", mail[:from].decoded
+
+ body = mail.body.to_s
+ assert_includes body, "Hello Thibaud,"
+ assert_includes body, "Email rejected (HardBounce)\n\nHello Thibaud,
\n\nThe email john@doe.com was rejected during the last message delivery due to the following reason: HardBounce"
+ assert_includes body, "Member: John Doe"
+ assert_includes body, "https://admin.acme.test/members/#{members(:john).id}"
+ assert_includes body, "https://admin.acme.test/admins/#{admins(:super).id}/edit#notifications"
+ assert_includes body, "Manage my notifications"
+ end
+
+ test "new_registration_email" do
+ mail = AdminMailer.with(
+ admin: admins(:super),
+ member: members(:john),
+ ).new_registration_email
+
+ assert_equal "New registration", mail.subject
+ assert_equal [ "info@csa-admin.org" ], mail.to
+ assert_equal "admin-member-created", mail.tag
+ assert_equal "Acme ", mail[:from].decoded
+
+ body = mail.body.to_s
+ assert_includes body, "Hello Thibaud,"
+ assert_includes body, "John Doe"
+ assert_includes body, "Access member page"
+ assert_includes body, "https://admin.acme.test/members/#{members(:john).id}"
+ assert_includes body, "https://admin.acme.test/admins/#{admins(:super).id}/edit#notifications"
+ assert_includes body, "Manage my notifications"
+ end
+
+ test "memberships_renewal_pending_email" do
+ mail = AdminMailer.with(
+ admin: admins(:super),
+ pending_memberships: [ memberships(:john), memberships(:jane) ],
+ opened_memberships: [ memberships(:jane) ],
+ pending_action_url: "https://admin.example.com/memberships/pending",
+ opened_action_url: "https://admin.example.com/memberships/opened",
+ action_url: "https://admin.example.com/memberships"
+ ).memberships_renewal_pending_email
+
+ assert_equal "⚠️ Membership(s) pending renewal!", mail.subject
+ assert_equal [ "info@csa-admin.org" ], mail.to
+ assert_equal "admin-memberships-renewal-pending", mail.tag
+ assert_equal "Acme ", mail[:from].decoded
+
+ body = mail.body.to_s
+ assert_includes body, "Hello Thibaud,"
+ assert_includes body, "2 membership(s)"
+ assert_includes body, "https://admin.example.com/memberships/pending"
+ assert_includes body, "1 open renewal request(s)"
+ assert_includes body, "https://admin.example.com/memberships/opened"
+ assert_includes body, "Access memberships"
+ assert_includes body, "https://admin.example.com/memberships"
+ assert_includes body, "https://admin.acme.test/admins/#{admins(:super).id}/edit#notifications"
+ assert_includes body, "Manage my notifications"
+ end
+
+ test "memberships_renewal_pending_email_pending_only" do
+ mail = AdminMailer.with(
+ admin: admins(:super),
+ pending_memberships: [ memberships(:john), memberships(:jane) ],
+ opened_memberships: [],
+ pending_action_url: "https://admin.example.com/memberships/pending",
+ opened_action_url: "https://admin.example.com/memberships/opened",
+ action_url: "https://admin.example.com/memberships"
+ ).memberships_renewal_pending_email
+
+ assert_equal "⚠️ Membership(s) pending renewal!", mail.subject
+ assert_includes mail.body.to_s, "2 membership(s)"
+ assert_includes mail.body.to_s, "https://admin.example.com/memberships/pending"
+ assert_not_includes mail.body.to_s, "request(s)"
+ assert_not_includes mail.body.to_s, "https://admin.example.com/memberships.opened"
+ end
+
+ test "memberships_renewal_pending_email_opened_only" do
+ mail = AdminMailer.with(
+ admin: admins(:super),
+ pending_memberships: [],
+ opened_memberships: [ memberships(:john), memberships(:jane) ],
+ pending_action_url: "https://admin.example.com/memberships/pending",
+ opened_action_url: "https://admin.example.com/memberships/opened",
+ action_url: "https://admin.example.com/memberships"
+ ).memberships_renewal_pending_email
+
+ assert_equal "⚠️ Membership(s) pending renewal!", mail.subject
+ assert_not_includes mail.body.to_s, "2 membership(s)"
+ assert_not_includes mail.body.to_s, "https://admin.example.com/memberships/pending"
+ assert_includes mail.body.to_s, "2 open renewal request(s)"
+ assert_includes mail.body.to_s, "https://admin.example.com/memberships/opened"
+ end
+end
diff --git a/test/mailers/invoice_mailer_test.rb b/test/mailers/invoice_mailer_test.rb
new file mode 100644
index 000000000..900b363aa
--- /dev/null
+++ b/test/mailers/invoice_mailer_test.rb
@@ -0,0 +1,205 @@
+# frozen_string_literal: true
+
+require "test_helper"
+
+class InvoiceMailerTest < ActionMailer::TestCase
+ test "created_email" do
+ travel_to "2024-01-01"
+ template = mail_template(:invoice_created)
+ invoice = invoices(:annual_fee)
+
+ mail = InvoiceMailer.with(
+ template: template,
+ invoice: invoice,
+ ).created_email
+
+ assert_equal "New invoice ##{invoice.id}", mail.subject
+ assert_equal [ "support@annual.com" ], mail.to
+ assert_equal "invoice-created", mail.tag
+ assert_equal "Acme ", mail[:from].decoded
+ assert_equal "outbound", mail[:message_stream].to_s
+
+ body = mail.html_part.body.to_s
+ assert_includes body, "Here is your new invoice"
+ assert_includes body, "Access my member page"
+ assert_includes body, "https://members.acme.test/billing"
+
+ assert_equal 1, mail.attachments.size
+ attachment = mail.attachments.first
+ assert_equal "invoice-acme-#{invoice.id}.pdf", attachment.filename
+ assert_equal "application/pdf", attachment.content_type
+ end
+
+ test "created_email (closed)" do
+ travel_to "2024-01-01"
+ template = mail_template(:invoice_created)
+ invoice = invoices(:annual_fee)
+ invoice.state = "closed"
+
+ mail = InvoiceMailer.with(
+ template: template,
+ invoice: invoice,
+ ).created_email
+
+ assert_equal "New invoice ##{invoice.id}", mail.subject
+ body = mail.html_part.body.to_s
+ assert_includes body, "Considering previous payments, this invoice is considered paid and is sent for informational purposes only."
+ end
+
+ test "created_email (partially paid)" do
+ travel_to "2024-01-01"
+ template = mail_template(:invoice_created)
+ invoice = invoices(:annual_fee)
+ Payment.create!(invoice: invoice, amount: 11, date: Date.yesterday)
+ invoice.reload
+
+ mail = InvoiceMailer.with(
+ template: template,
+ invoice: invoice,
+ ).created_email
+
+ assert_equal "New invoice ##{invoice.id}", mail.subject
+ body = mail.html_part.body.to_s
+ assert_includes body, "Considering previous payments, the remaining amount to be paid is: CHF 19.00"
+ end
+
+ test "created_email (Shop::Order)" do
+ travel_to "2024-01-01"
+ template = mail_template(:invoice_created)
+ order = shop_orders(:john)
+ invoice = order.invoice!
