測試Django 1-5重置密碼錶單 - 如何生成測試令牌？

Question

通過以下測試，令牌不被識別爲有效。在我的手動測試中，它正在工作，所以我錯過了密碼產生的方式。

def test_actual_reset_password(self): 
    new_password = "myNewPassword012*" 
    token_generator = PasswordResetTokenGenerator() 
    user = UserFactory.create() 
    token = token_generator.make_token(user=user) 

    response = self.assert_page_loading(path="/forgot-password/reset/{0}/".format(token)) 
    print response 
    # That loads the page with the error message mentioning that the token was already used   

    # So I cannot carry on: 
    form = response.form 
    form['new_password1'] = new_password 
    form['new_password2'] = new_password 

    response = form.submit() 

在Django的源代碼，在PasswordResetForm，我發現這個代碼;我看不出有什麼區別：

def save(self, ..., token_generator=default_token_generator, ...): 
    """ 
    Generates a one-use only link for resetting password and sends to the 
    user. 
    """ 
    ... 
    for user in self.users_cache: 
     ... 
     c = { 
      ... 
      'token': token_generator.make_token(user), 
      ... 
     } 
     ... 
     send_mail(subject, email, from_email, [user.email]) 

Answer 1

好吧，我只是尋找信息就如何做到這一點，你的問題促使我找出自己。我不確定你是否仍在研究這項工作，但我的工作方式如下：

from django.core import mail 
# First we get the initial password reset form. 
# This is not strictly necessary, but I included it for completeness 
response = self.c.get(reverse('password_reset')) 
self.assertEqual(response.status_code, 200) 
self.assertEqual(response.template_name, 'authentication/password_reset_form.html') 

# Then we post the response with our "email address" 
response = self.c.post(reverse('password_reset'),{'email':'fred@home.com'}) 
self.assertEqual(response.status_code, 302) 
# At this point the system will "send" us an email. We can "check" it thusly: 
self.assertEqual(len(mail.outbox), 1) 
self.assertEqual(mail.outbox[0].subject, 'Password reset on example.com') 

# Now, here's the kicker: we get the token and userid from the response 
token = response.context[0]['token'] 
uid = response.context[0]['uid'] 
# Now we can use the token to get the password change form 
response = self.c.get(reverse('password_reset_confirm', kwargs={'token':token,'uidb64':uid})) 
self.assertEqual(response.status_code, 200) 
self.assertEqual(response.template_name, 'authentication/password_reset_confirm.html') 

# Now we post to the same url with our new password: 
response = self.c.post(reverse('password_reset_confirm', 
    kwargs={'token':token,'uidb36':uid}), {'new_password1':'pass','new_password2':'pass'}) 
self.assertEqual(response.status_code, 302) 

就是這樣！畢竟不是那麼難。

Answer 2

這是我如何做到了用於功能測試：上`self.assertEqual

def test_password_reset_from_key(self): 
    from django.contrib.auth.tokens import default_token_generator 
    from django.utils.http import base36_to_int, int_to_base36 
    user = User.objects.all()[:1].get() 
    token = default_token_generator.make_token(user) 

    self.get("/accounts/password/reset/key/%s-%s/" % (int_to_base36(user.id), token)) 
    self.selenium.find_element_by_name("password1").send_keys("password") 
    self.selenium.find_element_by_name("password2").send_keys("password") 
    self.selenium.find_element_by_name("action").submit() 

    alert = self.selenium.find_element_by_css_selector(".alert-success") 
    self.assertIn('Password successfully changed.', alert.text)