# Copyright (c) 2010-2011, Diaspora Inc. This file is # licensed under the Affero General Public License version 3 or later. See # the COPYRIGHT file. require 'spec_helper' describe User do describe "private key" do it 'has a key' do alice.encryption_key.should_not be nil end it 'marshalls the key to and from the db correctly' do user = User.build(:username => 'max', :email => 'foo@bar.com', :password => 'password', :password_confirmation => 'password') user.save! expect{ user.reload.encryption_key }.should_not raise_error end end context 'callbacks' do describe '#save_person!' do it 'saves the corresponding user if it has changed' do alice.person.url = "http://stuff.com" Person.any_instance.should_receive(:save) alice.save end it 'does not save the corresponding user if it has not changed' do Person.any_instance.should_not_receive(:save) alice.save end end describe '#infer_email_from_invitation_provider' do it 'sets corresponding email if invitation_service is email' do addr = '12345@alice.com' alice.invitation_service = 'email' alice.invitation_identifier = addr lambda { alice.infer_email_from_invitation_provider }.should change(alice, :email) end it 'does not set an email if invitation_service is not email' do addr = '1233123' alice.invitation_service = 'facebook' alice.invitation_identifier = addr lambda { alice.infer_email_from_invitation_provider }.should_not change(alice, :email) end end end describe 'overwriting people' do it 'does not overwrite old users with factory' do lambda { new_user = Factory.create(:user, :id => alice.id) }.should raise_error ActiveRecord::StatementInvalid end it 'does not overwrite old users with create' do params = {:username => "ohai", :email => "ohai@example.com", :password => "password", :password_confirmation => "password", :person => {:profile => {:first_name => "O", :last_name => "Hai"} } } params[:id] = alice.id new_user = User.build(params) new_user.save new_user.persisted?.should be_true new_user.id.should_not == alice.id end end describe "validation" do describe "of associated person" do it "fails if person is not valid" do user = alice user.should be_valid user.person.serialized_public_key = nil user.person.should_not be_valid user.should_not be_valid user.errors.full_messages.count.should == 1 user.errors.full_messages.first.should =~ /Person is invalid/i end end describe "of username" do it "requires presence" do alice.username = nil alice.should_not be_valid end it "requires uniqueness" do alice.username = eve.username alice.should_not be_valid end it 'requires uniqueness also amount Person objects with diaspora handle' do p = Factory(:person, :diaspora_handle => "jimmy#{User.diaspora_id_host}") alice.username = 'jimmy' alice.should_not be_valid end it "downcases username" do user = Factory.build(:user, :username => "WeIrDcAsE") user.should be_valid user.username.should == "weirdcase" end it "fails if the requested username is only different in case from an existing username" do alice.username = eve.username.upcase alice.should_not be_valid end it "strips leading and trailing whitespace" do user = Factory.build(:user, :username => " janie ") user.should be_valid user.username.should == "janie" end it "fails if there's whitespace in the middle" do alice.username = "bobby tables" alice.should_not be_valid end it 'can not contain non url safe characters' do alice.username = "kittens;" alice.should_not be_valid end it 'should not contain periods' do alice.username = "kittens." alice.should_not be_valid end it "can be 32 characters long" do alice.username = "hexagoooooooooooooooooooooooooon" alice.should be_valid end it "cannot be 33 characters" do alice.username = "hexagooooooooooooooooooooooooooon" alice.should_not be_valid end it "cannot be one of the blacklist names" do ['hostmaster', 'postmaster', 'root', 'webmaster'].each do |username| alice.username = username alice.should_not be_valid end end end describe "of email" do it "requires email address" do alice.email = nil alice.should_not be_valid end it "requires a unique email address" do alice.email = eve.email alice.should_not be_valid end it "requires a vaild email address" do alice.email = "somebody@anywhere" alice.should_not be_valid end end describe "of unconfirmed_email" do it "unconfirmed_email address can be nil/blank" do