aljaz/CTFd
1
0
Fork 0
mirror of https://github.com/aljazceru/CTFd.git synced 2025-12-17 22:14:25 +01:00
Code Issues Packages Projects Releases Wiki Activity

Require password for email change (#1077)

Browse Source 
* Require password for email changes
This commit is contained in:
Kevin Chung
2019-08-04 20:28:20 -04:00
committed by GitHub
parent 3453eafcab
commit 71240bb13d
3 changed files with 59 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
tests/api/v1/test_users.py
View File

@@ -204,21 +204,21 @@ def test_api_users_patch_duplicate_information():
# Duplicate email
r = client.patch(
"/api/v1/users/me",
json={"name": "user2", "email": "user@ctfd.io", "password": "password"},
json={"name": "user1", "email": "user2@ctfd.io", "confirm": "password"},
)
resp = r.get_json()
assert r.status_code == 400
assert resp["errors"]["name"]
assert resp["errors"]["email"]
assert resp["success"] is False
# Duplicate user
r = client.patch(
"/api/v1/users/me",
json={"name": "user", "email": "user2@ctfd.io", "password": "password"},
json={"name": "user2", "email": "user1@ctfd.io", "confirm": "password"},
)
resp = r.get_json()
assert r.status_code == 400
assert resp["errors"]["email"]
assert resp["errors"]["name"]
assert resp["success"] is False
assert Users.query.count() == 3
destroy_ctfd(app)
@@ -454,7 +454,7 @@ def test_api_user_change_verify_email():
user.verified = True
app.db.session.commit()
with login_as_user(app) as client:
r = client.patch("/api/v1/users/me", json={"email": "new_email@email.com"})
r = client.patch("/api/v1/users/me", json={"email": "new_email@email.com", "confirm": "password"})
assert r.status_code == 200
resp = r.get_json()
assert resp["data"]["email"] == "new_email@email.com"
@@ -473,14 +473,14 @@ def test_api_user_change_email_under_whitelist():
"domain_whitelist", "whitelisted.com, whitelisted.org, whitelisted.net"
)
with login_as_user(app) as client:
r = client.patch("/api/v1/users/me", json={"email": "new_email@email.com"})
r = client.patch("/api/v1/users/me", json={"email": "new_email@email.com", "confirm": "password"})
assert r.status_code == 400
resp = r.get_json()
assert resp["errors"]["email"]
assert resp["success"] is False
r = client.patch(
"/api/v1/users/me", json={"email": "new_email@whitelisted.com"}
"/api/v1/users/me", json={"email": "new_email@whitelisted.com", "confirm": "password"}
)
assert r.status_code == 200
resp = r.get_json()