+
+ mail = InvoiceMailer.with(
+ template: template,
+ invoice: invoice,
+ ).created_email
+
+ body = mail.html_part.body.to_s
+ assert_includes body, "Here is your new invoice for your order number #{order.id}, "
+
+ assert_equal 1, mail.attachments.size
+ assert_equal "application/pdf", mail.attachments.first.content_type
+ end
+
+ test "created_email (billing_email)" do
+ travel_to "2024-01-01"
+ template = mail_template(:invoice_created)
+ invoice = invoices(:annual_fee)
+ invoice.member.billing_email = "info@accounting.com"
+
+ mail = InvoiceMailer.with(
+ template: template,
+ invoice: invoice,
+ ).created_email
+
+ assert_equal "New invoice ##{invoice.id}", mail.subject
+ assert_equal [ "info@accounting.com" ], mail.to
+ assert_equal "invoice-created", mail.tag
+ body = mail.html_part.body.to_s
+ assert_includes body, "Here is your new invoice"
+ assert_not_includes body, "Access my member page"
+ assert_not_includes body, "https://members.acme.test/billing"
+ assert_equal "Acme ", mail[:from].decoded
+
+ assert_equal 1, mail.attachments.size
+ attachment = mail.attachments.first
+ assert_equal "invoice-acme-#{invoice.id}.pdf", attachment.filename
+ assert_equal "application/pdf", attachment.content_type
+ end
+
+ test "cancelled_email" do
+ travel_to "2024-01-01"
+ template = mail_template(:invoice_cancelled)
+ invoice = invoices(:annual_fee)
+
+ mail = InvoiceMailer.with(
+ template: template,
+ invoice: invoice,
+ ).cancelled_email
+
+ assert_equal "Cancelled invoice ##{invoice.id}", mail.subject
+ assert_equal [ "support@annual.com" ], mail.to
+ assert_equal "invoice-cancelled", mail.tag
+ assert_equal "Acme ", mail[:from].decoded
+ assert_equal "outbound", mail[:message_stream].to_s
+
+ body = mail.body.to_s
+ assert_includes body, "Your invoice ##{invoice.id} from #{I18n.l(invoice.date)} has been cancelled."
+ assert_includes body, "Access my member page"
+ assert_includes body, "https://members.acme.test/billing"
+
+ assert_equal 0, mail.attachments.size
+ end
+
+ test "overdue_notice_email" do
+ travel_to "2024-01-01"
+ template = mail_template(:invoice_overdue_notice)
+ invoice = invoices(:annual_fee)
+ invoice.overdue_notices_count = 2
+
+ mail = InvoiceMailer.with(
+ template: template,
+ invoice: invoice,
+ ).overdue_notice_email
+
+ assert_equal "Overdue notice #2 for invoice ##{invoice.id} 😬", mail.subject
+ assert_equal [ "support@annual.com" ], mail.to
+ assert_equal "invoice-overdue-notice", mail.tag
+ assert_equal "Acme ", mail[:from].decoded
+
+ body = mail.html_part.body.to_s
+ assert_includes body, "The remaining amount to be paid is: CHF 30.00"
+ assert_includes body, "Access my member page"
+ assert_includes body, "https://members.acme.test/billing"
+
+ assert_equal 1, mail.attachments.size
+ attachment = mail.attachments.first
+ assert_equal "invoice-acme-#{invoice.id}.pdf", attachment.filename
+ assert_equal "application/pdf", attachment.content_type
+ end
+
+ test "overdue_notice_email (billing_email)" do
+ travel_to "2024-01-01"
+ template = mail_template(:invoice_overdue_notice)
+ invoice = invoices(:annual_fee)
+ invoice.overdue_notices_count = 2
+ invoice.member.billing_email = "info@accounting.com"
+
+ mail = InvoiceMailer.with(
+ template: template,
+ invoice: invoice,
+ ).overdue_notice_email
+
+ assert_equal "Overdue notice #2 for invoice ##{invoice.id} 😬", mail.subject
+ assert_equal [ "info@accounting.com" ], mail.to
+ assert_equal "invoice-overdue-notice", mail.tag
+ assert_equal "Acme ", mail[:from].decoded
+ assert_equal "outbound", mail[:message_stream].to_s
+
+ body = mail.html_part.body.to_s
+ assert_includes body, "The remaining amount to be paid is: CHF 30.00"
+ assert_not_includes body, "Access my member page"
+ assert_not_includes body, "https://members.acme.test/billing"
+
+ assert_equal 1, mail.attachments.size
+ attachment = mail.attachments.first
+ assert_equal "invoice-acme-#{invoice.id}.pdf", attachment.filename
+ assert_equal "application/pdf", attachment.content_type
+ end
+
+ test "sanitize html from subject" do
+ travel_to "2024-01-01"
+ template = mail_template(:invoice_overdue_notice)
+ template.update!(subject: 'Reminder #{{ invoice.overdue_notices_count }} 😬')
+
+ invoice = invoices(:annual_fee)
+ invoice.overdue_notices_count = 2
+
+ mail = InvoiceMailer.with(
+ template: template,
+ invoice: invoice,
+ ).overdue_notice_email
+
+ assert_equal "Reminder #2 😬", mail.subject
+ end
+end
diff --git a/test/mailers/member_mailer_test.rb b/test/mailers/member_mailer_test.rb
new file mode 100644
index 000000000..5111ef391
--- /dev/null
+++ b/test/mailers/member_mailer_test.rb
@@ -0,0 +1,50 @@
+# frozen_string_literal: true
+
+require "test_helper"
+
+class MemberMailerTest < ActionMailer::TestCase
+ test "activated_email" do
+ travel_to "2024-01-01"
+ template = mail_template(:member_activated)
+ membership = memberships(:jane)
+
+ mail = MemberMailer.with(
+ template: template,
+ member: membership.member,
+ ).activated_email
+
+ assert_equal "Welcome!", mail.subject
+ assert_equal [ "jane@doe.com" ], mail.to
+ assert_equal "member-activated", mail.tag
+ assert_equal "Acme ", mail[:from].decoded
+ assert_equal "outbound", mail[:message_stream].to_s
+
+ body = mail.body.to_s
+ assert_includes body, "Depot: Bakery"
+ assert_includes body, "Basket size: Large"
+ assert_includes body, "Complements: Bread"
+ assert_includes body, "Access my member page"
+ assert_includes body, "https://members.acme.test"
+ end
+
+ test "validated_email" do
+ template = mail_template(:member_validated)
+ member = members(:john)
+
+ mail = MemberMailer.with(
+ template: template,
+ member: member
+ ).validated_email
+
+ assert_equal "Registration validated!", mail.subject
+ assert_equal [ "john@doe.com" ], mail.to
+ assert_equal "member-validated", mail.tag
+ assert_equal "Acme ", mail[:from].decoded
+ assert_equal "outbound", mail[:message_stream].to_s
+
+ body = mail.body.to_s
+ assert_includes body, "Waiting list position: 1"
+ assert_includes body, "Access my member page"
+ assert_includes body, "https://members.acme.test"
+ end
+end
diff --git a/test/mailers/membership_mailer_test.rb b/test/mailers/membership_mailer_test.rb
new file mode 100644
index 000000000..9224e1e89
--- /dev/null
+++ b/test/mailers/membership_mailer_test.rb
@@ -0,0 +1,139 @@
+# frozen_string_literal: true
+
+require "test_helper"
+
