54c071856e
* Create first start at desktop top header updates * Update mobile styling of top header * Stylize sign in widget card * Update nav menu and top bar * Changes based on user being logged-in or not * Uses user_signed_in? on top nav bar * Fix lingering old cloudinary helper method * Trigger CI * Fixes specs * Adds redirect_using_referer_spec, fixes other specs & cleanup * Adds nav-menu.scss to layouts/_styles.html.erb for inline & small edit in referer check * Remove logged-out styles to make it more uniform with logged in * Remove nav-menu.scss file * cleanup markup and JS a little * Fixes FB auth specs to new login links * Makes sure unauthenticated /new redirects back to editor * CI fix Sing in with -> Continue with * Update db/schema.rb * Update db/schema.rb * Update db/schema.rb Co-authored-by: Fernando Valverde <fdov88@gmail.com> Co-authored-by: ludwiczakpawel <ludwiczakpawel@gmail.com> Co-authored-by: Ben Halpern <bendhalpern@gmail.com>
74 lines
2.3 KiB
Ruby
74 lines
2.3 KiB
Ruby
require "rails_helper"
|
|
|
|
RSpec.describe "Authenticating with a password" do
|
|
def submit_login_form(email, password)
|
|
fill_in "Email", with: email
|
|
fill_in "Password", with: password
|
|
click_button "Continue"
|
|
end
|
|
|
|
let(:password) { "p4assw0rd" }
|
|
let!(:user) { create(:user, password: password, password_confirmation: password) }
|
|
|
|
before do
|
|
visit sign_up_path
|
|
end
|
|
|
|
context "when logging in with incorrect credentials" do
|
|
it "displays an error when the email address is wrong" do
|
|
submit_login_form("wrong@example.com", password)
|
|
|
|
expect(page).to have_text("Invalid Email or password.")
|
|
end
|
|
|
|
it "displays an error when the password is wrong" do
|
|
submit_login_form(user.email, "wr0ng")
|
|
expect(page).to have_text("Invalid Email or password.")
|
|
end
|
|
|
|
it "displays a message on the last login attempt" do
|
|
allow(User).to receive(:maximum_attempts).and_return(2)
|
|
|
|
submit_login_form(user.email, "wr0ng")
|
|
expect(page).to have_text("You have one more attempt before your account is locked.")
|
|
end
|
|
|
|
it "displays a message when the user got locked out" do
|
|
allow(User).to receive(:maximum_attempts).and_return(1)
|
|
|
|
submit_login_form(user.email, "wr0ng")
|
|
expect(page).to have_text("Your account is locked.")
|
|
end
|
|
|
|
it "sends an email with the unlock link if the uset gets locked out" do
|
|
allow(User).to receive(:maximum_attempts).and_return(1)
|
|
|
|
expect do
|
|
submit_login_form(user.email, "wr0ng")
|
|
end.to change { Devise.mailer.deliveries.count }.by(1)
|
|
end
|
|
end
|
|
|
|
context "when the user's account is locked" do
|
|
it "allows the user to unlock their account via social logins" do
|
|
omniauth_mock_github_payload
|
|
auth_payload = OmniAuth.config.mock_auth[:github]
|
|
create(:user, :with_identity, identities: [:github])
|
|
auth_payload.info.email = user.email
|
|
user.lock_access!
|
|
|
|
visit sign_up_path
|
|
click_link("Continue with GitHub", match: :first)
|
|
|
|
expect(page).to have_current_path("/?signin=true")
|
|
expect(page).not_to have_text("Your account is locked.")
|
|
end
|
|
end
|
|
|
|
context "when logging in with the correct credentials" do
|
|
it "allows the user to sign in with the correct password" do
|
|
submit_login_form(user.email, password)
|
|
expect(page).to have_current_path("/?signin=true")
|
|
end
|
|
end
|
|
end
|