alice.unconfirmed_email = nil alice.should be_valid alice.unconfirmed_email = "" alice.should be_valid end it "does NOT require a unique unconfirmed_email address" do eve.update_attribute :unconfirmed_email, "new@email.com" alice.unconfirmed_email = "new@email.com" alice.should be_valid end it "requires a vaild unconfirmed_email address" do alice.unconfirmed_email = "somebody@anywhere" alice.should_not be_valid end end describe "of language" do after do I18n.locale = :en end it "requires availability" do alice.language = 'some invalid language' alice.should_not be_valid end it "should save with current language if blank" do I18n.locale = :fr user = User.build(:username => 'max', :email => 'foo@bar.com', :password => 'password', :password_confirmation => 'password') user.language.should == 'fr' end it "should save with language what is set" do I18n.locale = :fr user = User.build(:username => 'max', :email => 'foo@bar.com', :password => 'password', :password_confirmation => 'password', :language => 'de') user.language.should == 'de' end end end describe '#seed_aspects' do it 'follows the default account' do Webfinger.stub_chain(:new, :fetch).and_return(Factory(:person)) expect{ eve.seed_aspects }.to change(eve.contacts, :count).by(1) end end describe ".build" do context 'with valid params' do before do params = {:username => "ohai", :email => "ohai@example.com", :password => "password", :password_confirmation => "password", :person => {:profile => {:first_name => "O", :last_name => "Hai"} } } @user = User.build(params) end it "does not save" do @user.persisted?.should be_false @user.person.persisted?.should be_false User.find_by_username("ohai").should be_nil end it 'saves successfully' do @user.should be_valid @user.save.should be_true @user.persisted?.should be_true @user.person.persisted?.should be_true User.find_by_username("ohai").should == @user end end describe "with invalid params" do before do @invalid_params = { :username => "ohai", :email => "ohai@example.com", :password => "password", :password_confirmation => "wrongpasswordz", :person => {:profile => {:first_name => "", :last_name => ""}}} end it "raises no error" do lambda { User.build(@invalid_params) }.should_not raise_error end it "does not save" do User.build(@invalid_params).save.should be_false end it 'does not save a person' do lambda { User.build(@invalid_params) }.should_not change(Person, :count) end it 'does not generate a key' do User.should_receive(:generate_key).exactly(0).times User.build(@invalid_params) end end describe "with malicious params" do let(:person) {Factory.create :person} before do @invalid_params = {:username => "ohai", :email => "ohai@example.com", :password => "password", :password_confirmation => "password", :person => {:id => person.id, :profile => {:first_name => "O", :last_name => "Hai"} } } end it "does not assign it to the person" do User.build(@invalid_params).person.id.should_not == person.id end end end describe "#can_add?" do it "returns true if there is no existing connection" do alice.can_add?(eve.person).should be_true end it "returns false if the user and the person are the same" do alice.can_add?(alice.person).should be_false end it "returns false if the users are already connected" do alice.can_add?(bob.person).should be_false end it "returns false if the user has already sent a request to that person" do alice.share_with(eve.person, alice.aspects.first) alice.reload eve.reload alice.can_add?(eve.person).should be_false end end describe '.find_by_invitation' do let(:invited_user) { inv = Factory.build(:invitation, :recipient => @recipient, :service => @type, :identifier => @identifier) User.find_by_invitation(inv) } context 'send a request to an existing' do before do @recipient = alice end context 'active user' do it 'by service' do @type = 'facebook' @identifier = '123456' @recipient.services << Services::Facebook.new(:uid => @identifier) @recipient.save invited_user.should == @recipient end it 'by email' do @type = 'email' @identifier = alice.email invited_user.should == @recipient end end context 'invited user' do it 'by service and identifier' do @identifier = alice.email @type = 'email' invited_user.should == alice end end context 'not on server (not yet invited)' do it 'returns nil' do @recipient = nil @identifier = 'foo@bar.com' @type = 'email' invited_user.should be_nil end end end end describe '.find_or_create_by_invitation' describe '.create_from_invitation!' do before do @identifier = 'max@foobar.com' @inv = Factory.build(:invitation, :admin => true, :service => 'email', :identifier => @identifier) @user = User.create_from_invitation!