Add tests for login and register

app/models/users.py

@@ -143,7 +143,7 @@ class User(db.Model, UserMixin):
 
 	# User email information
 	email         = db.Column(db.String(255), nullable=True, unique=True)
-	email_confirmed_at  = db.Column(db.DateTime(), nullable=True)
+	email_confirmed_at  = db.Column(db.DateTime(), nullable=True, server_default=None)
 
 	# User information
 	profile_pic   = db.Column(db.String(255), nullable=True, server_default=None)
@@ -178,7 +178,6 @@ class User(db.Model, UserMixin):
 
 	def __init__(self, username=None, active=False, email=None, password=None):
 		self.username = username
-		self.email_confirmed_at = datetime.datetime.now() - datetime.timedelta(days=6000)
 		self.display_name = username
 		self.is_active = active
 		self.email = email

app/tests/integ/test_user.py

@@ -0,0 +1,86 @@
+from flask import url_for
+
+from app.models import User, UserEmailVerification
+from .utils import login, logout, is_logged_in
+from .utils import client # noqa
+
+
+def test_login_logout(client):
+	rv = client.get("/")
+	assert not is_logged_in(rv)
+
+	rv = login(client, "rubenwardy", "tuckfrump")
+	assert b"Logged in successfully." in rv.data
+	assert is_logged_in(rv)
+
+	rv = client.get("/")
+	assert is_logged_in(rv)
+
+	rv = logout(client)
+	assert not is_logged_in(rv)
+
+	rv = login(client, "rubenwardy", "wrongpass")
+	assert b"Incorrect password. Did you set one?" in rv.data
+	assert not is_logged_in(rv)
+
+	rv = login(client, "badname", "wrongpass")
+	assert b"User badname does not exist" in rv.data
+	assert not is_logged_in(rv)
+
+	rv = login(client, "bad@email.com", "wrongpass")
+	assert b"Incorrect email or password" in rv.data
+	assert not is_logged_in(rv)
+
+
+def register(client, username, display_name, password, email, question):
+	return client.post("/user/register/", data=dict(
+			username=username,
+			display_name=display_name,
+			email=email,
+			password=password,
+			question=question,
+			agree=True
+	), follow_redirects=True)
+
+
+def test_register(client):
+	username = "testuser123"
+	assert User.query.filter_by(username=username).first() is None
+
+	rv = register(client, username, "Test User", "password", "test@example.com", "13")
+	assert b"Incorrect captcha answer" in rv.data
+
+	rv = register(client, "££££!!!", "Test User", "password", "test@example.com", "13")
+	assert b"invalid-feedback" in rv.data
+	assert b"Only a-zA-Z0-9._ allowed</p>" in rv.data
+
+
+def test_register_flow(client):
+	username = "testuser123"
+
+	assert User.query.filter_by(username=username).first() is None
+
+	rv = register(client, username, "Test User", "password", "test@example.com", "19")
+	assert b"Check your email address to verify your account" in rv.data
+
+	user = User.query.filter_by(username=username).first()
+	assert user is not None
+	assert user.username == username
+	assert user.display_name == "Test User"
+	assert not user.is_active
+	assert user.email_confirmed_at is None
+	assert user.email == "test@example.com"
+
+	rv = login(client, username, "password")
+	assert b"You need to confirm the registration email" in rv.data
+	assert not is_logged_in(rv)
+
+	email = UserEmailVerification.query.filter_by(user_id=user.id).first()
+	assert email is not None
+
+	rv = client.get(url_for('users.verify_email', token=email.token), follow_redirects=True)
+	assert b"You may now log in" in rv.data
+
+	rv = login(client, username, "password")
+	assert b"Logged in successfully." in rv.data
+	assert is_logged_in(rv)

app/tests/integ/utils.py

@@ -35,6 +35,7 @@ def is_int(v):
 @pytest.fixture
 def client():
 	app.config["TESTING"] = True
+	app.config['WTF_CSRF_ENABLED'] = False
 
 	recreate_db()
 	assert User.query.count() == 1
@@ -43,6 +44,7 @@ def client():
 		yield client
 
 	app.config["TESTING"] = False
+	app.config['WTF_CSRF_ENABLED'] = True
 
 
 def validate_package_list(packages, strict=False):
@@ -65,3 +67,18 @@ def validate_package_list(packages, strict=False):
 		assert is_optional(str, package.get("thumbnail"))
 		assert is_str(package.get("title"))
 		assert is_str(package.get("type"))
+
+
+def login(client, username, password):
+	return client.post("/user/login/", data=dict(
+			username=username,
+			password=password,
+	), follow_redirects=True)
+
+
+def logout(client):
+	return client.post("/user/logout/", follow_redirects=True)
+
+
+def is_logged_in(rv):
+	return b"/user/login/" not in rv.data and b"/user/logout/" in rv.data