+class MembershipMailerTest < ActionMailer::TestCase
+ test "initial_basket_email" do
+ travel_to "2024-01-01"
+ template = mail_template(:membership_initial_basket)
+ membership = memberships(:john)
+ basket = membership.baskets.first
+
+ mail = MembershipMailer.with(
+ template: template,
+ basket: basket,
+ ).initial_basket_email
+
+ assert_equal "First basket!", mail.subject
+ assert_equal [ "john@doe.com" ], mail.to
+ assert_equal "membership-initial-basket", mail.tag
+ assert_includes mail.body.to_s, "https://members.acme.test"
+ assert_equal "Acme ", mail[:from].decoded
+ assert_equal "outbound", mail[:message_stream].to_s
+ end
+
+ test "final_basket_email" do
+ travel_to "2024-01-01"
+ template = mail_template(:membership_final_basket)
+ membership = memberships(:john)
+ basket = membership.baskets.last
+
+ mail = MembershipMailer.with(
+ template: template,
+ basket: basket,
+ ).final_basket_email
+
+ assert_equal "Last basket!", mail.subject
+ assert_equal [ "john@doe.com" ], mail.to
+ assert_equal "membership-final-basket", mail.tag
+ assert_includes mail.body.to_s, "https://members.acme.test"
+ assert_equal "Acme ", mail[:from].decoded
+ assert_equal "outbound", mail[:message_stream].to_s
+ end
+
+ test "first_basket_email" do
+ travel_to "2024-01-01"
+ template = mail_template(:membership_first_basket)
+ membership = memberships(:john)
+ basket = membership.baskets.first
+
+ mail = MembershipMailer.with(
+ template: template,
+ basket: basket,
+ ).first_basket_email
+
+ assert_equal "First basket of the year!", mail.subject
+ assert_equal [ "john@doe.com" ], mail.to
+ assert_equal "membership-first-basket", mail.tag
+ assert_includes mail.body.to_s, "https://members.acme.test"
+ assert_equal "Acme ", mail[:from].decoded
+ assert_equal "outbound", mail[:message_stream].to_s
+ end
+
+ test "last_basket_email" do
+ travel_to "2024-01-01"
+ template = mail_template(:membership_last_basket)
+ membership = memberships(:john)
+ basket = membership.baskets.last
+
+ mail = MembershipMailer.with(
+ template: template,
+ basket: basket,
+ ).last_basket_email
+
+ assert_equal "Last basket of the year!", mail.subject
+ assert_equal [ "john@doe.com" ], mail.to
+ assert_equal "membership-last-basket", mail.tag
+ assert_includes mail.body.to_s, "https://members.acme.test"
+ assert_equal "Acme ", mail[:from].decoded
+ assert_equal "outbound", mail[:message_stream].to_s
+ end
+
+ test "last_trial_basket_email" do
+ travel_to "2024-01-01"
+ template = mail_template(:membership_last_trial_basket)
+ membership = memberships(:john)
+ basket = membership.baskets.first
+
+ mail = MembershipMailer.with(
+ template: template,
+ basket: basket,
+ ).last_trial_basket_email
+
+ assert_equal "Last trial basket!", mail.subject
+ assert_equal [ "john@doe.com" ], mail.to
+ assert_equal "membership-last-trial-basket", mail.tag
+ assert_includes mail.body.to_s, "It's the day of your last trial basket.."
+ assert_includes mail.body.to_s, "https://members.acme.test"
+ assert_equal "Acme ", mail[:from].decoded
+ assert_equal "outbound", mail[:message_stream].to_s
+ end
+
+ test "renewal_email" do
+ travel_to "2024-01-01"
+ template = mail_template(:membership_renewal)
+ membership = memberships(:john)
+
+ mail = MembershipMailer.with(
+ template: template,
+ membership: membership,
+ ).renewal_email
+
+ assert_equal "Renew your membership", mail.subject
+ assert_equal [ "john@doe.com" ], mail.to
+ assert_equal "membership-renewal", mail.tag
+ assert_includes mail.body.to_s, "Access the renewal form"
+ assert_includes mail.body.to_s, "https://members.acme.test/memberships#renewal"
+ assert_equal "Acme ", mail[:from].decoded
+ assert_equal "outbound", mail[:message_stream].to_s
+ end
+
+ test "renewal_reminder_email" do
+ travel_to "2024-01-01"
+ template = mail_template(:membership_renewal_reminder)
+ membership = memberships(:john)
+
+ mail = MembershipMailer.with(
+ template: template,
+ membership: membership,
+ ).renewal_reminder_email
+
+ assert_equal "Renew your membership (reminder)", mail.subject
+ assert_equal [ "john@doe.com" ], mail.to
+ assert_equal "membership-renewal-reminder", mail.tag
+ assert_includes mail.body.to_s, "Access the renewal form"
+ assert_includes mail.body.to_s, "https://members.acme.test/memberships#renewal"
+ assert_equal "Acme ", mail[:from].decoded
+ assert_equal "outbound", mail[:message_stream].to_s
+ end
+end
diff --git a/test/mailers/newsletter_mailer_test.rb b/test/mailers/newsletter_mailer_test.rb
new file mode 100644
index 000000000..0523bbc58
--- /dev/null
+++ b/test/mailers/newsletter_mailer_test.rb
@@ -0,0 +1,58 @@
+# frozen_string_literal: true
+
+require "test_helper"
+
+class NewsletterMailerTest < ActionMailer::TestCase
+ test "newsletter_email" do
+ template = newsletter_templates(:simple)
+ member = members(:john)
+
+ mail = NewsletterMailer.with(
+ tag: "newsletter-42",
+ template: template,
+ template_contents: template.contents, # Avoid preview data usage
+ subject: "My Newsletter",
+ member: member,
+ to: "john@doe.com"
+ ).newsletter_email
+
+ assert_equal "My Newsletter", mail.subject
+ assert_equal [ "john@doe.com" ], mail.to
+ assert_equal "Acme ", mail[:from].decoded
+ assert_equal "broadcast", mail[:message_stream].to_s
+ assert_equal "newsletter-42", mail[:tag].to_s
+
+ body = mail.body.to_s
+ assert_includes body, "Hello John Doe,"
+ assert_includes body, 'Content Title
'
+ assert_includes body, "Example Text John Doe"
+ assert_match %r{https://members.acme.test/newsletters/unsubscribe/\w{32}}, body
+ assert_equal "List-Unsubscribe=One-Click", mail["List-Unsubscribe-Post"].to_s
+ assert_match %r{},
+ mail["List-Unsubscribe"].to_s
+ end
+
+ test "newsletter_email with attachments" do
+ newsletter = newsletters(:simple)
+ member = members(:john)
+
+ attachment = Newsletter::Attachment.new
+ attachment.file.attach(
+ io: File.open(file_fixture("qrcode-test.png")),
+ filename: 'A "stylish" QR code.png')
+ newsletter.update!(attachments: [ attachment ])
+
+ mail = NewsletterMailer.with(
+ template: newsletter.template,
+ subject: "My Newsletter",
+ member: member,
+ attachments: [ attachment ],
+ to: "john@doe.com"
+ ).newsletter_email
+
+ assert_equal 1, mail.attachments.size
+ attachment = mail.attachments.first
+ assert_equal "A -stylish- QR code.png", attachment.filename
+ assert_equal "image/png", attachment.content_type
+ end
+end
