Added reset password error handling and associated test

This commit is contained in:
Matt Wright
2012-05-22 18:13:29 -04:00
parent 09aa7e113c
commit 2a9e91dfe8
3 changed files with 25 additions and 2 deletions
+21
View File
@@ -263,6 +263,27 @@ class RecoverableTests(SecurityTest):
r = self.authenticate('joe@lp.com', 'newpassword')
self.assertIn('Hello joe@lp.com', r.data)
def test_reset_password_twice_flashes_invalid_token_msg(self):
u = None
with capture_reset_password_requests() as users:
r = self.client.post('/forgot', data=dict(email='joe@lp.com'))
u = users[0]
self.client.post('/reset', data={
'email': u.email,
'reset_password_token': u.reset_password_token,
'password': 'newpassword',
'password_confirm': 'newpassword'
})
r = self.client.post('/reset', data={
'email': u.email,
'reset_password_token': u.reset_password_token,
'password': 'newpassword',
'password_confirm': 'newpassword'
}, follow_redirects=True)
self.assertIn('Invalid reset password token', r.data)
class MongoEngineSecurityTests(DefaultSecurityTests):