codeocean/spec/controllers/internal_users_controller_spec.rb

require 'rails_helper'

describe InternalUsersController do
  let(:user) { FactoryBot.build(:admin) }
  let!(:users) { FactoryBot.create_pair(:teacher) }

  describe 'GET #activate' do
    let(:user) { InternalUser.create(FactoryBot.attributes_for(:teacher)) }

    before(:each) do
      user.send(:setup_activation)
      user.save(validate: false)
    end

    context 'without a valid activation token' do
      before(:each) { get :activate, params: { id: user.id } }

      expect_redirect(:root)
    end

    context 'with an already activated user' do
      before(:each) do
        user.activate!
        get :activate, params: { id: user.id, token: user.activation_token }
      end

      expect_redirect(:root)
    end

    context 'with valid preconditions' do
      before(:each) { get :activate, params: { id: user.id, token: user.activation_token } }

      expect_assigns(user: InternalUser)
      expect_status(200)
      expect_template(:activate)
    end
  end

  describe 'PUT #activate' do
    let(:user) { InternalUser.create(FactoryBot.build(:teacher).attributes) }
    let(:password) { SecureRandom.hex }

    before(:each) do
      user.send(:setup_activation)
      user.save(validate: false)
      expect(user.activation_token).to be_present
    end

    context 'without a valid activation token' do
      before(:each) { put :activate, params: { id: user.id } }

      expect_redirect(:root)
    end

    context 'with an already activated user' do
      before(:each) do
        user.activate!
        put :activate, params: { id: user.id, internal_user: {activation_token: user.activation_token, password: password, password_confirmation: password} }
      end

      expect_redirect(:root)
    end

    context 'without a password' do
      before(:each) { put :activate, params: { id: user.id, internal_user: {activation_token: user.activation_token} } }

      expect_assigns(user: InternalUser)

      it 'builds a user with errors' do
        expect(assigns(:user).errors).to be_present
      end

      expect_template(:activate)
    end

    context 'without a valid password confirmation' do
      before(:each) { put :activate, params: { id: user.id, internal_user: {activation_token: user.activation_token, password: password, password_confirmation: ''} } }

      expect_assigns(user: InternalUser)

      it 'builds a user with errors' do
        expect(assigns(:user).errors).to be_present
      end

      expect_template(:activate)
    end

    context 'with valid preconditions' do
      before(:each) { put :activate, params: { id: user.id, internal_user: {activation_token: user.activation_token, password: password, password_confirmation: password} } }

      expect_assigns(user: InternalUser)

      it 'activates the user' do
        expect(assigns[:user]).to be_activated
      end

      expect_flash_message(:notice, :'internal_users.activate.success')
      expect_redirect(:sign_in)
    end
  end

  describe 'POST #create' do
    before(:each) { allow(controller).to receive(:current_user).and_return(user) }

    context 'with a valid internal user' do
      let(:request) { proc { post :create, params: { internal_user: FactoryBot.build(:teacher).attributes } } }
      before(:each) { request.call }

      expect_assigns(user: InternalUser)

      it 'creates the internal user' do
        expect { request.call }.to change(InternalUser, :count).by(1)
      end

      it 'creates an inactive user' do
        expect(InternalUser.last).not_to be_activated
      end

      it 'sets up an activation token' do
        expect(InternalUser.last.activation_token).to be_present
      end

      it 'sends an activation email' do
        expect_any_instance_of(InternalUser).to receive(:send_activation_needed_email!)
        request.call
      end

      expect_redirect(InternalUser.last)
    end

    context 'with an invalid internal user' do
      before(:each) { post :create, params: { internal_user: {} } }

      expect_assigns(user: InternalUser)
      expect_status(200)
      expect_template(:new)
    end
  end

  describe 'DELETE #destroy' do
    before(:each) do
      allow(controller).to receive(:current_user).and_return(user)
      delete :destroy, params: { id: users.first.id }
    end

    expect_assigns(user: InternalUser)

    it 'destroys the internal user' do
      expect { delete :destroy, params: { id: InternalUser.last.id } }.to change(InternalUser, :count).by(-1)
    end

