require 'test_helper' class UserDeletionTest < ActiveSupport::TestCase setup do @request = mock @request.stubs(:remote_ip).returns("1.1.1.1") @request.stubs(:user_agent).returns("Firefox") @request.stubs(:session).returns(session_id: "1234") end context "an invalid user deletion" do context "for an invalid password" do should "fail" do @user = create(:user) @deletion = UserDeletion.new(user: @user, password: "wrongpassword", request: @request) @deletion.delete! assert_includes(@deletion.errors[:base], "Password is incorrect") end end context "for an admin" do should "fail" do @user = create(:admin_user) @deletion = UserDeletion.new(user: @user, password: "password", request: @request) @deletion.delete! assert_includes(@deletion.errors[:base], "Admins cannot delete their account") end end context "for a banned user" do should "fail" do @user = create(:banned_user) @deletion = UserDeletion.new(user: @user, password: "password", request: @request) @deletion.delete! assert_includes(@deletion.errors[:base], "You cannot delete your account if you are banned") end end end context "a valid user deletion" do setup do @user = create(:user, name: "foo", email_address: build(:email_address)) @deletion = UserDeletion.new(user: @user, password: "password", request: @request) end should "blank out the email" do @deletion.delete! assert_nil(@user.reload.email_address) end should "rename the user" do @deletion.delete! assert_equal("user_#{@user.id}", @user.reload.name) end should "generate a user name change request" do assert_difference("UserNameChangeRequest.count") do @deletion.delete! end assert_equal("foo", UserNameChangeRequest.last.original_name) assert_equal("user_#{@user.id}", UserNameChangeRequest.last.desired_name) end should "reset the password" do @deletion.delete! assert_equal(false, @user.authenticate_password("password")) end should "generate a modaction" do @deletion.delete! assert_match(/deleted user ##{@user.id}/, ModAction.last.description) assert_equal(@user, ModAction.last.subject) assert_equal("user_delete", ModAction.last.category) assert_equal(@deletion.deleter, ModAction.last.creator) end should "remove any favorites" do @post = create(:post) Favorite.create!(post: @post, user: @user) perform_enqueued_jobs { @deletion.delete! } assert_equal(0, Favorite.count) assert_equal(0, @post.reload.fav_count) end end context "deleting another user's account" do should "work for the owner-level user" do @user = create(:user) @deletion = UserDeletion.new(user: @user, deleter: create(:owner_user)) @deletion.delete! assert_equal("user_#{@user.id}", @user.reload.name) assert_equal("deleted user ##{@user.id}", ModAction.last.description) assert_equal(@deletion.deleter, ModAction.last.creator) assert_equal(@user, ModAction.last.subject) end should "not work for other users" do @user = create(:user) @deletion = UserDeletion.new(user: @user, deleter: create(:admin_user)) @deletion.delete! assert_not_equal("user_#{@user.id}", @user.reload.name) assert_equal(0, ModAction.count) end end end