lesspass/containers/backend/api/tests/test_auth.py

from rest_framework.test import APITestCase

from api import models
from api.tests import factories


class OldRegisterTestCase(APITestCase):
    def test_register(self):
        self.assertEqual(0, models.LessPassUser.objects.all().count())
        data = {
            "email": "contact@example.org",
            "password": "correct horse battery staple",
        }
        request = self.client.post("/api/auth/register/", data)
        self.assertEqual(request.status_code, 201)
        self.assertEqual(1, models.LessPassUser.objects.all().count())

    def test_register_404_weak_password(self):
        self.assertEqual(0, models.LessPassUser.objects.all().count())
        data = {
            "email": "contact@example.org",
            "password": "password",
        }
        request = self.client.post("/api/auth/register/", data)
        self.assertEqual(request.status_code, 400)
        self.assertEqual(0, models.LessPassUser.objects.all().count())


class OldLoginTestCase(APITestCase):
    def test_login(self):
        factories.UserFactory(
            email="contact@example.org", password="correct horse battery staple"
        )
        data = {
            "email": "contact@example.org",
            "password": "correct horse battery staple",
        }
        request = self.client.post("/api/tokens/auth/", data)
        self.assertEqual(request.status_code, 200)
        self.assertIsNotNone(request.data["token"])

    def test_login_bad_password(self):
        factories.UserFactory(
            email="contact@example.org", password="correct horse battery staple"
        )
        data = {
            "email": "contact@example.org",
            "password": "not the good password",
        }
        request = self.client.post("/api/tokens/auth/", data)
        self.assertEqual(request.status_code, 401)

    def test_nrt_get_passwords(self):
        user = factories.UserFactory(
            email="contact@example.org", password="correct horse battery staple"
        )
        password = factories.PasswordFactory(user=user)
        data = {
            "email": "contact@example.org",
            "password": "correct horse battery staple",
        }
        request = self.client.post("/api/tokens/auth/", data)
        headers = {
            "HTTP_AUTHORIZATION": "JWT {token}".format(token=request.data["token"])
        }
        request = self.client.get("/api/passwords/", **headers)
        self.assertEqual(request.status_code, 200)
        self.assertEqual(request.data["results"][0]["login"], password.login)

    def test_nrt_get_passwords_with_bearer(self):
        user = factories.UserFactory(
            email="contact@example.org", password="correct horse battery staple"
        )
        password = factories.PasswordFactory(user=user)
        data = {
            "email": "contact@example.org",
            "password": "correct horse battery staple",
        }
        request = self.client.post("/api/auth/jwt/create/", data)
        headers = {
            "HTTP_AUTHORIZATION": "Bearer {token}".format(token=request.data["access"])
        }
        request = self.client.get("/api/passwords/", **headers)
        self.assertEqual(request.status_code, 200)
        self.assertEqual(request.data["results"][0]["login"], password.login)


class LogInTestCase(APITestCase):
    def setUp(self):
        factories.UserFactory(
            email="test@example.org",
            password="test@example.org",
        )

    def test_login(self):
        data = {
            "email": "test@example.org",
            "password": "test@example.org",
        }
        request = self.client.post("/api/auth/jwt/create/", data)
        self.assertEqual(request.status_code, 200)
        payload = request.json()
        self.assertTrue("access" in payload)
        self.assertTrue("refresh" in payload)

    def test_refresh_token(self):
        data = {
            "email": "test@example.org",
            "password": "test@example.org",
        }
        request = self.client.post("/api/auth/jwt/create/", data)
        self.assertEqual(request.status_code, 200)
        payload = request.json()
        refresh_token = payload["refresh"]
        request = self.client.post("/api/auth/jwt/refresh/", {"refresh": refresh_token})
        self.assertEqual(request.status_code, 200)
        payload = request.json()
        self.assertTrue("access" in payload)
        self.assertTrue("refresh" in payload)