0

我正在尝试实施一些测试来验证 Authlogic 密码重置的行为，如http://www.binarylogic.com/2008/11/16/tutorial-reset-passwords-with-authlogic/中所述

我正在使用 Authlogic、Shouda、Webrat 和 Factory Girl，这是我的测试：

require 'test_helper'

class PasswordResetTest < ActionController::IntegrationTest


  setup :activate_authlogic

  context "A registered user" do
    setup do
      @reggie = Factory(:reggie)

    end

    should "not allow logged in users to change password" do
      visit signin_path
      fill_in 'Email', :with => @reggie.email
      fill_in 'Password', :with => @reggie.password
      click_button 'Sign In'
      assert_equal controller.session['user_credentials'], @reggie.persistence_token
      visit change_password_path
      assert_equal account_path, path
      assert_match /must be logged out/, flash[:notice]
      visit signout_path
      assert_equal controller.session['user_credentials'], nil
      visit change_password_path
      assert_equal change_password_path, path
    end

    should "allow logged out users to change password" do
      visit signout_path
      assert_equal controller.session['user_credentials'], nil
      visit change_password_path
      assert_template :new
      fill_in 'email', :with => @reggie.email
      click_button 'Reset my password'
      assert_match /Please check your email/, flash[:notice]
      assert !ActionMailer::Base.deliveries.empty?
      sent = ActionMailer::Base.deliveries.first
      assert_equal [@reggie.email], sent.to
      assert_match /Password Reset Instructions/, sent.subject
      assert_not_nil @reggie.perishable_token
      #TODO
      p "Perishable Token #{@reggie.perishable_token}"
      assert_match assigns[:edit_password_reset_url], sent.body
    end
  end
end

在测试的最后两行中，我试图确保发出的链接具有正确的 perishable_token，并且打印的 Perishable Token 和发出的链接中的令牌总是不同。

我应该如何测试这种行为？

谢谢，湿婆

4

2 回答 2

0

将行更改为notifier.rb：

body          :edit_password_resets_url => edit_password_resets_url(user.perishable_token)
于 2010-02-11T01:18:53.110 回答
0

小心。Authlogic 很神奇。某些操作会导致 User 对象发生变异，当它发生变异时，perishable_token 就会消失（重新生成）。

我想知道您的访问signout_path是否真的让您退出。通常，如果您的 UserSession 是 RESTful 的，您必须向资源发出 HTTP DELETE 才能实际删除会话。'/logout'除非您有明确的路线（例如映射到:controller => 'user_sessions', :action => 'destroy'），否则仅访问路径（使用 GET）不会删除会话

于 2009-10-02T05:01:04.037 回答