(@inv) end it 'creates a persisted user' do @user.should be_persisted end it 'sets the email if the service is email' do @user.email.should == @inv.identifier end end describe 'update_user_preferences' do before do @pref_count = UserPreference::VALID_EMAIL_TYPES.count end it 'unsets disable mail and makes the right amount of prefs' do alice.disable_mail = true expect { alice.update_user_preferences({}) }.to change(alice.user_preferences, :count).by(@pref_count) end it 'still sets new prefs to false on update' do alice.disable_mail = true expect { alice.update_user_preferences({'mentioned' => false}) }.to change(alice.user_preferences, :count).by(@pref_count-1) alice.reload.disable_mail.should be_false end end describe ".find_for_database_authentication" do it 'finds a user' do User.find_for_database_authentication(:username => alice.username).should == alice end it 'finds a user by email' do User.find_for_database_authentication(:username => alice.email).should == alice end it "does not preserve case" do User.find_for_database_authentication(:username => alice.username.upcase).should == alice end it 'errors out when passed a non-hash' do lambda { User.find_for_database_authentication(alice.username) }.should raise_error end end describe '#update_profile' do before do @params = { :first_name => 'bob', :last_name => 'billytown', } end it 'dispatches the profile when tags are set' do @params = {:tags => '#what #hey'} mailman = Postzord::Dispatcher.build(alice, Profile.new) Postzord::Dispatcher.should_receive(:build).and_return(mailman) alice.update_profile(@params).should be_true end it 'sends a profile to their contacts' do mailman = Postzord::Dispatcher.build(alice, Profile.new) Postzord::Dispatcher.should_receive(:build).and_return(mailman) alice.update_profile(@params).should be_true end it 'updates names' do alice.update_profile(@params).should be_true alice.reload.profile.first_name.should == 'bob' end it 'updates image_url' do params = {:image_url => "http://clown.com"} alice.update_profile(params).should be_true alice.reload.profile.image_url.should == "http://clown.com" end context 'passing in a photo' do before do fixture_filename = 'button.png' fixture_name = File.join(File.dirname(__FILE__), '..', 'fixtures', fixture_filename) image = File.open(fixture_name) @photo = Photo.diaspora_initialize(:author => alice.person, :user_file => image) @photo.save! @params = {:photo => @photo} end it 'updates image_url' do alice.update_profile(@params).should be_true alice.reload alice.profile.image_url.should =~ Regexp.new(@photo.url(:thumb_large)) alice.profile.image_url_medium.should =~ Regexp.new(@photo.url(:thumb_medium)) alice.profile.image_url_small.should =~ Regexp.new(@photo.url(:thumb_small)) end it 'unpends the photo' do @photo.pending = true @photo.save! @photo.reload alice.update_profile(@params).should be true @photo.reload.pending.should be_false end end end describe '#update_post' do it 'sends a notification to aspects' do m = mock() m.should_receive(:post) Postzord::Dispatcher.should_receive(:build).and_return(m) photo = alice.build_post(:photo, :user_file => uploaded_photo, :text => "hello", :to => alice.aspects.first.id) alice.update_post(photo, :text => 'hellp') end end describe '#notify_if_mentioned' do before do @post = Factory.create(:status_message, :author => bob.person) end it 'notifies the user if the incoming post mentions them' do @post.should_receive(:mentions?).with(alice.person).and_return(true) @post.should_receive(:notify_person).with(alice.person) alice.notify_if_mentioned(@post) end it 'does not notify the user if the incoming post does not mention them' do @post.should_receive(:mentions?).with(alice.person).and_return(false) @post.should_not_receive(:notify_person) alice.notify_if_mentioned(@post) end it 'does not notify the user if the post author is not a contact' do @post = Factory.create(:status_message, :author => eve.person) @post.stub(:mentions?).and_return(true) @post.should_not_receive(:notify_person) alice.notify_if_mentioned(@post) end