require_relative '../../test_helper' class V1::UsersControllerTest < ActionController::TestCase test "user can change settings" do user = find_record :user changed_attribs = record_attributes_for :user_with_settings account_settings = stub account_settings.expects(:update).with(changed_attribs) Account.expects(:new).with(user).returns(account_settings) login user put :update, :user => changed_attribs, :id => user.id, :format => :json assert_equal user, assigns[:user] assert_response 204 assert_equal " ", @response.body end test "admin can update user" do user = find_record :user changed_attribs = record_attributes_for :user_with_settings account_settings = stub account_settings.expects(:update).with(changed_attribs) Account.expects(:new).with(user).returns(account_settings) login :is_admin? => true put :update, :user => changed_attribs, :id => user.id, :format => :json assert_equal user, assigns[:user] assert_response 204 end test "user cannot update other user" do user = find_record :user login put :update, id: user.id, user: record_attributes_for(:user_with_settings), :format => :json assert_access_denied end test "should create new user" do user_attribs = record_attributes_for :user user = User.new(user_attribs) Account.expects(:create).with(user_attribs).returns(user) post :create, :user => user_attribs, :format => :json assert_nil session[:user_id] assert_json_response user assert_response :success end test "should redirect to signup form on failed attempt" do user_attribs = record_attributes_for :user user_attribs.slice!('login') user = User.new(user_attribs) assert !user.valid? Account.expects(:create).with(user_attribs).returns(user) post :create, :user => user_attribs, :format => :json assert_json_error user.errors.messages assert_response 422 end test "admin can autocomplete users" do login :is_admin? => true get :index, :query => 'a', :format => :json assert_response :success assert assigns(:users) end test "create returns forbidden if registration is closed" do user_attribs = record_attributes_for :user with_config(allow_registration: false) do post :create, :user => user_attribs, :format => :json assert_response :forbidden end end test "admin can show user" do user = FactoryGirl.create :user login :is_admin? => true get :show, :id => 0, :login => user.login, :format => :json assert_response :success assert_json_response user get :show, :id => user.id, :format => :json assert_response :success assert_json_response user get :show, :id => "0", :format => :json assert_response :not_found end test "normal users cannot show user" do user = find_record :user login get :show, :id => 0, :login => user.login, :format => :json assert_access_denied end test "api monitor auth can create and destroy test users" do with_config(allow_registration: false) do monitor_auth do user_attribs = record_attributes_for :test_user post :create, :user => user_attribs, :format => :json assert_response :success delete :destroy, :id => assigns(:user).id, :format => :json assert_response :success end end end test "api monitor auth cannot create normal users" do monitor_auth do user_attribs = record_attributes_for :user post :create, :user => user_attribs, :format => :json assert_response :forbidden end end test "api monitor auth cannot delete normal users" do post :create, :user => record_attributes_for(:user), :format => :json assert_response :success normal_user_id = assigns(:user).id monitor_auth do delete :destroy, :id => normal_user_id, :format => :json assert_response :forbidden end end end