Function TestUpdatePassword

pkg/server/controllers/users_test.go:813–929

(t *testing.T)

}

func TestUpdatePassword(t *testing.T) {
	t.Run("success", func(t *testing.T) {
		db := testutils.InitMemoryDB(t)

		// Setup
		a := app.NewTest()
		a.Clock = clock.NewMock()
		a.DB = db
		server := MustNewServer(t, &a)
		defer server.Close()

		user := testutils.SetupUserData(db, "alice@example.com", "oldpassword")

		// Execute
		dat := url.Values{}
		dat.Set("old_password", "oldpassword")
		dat.Set("new_password", "newpassword")
		dat.Set("new_password_confirmation", "newpassword")
		req := testutils.MakeFormReq(server.URL, "PATCH", "/account/password", dat)

		res := testutils.HTTPAuthDo(t, db, req, user)

		// Test
		assert.StatusCodeEquals(t, res, http.StatusFound, "Status code mismsatch")

		testutils.MustExec(t, db.Where("id = ?", user.ID).First(&user), "finding account")

		passwordErr := bcrypt.CompareHashAndPassword([]byte(user.Password.String), []byte("newpassword"))
		assert.Equal(t, passwordErr, nil, "Password mismatch")
	})

	t.Run("old password mismatch", func(t *testing.T) {
		db := testutils.InitMemoryDB(t)
		// Setup
		a := app.NewTest()
		a.Clock = clock.NewMock()
		a.DB = db
		server := MustNewServer(t, &a)
		defer server.Close()

		u := testutils.SetupUserData(db, "alice@example.com", "oldpassword")

		// Execute
		dat := url.Values{}
		dat.Set("old_password", "randompassword")
		dat.Set("new_password", "newpassword")
		dat.Set("new_password_confirmation", "newpassword")
		req := testutils.MakeFormReq(server.URL, "PATCH", "/account/password", dat)

		res := testutils.HTTPAuthDo(t, db, req, u)

		// Test
		assert.StatusCodeEquals(t, res, http.StatusUnauthorized, "Status code mismsatch")

		var user database.User
		testutils.MustExec(t, db.Where("id = ?", u.ID).First(&user), "finding account")
		assert.Equal(t, u.Password.String, user.Password.String, "password should not have been updated")
	})