test/controllers/sessions_controller_test.rb


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42

require File.dirname(__FILE__) + '/../test_helper'

class SessionsControllerTest < ActionController::TestCase
  include AuthenticatedTestHelper

  fixtures :users

  def test_should_login_and_redirect
    post :create, params: { login: 'quentin', password: 'monkey' }
    assert session[:user_id]
    assert_response :redirect
    assert session[:logged_in_at].present?
  end

  def test_should_fail_login_and_not_redirect
    post :create, params: { login: 'quentin', password: 'bad password' }
    assert_nil session[:user_id]
    assert_response :success
  end

  def test_should_logout
    login_as :quentin
    get :destroy
    assert_nil session[:user_id]
    assert_response :redirect
  end

  test "login with password only is withheld for enrolled users" do
    users(:quentin).update!(:otp_secret => ROTP::Base32.random)
    post :create, params: { login: 'quentin', password: 'monkey' }
    assert_nil session[:user_id]
    assert_equal users(:quentin).id, session[:pending_otp_user_id]
    assert_redirected_to new_otp_challenge_path
  end

  test "otp_required without enrollment logs in but funnels into setup" do
    users(:quentin).update!(:otp_required => true)
    post :create, params: { login: 'quentin', password: 'monkey' }
    assert session[:user_id]
    assert_redirected_to edit_user_path(users(:quentin))
  end
end