end describe 'account deletion' do describe '#remove_all_traces' do it 'should disconnect everyone' do alice.should_receive(:disconnect_everyone) alice.remove_all_traces end it 'should remove mentions' do alice.should_receive(:remove_mentions) alice.remove_all_traces end it 'should remove person' do alice.should_receive(:remove_person) alice.remove_all_traces end it 'should remove all aspects' do lambda { alice.remove_all_traces }.should change{ alice.aspects(true).count }.by(-1) end end describe '#destroy' do it 'removes invitations from the user' do Factory(:invitation, :sender => alice) lambda { alice.destroy }.should change {alice.invitations_from_me(true).count }.by(-1) end it 'removes invitations to the user' do Invitation.new(:sender => eve, :recipient => alice, :identifier => alice.email, :aspect => eve.aspects.first).save(:validate => false) lambda { alice.destroy }.should change {alice.invitations_to_me(true).count }.by(-1) end it 'removes all service connections' do Services::Facebook.create(:access_token => 'what', :user_id => alice.id) lambda { alice.destroy }.should change { alice.services.count }.by(-1) end end describe '#remove_person' do it 'should remove the person object' do person = alice.person alice.remove_person person.reload person.should be_nil end it 'should remove the posts' do message = alice.post(:status_message, :text => "hi", :to => alice.aspects.first.id) alice.reload alice.remove_person expect { message.reload }.to raise_error ActiveRecord::RecordNotFound end end describe '#remove_mentions' do it 'should remove the mentions' do person = alice.person sm = Factory(:status_message) mention = Mention.create(:person => person, :post=> sm) alice.reload alice.remove_mentions expect { mention.reload }.to raise_error ActiveRecord::RecordNotFound end end describe '#disconnect_everyone' do it 'has no error on a local friend who has deleted his account' do d = Factory(:account_deletion, :person => alice.person) Jobs::DeleteAccount.perform(d.id) lambda { bob.disconnect_everyone }.should_not raise_error end it 'has no error when the user has sent local requests' do alice.share_with(eve.person, alice.aspects.first) lambda { alice.disconnect_everyone }.should_not raise_error end it 'sends retractions to remote poeple' do person = eve.person eve.delete person.owner_id = nil person.save alice.contacts.create(:person => person, :aspects => [alice.aspects.first]) alice.should_receive(:disconnect).once alice.disconnect_everyone end it 'disconnects local people' do lambda { alice.remove_all_traces }.should change{bob.reload.contacts.count}.by(-1) end it 'removes all contacts' do lambda { alice.disconnect_everyone }.should change { alice.contacts.count }.by(-1) end end end describe '#mail' do it 'enqueues a mail job' do alice.disable_mail = false alice.save Resque.should_receive(:enqueue).with(Jobs::Mail::StartedSharing, alice.id, 'contactrequestid').once alice.mail(Jobs::Mail::StartedSharing, alice.id, 'contactrequestid') end it 'does not enqueue a mail job if the correct corresponding job has a prefrence entry' do alice.user_preferences.create(:email_type => 'started_sharing') Resque.should_not_receive(:enqueue) alice.mail(Jobs::Mail::StartedSharing, alice.id, 'contactrequestid') end it 'does not send a mail if disable_mail is set to true' do alice.disable_mail = true alice.save alice.reload Resque.should_not_receive(:enqueue) alice.mail(Jobs::Mail::StartedSharing, alice.id, 'contactrequestid') end end context "aspect management" do before do @contact = alice.contact_for(bob.person) @original_aspect = alice.aspects.where(:name => "generic").first @new_aspect = alice.aspects.create(:name => 'two') end describe "#add_contact_to_aspect" do it 'adds the contact to the aspect' do lambda { alice.add_contact_to_aspect(@contact, @new_aspect) }.should change(@new_aspect.contacts, :count).by(1) end it 'returns true if they are already in the aspect' do alice.add_contact_to_aspect(@contact, @original_aspect).should be_true end end end context 'likes' do before do alices_aspect = alice.aspects.where(:name => "generic").first bobs_aspect = bob.aspects.where(:name => "generic").first @message = alice.post(:status_message, :text => "cool", :to => alices_aspect) @message2 = bob.post(:status_message, :text => "uncool", :to => bobs_aspect) @like = alice.like(true, :target => @message) @like2 = bob.like(true, :target => @message) end describe '#like_for' do it 'returns the correct like' do alice.like_for(@message).should == @like bob.like_for(@message).should == @like2 end it "returns nil if there's no like" do alice.like_for(@message2).should be_nil end end describe '#liked?' do it "returns true if there's a like" do alice.liked?