Merge pull request #1284 from alphagov/validate-sms-sender

Stop letting people enter empty SMS senders

app/main/forms.py

@@ -491,6 +491,7 @@ class ServiceSmsSender(Form):
     sms_sender = StringField(
         'Text message sender',
         validators=[
+            DataRequired(message="Can’t be empty"),
             Length(max=11, message="Enter 11 characters or fewer")
         ]
     )

app/templates/views/service-settings/set-sms-sender.html

@@ -13,17 +13,9 @@
     This appears instead of a phone number when a user receives a
     text message from your service.
   <p>
-    If you leave this blank:
+    If you set this to ‘GOVUK’ each message will begin with
+    ‘{{ current_service.name }}:’.
   </p>
-  <ul class="list list-bullet">
-    <li>
-      your messages will be sent from 40604 (a shortcode that’s
-      reserved for government use)
-    </li>
-    <li>
-      each message will begin with ‘{{ current_service.name }}:’
-    </li>
-  </ul>
   <form method="post">
     {{ textbox(
       form.sms_sender,

tests/app/main/test_validators.py

@@ -183,7 +183,7 @@ def test_sms_sender_form_validation(
 
     form.sms_sender.data = ''
     form.validate()
-    assert not form.errors
+    assert "Can’t be empty" == form.errors['sms_sender'][0]
 
     form.sms_sender.data = 'morethanelevenchars'
     form.validate()

tests/app/main/views/test_service_settings.py

@@ -615,6 +615,32 @@ def test_set_text_message_sender(
     )
 
 
+@pytest.mark.parametrize('content, expected_error', [
+    ("", "Can’t be empty"),
+    ("twelvecharss", "Enter 11 characters or fewer"),
+    (".", "Use letters and numbers only")
+])
+def test_set_text_message_sender_validation(
+    logged_in_client,
+    mock_update_service,
+    service_one,
+    mock_get_letter_organisations,
+    content,
+    expected_error,
+):
+    response = logged_in_client.post(url_for(
+        'main.service_set_sms_sender',
+        service_id=service_one['id']),
+        data={"sms_sender": content},
+        follow_redirects=True
+    )
+    page = BeautifulSoup(response.data.decode('utf-8'), 'html.parser')
+
+    assert response.status_code == 200
+    assert page.select(".error-message")[0].text.strip() == expected_error
+    assert not mock_update_service.called
+
+
 def test_if_sms_sender_set_then_form_populated(
     logged_in_client,
     service_one,