""" Tests for RepApp. """ import time from hashlib import sha256 from datetime import datetime, timedelta import django.utils.timezone from django.test import TestCase, RequestFactory from django.test import Client from django.urls import reverse from django.core import mail from django.contrib.messages.storage.fallback import FallbackStorage from .backends import OneTimeLoginBackend, EmailBackend, create_repapp_user from .models import (OneTimeLogin, CustomUser, Cafe, Organisator, Reparateur, Device, Guest) from .views import (send_one_time_login_mail, send_confirmation_mails, send_guest_account_mail, is_member, create_one_time_login) class OneTimeLoginTest(TestCase): """ Tests for the one time login feature. """ def setUp(self): user = CustomUser( email="user@example.com", ) user.save() self.user = user secret_hash = sha256("LetMeIn".encode('utf-8')).hexdigest() otl = OneTimeLogin( secret=secret_hash, user=user, url="/test/url", ) otl.save() self.otl = otl def test_allowed_one_time_login(self): """ Test that one time login is allowed. """ backend = OneTimeLoginBackend() result = backend.authenticate(None, self.otl.secret, None) self.assertEqual(result, self.user) def test_unknown_one_time_login(self): """ Test that one time login is not allowed for unknown secret. """ backend = OneTimeLoginBackend() result = backend.authenticate(None, "other phrase", None) self.assertEqual(result, None) class EmailLoginTest(TestCase): """ Tests for the one time login feature. """ def setUp(self): user = CustomUser( email="user@example.com" ) user.set_password("aPassword") user.save() self.user = user def test_allowed_email_login(self): """ Test that email login is allowed. """ backend = EmailBackend() result = backend.authenticate(None, self.user.email, "aPassword") self.assertEqual(result, self.user) def test_unknown_email_login(self): """ Test that email login is not allowed for unknown user. """ backend = EmailBackend() result = backend.authenticate( None, "other@example.com", "somePassword") self.assertEqual(result, None) def test_wrong_password_login(self): """ Test that email login is not allowed for wrong password. """ backend = EmailBackend() result = backend.authenticate( None, self.user.email, "wrongPassword") self.assertEqual(result, None) class BackendsTest(TestCase): """ Test for backend utility functions. """ def setUp(self): organisator = Organisator( name="Organisator Name", mail="orga@example.com", ) organisator.save() self.organisator = organisator reparateur = Reparateur( name="Reparateur Name", mail="repa@example.com", ) reparateur.save() self.reparateur = reparateur def test_create_reparateur(self): """ Ensure that a new reparateur is created. """ user = CustomUser( username="Other Reparateur", email="repa2@example.com", ) user.save() create_repapp_user(user) reparateur = Reparateur.objects.filter(mail=user.email).first() self.assertIsNotNone(reparateur) self.assertEqual(reparateur.name, user.username) def test_update_reparateur(self): """ Ensure that the reparateur name gets updated. """ user = CustomUser( username="First Reparateur", email="repa@example.com", ) user.save() create_repapp_user(user) reparateur = Reparateur.objects.filter(mail=user.email).first() self.assertIsNotNone(reparateur) self.assertEqual(reparateur.name, user.username) def test_update_organisator(self): """ Ensure that the organisator name gets updated. """ user = CustomUser( username="The Organisator", email="orga@example.com", ) user.save() create_repapp_user(user) organisator = Organisator.objects.filter(mail=user.email).first() self.assertIsNotNone(organisator) self.assertEqual(organisator.name, user.username) class FormsTest(TestCase): """ Test for RepApp form features. """ fixtures = ["cafe-data.json"] def test_from_protection(self): client = Client(enforce_csrf_checks=True) response = client.get(reverse('register_device', kwargs={ 'cafe': 1, })) # ensure honeypot field is available self.assertContains( response, 'type="text" name="accept_agb" style="display:none"') # ensure csrf is available self.assertContains(response, 'csrfmiddlewaretoken') class ViewsTest(TestCase): """ Test for RepApp views. """ fixtures = ["cafe-data.json"] def setUp(self): self.factory = RequestFactory() cafe = Cafe(location="neuer Ort", address="neue Adresse", event_date=django.utils.timezone.now()) cafe.save() self.cafe = cafe date = datetime.now() - timedelta(days=7) old_cafe = Cafe(location="alter Ort", address="alte Adresse", event_date=date) old_cafe.save() self.old_cafe = old_cafe user = CustomUser( username="ATestUser", email="testuser@example.com", ) user.set_password("aTestPassword") user.save() self.user = user reparateur = Reparateur( name="ATestUser", mail="testuser@example.com" ) reparateur.save() self.reparateur = reparateur def test_index(self): """ Test index page. """ client = Client(enforce_csrf_checks=True) response = client.get(reverse('index')) self.assertEqual(response.status_code, 200) # ensure future cafe is displayed self.assertContains(response, self.cafe.location) self.assertContains(response, self.cafe.address) # ensure old cafe is not displayed self.assertNotContains(response, self.old_cafe.location) self.assertNotContains(response, self.old_cafe.address) def test_register_device(self): """ Test register device view """ client = Client(enforce_csrf_checks=True) response = client.get(reverse('register_device', kwargs={ 'cafe': 1, })) self.assertEqual(response.status_code, 200) # ensure all required fields are displayed self.assertContains(response, "eMail Adresse") self.assertContains(response, "Art des Geräts") self.assertContains(response, "Hersteller") self.assertContains(response, "Fehlerbeschreibung") self.assertContains(response, "Foto vom Gerät") self.assertContains(response, "Foto vom Typenschild") self.assertContains(response, "Folgetermin") self.assertContains(response, "Informationen zur Reparaturabwicklung") self.assertContains(response, "Datenschutz") # ensure security fields are contained self.assertContains( response, 'type="text" name="accept_agb" style="display:none"') self.assertContains(response, 'csrfmiddlewaretoken') def test_send_one_time_login_mail(self): """ Test that a mail is sent with the right link included. """ secret = "A_SECRET" mail_address = "guest@example.com" request = self.factory.get('/') setattr(request, 'session', 'session') setattr(request, '_messages', FallbackStorage(request)) send_one_time_login_mail(secret, mail_address, request) self.assertEqual(len(mail.outbox), 1) self.assertTrue("Einmal-Ammeldelink" in mail.outbox[0].subject) self.assertEqual(mail.outbox[0].to, [mail_address]) self.assertTrue(f'/onetimelogin/{secret}/' in mail.outbox[0].body) def test_send_confirmation_mails(self): """ Test that the confirmation mails are sent. """ device = Device.objects.get(pk=2) guest = Guest.objects.get(pk=4) cafe = Cafe.objects.get(pk=1) organisator = Organisator( name="Orga", mail="orga@example.com" ) organisator.save() request = self.factory.get('/') setattr(request, 'session', 'session') setattr(request, '_messages', FallbackStorage(request)) send_confirmation_mails(device, guest, cafe, request) self.assertEqual(len(mail.outbox), 2) self.assertEqual(mail.outbox[0].subject, f"Neues Gerät { device.device }") self.assertEqual(mail.outbox[0].to, [organisator.mail]) self.assertTrue("Geräteanmeldung" in mail.outbox[1].subject) self.assertEqual(mail.outbox[1].to, [guest.mail]) self.assertTrue("Geräteanmeldung" in mail.outbox[1].body) def test_send_guest_account_mail(self): """ Test that an account creation mail was sent. """ password = "A_SECRET" guest = Guest.objects.get(pk=4) request = self.factory.get('/') setattr(request, 'session', 'session') setattr(request, '_messages', FallbackStorage(request)) send_guest_account_mail(guest, password, request) self.assertEqual(len(mail.outbox), 1) self.assertTrue("Benutzerkonto" in mail.outbox[0].subject) self.assertEqual(mail.outbox[0].to, [guest.mail]) self.assertTrue(f'{password}' in mail.outbox[0].body) self.assertTrue(f'{guest.mail}' in mail.outbox[0].body) def test_is_member(self): """ Test that members are detected and not guests. """ organisator = Organisator( name="Orga", mail="orga@example.com" ) organisator.save() organisator_user = CustomUser( username="orga", email=organisator.mail ) organisator_user.save() reparateur = Reparateur( name="Reparateur", mail="repa@example.com" ) reparateur.save() reparateur_user = CustomUser( username="repa", email=reparateur.mail ) reparateur_user.save() guest = CustomUser.objects.get(pk=3) self.assertTrue(is_member(organisator_user)) self.assertTrue(is_member(reparateur_user)) self.assertFalse(is_member(guest)) def test_create_one_time_login(self): """ Test one time login creation. """ user = CustomUser.objects.get(pk=3) url = "/test/url/" secret = create_one_time_login(user, url) secret_hash = sha256(secret.encode('utf-8')).hexdigest() otl = OneTimeLogin.objects.get(secret=secret_hash) self.assertEqual(otl.url, url)