def test_logout(mongodb, user, request):
login(request, "Paul", "paul has a good password")
session_key = request.session["session_key"]
request.session["paulsdata"] = "something secret and important"
logout(request)
assert request.session == {"session_key": session_key}
def test_login_fail(mongodb, user, request):
assert not login(request, "Paul", "paul has a bad password")
assert "auth_user_id" not in request.session
def test_login_user_not_exist(mongodb, user, request):
assert not login(request, "Edgar", "edgar doesnt exist")
assert "auth_user_id" not in request.session
def test_login_success(mongodb, user, request):
assert login(request, "Paul", "paul has a good password")
assert request.session["auth_user_id"] == "Paul"
