X-Git-Url: https://git.openstreetmap.org./rails.git/blobdiff_plain/dc2a2c8ebd1a11e4a64555fda22c6859a51defff..9d2f920feb9dce028b985e8d452538d3df7a1d9c:/test/integration/user_terms_seen_test.rb diff --git a/test/integration/user_terms_seen_test.rb b/test/integration/user_terms_seen_test.rb index a00ad39d5..7ec7fa730 100644 --- a/test/integration/user_terms_seen_test.rb +++ b/test/integration/user_terms_seen_test.rb @@ -1,42 +1,45 @@ require "test_helper" class UserTermsSeenTest < ActionDispatch::IntegrationTest - fixtures :users + def setup + stub_hostip_requests + end def test_api_blocked with_terms_seen(true) do - user = users(:terms_not_seen_user) + user = create(:user, :terms_seen => false) - get "/api/#{API_VERSION}/user/preferences", nil, auth_header(user.display_name, "test") + get "/api/#{API_VERSION}/user/preferences", :headers => auth_header(user.display_name, "test") assert_response :forbidden # touch it so that the user has seen the terms user.terms_seen = true user.save - get "/api/#{API_VERSION}/user/preferences", nil, auth_header(user.display_name, "test") + get "/api/#{API_VERSION}/user/preferences", :headers => auth_header(user.display_name, "test") assert_response :success end end def test_terms_presented_at_login with_terms_seen(true) do - user = users(:terms_not_seen_user) + user = create(:user, :terms_seen => false) # try to log in - get_via_redirect "/login" + get "/login" + follow_redirect! assert_response :success assert_template "user/login" - post "/login", "username" => user.email, "password" => "test", :referer => "/" + post "/login", :params => { :username => user.email, :password => "test", :referer => "/diary/new" } assert_response :redirect # but now we need to look at the terms - assert_redirected_to "controller" => "user", "action" => "terms", :referer => "/" + assert_redirected_to :controller => :user, :action => :terms, :referer => "/diary/new" follow_redirect! assert_response :success # don't agree to the terms, but hit decline - post "/user/save", "decline" => "decline", "referer" => "/" - assert_redirected_to "/" + post "/user/save", :params => { :decline => true, :referer => "/diary/new" } + assert_redirected_to "/diary/new" follow_redirect! # should be carried through to a normal login with a message @@ -47,30 +50,31 @@ class UserTermsSeenTest < ActionDispatch::IntegrationTest def test_terms_cant_be_circumvented with_terms_seen(true) do - user = users(:terms_not_seen_user) + user = create(:user, :terms_seen => false) # try to log in - get_via_redirect "/login" + get "/login" + follow_redirect! assert_response :success assert_template "user/login" - post "/login", "username" => user.email, "password" => "test", :referer => "/" + post "/login", :params => { :username => user.email, :password => "test", :referer => "/diary/new" } assert_response :redirect # but now we need to look at the terms - assert_redirected_to "controller" => "user", "action" => "terms", :referer => "/" - follow_redirect! - assert_response :success + assert_redirected_to :controller => :user, :action => :terms, :referer => "/diary/new" # check that if we go somewhere else now, it redirects # back to the terms page. get "/traces/mine" - assert_redirected_to "controller" => "user", "action" => "terms", :referer => "/traces/mine" + assert_redirected_to :controller => :user, :action => :terms, :referer => "/traces/mine" + get "/traces/mine", :params => { :referer => "/diary/new" } + assert_redirected_to :controller => :user, :action => :terms, :referer => "/diary/new" end end private def auth_header(user, pass) - { "HTTP_AUTHORIZATION" => "Basic %s" % Base64.encode64("#{user}:#{pass}") } + { "HTTP_AUTHORIZATION" => format("Basic %{auth}", :auth => Base64.encode64("#{user}:#{pass}")) } end def with_terms_seen(value)