diff --git a/test/mailers/session_mailer_test.rb b/test/mailers/session_mailer_test.rb
new file mode 100644
index 000000000..d3507d890
--- /dev/null
+++ b/test/mailers/session_mailer_test.rb
@@ -0,0 +1,41 @@
+# frozen_string_literal: true
+
+require "test_helper"
+
+class SessionMailerTest < ActionMailer::TestCase
+ test "new member session email" do
+ session = Session.new(
+ member: Member.new(language: "fr"),
+ email: "example@csa-admin.org")
+ mail = SessionMailer.with(
+ session: session,
+ session_url: "https://example.com/session/token",
+ ).new_member_session_email
+
+ assert_equal "Connexion à votre compte", mail.subject
+ assert_equal %w[ example@csa-admin.org ], mail.to
+ assert_equal "session-member", mail.tag
+
+ assert_includes mail.body.to_s, "Accéder à mon compte"
+ assert_includes mail.body.to_s, "https://example.com/session/token"
+ assert_equal "Acme ", mail[:from].decoded
+ end
+
+ test "new admin session email" do
+ session = Session.new(
+ admin: Admin.new(language: "fr"),
+ email: "example@csa-admin.org")
+ mail = SessionMailer.with(
+ session: session,
+ session_url: "https://example.com/session/token",
+ ).new_admin_session_email
+
+ assert_equal "Connexion à votre compte admin", mail.subject
+ assert_equal %w[ example@csa-admin.org ], mail.to
+ assert_equal "session-admin", mail.tag
+
+ assert_includes mail.body.to_s, "Accéder à mon compte admin"
+ assert_includes mail.body.to_s, "https://example.com/session/token"
+ assert_equal "Acme ", mail[:from].decoded
+ end
+end
diff --git a/test/models/.keep b/test/models/.keep
new file mode 100644
index 000000000..e69de29bb
diff --git a/test/models/ability_test.rb b/test/models/ability_test.rb
new file mode 100644
index 000000000..7acc45953
--- /dev/null
+++ b/test/models/ability_test.rb
@@ -0,0 +1,118 @@
+# frozen_string_literal: true
+
+require "test_helper"
+
+class AbilityTest < ActiveSupport::TestCase
+ test "superadmin permissions" do
+ ability = Ability.new(admins(:super))
+
+ assert ability.can?(:read, Organization)
+ assert ability.can?(:update, Current.org)
+ assert ability.can?(:manage, Admin)
+ assert_not ability.can?(:destroy, admins(:super))
+ assert ability.can?(:manage, ActiveAdmin::Comment)
+ assert ability.can?(:create, Absence)
+
+ Current.org.update!(features: [])
+ ability = Ability.new(admins(:super))
+
+ assert_not ability.can?(:create, Absence)
+ end
+
+ test "read only permissions" do
+ admin = admins(:external)
+ ability = Ability.new(admin)
+
+ assert ability.can?(:read, ActiveAdmin::Page)
+ assert ability.can?(:pdf, Invoice)
+ assert_not ability.can?(:read, Organization)
+ assert_not ability.can?(:manage, Admin)
+ assert_not ability.can?(:destroy, admin)
+ assert ability.can?(:update, admin)
+ assert ability.can?(:read, ActiveAdmin::Comment)
+ assert ability.can?(:create, ActiveAdmin::Comment)
+ assert_not ability.can?(:manage, active_admin_comments(:super_admin))
+ assert ability.can?(:manage, active_admin_comments(:external))
+ assert_not ability.can?(:batch_action, Member)
+ assert_not ability.can?(:batch_action, Membership)
+ assert_not ability.can?(:batch_action, Invoice)
+ assert_not ability.can?(:batch_action, Shop::Product)
+ end
+
+ test "member write permissions" do
+ admin = admins(:external)
+ admin.permission.update!(rights: { member: :write })
+ ability = Ability.new(admin)
+
+ assert ability.can?(:create, Member)
+ assert ability.can?(:update, Member)
+ assert ability.can?(:batch_action, Member)
+ assert ability.can?(:become, Member)
+ assert ability.can?(:validate, Member.new(state: "pending"))
+ end
+
+ test "membership write permissions" do
+ admin = admins(:external)
+ admin.permission.update!(rights: { membership: :write })
+ ability = Ability.new(admin)
+
+ assert ability.can?(:create, Membership)
+ assert ability.can?(:update, Membership)
+ assert ability.can?(:update, Basket)
+ assert ability.can?(:batch_action, Membership)
+ assert ability.can?(:renew_all, Membership)
+ assert ability.can?(:open_renewal_all, Membership)
+ assert ability.can?(:open_renewal, Membership)
+ assert ability.can?(:mark_renewal_as_pending, Membership)
+ assert ability.can?(:future_billing, Membership)
+ assert ability.can?(:renew, Membership)
+ assert ability.can?(:cancel, Membership)
+ end
+
+ test "billing write permissions" do
+ admin = admins(:external)
+ admin.permission.update!(rights: { billing: :write })
+ ability = Ability.new(admin)
+
+ assert ability.can?(:create, Invoice)
+ assert ability.can?(:update, Invoice)
+ assert ability.can?(:batch_action, Invoice)
+ assert ability.can?(:create, Payment)
+ assert ability.can?(:update, Payment)
+ assert ability.can?(:batch_action, Payment)
+ assert ability.can?(:recurring_billing, Member)
+ assert ability.can?(:force_share_billing, Member)
+ assert ability.can?(:send_email, Invoice)
+ assert ability.can?(:cancel, Invoice)
+ assert ability.can?(:import, Payment)
+
+ invoice = invoices(:annual_fee)
+ assert ability.can?(:send_email, invoice)
+
+ invoice.member.update!(emails: "")
+ assert_not ability.can?(:send_email, invoice)
+
+ invoice.member.update!(emails: "", billing_email: "billing@test.com")
+ assert ability.can?(:send_email, invoice)
+ end
+
+ test "shop write permissions" do
+ Current.org.update!(features: [ :shop ])
+ admin = admins(:external)
+ admin.permission.update!(rights: { shop: :write })
+ ability = Ability.new(admin)
+
+ assert ability.can?(:create, Shop::Order)
+ assert ability.can?(:update, Shop::Order)
+ assert ability.can?(:batch_action, Shop::Order)
+ assert ability.can?(:create, Shop::Product)
+ assert ability.can?(:update, Shop::Product)
+ assert ability.can?(:batch_action, Shop::Product)
+ assert ability.can?(:create, Shop::Producer)
+ assert ability.can?(:update, Shop::Producer)
+ assert ability.can?(:create, Shop::Tag)
+ assert ability.can?(:update, Shop::Tag)
+ assert ability.can?(:invoice, Shop::Order)
+ assert ability.can?(:cancel, Shop::Order)
+ end
+end
diff --git a/test/models/admin_test.rb b/test/models/admin_test.rb
new file mode 100644
index 000000000..1ff78f25a
--- /dev/null
+++ b/test/models/admin_test.rb
@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+
+require "test_helper"
+
+class AdminTest < ActiveSupport::TestCase
+ test "deletes sessions when destroyed" do
+ admin = admins(:super)
+ session = create_session(admin)
+
+ assert_difference "Session.count", -1 do
+ admin.destroy!
