opensupports/tests/user/edit-password.rb

describe '/user/edit-password' do

    Scripts.logout()
    result = request('/user/login', {
        email: 'steve@jobs.com',
        password: 'custompassword'
    })

    $csrf_userid = result['data']['userId']
    $csrf_token = result['data']['token']


    it 'should fail if new password is incorrect' do
        result = request('/user/edit-password', {
            oldPassword: 'custompassword',
            newPassword: 'np',
            csrf_userid: $csrf_userid,
            csrf_token: $csrf_token
        })
        (result['status']).should.equal('fail')
        (result['message']).should.equal('INVALID_PASSWORD')

        long_text = ''
        250.times {long_text << 'a'}

        result = request('/user/edit-password', {
            oldPassword: 'custompassword',
            newPassword: long_text,
            csrf_userid: $csrf_userid,
            csrf_token: $csrf_token
        })
        (result['status']).should.equal('fail')
        (result['message']).should.equal('INVALID_PASSWORD')
    end

    it 'should fail if old password is not same than old password ' do
        result = request('/user/edit-password',{
            oldPassword: 'falsepassword',
            newPassword: 'newpassword',
            csrf_userid: $csrf_userid,
            csrf_token: $csrf_token
        })
        (result['status']).should.equal('fail')
        (result['message']).should.equal('INVALID_OLD_PASSWORD')
    end

    it 'should change password' do
        result = request('/user/edit-password',{
            oldPassword: 'custompassword',
            newPassword: 'newpassword',
            csrf_userid: $csrf_userid,
            csrf_token: $csrf_token
        })
        (result['status']).should.equal('success')

        Scripts.logout()

        Scripts.login('steve@jobs.com','newpassword')

        result = request('/user/edit-password',{
            oldPassword: 'newpassword',
            newPassword: 'custompassword',
            csrf_userid: $csrf_userid,
            csrf_token: $csrf_token
        })
        (result['status']).should.equal('success')
    end
end