(@message).should be_true bob.liked?(@message).should be_true end it "returns false if there's no like" do alice.liked?(@message2).should be_false end end end context 'change email' do let(:user){ alice } describe "#unconfirmed_email" do it "is nil by default" do user.unconfirmed_email.should eql(nil) end it "forces blank to nil" do user.unconfirmed_email = "" user.save! user.unconfirmed_email.should eql(nil) end it "is ignored if it equals email" do user.unconfirmed_email = user.email user.save! user.unconfirmed_email.should eql(nil) end it "allows change to valid new email" do user.unconfirmed_email = "alice@newmail.com" user.save! user.unconfirmed_email.should eql("alice@newmail.com") end end describe "#confirm_email_token" do it "is nil by default" do user.confirm_email_token.should eql(nil) end it "is autofilled when unconfirmed_email is set to new email" do user.unconfirmed_email = "alice@newmail.com" user.save! user.confirm_email_token.should_not be_blank user.confirm_email_token.size.should eql(30) end it "is set back to nil when unconfirmed_email is empty" do user.unconfirmed_email = "alice@newmail.com" user.save! user.confirm_email_token.should_not be_blank user.unconfirmed_email = nil user.save! user.confirm_email_token.should eql(nil) end it "generates new token on every new unconfirmed_email" do user.unconfirmed_email = "alice@newmail.com" user.save! first_token = user.confirm_email_token user.unconfirmed_email = "alice@andanotherone.com" user.save! user.confirm_email_token.should_not eql(first_token) user.confirm_email_token.size.should eql(30) end end describe '#mail_confirm_email' do it 'enqueues a mail job on user with unconfirmed email' do user.update_attribute(:unconfirmed_email, "alice@newmail.com") Resque.should_receive(:enqueue).with(Jobs::Mail::ConfirmEmail, alice.id).once alice.mail_confirm_email.should eql(true) end it 'enqueues NO mail job on user without unconfirmed email' do Resque.should_not_receive(:enqueue).with(Jobs::Mail::ConfirmEmail, alice.id) alice.mail_confirm_email.should eql(false) end end describe '#confirm_email' do context 'on user with unconfirmed email' do before do user.update_attribute(:unconfirmed_email, "alice@newmail.com") end it 'confirms email and set the unconfirmed_email to email on valid token' do user.confirm_email(user.confirm_email_token).should eql(true) user.email.should eql("alice@newmail.com") user.unconfirmed_email.should eql(nil) user.confirm_email_token.should eql(nil) end it 'returns false and does not change anything on wrong token' do user.confirm_email(user.confirm_email_token.reverse).should eql(false) user.email.should_not eql("alice@newmail.com") user.unconfirmed_email.should_not eql(nil) user.confirm_email_token.should_not eql(nil) end it 'returns false and does not change anything on blank token' do user.confirm_email("").should eql(false) user.email.should_not eql("alice@newmail.com") user.unconfirmed_email.should_not eql(nil) user.confirm_email_token.should_not eql(nil) end it 'returns false and does not change anything on blank token' do user.confirm_email(nil).should eql(false) user.email.should_not eql("alice@newmail.com") user.unconfirmed_email.should_not eql(nil) user.confirm_email_token.should_not eql(nil) end end context 'on user without unconfirmed email' do it 'returns false and does not change anything on any token' do user.confirm_email("12345"*6).should eql(false) user.email.should_not eql("alice@newmail.com") user.unconfirmed_email.should eql(nil) user.confirm_email_token.should eql(nil) end it 'returns false and does not change anything on blank token' do user.confirm_email("").should eql(false) user.email.should_not eql("alice@newmail.com") user.unconfirmed_email.should eql(nil) user.confirm_email_token.should eql(nil) end it 'returns false and does not change anything on blank token' do user.confirm_email(nil).should