60 lines
		
	
	
	
		
			1.7 KiB
		
	
	
	
		
			Elixir
		
	
	
	
	
	
			
		
		
	
	
			60 lines
		
	
	
	
		
			1.7 KiB
		
	
	
	
		
			Elixir
		
	
	
	
	
	
| # Pleroma: A lightweight social networking server
 | |
| # Copyright © 2017-2019 Pleroma Authors <https://pleroma.social/>
 | |
| # SPDX-License-Identifier: AGPL-3.0-only
 | |
| 
 | |
| defmodule Pleroma.Web.TwitterAPI.PasswordControllerTest do
 | |
|   use Pleroma.Web.ConnCase
 | |
| 
 | |
|   alias Pleroma.PasswordResetToken
 | |
|   alias Pleroma.Web.OAuth.Token
 | |
|   import Pleroma.Factory
 | |
| 
 | |
|   describe "GET /api/pleroma/password_reset/token" do
 | |
|     test "it returns error when token invalid", %{conn: conn} do
 | |
|       response =
 | |
|         conn
 | |
|         |> get("/api/pleroma/password_reset/token")
 | |
|         |> html_response(:ok)
 | |
| 
 | |
|       assert response =~ "<h2>Invalid Token</h2>"
 | |
|     end
 | |
| 
 | |
|     test "it shows password reset form", %{conn: conn} do
 | |
|       user = insert(:user)
 | |
|       {:ok, token} = PasswordResetToken.create_token(user)
 | |
| 
 | |
|       response =
 | |
|         conn
 | |
|         |> get("/api/pleroma/password_reset/#{token.token}")
 | |
|         |> html_response(:ok)
 | |
| 
 | |
|       assert response =~ "<h2>Password Reset for #{user.nickname}</h2>"
 | |
|     end
 | |
|   end
 | |
| 
 | |
|   describe "POST /api/pleroma/password_reset" do
 | |
|     test "it returns HTTP 200", %{conn: conn} do
 | |
|       user = insert(:user)
 | |
|       {:ok, token} = PasswordResetToken.create_token(user)
 | |
|       {:ok, _access_token} = Token.create_token(insert(:oauth_app), user, %{})
 | |
| 
 | |
|       params = %{
 | |
|         "password" => "test",
 | |
|         password_confirmation: "test",
 | |
|         token: token.token
 | |
|       }
 | |
| 
 | |
|       response =
 | |
|         conn
 | |
|         |> assign(:user, user)
 | |
|         |> post("/api/pleroma/password_reset", %{data: params})
 | |
|         |> html_response(:ok)
 | |
| 
 | |
|       assert response =~ "<h2>Password changed!</h2>"
 | |
| 
 | |
|       user = refresh_record(user)
 | |
|       assert Comeonin.Pbkdf2.checkpw("test", user.password_hash)
 | |
|       assert length(Token.get_user_tokens(user)) == 0
 | |
|     end
 | |
|   end
 | |
| end
 | 
