1 defmodule Pleroma.Web.TwitterAPI.PasswordControllerTest do
2 use Pleroma.Web.ConnCase
4 alias Pleroma.PasswordResetToken
5 alias Pleroma.Web.OAuth.Token
8 describe "GET /api/pleroma/password_reset/token" do
9 test "it returns error when token invalid", %{conn: conn} do
12 |> get("/api/pleroma/password_reset/token")
15 assert response =~ "<h2>Invalid Token</h2>"
18 test "it shows password reset form", %{conn: conn} do
20 {:ok, token} = PasswordResetToken.create_token(user)
24 |> get("/api/pleroma/password_reset/#{token.token}")
27 assert response =~ "<h2>Password Reset for #{user.nickname}</h2>"
31 describe "POST /api/pleroma/password_reset" do
32 test "it returns HTTP 200", %{conn: conn} do
34 {:ok, token} = PasswordResetToken.create_token(user)
35 {:ok, _access_token} = Token.create_token(insert(:oauth_app), user, %{})
39 password_confirmation: "test",
45 |> assign(:user, user)
46 |> post("/api/pleroma/password_reset", %{data: params})
49 assert response =~ "<h2>Password changed!</h2>"
51 user = refresh_record(user)
52 assert Comeonin.Pbkdf2.checkpw("test", user.password_hash)
53 assert length(Token.get_user_tokens(user)) == 0