36 lines
1.6 KiB
Python
36 lines
1.6 KiB
Python
# retoor <retoor@molodetz.nl>
|
|
JSON = {"Accept": "application/json"}
|
|
|
|
|
|
def test_join_request_is_stored_and_visible_to_admin(anon, admin):
|
|
response = anon.post("/binnen", data={"name": "Schrijver Een", "contact": "schrijver@example.invalid", "repo_url": "https://example.com/repo", "message": "Ik wil meeschrijven.", "website": ""})
|
|
assert response.status_code in (302, 303)
|
|
assert "ok=1" in response.headers["location"]
|
|
rows = admin.get("/admin/joins", headers=JSON).json()["requests"]
|
|
row = next(row for row in rows if row["name"] == "Schrijver Een")
|
|
assert row["contact"] == "schrijver@example.invalid"
|
|
assert row["repo_url"].startswith("https://example.com/repo")
|
|
status = admin.post(f"/admin/joins/{row['uid']}/status", json={"status": "contacted"}, headers=JSON)
|
|
assert status.status_code == 200
|
|
|
|
|
|
def test_join_json_api(anon):
|
|
response = anon.post("/binnen", json={"name": "Schrijver Twee", "contact": "@twee"}, headers=JSON)
|
|
assert response.status_code == 200
|
|
assert response.json()["ok"] is True
|
|
|
|
|
|
def test_honeypot_is_not_stored(anon, admin):
|
|
anon.post("/binnen", data={"name": "Robot Bot", "contact": "bot@example.invalid", "website": "spam"})
|
|
rows = admin.get("/admin/joins", headers=JSON).json()["requests"]
|
|
assert not any(row["name"] == "Robot Bot" for row in rows)
|
|
|
|
|
|
def test_join_validation(anon):
|
|
response = anon.post("/binnen", json={"name": "x", "contact": ""}, headers=JSON)
|
|
assert response.status_code == 422
|
|
|
|
|
|
def test_member_cannot_view_joins(member):
|
|
assert member.get("/admin/joins", headers=JSON).status_code == 403
|