rhodecode/apps/my_account/tests/test_my_account_edit.py

# Copyright (C) 2016-2024 RhodeCode GmbH
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License, version 3
# (only), as published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.
#
# This program is dual-licensed. If you wish to learn more about the
# RhodeCode Enterprise Edition, including its added features, Support services,
# and proprietary license terms, please see https://rhodecode.com/licenses/

import pytest

from rhodecode.model.db import User
from rhodecode.tests import TestController, assert_session_flash
from rhodecode.tests.routes import route_path


class TestMyAccountEdit(TestController):

    def test_my_account_edit(self):
        self.log_user()
        response = self.app.get(route_path('my_account_edit'))

        response.mustcontain('value="test_admin')

    @pytest.mark.backends("git", "hg")
    def test_my_account_my_pullrequests(self, pr_util):
        self.log_user()
        response = self.app.get(route_path('my_account_pullrequests'))
        response.mustcontain('There are currently no open pull '
                             'requests requiring your participation.')

    @pytest.mark.backends("git", "hg")
    @pytest.mark.parametrize('params, expected_title', [
        ({'closed': 1}, 'Closed'),
        ({'awaiting_my_review': 1}, 'Awaiting my review'),
    ])
    def test_my_account_my_pullrequests_data(self, pr_util, xhr_header, params, expected_title):
        self.log_user()
        response = self.app.get(route_path('my_account_pullrequests_data'),
                                extra_environ=xhr_header)
        assert response.json == {
            'data': [], 'draw': None,
            'recordsFiltered': 0, 'recordsTotal': 0}

        pr = pr_util.create_pull_request(title='TestMyAccountPR')
        expected = {
            'author_raw': 'RhodeCode Admin',
            'name_raw': pr.pull_request_id
        }
        response = self.app.get(route_path('my_account_pullrequests_data'),
                                extra_environ=xhr_header)
        assert response.json['recordsTotal'] == 1
        assert response.json['data'][0]['author_raw'] == expected['author_raw']

        assert response.json['data'][0]['author_raw'] == expected['author_raw']
        assert response.json['data'][0]['name_raw'] == expected['name_raw']

    @pytest.mark.parametrize(
        "name, attrs", [
            ('firstname', {'firstname': 'new_username'}),
            ('lastname', {'lastname': 'new_username'}),
            ('admin', {'admin': True}),
            ('admin', {'admin': False}),
            ('extern_type', {'extern_type': 'ldap'}),
            ('extern_type', {'extern_type': None}),
            # ('extern_name', {'extern_name': 'test'}),
            # ('extern_name', {'extern_name': None}),
            ('active', {'active': False}),
            ('active', {'active': True}),
            ('email', {'email': '[e-mail]'}),
        ])
    def test_my_account_update(self, name, attrs, user_util):
        usr = user_util.create_user(password='qweqwe')
        params = usr.get_api_data()  # current user data
        user_id = usr.user_id
        self.log_user(
            username=usr.username, password='qweqwe')

        params.update({'password_confirmation': ''})
        params.update({'new_password': ''})
        params.update({'extern_type': 'rhodecode'})
        params.update({'extern_name': 'rhodecode'})
        params.update({'csrf_token': self.csrf_token})

        params.update(attrs)
        # my account page cannot set language param yet, only for admins
        del params['language']
        if name == 'email':
            uem = user_util.create_additional_user_email(usr, attrs['email'])
            email_before = User.get(user_id).email

        response = self.app.post(route_path('my_account_update'), params)

        assert_session_flash(
            response, 'Your account was updated successfully')

        del params['csrf_token']

        updated_user = User.get(user_id)
        updated_params = updated_user.get_api_data()
        updated_params.update({'password_confirmation': ''})
        updated_params.update({'new_password': ''})

        params['last_login'] = updated_params['last_login']
        params['last_activity'] = updated_params['last_activity']
        # my account page cannot set language param yet, only for admins
        # but we get this info from API anyway
        params['language'] = updated_params['language']

        if name == 'email':
            params['emails'] = [attrs['email'], email_before]
        if name == 'extern_type':
            # cannot update this via form, expected value is original one
            params['extern_type'] = "rhodecode"
        if name == 'extern_name':
            # cannot update this via form, expected value is original one
            params['extern_name'] = str(user_id)
        if name == 'active':
            # my account cannot deactivate account
            params['active'] = True
        if name == 'admin':
            # my account cannot make you an admin !
            params['admin'] = False

        assert params == updated_params

    def test_my_account_update_err_email_not_exists_in_emails(self):
        self.log_user()

        new_email = '[e-mail]'  # not in emails
        params = {
            'username': 'test_admin',
            'new_password': 'test12',
            'password_confirmation': 'test122',
            'firstname': 'NewName',
            'lastname': 'NewLastname',
            'email': new_email,
            'csrf_token': self.csrf_token,
        }

        response = self.app.post(route_path('my_account_update'),
                                 params=params)

        response.mustcontain('"[e-mail]" is not one of [e-mail]')

    def test_my_account_update_bad_email_address(self):
        self.log_user('test_regular2', 'test12')

        new_email = 'newmail.pl'
        params = {
            'username': 'test_admin',
            'new_password': 'test12',
            'password_confirmation': 'test122',
            'firstname': 'NewName',
            'lastname': 'NewLastname',
            'email': new_email,
            'csrf_token': self.csrf_token,
        }
        response = self.app.post(route_path('my_account_update'),
                                 params=params)

        response.mustcontain('"newmail.pl" is not one of [e-mail]')