eql(false) user.email.should_not eql("alice@newmail.com") user.unconfirmed_email.should eql(nil) user.confirm_email_token.should eql(nil) end end end end describe "#accept_invitation!" do before do fantasy_resque do @invitation = Factory.create(:invitation, :sender => eve, :identifier => 'invitee@example.org', :aspect => eve.aspects.first) end @invitation.reload @form_params = { :invitation_token => "abc", :email => "a@a.com", :username => "user", :password => "secret", :password_confirmation => "secret", :person => { :profile => {:first_name => "Bob", :last_name => "Smith"} } } end context 'after invitation acceptance' do it 'destroys the invitations' do user = @invitation.recipient.accept_invitation!(@form_params) user.invitations_to_me.count.should == 0 end it "should create the person with the passed in params" do lambda { @invitation.recipient.accept_invitation!(@form_params) }.should change(Person, :count).by(1) end it 'resolves incoming invitations into contact requests' do user = @invitation.recipient.accept_invitation!(@form_params) eve.contacts.where(:person_id => user.person.id).count.should == 1 end end context 'from an admin' do it 'should work' do i = nil fantasy_resque do i = Invitation.create!(:admin => true, :service => 'email', :identifier => "new_invitee@example.com") end i.reload i.recipient.accept_invitation!(@form_params) end end end describe '#retract' do before do @retraction = mock @post = Factory(:status_message, :author => bob.person, :public => true) end context "posts" do before do SignedRetraction.stub(:build).and_return(@retraction) @retraction.stub(:perform) end it 'sends a retraction' do dispatcher = mock Postzord::Dispatcher.should_receive(:build).with(bob, @retraction, anything()).and_return(dispatcher) dispatcher.should_receive(:post) bob.retract(@post) end it 'adds resharers of target post as additional subsctibers' do person = Factory(:person) reshare = Factory(:reshare, :root => @post, :author => person) @post.reshares << reshare dispatcher = mock Postzord::Dispatcher.should_receive(:build).with(bob, @retraction, {:additional_subscribers => [person]}).and_return(dispatcher) dispatcher.should_receive(:post) bob.retract(@post) end end end describe "#send_reset_password_instructions" do it "generates a reset password token if it's supposed to" do user = User.new user.stub!(:should_generate_token?).and_return(true) user.should_receive(:generate_reset_password_token) user.send_reset_password_instructions end it "does not generate a reset password token if it's not supposed to" do user = User.new user.stub!(:should_generate_token?).and_return(false) user.should_not_receive(:generate_reset_password_token) user.send_reset_password_instructions end it "queues up a job to send the reset password instructions" do user = Factory :user Resque.should_receive(:enqueue).with(Jobs::ResetPassword, user.id) user.send_reset_password_instructions end end context "close account" do before do @user = bob end describe "#close_account!" do it 'locks the user out' do @user.close_account! @user.reload.access_locked?.should be_true end it 'creates an account deletion' do expect{ @user.close_account! }.to change(AccountDeletion, :count).by(1) end it 'calls person#lock_access!' do @user.person.should_receive(:lock_access!) @user.close_account! end end describe "#clear_account!" do it 'resets the password to a random string' do random_pass = "12345678909876543210" ActiveSupport::SecureRandom.should_receive(:hex).and_return(random_pass) @user.clear_account! @user.valid_password?(random_pass) end it 'clears all the clearable fields' do @user.reload attributes = @user.send(:clearable_fields) @user.clear_account! @user.reload attributes.each do |attr| @user.send(attr.to_sym).should be_blank end end end describe "#clearable_attributes" do it 'returns the clearable fields' do user = Factory.create :user user.send(:clearable_fields).sort.should == %w{ language invitation_token invitation_sent_at reset_password_token remember_token remember_created_at sign_in_count current_sign_in_at last_sign_in_at current_sign_in_ip last_sign_in_ip invitation_service invitation_identifier invitation_limit invited_by_id invited_by_type authentication_token auto_follow_back auto_follow_back_aspect_id unconfirmed_email confirm_email_token }.sort end end end end