##
# test all routes which lead to this controller
def test_routes
+ assert_routing(
+ { :path => "/api/0.6/user/1", :method => :get },
+ { :controller => "user", :action => "api_read", :id => "1" }
+ )
assert_routing(
{ :path => "/api/0.6/user/details", :method => :get },
{ :controller => "user", :action => "api_details" }
# The user creation page loads
def test_user_create_view
get :new
+ assert_response :redirect
+ assert_redirected_to user_new_path(:cookie_test => "true")
+
+ get :new, { :cookie_test => "true" }, { :cookie_test => true }
assert_response :success
-
+
assert_select "html", :count => 1 do
assert_select "head", :count => 1 do
assert_select "title", :text => /Create account/, :count => 1
display_name = "new_tester"
assert_difference('User.count') do
assert_difference('ActionMailer::Base.deliveries.size') do
- post :save, {:user => { :email => new_email, :email_confirmation => new_email, :display_name => display_name, :pass_crypt => "testtest", :pass_crypt_confirmation => "testtest"}}
+ session[:new_user] = User.new({
+ :status => "pending", :display_name => display_name,
+ :email => new_email, :email_confirmation => new_email,
+ :pass_crypt => "testtest", :pass_crypt_confirmation => "testtest"
+ }, :without_protection => true)
+
+ post :save
end
end
display_name = "new_tester"
assert_difference('User.count', 0) do
assert_difference('ActionMailer::Base.deliveries.size', 0) do
- post :save, :user => { :email => email, :email_confirmation => email, :display_name => display_name, :pass_crypt => "testtest", :pass_crypt_confirmation => "testtest"}
+ session[:new_user] = User.new({
+ :status => "pending", :display_name => display_name,
+ :email => email, :email_confirmation => email,
+ :pass_crypt => "testtest", :pass_crypt_confirmation => "testtest"
+ }, :without_protection => true)
+
+ post :save
end
end
assert_response :success
assert_template 'new'
assert_select "div#errorExplanation"
- assert_select "table#signupForm > tr > td > div[class=field_with_errors] > input#user_email"
+ assert_select "div#signupForm > fieldset > div.form-row > div.field_with_errors > input#user_email"
end
def test_user_create_submit_duplicate_email_uppercase
display_name = "new_tester"
assert_difference('User.count', 0) do
assert_difference('ActionMailer::Base.deliveries.size', 0) do
- post :save, :user => { :email => email, :email_confirmation => email, :display_name => display_name, :pass_crypt => "testtest", :pass_crypt_confirmation => "testtest"}
+ session[:new_user] = User.new({
+ :status => "pending", :display_name => display_name,
+ :email => email, :email_confirmation => email,
+ :pass_crypt => "testtest", :pass_crypt_confirmation => "testtest"
+ }, :without_protection => true)
+
+ post :save
end
end
assert_response :success
assert_template 'new'
assert_select "div#errorExplanation"
- assert_select "table#signupForm > tr > td > div[class=field_with_errors] > input#user_email"
+ assert_select "div#signupForm > fieldset > div.form-row > div.field_with_errors > input#user_email"
end
def test_user_create_submit_duplicate_name
display_name = users(:public_user).display_name
assert_difference('User.count', 0) do
assert_difference('ActionMailer::Base.deliveries.size', 0) do
- post :save, :user => { :email => email, :email_confirmation => email, :display_name => display_name, :pass_crypt => "testtest", :pass_crypt_confirmation => "testtest"}
+ session[:new_user] = User.new({
+ :status => "pending", :display_name => display_name,
+ :email => email, :email_confirmation => email,
+ :pass_crypt => "testtest", :pass_crypt_confirmation => "testtest"
+ }, :without_protection => true)
+
+ post :save
end
end
assert_response :success
assert_template 'new'
assert_select "div#errorExplanation"
- assert_select "table#signupForm > tr > td > div[class=field_with_errors] > input#user_display_name"
+ assert_select "div#signupForm > fieldset > div.form-row > div.field_with_errors > input#user_display_name"
end
def test_user_create_submit_duplicate_name_uppercase
display_name = users(:public_user).display_name.upcase
assert_difference('User.count', 0) do
assert_difference('ActionMailer::Base.deliveries.size', 0) do
- post :save, :user => { :email => email, :email_confirmation => email, :display_name => display_name, :pass_crypt => "testtest", :pass_crypt_confirmation => "testtest"}
+ session[:new_user] = User.new({
+ :status => "pending", :display_name => display_name,
+ :email => email, :email_confirmation => email,
+ :pass_crypt => "testtest", :pass_crypt_confirmation => "testtest"
+ }, :without_protection => true)
+
+ post :save
end
end
assert_response :success
assert_template 'new'
assert_select "div#errorExplanation"
- assert_select "table#signupForm > tr > td > div[class=field_with_errors] > input#user_display_name"
+ assert_select "div#signupForm > fieldset > div.form-row > div.field_with_errors > input#user_display_name"
end
def test_user_lost_password
assert_select "a[href=/blocks/new/test]", 1
end
end
-
+
+ def test_user_api_read
+ # check that a visible user is returned properly
+ get :api_read, :id => users(:normal_user).id
+ assert_response :success
+
+ # check that we aren't revealing private information
+ assert_select "contributor-terms[pd]", false
+ assert_select "home", false
+ assert_select "languages", false
+
+ # check that a suspended user is not returned
+ get :api_read, :id => users(:suspended_user).id
+ assert_response :gone
+
+ # check that a deleted user is not returned
+ get :api_read, :id => users(:deleted_user).id
+ assert_response :gone
+
+ # check that a non-existent user is not returned
+ get :api_read, :id => 0
+ assert_response :not_found
+ end
+
def test_user_api_details
get :api_details
assert_response :unauthorized