        response_json = response.json()
        self.assertEqual(response_json['choices'], [
            "You can't add more than %s options to a single poll (added %s)." % error_formats
        ])

    def test_allowed_choices_validation(self):
        """api validates allowed choices number"""
        response = self.post(self.api_link, data={
            'allowed_choices': 0
        })
        self.assertEqual(response.status_code, 400)

        response_json = response.json()
        self.assertEqual(response_json['allowed_choices'], [
            "Ensure this value is greater than or equal to 1."
        ])

        response = self.post(self.api_link, data={
            'length': 0,
            'question': "Lorem ipsum",
            'allowed_choices': 3,
            'choices': [
                {
                    'label': 'Choice'
                },
                {
                    'label': 'Choice'
                }
            ]
        })
        self.assertEqual(response.status_code, 400)

        response_json = response.json()
        self.assertEqual(response_json['non_field_errors'], [
            "Number of allowed choices can't be greater than number of all choices."
        ])

    def test_poll_created(self):
        """api creates public poll if provided with valid data"""
        response = self.post(self.api_link, data={
            'length': 40,
            'question': "Select two best colors",
            'allowed_choices': 2,
            'allow_revotes': True,
            'is_public': True,
            'choices': [
                {
                    'label': 'Red'
                },
                {
                    'label': 'Green'
                },
                {
                    'label': 'Blue'
                }
            ]
        })
        self.assertEqual(response.status_code, 200)

        response_json = response.json()

        self.assertEqual(response_json['poster_name'], self.user.username)
        self.assertEqual(response_json['poster_slug'], self.user.slug)
        self.assertEqual(response_json['length'], 40)
        self.assertEqual(response_json['question'], "Select two best colors")
        self.assertEqual(response_json['allowed_choices'], 2)
        self.assertTrue(response_json['allow_revotes'])
        self.assertEqual(response_json['votes'], 0)
        self.assertTrue(response_json['is_public'])

        self.assertEqual(len(response_json['choices']), 3)
        self.assertEqual(len(set([c['hash'] for c in response_json['choices']])), 3)

        poll = self.thread.poll

        self.assertEqual(poll.category_id, self.category.id)
        self.assertEqual(poll.thread_id, self.thread.id)
        self.assertEqual(poll.poster_id, self.user.id)
        self.assertEqual(poll.poster_name, self.user.username)
        self.assertEqual(poll.poster_slug, self.user.slug)
        self.assertEqual(poll.length, 40)
        self.assertEqual(poll.question, "Select two best colors")
        self.assertEqual(poll.allowed_choices, 2)
        self.assertTrue(poll.allow_revotes)
        self.assertEqual(poll.votes, 0)
        self.assertTrue(poll.is_public)

        self.assertEqual(len(poll.choices), 3)
        self.assertEqual(len(set([c['hash'] for c in poll.choices])), 3)


class ThreadPollEditTests(ThreadPollApiTestCase):
    pass


class ThreadPollDeleteTests(ThreadPollApiTestCase):
    pass


class ThreadPollVoteTests(ThreadPollApiTestCase):
    pass


class ThreadPollVotersTests(ThreadPollApiTestCase):
    pass