Fix wording

Changed forgot-password so that it does not expose to the user that the email address does not exist.
This commit is contained in:
Rebecca Law
2016-01-08 16:47:34 +00:00
parent 677f8891b2
commit f7373ee5fc
5 changed files with 14 additions and 23 deletions

View File

@@ -15,13 +15,13 @@ def test_should_redirect_to_password_reset_sent(notifications_admin,
notifications_admin_db,
mocker,
notify_db_session):
_set_up_mocker(mocker)
create_test_user('active')
mocker.patch("app.admin_api_client.send_email")
user = create_test_user('active')
response = notifications_admin.test_client().post('/forgot-password',
data={'email_address': 'test@user.gov.uk'})
data={'email_address': user.email_address})
assert response.status_code == 200
assert 'You have been sent an email containing a url to reset your password.' in response.get_data(as_text=True)
assert 'You have been sent an email containing a link to reset your password.' in response.get_data(
as_text=True)
def test_should_redirect_to_forgot_password_with_flash_message_when_token_is_expired(notifications_admin,
@@ -37,7 +37,3 @@ def test_should_redirect_to_forgot_password_with_flash_message_when_token_is_exp
assert response.status_code == 302
assert response.location == url_for('.forgot_password', _external=True)
notifications_admin.config['TOKEN_MAX_AGE_SECONDS'] = 86400
def _set_up_mocker(mocker):
mocker.patch("app.admin_api_client.send_email")