+ end
+ end
+
+ test "sets latest_update_read on create" do
+ admin = Admin.create!(
+ name: "New Admin",
+ permission: Permission.superadmin,
+ email: "new_admin@example.com",
+ latest_update_read: nil)
+
+ assert_equal Update.all.first.name, admin.latest_update_read
+ end
+
+ test "email=" do
+ admin = Admin.new(email: "Thibaud@Thibaud.GG ")
+
+ assert_equal "thibaud@thibaud.gg", admin.email
+ end
+
+ test "notify! with suppressed email" do
+ admin = admins(:super)
+ admin.update!(notifications: [ "new_absence" ])
+ EmailSuppression.suppress!(admin.email,
+ stream_id: "outbound",
+ origin: "Recipient",
+ reason: "HardBounce")
+
+ assert_no_difference("ActionMailer::Base.deliveries.count") do
+ Admin.notify!(:new_absence)
+ end
+ end
+end
diff --git a/test/models/basket_size_test.rb b/test/models/basket_size_test.rb
new file mode 100644
index 000000000..f5981d557
--- /dev/null
+++ b/test/models/basket_size_test.rb
@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+require "test_helper"
+
+class BasketSizeTest < ActiveSupport::TestCase
+ def ordered_names
+ BasketSize.member_ordered.map(&:name)
+ end
+
+ test "#member_ordered" do
+ assert_equal %w[Large Medium Small], ordered_names
+
+ Current.org.update!(basket_sizes_member_order_mode: "price_asc")
+ assert_equal %w[Small Medium Large], ordered_names
+
+ Current.org.update!(basket_sizes_member_order_mode: "name_asc")
+ assert_equal %w[Large Medium Small], ordered_names
+
+ basket_sizes(:small).update!(member_order_priority: 0)
+ assert_equal %w[Small Large Medium], ordered_names
+ end
+end
diff --git a/test/models/billing/camt_file_test.rb b/test/models/billing/camt_file_test.rb
new file mode 100644
index 000000000..fa00687ff
--- /dev/null
+++ b/test/models/billing/camt_file_test.rb
@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+require "test_helper"
+
+class Billing::CamtFileTest < ActiveSupport::TestCase
+ test "returns payment data from CAMT file" do
+ file = Billing::CamtFile.new(file_fixture("camt054.xml"))
+ assert_equal [
+ Billing::CamtFile::PaymentData.new(
+ invoice_id: 1,
+ member_id: 42,
+ amount: 1,
+ date: Date.new(2020, 11, 13, 11),
+ fingerprint: "2020-11-13-ZV20201113/371247/2-000000000000000420000000011"
+ )
+ ], file.payments_data
+ end
+
+ test "returns no payment data when REF has letter" do
+ file = Billing::CamtFile.new(file_fixture("camt054_ref_with_letters.xml"))
+ assert_empty file.payments_data
+ end
+
+ test "raises for invalid CAMT namespace" do
+ file = Billing::CamtFile.new(file_fixture("camt_wrong.xml"))
+ assert_raises(Billing::CamtFile::UnsupportedFileError) { file.payments_data }
+ end
+
+ test "raises for CAMT.053 format" do
+ file = Billing::CamtFile.new(file_fixture("camt053.xml"))
+ assert_raises(Billing::CamtFile::UnsupportedFileError) { file.payments_data }
+ end
+
+ test "raises for invalid CAMT file" do
+ file = Billing::CamtFile.new(file_fixture("camt_invalid.xml"))
+ assert_raises(Billing::CamtFile::UnsupportedFileError) { file.payments_data }
+ end
+end
diff --git a/test/models/concerns/auditable_test.rb b/test/models/concerns/auditable_test.rb
new file mode 100644
index 000000000..6367e0d9d
--- /dev/null
+++ b/test/models/concerns/auditable_test.rb
@@ -0,0 +1,52 @@
+# frozen_string_literal: true
+
+require "test_helper"
+
+class AuditableTest < ActiveSupport::TestCase
+ test "save changes on audited attributes without session" do
+ member = members(:john)
+ member.update!(name: "Joe Doe")
+
+ assert_difference("Audit.count", 1) do
+ member.update!(name: "John Doe")
+ end
+
+ audit = member.audits.last
+ assert_equal System.instance, audit.actor
+ assert_nil audit.session
+ assert_equal({ "name" => [ "Joe Doe", "John Doe" ] }, audit.audited_changes)
+ end
+
+ test "save changes on audited attributes with current session" do
+ member = members(:john)
+ session = create_session(member)
+ Current.session = session
+
+ assert_difference("Audit.count", 1) do
+ member.update!(name: "Joe Doe", note: "Hello")
+ end
+
+ audit = member.audits.last
+ assert_equal member, audit.actor
+ assert_equal session, audit.session
+ assert_equal({ "name" => [ "John Doe", "Joe Doe" ], "note" => [ nil, "Hello" ] }, audit.audited_changes)
+ end
+
+ test "ignore changes with no present value" do
+ member = members(:john)
+ member.update!(note: nil)
+
+ assert_no_difference("Audit.count") do
+ member.update!(note: " ")
+ end
+ end
+
+ test "ignore changes with similar values" do
+ member = members(:john)
+ member.update!(note: "Foo")
+
+ assert_no_difference("Audit.count") do
+ member.update!(note: " Foo ")
+ end
+ end
+end
diff --git a/test/models/delivery_test.rb b/test/models/delivery_test.rb
new file mode 100644
index 000000000..b2e08251e
--- /dev/null
+++ b/test/models/delivery_test.rb
@@ -0,0 +1,214 @@
+# frozen_string_literal: true
+
+require "test_helper"
+require "shared/bulk_dates_insert"
+
+class DeliveryTest < ActiveSupport::TestCase
+ include Shared::BulkDatesInsert
+
+ test "validates bulk inserts" do
+ delivery = Delivery.create(
