- def test_terms_presented_at_login
- if REQUIRE_TERMS_SEEN
- user = users(:terms_not_seen_user)
-
- # try to log in
- get_via_redirect "/login"
- assert_response :success
- assert_template 'user/login'
- post "/login", {'user[email]' => user.email, 'user[password]' => 'test', :referer => "/"}
- assert_response :redirect
- # but now we need to look at the terms
- assert_redirected_to "controller" => "user", "action" => "terms", :referer => "/"
- follow_redirect!
- assert_response :success
-
- # don't agree to the terms, but hit decline
-
- # should be carried through to a normal login
- end
+ def test_terms_cant_be_circumvented
+ user = create(:user, :terms_seen => false, :terms_agreed => nil)
+
+ # try to log in
+ get "/login"
+ follow_redirect!
+ assert_response :success
+ assert_template "sessions/new"
+ post "/login", :params => { :username => user.email, :password => "test", :referer => "/diary/new" }
+ # but now we need to look at the terms
+ assert_redirected_to :controller => :users, :action => :terms, :referer => "/diary/new"
+
+ # check that if we go somewhere else now, it redirects
+ # back to the terms page.
+ get "/traces/mine"
+ assert_redirected_to :controller => :users, :action => :terms, :referer => "/traces/mine"
+ get "/traces/mine", :params => { :referer => "/diary/new" }
+ assert_redirected_to :controller => :users, :action => :terms, :referer => "/diary/new"