    expect_redirect(:internal_users)
  end

  describe 'GET #edit' do
    before(:each) do
      allow(controller).to receive(:current_user).and_return(user)
      get :edit, params: { id: users.first.id }
    end

    expect_assigns(user: InternalUser)
    expect_status(200)
    expect_template(:edit)
  end

  describe 'GET #forgot_password' do
    context 'when no user is logged in' do
      before(:each) do
        expect(controller).to receive(:current_user).and_return(nil)
        get :forgot_password
      end

      expect_status(200)
      expect_template(:forgot_password)
    end

    context 'when a user is already logged in' do
      before(:each) do
        expect(controller).to receive(:current_user).and_return(user)
        get :forgot_password
      end

      expect_flash_message(:alert, :'shared.already_signed_in')
      expect_redirect(:root)
    end
  end

  describe 'POST #forgot_password' do
    context 'with an email address' do
      let(:request) { proc { post :forgot_password, params: { email: user.email } } }
      before(:each) { request.call }

      it 'delivers instructions to reset the password' do
        expect(InternalUser).to receive(:find_by).and_return(user)
        expect(user).to receive(:deliver_reset_password_instructions!)
        request.call
      end

      expect_redirect(:root)
    end

    context 'without an email address' do
      before(:each) { post :forgot_password }

      expect_status(200)
      expect_template(:forgot_password)
    end
  end

  describe 'GET #index' do
    before(:each) do
      allow(controller).to receive(:current_user).and_return(user)
      get :index
    end

    expect_assigns(users: InternalUser.all)
    expect_status(200)
    expect_template(:index)
  end

  describe 'GET #new' do
    before(:each) do
      allow(controller).to receive(:current_user).and_return(user)
      get :new
    end

    expect_assigns(user: InternalUser)
    expect_status(200)
    expect_template(:new)
  end

  describe 'GET #reset_password' do
    let(:user) { users.first }

    context 'without a valid password reset token' do
      before(:each) { get :reset_password, params: { id: user.id } }

      expect_redirect(:root)
    end

    context 'with a valid password reset token' do
      before(:each) do
        user.deliver_reset_password_instructions!
        get :reset_password, params: { id: user.id, token: user.reset_password_token }
      end

      expect_assigns(user: :user)
      expect_status(200)
      expect_template(:reset_password)
    end
  end

  describe 'PUT #reset_password' do
    let(:user) { users.first }
    before(:each) { user.deliver_reset_password_instructions! }

    context 'without a valid password reset token' do
      before(:each) { put :reset_password, params: { id: user.id } }

      expect_redirect(:root)
    end

    context 'with a valid password reset token' do
      let(:password) { 'foo' }

      context 'with a matching password confirmation' do
        let(:request) { proc { put :reset_password, params: { internal_user: {password: password, password_confirmation: password}, id: user.id, token: user.reset_password_token } } }
        before(:each) { request.call }

        expect_assigns(user: :user)

        it 'changes the password' do
          expect(InternalUser.authenticate(user.email, password)).to eq(user)
        end

        expect_redirect(:sign_in)
      end

      context 'without a matching password confirmation' do
        before(:each) do
          put :reset_password, params: { internal_user: {password: password, password_confirmation: ''}, id: users.first.id, token: user.reset_password_token }
        end

        expect_assigns(user: :user)
        expect_status(200)
        expect_template(:reset_password)
      end
    end
  end

  describe 'GET #show' do
    before(:each) do
      allow(controller).to receive(:current_user).and_return(user)
      get :show, params: { id: users.first.id }
    end

    expect_assigns(user: InternalUser)
    expect_status(200)
    expect_template(:show)
  end

  describe 'PUT #update' do
    before(:each) { allow(controller).to receive(:current_user).and_return(user) }

    context 'with a valid internal user' do
      before(:each) { put :update, params: { internal_user: FactoryBot.attributes_for(:teacher), id: users.first.id } }

      expect_assigns(user: InternalUser)
      expect_redirect { user }
    end

    context 'with an invalid internal user' do
      before(:each) { put :update, params: { internal_user: {email: ''}, id: users.first.id } }

      expect_assigns(user: InternalUser)
      expect_status(200)
      expect_template(:edit)
    end
  end
end