add tests for the login form

1 files changed, 65 insertions, 0 deletions

diff --git a/tests/integration/test_login.py b/tests/integration/test_login.py
new file mode 100644
index 0000000..8be77d7
--- /dev/null
+++ b/tests/integration/test_login.py
@@ -0,0 +1,65 @@
+import pytest
+
+from fietsboek import models
+
+
+@pytest.fixture()
+def testuser(dbsession):
+    user = models.User(email='foo@bar.com')
+    user.set_password("foobar")
+    dbsession.add(user)
+    return user
+
+
+def test_login_working(testapp, testuser):
+    """Ensures that a verified user can log in with the right password."""
+    testuser.is_verified = True
+
+    login = testapp.get('/login')
+    form = login.form
+    form['email'] = 'foo@bar.com'
+    form['password'] = 'foobar'
+    response = form.submit().maybe_follow()
+
+    assert b'Logout' in response.body
+
+
+def test_login_not_verified(testapp, testuser):
+    """Ensures that a user that has not yet verified their email address can
+    not log in.
+    """
+    login = testapp.get('/login')
+    form = login.form
+    form['email'] = 'foo@bar.com'
+    form['password'] = 'foobar'
+    response = form.submit().maybe_follow()
+
+    assert b'Logout' not in response.body
+    assert b'not verified yet' in response.body
+
+
+def test_login_wrong_email(testapp, testuser):
+    """Ensures that a wrong email address won't let you log in."""
+    login = testapp.get('/login')
+
+    form = login.form
+    form['email'] = 'fooooooooo@bar.com'
+    form['password'] = 'foobar'
+    response = form.submit().maybe_follow()
+
+    assert b'Logout' not in response.body
+    assert b'Invalid login credentials' in response.body
+
+
+def test_login_wrong_password(testapp, testuser):
+    """Ensures that a wrong password won't let you log in."""
+    testuser.is_verified = True
+
+    login = testapp.get('/login')
+    form = login.form
+    form['email'] = 'foo@bar.com'
+    form['password'] = 'raboof'
+    response = form.submit().maybe_follow()
+
+    assert b'Logout' not in response.body
+    assert b'Invalid login credentials' in response.body