openproject/spec/models/token/hashed_token_spec.rb

#-- copyright
# OpenProject is an open source project management software.
# Copyright (C) 2012-2021 the OpenProject GmbH
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License version 3.
#
# OpenProject is a fork of ChiliProject, which is a fork of Redmine. The copyright follows:
# Copyright (C) 2006-2013 Jean-Philippe Lang
# Copyright (C) 2010-2013 the ChiliProject Team
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
#
# See COPYRIGHT and LICENSE files for more details.
#++

require 'spec_helper'

describe ::Token::HashedToken, type: :model do
  let(:user) { FactoryBot.build(:user) }

  subject { described_class.new user: user }

  describe 'token value' do
    it 'is generated on a new instance' do
      expect(subject.value).to be_present
    end

    it 'provides the generated plain value on a new instance' do
      expect(subject.valid_plaintext?(subject.plain_value)).to eq true
    end

    it 'hashes the plain value to value' do
      expect(subject.value).not_to eq(subject.plain_value)
    end

    it 'does not keep the value when finding it' do
      subject.save!

      instance = described_class.where(user: user).last
      expect(instance.plain_value).to eq nil
    end
  end

  describe '#find_by_plaintext_value' do
    before do
      subject.save!
    end

    it 'finds using the plaintext value' do
      expect(described_class.find_by_plaintext_value(subject.plain_value)).to eq subject
      expect(described_class.find_by_plaintext_value('foobar')).to eq nil
    end
  end
end