summaryrefslogtreecommitdiff
path: root/spec/controllers/sessions_controller_spec.rb
blob: 385c61313837904370bef810d7f834b60205dd9a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
require "rails_helper"

describe SessionsController do
  describe "#new" do
    context "when already logged in" do
      let(:user) { create(:user) }

      it 'redirects to the dashboard' do
        http_login(user)
        get :new
        expect(response).to redirect_to(dashboard_path)
      end
    end

    it 'loads a new user' do
      get :new
      expect(assigns(:user)).to be_new_record
    end
  end

  describe "#create" do
    let(:user) { create(:user, password: "password") }

    context "when credentials are correct" do
      it "logs you in with email" do
        post :create, params: {
          user: { username: user.email, password: "password" }
        }
        expect(session[:user_id]).to eql(UserSession.last.id)
      end

      it "logs you in with username" do
        post :create, params: {
          user: { username: user.username, password: "password" }
        }
        expect(session[:user_id]).to eql(UserSession.last.id)
      end

      it "redirects to the dashboard" do
        post :create, params: {
          user: { username: user.username, password: "password" }
        }
        expect(response).to redirect_to(dashboard_path)
      end
    end

    context "when credentials are incorrect" do
      it "displays errors" do
        post :create, params: {
          user: { username: user.username, password: "wrong" }
        }
        expect(flash[:warning]).to_not be_empty
      end

      it "redirects to the login page" do
        post :create, params: {
          user: { username: user.username, password: "wrong" }
        }
        expect(response).to redirect_to(new_session_path)
      end
    end
  end

  describe "#destroy" do
    context "when logged in" do
      let(:user) { create(:user) }
      let(:user_session) { create(:active_session, user: user) }

      it "logs you out" do
        session[:user_id] = user_session.id

        delete :destroy, params: { id: user.id }

        expect(session[:user_id]).to be_nil
        expect(user_session.reload.revoked_at).to be_present
      end
    end
  end
end