Allow user details to be fetched without agreeing terms

[rails.git] / test / integration / user_terms_seen_test.rb

diff --git a/test/integration/user_terms_seen_test.rb b/test/integration/user_terms_seen_test.rb
index fc42c2353ebefb1873b8a27e1fadb952dfe4d0c2..f30c5d98e700b47ee19f8d9d0d62037af1d04693 100644 (file)
--- a/test/integration/user_terms_seen_test.rb
+++ b/test/integration/user_terms_seen_test.rb
@@ -8,36 +8,67 @@ class UserTermsSeenTest < ActionController::IntegrationTest
   end
 
   def test_api_blocked
-    user = users(:terms_not_seen_user)
+    if REQUIRE_TERMS_SEEN
+      user = users(:terms_not_seen_user)
 
-    get "/api/#{API_VERSION}/user/details", nil, auth_header(user.display_name, "test")
-    assert_response :forbidden
+      get "/api/#{API_VERSION}/user/details", nil, auth_header(user.display_name, "test")
+      assert_response :forbidden
 
-    # touch it so that the user has seen the terms
-    user.terms_seen = true
-    user.save
+      # touch it so that the user has seen the terms
+      user.terms_seen = true
+      user.save
 
-    get "/api/#{API_VERSION}/user/details", nil, auth_header(user.display_name, "test")
-    assert_response :success
+      get "/api/#{API_VERSION}/user/details", nil, auth_header(user.display_name, "test")
+      assert_response :success
+    end
   end
 
   def test_terms_presented_at_login
-    user = users(:terms_not_seen_user)
-
-    # try to log in
-    get_via_redirect "/login"
-    assert_response :success
-    assert_template 'user/login'
-    post "/login", {'user[email]' => user.email, 'user[password]' => 'test', :referer => "/"}
-    assert_response :redirect
-    # but now we need to look at the terms
-    assert_redirected_to "controller" => "user", "action" => "terms", :referer => "/"
-    follow_redirect!
-    assert_response :success
-
-    # don't agree to the terms, but hit decline
-    
-    # should be carried through to a normal login
+    if REQUIRE_TERMS_SEEN
+      user = users(:terms_not_seen_user)
+
+      # try to log in
+      get_via_redirect "/login"
+      assert_response :success
+      assert_template 'user/login'
+      post "/login", {'user[email]' => user.email, 'user[password]' => 'test', :referer => "/"}
+      assert_response :redirect
+      # but now we need to look at the terms
+      assert_redirected_to "controller" => "user", "action" => "terms", :referer => "/"
+      follow_redirect!
+      assert_response :success
+
+      # don't agree to the terms, but hit decline
+      post "/user/#{user.display_name}/save", {'decline' => 'decline', 'referer' => '/'}
+      assert_redirected_to "/"
+      follow_redirect!
+      
+      # should be carried through to a normal login with a message
+      assert_response :success
+      assert !flash[:notice].nil?
+    end
+  end
+
+  def test_terms_cant_be_circumvented
+    if REQUIRE_TERMS_SEEN
+      user = users(:terms_not_seen_user)
+
+      # try to log in
+      get_via_redirect "/login"
+      assert_response :success
+      assert_template 'user/login'
+      post "/login", {'user[email]' => user.email, 'user[password]' => 'test', :referer => "/"}
+      assert_response :redirect
+      # but now we need to look at the terms
+      assert_redirected_to "controller" => "user", "action" => "terms", :referer => "/"
+      follow_redirect!
+      assert_response :success
+
+      # check that if we go somewhere else now, it redirects
+      # back to the terms page.
+      get "/traces/mine"
+      assert_redirected_to "controller" => "user", "action" => "terms", :referer => "/traces/mine"
+    end
   end
 
 end