+ bulk_dates_starts_on: Date.today,
+ bulk_dates_wdays: [ 1 ],
+ date: Date.today)
+
+ assert_not delivery.valid?(:bulk_dates_starts_on)
+ assert_not delivery.valid?(:bulk_dates_wdays)
+ end
+
+ test "bulk inserts with basket_complements" do
+ travel_to "2020-01-01"
+ bread = basket_complements(:bread)
+
+ assert_difference "Delivery.count", 2 do
+ Delivery.create(
+ bulk_dates_starts_on: "2020-01-01",
+ bulk_dates_ends_on: "2020-02-01",
+ bulk_dates_weeks_frequency: 2,
+ bulk_dates_wdays: [ 1 ],
+ basket_complements: [ bread ])
+ end
+
+ assert_equal [ [ bread ], [ bread ] ], Delivery.first(2).map(&:basket_complements)
+ end
+
+ test "adds basket_complement on subscribed baskets" do
+ travel_to "2024-01-01"
+ bread = basket_complements(:bread)
+ eggs = basket_complements(:eggs)
+
+ membership = memberships(:john)
+ membership.update!(subscribed_basket_complements: [ bread, eggs ])
+
+ delivery = membership.deliveries.first
+ delivery.update! basket_complements: [ eggs ]
+
+ basket = membership.baskets.first
+ assert_equal [ eggs ], basket.complements
+ assert_equal eggs.price, basket.complements_price
+
+ delivery.update! basket_complements: [ bread, eggs ]
+
+ basket = membership.baskets.first
+ assert_equal [ eggs, bread ], basket.complements
+ assert_equal bread.price + eggs.price, basket.complements_price
+ end
+
+ test "removes basket_complement on subscribed baskets" do
+ travel_to "2024-01-01"
+ bread = basket_complements(:bread)
+
+ membership = memberships(:jane)
+
+ basket = membership.baskets.first
+ assert_equal [ bread ], basket.complements
+
+ delivery = membership.deliveries.first
+ delivery.update! basket_complement_ids: []
+
+ basket = membership.baskets.first
+ assert_equal [], basket.complements
+ assert_equal 0, basket.complements_price
+ end
+
+ test "updates all fiscal year delivery numbers" do
+ travel_to "2024-01-01"
+ first = deliveries(:monday_1)
+ last = deliveries(:thursday_10)
+ assert_equal 1, first.number
+ assert_equal 20, last.number
+
+ delivery = Delivery.create!(date: "2024-01-02")
+ assert_equal 1, delivery.reload.number
+ assert_equal 2, first.reload.number
+ assert_equal 21, last.reload.number
+
+ delivery.update! date: first.date + 1.day
+ assert_equal 1, first.reload.number
+ assert_equal 2, delivery.reload.number
+ assert_equal 21, last.reload.number
+ end
+
+ test "update membership when date created" do
+ travel_to "2024-01-01"
+ membership = memberships(:john)
+ basket = baskets(:john_1)
+
+ assert_difference -> { membership.baskets.count } do
+ assert_difference -> { membership.reload.price }, basket.basket_price do
+ Delivery.create!(date: "2024-06-10")
+ perform_enqueued_jobs
+ end
+ end
+ end
+
+ test "update membership when date updated" do
+ travel_to "2024-01-01"
+ membership = memberships(:john)
+ basket = baskets(:john_1)
+ delivery = deliveries(:monday_1)
+
+ assert_difference -> { membership.baskets.count }, -1 do
+ assert_difference -> { membership.reload.price }, -basket.basket_price do
+ delivery.update!(date: delivery.date + 1.day)
+ perform_enqueued_jobs
+ end
+ end
+ end
+
+ test "update membership when date removed" do
+ travel_to "2024-01-01"
+ membership = memberships(:john)
+ basket = baskets(:john_1)
+
+ assert_difference -> { membership.baskets.count }, -1 do
+ assert_difference -> { membership.reload.price }, -basket.basket_price do
+ membership.deliveries.first.destroy!
+ perform_enqueued_jobs
+ end
+ end
+ end
+
+ test "flags basket when creating them" do
+ travel_to "2024-01-01"
+ membership = memberships(:john)
+ absence = membership.member.absences.create!(
+ started_on: "2024-06-05",
+ ended_on: "2024-06-15")
+
+ Delivery.create!(date: "2024-06-10")
+ perform_enqueued_jobs
+
+ basket = membership.baskets.last
+ assert_equal "absent", basket.state
+ assert_equal absence, basket.absence
+ end
+
+ test "reset delivery_cycle cache after date change" do
+ travel_to "2024-01-01"
+ cycle = delivery_cycles(:mondays)
+
+ assert_changes -> { cycle.reload.deliveries_counts }, from: { "2024" => 10, "2025" => 0 }, to: { "2024" => 11, "2025" => 0 } do
+ Delivery.create!(date: "2024-06-10")
+ end
+
+ assert_changes -> { cycle.reload.deliveries_counts }, from: { "2024" => 11, "2025" => 0 }, to: { "2024" => 10, "2025" => 0 } do
+ cycle.deliveries(2024).last.update!(date: "2024-06-11")
+ end
+
+ assert_changes -> { cycle.reload.deliveries_counts }, from: { "2024" => 10, "2025" => 0 }, to: { "2024" => 9, "2025" => 0 } do
+ cycle.deliveries(2024).first.destroy!
+ end
+ end
+
+ #
+ # Shop
+ #
+ test "#shop_open is true by default" do
+ travel_to "2024-01-01"
+ delivery = deliveries(:monday_1)
+
+ assert delivery.shop_open?
+
+ delivery.update!(shop_open: false)
+ assert_not delivery.shop_open?
+ end
+
+ test "when Organization#shop_delivery_open_delay_in_days is set" do
+ Current.org.update!(shop_delivery_open_delay_in_days: 2)
+ delivery = deliveries(:monday_1)
+
+ travel_to "2024-03-30 23:59:59" do
+ assert delivery.shop_open?
+ end
+ travel_to "2024-03-31" do
+ assert_not delivery.shop_open?
