2019-07-10 05:13:23 +00:00
|
|
|
# Pleroma: A lightweight social networking server
|
2021-01-13 06:49:20 +00:00
|
|
|
# Copyright © 2017-2021 Pleroma Authors <https://pleroma.social/>
|
2019-07-10 05:13:23 +00:00
|
|
|
# SPDX-License-Identifier: AGPL-3.0-only
|
|
|
|
|
2019-06-24 19:01:56 +00:00
|
|
|
defmodule Pleroma.Web.TwitterAPI.PasswordControllerTest do
|
|
|
|
use Pleroma.Web.ConnCase
|
|
|
|
|
|
|
|
alias Pleroma.PasswordResetToken
|
2019-09-22 13:08:07 +00:00
|
|
|
alias Pleroma.User
|
2019-06-24 19:01:56 +00:00
|
|
|
alias Pleroma.Web.OAuth.Token
|
|
|
|
import Pleroma.Factory
|
|
|
|
|
|
|
|
describe "GET /api/pleroma/password_reset/token" do
|
|
|
|
test "it returns error when token invalid", %{conn: conn} do
|
|
|
|
response =
|
|
|
|
conn
|
|
|
|
|> get("/api/pleroma/password_reset/token")
|
|
|
|
|> html_response(:ok)
|
|
|
|
|
|
|
|
assert response =~ "<h2>Invalid Token</h2>"
|
|
|
|
end
|
|
|
|
|
|
|
|
test "it shows password reset form", %{conn: conn} do
|
|
|
|
user = insert(:user)
|
|
|
|
{:ok, token} = PasswordResetToken.create_token(user)
|
|
|
|
|
|
|
|
response =
|
|
|
|
conn
|
|
|
|
|> get("/api/pleroma/password_reset/#{token.token}")
|
|
|
|
|> html_response(:ok)
|
|
|
|
|
|
|
|
assert response =~ "<h2>Password Reset for #{user.nickname}</h2>"
|
|
|
|
end
|
2020-11-19 11:27:06 +00:00
|
|
|
|
|
|
|
test "it returns an error when the token has expired", %{conn: conn} do
|
|
|
|
clear_config([:instance, :password_reset_token_validity], 0)
|
|
|
|
|
|
|
|
user = insert(:user)
|
|
|
|
{:ok, token} = PasswordResetToken.create_token(user)
|
2020-12-16 09:39:36 +00:00
|
|
|
{:ok, token} = time_travel(token, -2)
|
2020-11-19 11:27:06 +00:00
|
|
|
|
|
|
|
response =
|
|
|
|
conn
|
|
|
|
|> get("/api/pleroma/password_reset/#{token.token}")
|
|
|
|
|> html_response(:ok)
|
|
|
|
|
|
|
|
assert response =~ "<h2>Invalid Token</h2>"
|
|
|
|
end
|
2019-06-24 19:01:56 +00:00
|
|
|
end
|
|
|
|
|
|
|
|
describe "POST /api/pleroma/password_reset" do
|
2020-11-19 11:27:06 +00:00
|
|
|
test "it fails for an expired token", %{conn: conn} do
|
|
|
|
clear_config([:instance, :password_reset_token_validity], 0)
|
|
|
|
|
|
|
|
user = insert(:user)
|
|
|
|
{:ok, token} = PasswordResetToken.create_token(user)
|
2020-12-16 09:39:36 +00:00
|
|
|
{:ok, token} = time_travel(token, -2)
|
2020-11-19 11:27:06 +00:00
|
|
|
{:ok, _access_token} = Token.create(insert(:oauth_app), user, %{})
|
|
|
|
|
|
|
|
params = %{
|
|
|
|
"password" => "test",
|
|
|
|
password_confirmation: "test",
|
|
|
|
token: token.token
|
|
|
|
}
|
|
|
|
|
|
|
|
response =
|
|
|
|
conn
|
|
|
|
|> assign(:user, user)
|
|
|
|
|> post("/api/pleroma/password_reset", %{data: params})
|
|
|
|
|> html_response(:ok)
|
|
|
|
|
|
|
|
refute response =~ "<h2>Password changed!</h2>"
|
|
|
|
end
|
|
|
|
|
2019-06-24 19:01:56 +00:00
|
|
|
test "it returns HTTP 200", %{conn: conn} do
|
|
|
|
user = insert(:user)
|
|
|
|
{:ok, token} = PasswordResetToken.create_token(user)
|
2020-08-25 16:17:51 +00:00
|
|
|
{:ok, _access_token} = Token.create(insert(:oauth_app), user, %{})
|
2019-06-24 19:01:56 +00:00
|
|
|
|
|
|
|
params = %{
|
|
|
|
"password" => "test",
|
|
|
|
password_confirmation: "test",
|
|
|
|
token: token.token
|
|
|
|
}
|
|
|
|
|
|
|
|
response =
|
|
|
|
conn
|
|
|
|
|> assign(:user, user)
|
|
|
|
|> post("/api/pleroma/password_reset", %{data: params})
|
|
|
|
|> html_response(:ok)
|
|
|
|
|
|
|
|
assert response =~ "<h2>Password changed!</h2>"
|
|
|
|
|
|
|
|
user = refresh_record(user)
|
2020-05-12 21:42:24 +00:00
|
|
|
assert Pbkdf2.verify_pass("test", user.password_hash)
|
2020-01-20 10:53:14 +00:00
|
|
|
assert Enum.empty?(Token.get_user_tokens(user))
|
2019-06-24 19:01:56 +00:00
|
|
|
end
|
2019-09-22 13:08:07 +00:00
|
|
|
|
|
|
|
test "it sets password_reset_pending to false", %{conn: conn} do
|
2019-10-16 18:59:21 +00:00
|
|
|
user = insert(:user, password_reset_pending: true)
|
2019-09-22 13:08:07 +00:00
|
|
|
|
|
|
|
{:ok, token} = PasswordResetToken.create_token(user)
|
2020-08-25 16:17:51 +00:00
|
|
|
{:ok, _access_token} = Token.create(insert(:oauth_app), user, %{})
|
2019-09-22 13:08:07 +00:00
|
|
|
|
|
|
|
params = %{
|
|
|
|
"password" => "test",
|
|
|
|
password_confirmation: "test",
|
|
|
|
token: token.token
|
|
|
|
}
|
|
|
|
|
|
|
|
conn
|
|
|
|
|> assign(:user, user)
|
|
|
|
|> post("/api/pleroma/password_reset", %{data: params})
|
|
|
|
|> html_response(:ok)
|
|
|
|
|
2019-10-16 18:59:21 +00:00
|
|
|
assert User.get_by_id(user.id).password_reset_pending == false
|
2019-09-22 13:08:07 +00:00
|
|
|
end
|
2019-06-24 19:01:56 +00:00
|
|
|
end
|
|
|
|
end
|