docbrown/spec/requests/user/user_changes_password_spec.rb

require "rails_helper"

RSpec.describe "User changes password" do
  let(:password) { "password123" }
  let(:user) { create(:user, password: password, password_confirmation: password) }

  describe "POST /users/update_password" do
    it "does not update the password if the current password is wrong" do
      sign_in user
      post user_update_password_path,
           params: {
             current_password: "wrongwrong",
             password: "testtest",
             password_confirmation: "testtest"
           }

      expect(response.body).to include("Current password is invalid")
    end

    it "does not update the password if the new password is too short" do
      sign_in user
      post user_update_password_path,
           params: {
             current_password: password,
             password: "test",
             password_confirmation: "test"
           }

      expect(response.body).to include("Password is too short (minimum is 8 characters)")
    end

    it "does not update the password if the new passwords don't match" do
      sign_in user
      post user_update_password_path,
           params: {
             current_password: password,
             password: "testtest",
             password_confirmation: "testtesy"
           }

      expect(response.body).to include("error")
      expected_message = CGI.escapeHTML("Password doesn't match password confirmation")
      expect(response.body).to include(expected_message)
    end

    it "updates the password if all params are valid" do
      sign_in user
      post user_update_password_path,
           params: {
             current_password: password,
             password: "testtest",
             password_confirmation: "testtest"
           }

      expect(response.body).not_to include("error")
      expect(response).to redirect_to("/settings/account")
    end
  end
end