+ end
+ end
+
+ test "when Organization#shop_delivery_open_last_day_end_time is set" do
+ Current.org.update!(shop_delivery_open_last_day_end_time: "12:00")
+ delivery = deliveries(:monday_1)
+
+ travel_to "2024-04-01 11:59" do
+ assert delivery.shop_open?
+ end
+ travel_to "2024-04-01 12:00:01" do
+ assert_not delivery.shop_open?
+ end
+ end
+
+ test "when both Organization#shop_delivery_open_delay_in_days and Organization#shop_delivery_open_last_day_end_time are set" do
+ Current.org.update!(
+ shop_delivery_open_delay_in_days: 1,
+ shop_delivery_open_last_day_end_time: "12:30")
+ delivery = deliveries(:monday_1)
+
+ travel_to "2024-03-31 12:30" do
+ assert delivery.shop_open?
+ end
+ travel_to "2024-03-31 12:30:01" do
+ assert_not delivery.shop_open?
+ end
+ end
+end
diff --git a/test/models/newsletter/audience_test.rb b/test/models/newsletter/audience_test.rb
new file mode 100644
index 000000000..e69de29bb
diff --git a/test/shared/bulk_dates_insert.rb b/test/shared/bulk_dates_insert.rb
new file mode 100644
index 000000000..2af0ce0d1
--- /dev/null
+++ b/test/shared/bulk_dates_insert.rb
@@ -0,0 +1,69 @@
+# frozen_string_literal: true
+
+module Shared
+ module BulkDatesInsert
+ extend ActiveSupport::Concern
+
+ included do
+ def setup
+ super
+ shared_class = self.class.name.gsub(/Test$/, "").classify.constantize
+ @model = shared_class.new(date: nil)
+ end
+
+ test "bulk_dates is nil with a date set" do
+ @model.date = Date.today
+ assert_nil @model.bulk_dates
+ end
+
+ test "bulk_dates includes all the days between starts and ends dates" do
+ @model.bulk_dates_starts_on = Date.today
+ @model.bulk_dates_ends_on = Date.tomorrow
+ @model.bulk_dates_weeks_frequency = 1
+ @model.bulk_dates_wdays = Array(0..6)
+
+ assert_equal [ Date.today, Date.tomorrow ], @model.bulk_dates
+ end
+
+ test "bulk_dates includes all the days between starts and ends dates following wdays" do
+ @model.bulk_dates_starts_on = Date.today.monday
+ @model.bulk_dates_ends_on = Date.today.sunday
+ @model.bulk_dates_weeks_frequency = 1
+ @model.bulk_dates_wdays = [ 0, 1, 2 ]
+
+ assert_equal [
+ Date.today.monday,
+ Date.today.monday + 1.day,
+ Date.today.sunday
+ ], @model.bulk_dates
+ end
+
+ test "bulk_dates includes all the days between starts and ends dates with frequency" do
+ @model.bulk_dates_starts_on = Date.today.monday
+ @model.bulk_dates_ends_on = Date.today.sunday + 1.month
+ @model.bulk_dates_weeks_frequency = 2
+ @model.bulk_dates_wdays = [ 1 ]
+
+ assert_equal [
+ Date.today.monday,
+ Date.today.monday + 2.weeks,
+ Date.today.monday + 4.weeks
+ ], @model.bulk_dates
+ end
+
+ test "save includes all the days between starts and ends dates following wdays" do
+ travel_to Date.parse("2018-01-01") do
+ @model.bulk_dates_starts_on = Date.parse("2018-11-05")
+ @model.bulk_dates_ends_on = Date.parse("2018-11-11") + 1.month
+ @model.bulk_dates_weeks_frequency = 2
+ @model.bulk_dates_wdays = Array(0..6)
+
+ assert_equal 21, @model.bulk_dates.size
+ assert_difference("#{@model.class.name}.count", 21) do
+ @model.save
+ end
+ end
+ end
+ end
+ end
+end
diff --git a/test/support/flash_messages_helper.rb b/test/support/flash_messages_helper.rb
new file mode 100644
index 000000000..c24b3e3c4
--- /dev/null
+++ b/test/support/flash_messages_helper.rb
@@ -0,0 +1,13 @@
+module FlashMessagesHelper
+ def flash_error
+ find("[aria-label=\"flash error\"]")&.text
+ end
+
+ def flash_alert
+ find("[aria-label=\"flash alert\"]")&.text
+ end
+
+ def flash_notice
+ find("[aria-label=\"flash notice\"]")&.text
+ end
+end
diff --git a/test/support/mail_templates_helper.rb b/test/support/mail_templates_helper.rb
new file mode 100644
index 000000000..67b0ffea0
--- /dev/null
+++ b/test/support/mail_templates_helper.rb
@@ -0,0 +1,11 @@
+module MailTemplatesHelper
+ def mail_templates(titles)
+ Array(titles).map do |title|
+ MailTemplate.create!(title: title)
+ end
+ end
+
+ def mail_template(title)
+ MailTemplate.create!(title: title)
+ end
+end
diff --git a/test/support/sessions_helper.rb b/test/support/sessions_helper.rb
new file mode 100644
index 000000000..a2faa58d0
--- /dev/null
+++ b/test/support/sessions_helper.rb
@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+module SessionsHelper
+ def login(owner)
+ session = create_session(owner)
+ visit "/sessions/#{session.token}"
+ end
+
+ def create_session(owner, attributes = {})
+ session = Session.new(
+ remote_addr: "127.0.0.1",
+ user_agent: "a browser user agent")
+ session.assign_attributes(attributes)
+ case owner
+ when Member
+ session.member_email = owner.emails_array.first
+ when Admin
+ session.admin_email = owner.email
+ end
+ session.save!
+ session
+ end
+
+ def delete_session(owner)
+ owner.reload.sessions.each(&:delete)
+ end
+end
diff --git a/test/system/.keep b/test/system/.keep
new file mode 100644
index 000000000..e69de29bb
diff --git a/test/system/members/sessions_test.rb b/test/system/members/sessions_test.rb
new file mode 100644
index 000000000..6e29a2be9
--- /dev/null
+++ b/test/system/members/sessions_test.rb
@@ -0,0 +1,166 @@
+# frozen_string_literal: true
+
+require "application_system_test_case"
+
+class Members::SessionsTest < ApplicationSystemTestCase
+ test "creates a new session from email" do
+ member = members(:john)
+
+ visit "/"
+ assert_equal "/login", current_path
+ assert_text "Please log in to access your account."
+
+ fill_in "session_email", with: " john@doe.com "
+ click_button "Send"
+ perform_enqueued_jobs
+
+ session = member.sessions.last
+
+ assert_equal "john@doe.com", session.email
+ assert_equal 1, SessionMailer.deliveries.size
+
+ assert_equal "/login", current_path
+ assert_text "Thank you! An email has just been sent to you."
