Module: Clearance::SessionsControllerTest

Defined in:
lib/clearance/test/functionals/sessions_controller_test.rb

Class Method Summary collapse

Class Method Details

.included(base) ⇒ Object



4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
# File 'lib/clearance/test/functionals/sessions_controller_test.rb', line 4

def self.included(base)
  base.class_eval do
    context "Given a user" do
      setup { @user = Factory :user }

      should_filter :password

      context "on GET to /sessions/new" do
        setup { get :new }
      
        should_respond_with :success
        should_render_template :new
        should_not_set_the_flash
        should "have login form" do
          assert_select "form[action$=/session]" do
            assert_select "input[type=text][name=?]",     "session[email]"
            assert_select "input[type=password][name=?]", "session[password]"
            assert_select "input[type=checkbox][name=?]", "session[remember_me]"
          end
        end
      end

      context "a POST to #create with good credentials" do
        setup do
          post :create, :session => { :email => @user.email, :password => @user.password }
        end

        should_set_the_flash_to /success/i
        should_redirect_to 'root_url'
        # TODO: should set session
      end

      context "a POST to #create with bad credentials" do
        setup do
          post :create, :session => { :email => @user.email, :password => "bad value" }
        end

        should_set_the_flash_to /bad/i
        should_render_template :new
        # TODO: should not set session
      end
      
      # TODO: two tests for remember me - success and failure
    end

    context "While logged out" do
      setup { logout }

      context "logging out again" do
        setup { delete :destroy }
        should_redirect_to "login_url"
      end
    end

    logged_in_user_context do
      context "a DELETE to #destroy without a cookie" do
        setup { delete :destroy }

        should_set_the_flash_to(/logged out/i)
        should_redirect_to "login_url"
      end

      context 'a DELETE to #destroy with a cookie' do
        setup do
          cookies['auth_token'] = CGI::Cookie.new 'token', 'value'
          delete :destroy
        end

        should 'delete the cookie' do
          assert cookies['auth_token'].empty?
        end

        should 'delete the remember me token in users table' do
          assert_nil @user.reload.remember_token
          assert_nil @user.reload.remember_token_expires_at
        end
      end
    end
  end
end