Initial release of Discourse

spec/controllers/session_controller_spec.rb

@@ -0,0 +1,130 @@
+require 'spec_helper'
+
+describe SessionController do
+
+  describe '.create' do
+
+    let(:user) { Fabricate(:user) }
+
+    it "raises an error when the login isn't present" do
+      lambda { xhr :post, :create }.should raise_error(Discourse::InvalidParameters)
+    end
+
+    describe 'invalid password' do
+
+      it "should return an error with an invalid password" do
+        xhr :post, :create, login: user.username, password: 'sssss'
+        ::JSON.parse(response.body)['error'].should be_present
+      end
+
+    end
+
+    describe 'success by username' do 
+      before do
+        xhr :post, :create, login: user.username, password: 'myawesomepassword'
+        user.reload
+      end
+
+      it 'sets a session id' do
+        session[:current_user_id].should == user.id
+      end
+
+      it 'gives the user an auth token' do
+        user.auth_token.should be_present
+      end
+
+      it 'sets a cookie with the auth token' do
+        cookies[:_t].should == user.auth_token
+      end
+    end
+
+    describe 'strips leading @ symbol' do 
+      before do
+        xhr :post, :create, login: "@" + user.username, password: 'myawesomepassword'
+        user.reload
+      end
+
+      it 'sets a session id' do
+        session[:current_user_id].should == user.id
+      end
+    end
+
+    describe 'also allow login by email' do 
+      before do
+        xhr :post, :create, login: user.email, password: 'myawesomepassword'
+      end
+
+      it 'sets a session id' do
+        session[:current_user_id].should == user.id
+      end
+    end
+
+    describe "when the site requires approval of users" do
+      before do
+        SiteSetting.expects(:must_approve_users?).returns(true)      
+      end
+
+      context 'with an unapproved user' do
+        before do
+          xhr :post, :create, login: user.email, password: 'myawesomepassword'
+        end
+
+        it "doesn't log in the user" do
+          session[:current_user_id].should be_blank
+        end
+
+      end
+
+    end
+
+  end
+
+  describe '.destroy' do
+    before do
+      @user = log_in
+      xhr :delete, :destroy, id: @user.username
+    end
+
+    it 'removes the session variable' do
+      session[:current_user_id].should be_blank
+    end
+
+
+    it 'removes the auth token cookie' do
+      cookies[:_t].should be_blank
+    end
+  end
+
+  describe '.forgot_password' do
+
+    it 'raises an error without a username parameter' do
+      lambda { xhr :post, :forgot_password }.should raise_error(Discourse::InvalidParameters)
+    end
+
+    context 'for a non existant username' do
+      it "doesn't generate a new token for a made up username" do      
+        lambda { xhr :post, :forgot_password, username: 'made_up'}.should_not change(EmailToken, :count)
+      end
+
+      it "doesn't enqueue an email" do      
+        Jobs.expects(:enqueue).with(:user_mail, anything).never
+        xhr :post, :forgot_password, username: 'made_up'
+      end      
+    end   
+
+    context 'for an existing username' do
+      let(:user) { Fabricate(:user) }
+
+      it "generates a new token for a made up username" do      
+        lambda { xhr :post, :forgot_password, username: user.username}.should change(EmailToken, :count)
+      end
+
+      it "enqueues an email" do      
+        Jobs.expects(:enqueue).with(:user_email, has_entries(type: :forgot_password, user_id: user.id))
+        xhr :post, :forgot_password, username: user.username
+      end      
+    end      
+
+  end
+
+end