aboutsummaryrefslogblamecommitdiffstats
path: root/activemodel/test/cases/secure_password_test.rb
blob: c455cf57b3adfe98aeaf02701cca97eeef16de02 (plain) (tree)
1
2
3
4
5
6
7
8
9
10
11

                      

                              

                                                
 



                    











                                                 



                                     
 


                                            
 
                        
 
                                                   
 

                       
 

                             
 


                                       










                                                                                                   
   
require 'cases/helper'
require 'models/user'
require 'models/visitor'
require 'models/administrator'

class SecurePasswordTest < ActiveModel::TestCase

  setup do
    @user = User.new
  end

  test "blank password" do
    user = User.new
    user.password = ''
    assert !user.valid?, 'user should be invalid'
  end

  test "nil password" do
    user = User.new
    user.password = nil
    assert !user.valid?, 'user should be invalid'
  end

  test "password must be present" do
    assert !@user.valid?
    assert_equal 1, @user.errors.size
  end

  test "password must match confirmation" do
    @user.password = "thiswillberight"
    @user.password_confirmation = "wrong"

    assert !@user.valid?

    @user.password_confirmation = "thiswillberight"

    assert @user.valid?
  end

  test "authenticate" do
    @user.password = "secret"

    assert !@user.authenticate("wrong")
    assert @user.authenticate("secret")
  end

  test "visitor#password_digest should be protected against mass assignment" do
    assert Visitor.active_authorizer.kind_of?(ActiveModel::MassAssignmentSecurity::BlackList)
    assert Visitor.active_authorizer.include?(:password_digest)
  end

  test "Administrator's mass_assignment_authorizer should be WhiteList" do
    assert Administrator.active_authorizer.kind_of?(ActiveModel::MassAssignmentSecurity::WhiteList)
    assert !Administrator.active_authorizer.include?(:password_digest)
    assert Administrator.active_authorizer.include?(:name)
  end
end