# -*- coding: utf-8 -*-

"""

Integration tests for the :mod:`repoze.who`-powered authentication sub-system.

As vigiboard grows and the authentication method changes, only these tests

should be updated.

"""

from vigiboard.tests import TestController

class TestAuthentication(TestController):

    """

    Tests for the default authentication setup.

    By default in TurboGears 2, :mod:`repoze.who` is configured with the same

    plugins specified by repoze.what-quickstart (which are listed in

    http://code.gustavonarea.net/repoze.what-quickstart/#repoze.what.plugins.quickstart.setup_sql_auth).

    As the settings for those plugins change, or the plugins are replaced,

    these tests should be updated.

    """

    application_under_test = 'main'

    def test_forced_login(self):

        """

        Anonymous users must be redirected to the login form when authorization

        is denied.

        Next, upon successful login they should be redirected to the initially

        requested page.

        """

        # Requesting a protected area

        resp = self.app.get('/secc/', status=302)

        assert resp.location.startswith('http://localhost/login')

        # Getting the login form:

        resp = resp.follow(status=200)

        form = resp.form

        # Submitting the login form:

        form['login'] = u'manager'

        # XXX Use '42' as the password until remote password validation gets in.

        form['password'] = '42'

        post_login = form.submit(status=302)

        # Being redirected to the initially requested page:

        assert post_login.location.startswith('http://localhost/post_login')

        initial_page = post_login.follow(status=302)

        assert 'authtkt' in initial_page.request.cookies, \

               "Session cookie wasn't defined: %s" % initial_page.request.cookies

        assert initial_page.location.startswith('http://localhost/secc/'), \

               initial_page.location

    def test_voluntary_login(self):

        """Voluntary logins must work correctly"""

        # Going to the login form voluntarily:

        resp = self.app.get('/login', status=200)

        form = resp.form

        # Submitting the login form:

        form['login'] = u'manager'

        # XXX Use '42' as the password until remote password validation gets in.

        form['password'] = '42'

        post_login = form.submit(status=302)

        # Being redirected to the home page:

        assert post_login.location.startswith('http://localhost/post_login')

        home_page = post_login.follow(status=302)

        assert 'authtkt' in home_page.request.cookies, \

               'Session cookie was not defined: %s' % home_page.request.cookies

        assert home_page.location == 'http://localhost/'

    def test_logout(self):

        """Logouts must work correctly"""

        # Logging in voluntarily the quick way:

        # XXX Use '42' as the password until remote password validation gets in.

        resp = self.app.get('/login_handler?login=manager&password=42',

                            status=302)

        resp = resp.follow(status=302)

        assert 'authtkt' in resp.request.cookies, \

               'Session cookie was not defined: %s' % resp.request.cookies

        # Logging out:

        resp = self.app.get('/logout_handler', status=302)

        assert resp.location.startswith('http://localhost/post_logout')

        # Finally, redirected to the home page:

        home_page = resp.follow(status=302)

        assert home_page.request.cookies.get('authtkt') == '', \

               'Session cookie was not deleted: %s' % home_page.request.cookies

        assert home_page.location == 'http://localhost/', home_page.location