database_authenticatable_test.rb

# frozen_string_literal: true

require 'test_helper'

class DatabaseAuthenticationTest < Devise::IntegrationTest
  test 'sign in with email of different case should succeed when email is in the list of case insensitive keys' do
    create_user(email: 'Foo@Bar.com')

    sign_in_as_user do
      fill_in 'email', with: 'foo@bar.com'
    end

    assert warden.authenticated?(:user)
  end

  test 'sign in with email of different case should fail when email is NOT the list of case insensitive keys' do
    swap Devise, case_insensitive_keys: [] do
      create_user(email: 'Foo@Bar.com')

      sign_in_as_user do
        fill_in 'email', with: 'foo@bar.com'
      end

      assert_not warden.authenticated?(:user)
    end
  end

  test 'sign in with email including extra spaces should succeed when email is in the list of strip whitespace keys' do
    create_user(email: ' foo@bar.com ')

    sign_in_as_user do
      fill_in 'email', with: 'foo@bar.com'
    end

    assert warden.authenticated?(:user)
  end

  test 'sign in with email including extra spaces should fail when email is NOT the list of strip whitespace keys' do
    swap Devise, strip_whitespace_keys: [] do
      create_user(email: 'foo@bar.com')

      sign_in_as_user do
        fill_in 'email', with: ' foo@bar.com '
      end

      assert_not warden.authenticated?(:user)
    end
  end

  test 'sign in should not authenticate if not using proper authentication keys' do
    swap Devise, authentication_keys: [:username] do
      sign_in_as_user
      assert_not warden.authenticated?(:user)
    end
  end

  test 'sign in with invalid email should return to sign in form with error message' do
    store_translations :en, devise: { failure: { admin: { not_found_in_database: 'Invalid email address' } } } do
      sign_in_as_admin do
        fill_in 'email', with: 'wrongemail@test.com'
      end

      assert_contain 'Invalid email address'
      assert_not warden.authenticated?(:admin)
    end
  end

  test 'sign in with invalid password should return to sign in form with error message' do
    sign_in_as_admin do
      fill_in 'password', with: 'abcdef'
    end

    assert_contain 'Invalid Email or password'
    assert_not warden.authenticated?(:admin)
  end

  test 'sign in with invalid credentials should not invoke Devise::Encryptor.digest' do
    module ::Devise::Encryptor
      class << self
        alias original_digest digest

        def digest(klass, password)
          raise 'Devise::Encryptor.digest should not be called here.'
        end
      end
    end
  
    visit_with_option nil, new_user_session_path
    fill_in 'email', with: 'user@test.com'
    fill_in 'password', with: 'abcdef'
    click_button 'Log In'

    module ::Devise::Encryptor
      class << self
        alias digest original_digest
      end
    end
  end

  test 'when in paranoid mode and without a valid e-mail' do
    swap Devise, paranoid: true do
      store_translations :en, devise: { failure: { not_found_in_database: 'Not found in database' } } do
        sign_in_as_user do
          fill_in 'email', with: 'wrongemail@test.com'
        end

        assert_not_contain 'Not found in database'
        assert_contain 'Invalid Email or password.'
      end
    end
  end

  test 'error message is configurable by resource name' do
    store_translations :en, devise: { failure: { admin: { invalid: "Invalid credentials" } } } do
      sign_in_as_admin do
        fill_in 'password', with: 'abcdef'
      end

      assert_contain 'Invalid credentials'
    end
  end

  test 'valid sign in calls after_database_authentication callback' do
    user = create_user(email: ' foo@bar.com ')

    User.expects(:find_for_database_authentication).returns user
    user.expects :after_database_authentication

    sign_in_as_user do
      fill_in 'email', with: 'foo@bar.com'
    end
  end
end