|
| 1 | +from rest_framework import status |
| 2 | +from rest_framework.authtoken.models import Token |
| 3 | +from rest_framework.test import APITestCase |
| 4 | + |
| 5 | +from django.contrib.auth import get_user_model |
| 6 | +from drfpasswordless.settings import api_settings, DEFAULTS |
| 7 | +from drfpasswordless.utils import CallbackToken |
| 8 | + |
| 9 | +User = get_user_model() |
| 10 | + |
| 11 | + |
| 12 | +class AliasEmailVerificationEndpointTests(APITestCase): |
| 13 | + |
| 14 | + def setUp(self): |
| 15 | + api_settings.PASSWORDLESS_AUTH_TYPES = ['EMAIL'] |
| 16 | + api_settings.PASSWORDLESS_EMAIL_NOREPLY_ADDRESS = 'noreply@example.com' |
| 17 | + api_settings.PASSWORDLESS_USER_MARK_EMAIL_VERIFIED = True |
| 18 | + |
| 19 | + self.url = '/auth/email/' |
| 20 | + self.callback_url = '/callback/auth/' |
| 21 | + self.verify_url = '/verify/email/' |
| 22 | + self.verify_callback = '/callback/verify/' |
| 23 | + self.email_field_name = api_settings.PASSWORDLESS_USER_EMAIL_FIELD_NAME |
| 24 | + self.email_verified_field_name = api_settings.PASSWORDLESS_USER_EMAIL_VERIFIED_FIELD_NAME |
| 25 | + |
| 26 | + def test_email_unverified_to_verified_and_back(self): |
| 27 | + email = 'aaron@example.com' |
| 28 | + data = {'email': email} |
| 29 | + |
| 30 | + # create a new user |
| 31 | + response = self.client.post(self.url, data) |
| 32 | + self.assertEqual(response.status_code, status.HTTP_200_OK) |
| 33 | + user = User.objects.get(**{self.email_field_name: email}) |
| 34 | + self.assertNotEqual(user, None) |
| 35 | + self.assertEqual(getattr(user, self.email_verified_field_name), False) |
| 36 | + |
| 37 | + # Verify a token exists for the user, sign in and check verified again |
| 38 | + callback = CallbackToken.objects.filter(user=user, is_active=True).first() |
| 39 | + callback_data = {'token': callback} |
| 40 | + callback_response = self.client.post(self.callback_url, callback_data) |
| 41 | + self.assertEqual(callback_response.status_code, status.HTTP_200_OK) |
| 42 | + |
| 43 | + # Verify we got the token, then check and see that email_verified is now verified |
| 44 | + token = callback_response.data['token'] |
| 45 | + self.assertEqual(token, Token.objects.get(user=user).key) |
| 46 | + |
| 47 | + # Refresh and see that the endpoint is now verified as True |
| 48 | + user.refresh_from_db() |
| 49 | + self.assertEqual(getattr(user, self.email_verified_field_name), True) |
| 50 | + |
| 51 | + # Change email, should result in flag changing to false |
| 52 | + setattr(user, self.email_field_name, 'aaron2@example.com') |
| 53 | + user.save() |
| 54 | + user.refresh_from_db() |
| 55 | + self.assertEqual(getattr(user, self.email_verified_field_name), False) |
| 56 | + |
| 57 | + # Use verification endpoints to mark as true |
| 58 | + |
| 59 | + |
| 60 | + def tearDown(self): |
| 61 | + api_settings.PASSWORDLESS_AUTH_TYPES = DEFAULTS['PASSWORDLESS_AUTH_TYPES'] |
| 62 | + api_settings.PASSWORDLESS_EMAIL_NOREPLY_ADDRESS = DEFAULTS['PASSWORDLESS_EMAIL_NOREPLY_ADDRESS'] |
| 63 | + api_settings.PASSWORDLESS_USER_MARK_EMAIL_VERIFIED = DEFAULTS['PASSWORDLESS_USER_MARK_MOBILE_VERIFIED'] |
| 64 | + |
| 65 | + |
| 66 | +class AliasMobileVerificationEndpointTests(APITestCase): |
| 67 | + |
| 68 | + def setUp(self): |
| 69 | + api_settings.PASSWORDLESS_TEST_SUPPRESSION = True |
| 70 | + api_settings.PASSWORDLESS_AUTH_TYPES = ['MOBILE'] |
| 71 | + api_settings.PASSWORDLESS_MOBILE_NOREPLY_NUMBER = '+15550000000' |
| 72 | + api_settings.PASSWORDLESS_USER_MARK_MOBILE_VERIFIED = True |
| 73 | + |
| 74 | + self.url = '/auth/mobile/' |
| 75 | + self.callback_url = '/callback/auth/' |
| 76 | + self.mobile_field_name = api_settings.PASSWORDLESS_USER_MOBILE_FIELD_NAME |
| 77 | + self.mobile_verified_field_name = api_settings.PASSWORDLESS_USER_MOBILE_VERIFIED_FIELD_NAME |
| 78 | + |
| 79 | + def test_mobile_unverified_to_verified_and_back(self): |
| 80 | + mobile = '+15551234567' |
| 81 | + data = {'mobile': mobile} |
| 82 | + |
| 83 | + # create a new user |
| 84 | + response = self.client.post(self.url, data) |
| 85 | + self.assertEqual(response.status_code, status.HTTP_200_OK) |
| 86 | + user = User.objects.get(**{self.mobile_field_name: mobile}) |
| 87 | + self.assertNotEqual(user, None) |
| 88 | + self.assertEqual(getattr(user, self.mobile_verified_field_name), False) |
| 89 | + |
| 90 | + # Verify a token exists for the user, sign in and check verified again |
| 91 | + callback = CallbackToken.objects.filter(user=user, is_active=True).first() |
| 92 | + callback_data = {'token': callback} |
| 93 | + callback_response = self.client.post(self.callback_url, callback_data) |
| 94 | + self.assertEqual(callback_response.status_code, status.HTTP_200_OK) |
| 95 | + |
| 96 | + # Verify we got the token, then check and see that email_verified is now verified |
| 97 | + token = callback_response.data['token'] |
| 98 | + self.assertEqual(token, Token.objects.get(user=user).key) |
| 99 | + |
| 100 | + # Refresh and see that the endpoint is now verified as True |
| 101 | + user.refresh_from_db() |
| 102 | + self.assertEqual(getattr(user, self.mobile_verified_field_name), True) |
| 103 | + |
| 104 | + # Change email, should result in flag changing to false |
| 105 | + setattr(user, self.mobile_field_name, '+15557654321') |
| 106 | + user.save() |
| 107 | + user.refresh_from_db() |
| 108 | + self.assertEqual(getattr(user, self.mobile_verified_field_name), False) |
| 109 | + |
| 110 | + def tearDown(self): |
| 111 | + api_settings.PASSWORDLESS_TEST_SUPPRESSION = DEFAULTS['PASSWORDLESS_TEST_SUPPRESSION'] |
| 112 | + api_settings.PASSWORDLESS_AUTH_TYPES = DEFAULTS['PASSWORDLESS_AUTH_TYPES'] |
| 113 | + api_settings.PASSWORDLESS_MOBILE_NOREPLY_ADDRESS = DEFAULTS['PASSWORDLESS_EMAIL_NOREPLY_ADDRESS'] |
| 114 | + api_settings.PASSWORDLESS_USER_MARK_MOBILE_VERIFIED = DEFAULTS['PASSWORDLESS_USER_MARK_MOBILE_VERIFIED'] |
0 commit comments