You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
140 lines
3.7 KiB
140 lines
3.7 KiB
require "rails_helper" |
|
require_relative "../support/devise" |
|
|
|
RSpec.describe UsersController, type: :request do |
|
let(:user) { FactoryBot.create(:user) } |
|
let(:unauthorised_user) { FactoryBot.create(:user) } |
|
let(:headers) { { "Accept" => "text/html" } } |
|
let(:page) { Capybara::Node::Simple.new(response.body) } |
|
let(:new_value) { "new test name" } |
|
let(:params) { { id: user.id, user: { name: new_value } } } |
|
|
|
context "a not signed in user" do |
|
describe "#show" do |
|
it "does not let you see user details" do |
|
get "/users/#{user.id}", headers: headers, params: {} |
|
expect(response).to redirect_to("/users/sign-in") |
|
end |
|
end |
|
|
|
describe "#edit" do |
|
it "does not let you edit user details" do |
|
get "/users/#{user.id}/edit", headers: headers, params: {} |
|
expect(response).to redirect_to("/users/sign-in") |
|
end |
|
end |
|
|
|
describe "#password" do |
|
it "does not let you edit user passwords" do |
|
get "/users/#{user.id}/password/edit", headers: headers, params: {} |
|
expect(response).to redirect_to("/users/sign-in") |
|
end |
|
end |
|
|
|
describe "#patch" do |
|
it "does not let you update user details" do |
|
patch "/case-logs/#{user.id}", params: {} |
|
expect(response).to redirect_to("/users/sign-in") |
|
end |
|
end |
|
end |
|
|
|
describe "#show" do |
|
context "current user is user" do |
|
before do |
|
sign_in user |
|
get "/users/#{user.id}", headers: headers, params: {} |
|
end |
|
|
|
it "show the user details" do |
|
expect(page).to have_content("Your account") |
|
end |
|
end |
|
|
|
context "current user is another user" do |
|
before do |
|
sign_in user |
|
get "/users/#{unauthorised_user.id}", headers: headers, params: {} |
|
end |
|
|
|
it "returns not found 404" do |
|
expect(response).to have_http_status(:not_found) |
|
end |
|
end |
|
end |
|
|
|
describe "#edit" do |
|
context "current user is user" do |
|
before do |
|
sign_in user |
|
get "/users/#{user.id}/edit", headers: headers, params: {} |
|
end |
|
|
|
it "show the edit personal details page" do |
|
expect(page).to have_content("Change your personal details") |
|
end |
|
end |
|
|
|
context "current user is another user" do |
|
before do |
|
sign_in user |
|
get "/users/#{unauthorised_user.id}/edit", headers: headers, params: {} |
|
end |
|
|
|
it "returns not found 404" do |
|
expect(response).to have_http_status(:not_found) |
|
end |
|
end |
|
end |
|
|
|
describe "#edit_password" do |
|
context "current user is user" do |
|
before do |
|
sign_in user |
|
get "/users/#{user.id}/password/edit", headers: headers, params: {} |
|
end |
|
|
|
it "show the edit password page" do |
|
expect(page).to have_content("Change your password") |
|
end |
|
end |
|
|
|
context "current user is another user" do |
|
before do |
|
sign_in user |
|
get "/users/#{unauthorised_user.id}/edit", headers: headers, params: {} |
|
end |
|
|
|
it "returns not found 404" do |
|
expect(response).to have_http_status(:not_found) |
|
end |
|
end |
|
end |
|
|
|
describe "#update" do |
|
context "current user is user" do |
|
before do |
|
sign_in user |
|
patch "/users/#{user.id}", headers: headers, params: params |
|
end |
|
|
|
it "updates the user" do |
|
user.reload |
|
expect(user.name).to eq(new_value) |
|
end |
|
end |
|
|
|
context "current user is another user" do |
|
let(:params) { { id: unauthorised_user.id, user: { name: new_value } } } |
|
|
|
before do |
|
sign_in user |
|
patch "/users/#{unauthorised_user.id}", headers: headers, params: params |
|
end |
|
|
|
it "returns not found 404" do |
|
expect(response).to have_http_status(:not_found) |
|
end |
|
end |
|
end |
|
end
|
|
|