def test_forgot_password_routine(client):
employee = factories.EmployeeFactory(username="******",
password=auth_hash("pass"),
email="*****@*****.**")
error = login(employee.username, "pass")
flask.session.clear()
client.post(flask.url_for("auth.forgot_password"),
data={"email": employee.email})
error = login(employee.username, "pass")
assert error
assert not flask.session.get("user_id")
def login():
if request.method == "POST":
error = auth.login(username=request.form["username"],
password=request.form["password"])
if error is not None:
return redirect(url_for("auth.login"))
return render_template("auth/login.html")
def test_incorrect_password(db_session):
employee = Employee(first_name="Alice", last_name="Cooper",
username="******", phone_number="1", account_status="A",
birth_date=datetime.utcnow(), pin_code=4567,
registration_date=datetime.utcnow(), user_status="U",
email="*****@*****.**", password="******")
db_session.add(employee)
db_session.commit()
assert (login("unknown", "unknown") == "login.failed")
def test_login(db_session):
employee = Employee(first_name="Alice", last_name="Cooper",
username="******", phone_number="1", account_status="A",
birth_date=datetime.utcnow(), pin_code=4567,
registration_date=datetime.utcnow(), user_status="U",
email="*****@*****.**", password=auth_hash("pass"))
db_session.add(employee)
db_session.commit()
error = login("vgv", "pass")
assert not error
assert flask.session['user_id'] == employee.id
def test_incorrect_password(db_session):
employee = Employee(first_name="Alice",
last_name="Cooper",
username="******",
phone_number="1",
birth_date=datetime.utcnow(),
registration_date=datetime.utcnow(),
email="*****@*****.**",
password="******")
db_session.add(employee)
db_session.commit()
error = login("vgv", "unknown")
assert (error == "Incorrect password.")
def test_login(db_session):
employee = Employee(first_name="Alice",
last_name="Cooper",
username="******",
phone_number="1",
birth_date=datetime.utcnow(),
registration_date=datetime.utcnow(),
email="*****@*****.**",
password="******")
db_session.add(employee)
db_session.commit()
error = login("vgv", "pass")
db_session.delete(employee)
db_session.commit()
db_session.remove()
assert (error is None)
def test_incorrect_username(db_session):
"""Do not remove db_session dependency. It is injected
in order to trigger db migration.
"""
assert (login("unknown", "unknown") == "login.failed")
