mirror of
https://github.com/GSA/notifications-admin.git
synced 2026-09-03 02:10:44 -04:00
f7373ee5fc
Changed forgot-password so that it does not expose to the user that the email address does not exist.
40 lines
2.1 KiB
Python
40 lines
2.1 KiB
Python
from flask import url_for
|
|
|
|
from app.main.views import generate_token
|
|
from tests.app.main import create_test_user
|
|
|
|
|
|
def test_should_render_forgot_password(notifications_admin, notifications_admin_db, notify_db_session):
|
|
response = notifications_admin.test_client().get('/forgot-password')
|
|
assert response.status_code == 200
|
|
assert 'If you have forgotten your password, we can send you an email to create a new password.' \
|
|
in response.get_data(as_text=True)
|
|
|
|
|
|
def test_should_redirect_to_password_reset_sent(notifications_admin,
|
|
notifications_admin_db,
|
|
mocker,
|
|
notify_db_session):
|
|
mocker.patch("app.admin_api_client.send_email")
|
|
user = create_test_user('active')
|
|
response = notifications_admin.test_client().post('/forgot-password',
|
|
data={'email_address': user.email_address})
|
|
assert response.status_code == 200
|
|
assert 'You have been sent an email containing a link to reset your password.' in response.get_data(
|
|
as_text=True)
|
|
|
|
|
|
def test_should_redirect_to_forgot_password_with_flash_message_when_token_is_expired(notifications_admin,
|
|
notifications_admin_db,
|
|
notify_db_session):
|
|
with notifications_admin.test_request_context():
|
|
with notifications_admin.test_client() as client:
|
|
notifications_admin.config['TOKEN_MAX_AGE_SECONDS'] = -1000
|
|
user = create_test_user('active')
|
|
token = generate_token(user.email_address)
|
|
response = client.post('/new-password/{}'.format(token),
|
|
data={'new_password': 'a-new_password'})
|
|
assert response.status_code == 302
|
|
assert response.location == url_for('.forgot_password', _external=True)
|
|
notifications_admin.config['TOKEN_MAX_AGE_SECONDS'] = 86400
|