+
+ open_email("john@doe.com")
+ current_email.click_link "Access my account"
+
+ assert_equal "/activity_participations", current_path
+ assert_text "You are now logged in."
+
+ delete_session(member)
+ visit "/"
+
+ assert_equal "/login", current_path
+ assert_text "Please log in to access your account."
+ end
+
+ test "does not accept blank email" do
+ visit "/"
+ assert_equal "/login", current_path
+
+ fill_in "session_email", with: ""
+ click_button "Send"
+ perform_enqueued_jobs
+
+ assert_equal 0, SessionMailer.deliveries.size
+
+ assert_equal "/sessions", current_path
+ assert_selector "span.error", text: "can't be blank"
+ end
+
+ test "does not accept invalid email" do
+ visit "/"
+ assert_equal "/login", current_path
+
+ fill_in "session_email", with: "foo@bar"
+ click_button "Send"
+ perform_enqueued_jobs
+
+ assert_equal 0, SessionMailer.deliveries.size
+
+ assert_equal "/sessions", current_path
+ assert_selector "span.error", text: "is invalid"
+ end
+
+ test "does not accept unknown email" do
+ visit "/"
+ assert_equal "/login", current_path
+
+ fill_in "session_email", with: "unknown@member.com"
+ click_button "Send"
+ perform_enqueued_jobs
+
+ assert_equal 0, SessionMailer.deliveries.size
+
+ assert_equal "/sessions", current_path
+ assert_selector "span.error", text: "Unknown email"
+ end
+
+ test "does not accept old session when not logged in" do
+ old_session = create_session(members(:john), created_at: 1.hour.ago)
+
+ visit "/sessions/#{old_session.token}"
+
+ assert_equal "/login", current_path
+ assert_text "Your login link is no longer valid. Please request a new one."
+ end
+
+ test "handles old session when already logged in" do
+ member = members(:john)
+ login(member)
+ old_session = create_session(member, created_at: 1.hour.ago)
+
+ visit "/sessions/#{old_session.token}"
+
+ assert_equal "/activity_participations", current_path
+ assert_text "You are already logged in."
+ end
+
+ test "logout session without email" do
+ member = members(:john)
+ login(member)
+ member.sessions.last.update!(email: nil)
+
+ visit "/"
+
+ assert_equal "/login", current_path
+ assert_text "Please log in to access your account."
+ end
+
+ test "logout expired session" do
+ member = members(:john)
+ login(member)
+ member.sessions.last.update!(created_at: 1.year.ago)
+
+ visit "/"
+
+ assert_equal "/login", current_path
+ assert_text "Your session has expired, please log in again."
+
+ visit "/"
+
+ assert_equal "/login", current_path
+ assert_text "Please log in to access your account."
+ end
+
+ test "update last usage column every hour when using the session" do
+ member = members(:john)
+
+ travel_to Time.new(2018, 7, 6, 1) do
+ login(member)
+
+ session = member.sessions.last
+ assert_equal Time.new(2018, 7, 6, 1), session.last_used_at
+ assert_equal "127.0.0.1", session.last_remote_addr
+ assert_equal "Other", session.last_user_agent.to_s
+ end
+
+ travel_to Time.new(2018, 7, 6, 1, 59) do
+ visit "/"
+ assert_equal Time.new(2018, 7, 6, 1), member.sessions.last.last_used_at
+ end
+
+ travel_to Time.new(2018, 7, 6, 2, 0, 1) do
+ visit "/"
+ assert_equal Time.new(2018, 7, 6, 2, 0, 1), member.sessions.last.last_used_at
+ end
+ end
+
+ test "revoke session on logout" do
+ member = members(:john)
+ login(member)
+ session = member.sessions.last
+
+ visit "/"
+
+ assert_changes -> { session.reload.revoked_at }, from: nil do
+ click_button "Logout"
+ end
+
+ visit "/"
+
+ assert_equal "/login", current_path
+ assert_text "Please log in to access your account."
+ end
+end
diff --git a/test/system/sessions_test.rb b/test/system/sessions_test.rb
new file mode 100644
index 000000000..19bacb6c7
--- /dev/null
+++ b/test/system/sessions_test.rb
@@ -0,0 +1,167 @@
+# frozen_string_literal: true
+
+require "application_system_test_case"
+
+class SessionsTest < ApplicationSystemTestCase
+ test "creates a new session from email" do
+ admin = admins(:super)
+
+ visit "/"
+
+ assert_equal "/login", current_path
+ assert_equal "Please log in to access your account.", flash_alert
+
+ fill_in "Email", with: " info@csa-admin.org "
+ click_button "Submit"
+ perform_enqueued_jobs
+
+ session = admin.sessions.last
+
+ assert_equal "info@csa-admin.org", session.email
+ assert_equal 1, SessionMailer.deliveries.size
+
+ assert_equal "/login", current_path
+ assert_equal "Thank you! An email has just been sent to you.", flash_notice
+
+ open_email("info@csa-admin.org")
+ current_email.click_link "Access my admin account"
+
+ assert_equal "/", current_path
+ assert_equal "You are now logged in.", flash_notice
+
+ delete_session(admin)
+ visit "/"
+
+ assert_equal "/login", current_path
+ assert_equal "Please log in to access your account.", flash_alert
+ end
+
+ test "does not accept blank email" do
+ visit "/"
+ assert_equal "/login", current_path
+
+ fill_in "Email", with: ""
+ click_button "Submit"
+ perform_enqueued_jobs
+
+ assert_equal 0, SessionMailer.deliveries.size
+
+ assert_equal "/sessions", current_path
+ assert_selector "p.inline-errors", text: "can't be blank"
+ end
+
+ test "does not accept invalid email" do
+ visit "/"
+ assert_equal "/login", current_path
+
+ fill_in "Email", with: "@foo"
+ click_button "Submit"
+ perform_enqueued_jobs
+
+ assert_equal 0, SessionMailer.deliveries.size
+
+ assert_equal "/sessions", current_path
+ assert_selector "p.inline-errors", text: "is invalid"
+ end
+
+ test "does not accept unknown email" do
+ visit "/"
+ assert_equal "/login", current_path
+
+ fill_in "Email", with: "unknown@admin.com"
+ click_button "Submit"
+ perform_enqueued_jobs
+
+ assert_equal 0, SessionMailer.deliveries.size
+
+ assert_equal "/sessions", current_path
+ assert_selector "p.inline-errors", text: "Unknown email"
+ end
+
+ test "does not accept old session when not logged in" do
+ old_session = create_session(admins(:super), created_at: 1.hour.ago)
+
+ visit "/sessions/#{old_session.token}"
+
+ assert_equal "/login", current_path
+ assert_equal "Your login link is no longer valid. Please request a new one.", flash_alert
+ end
+
+ test "handles old session when already logged in" do
+ admin = admins(:super)
+ login(admin)
+ old_session = create_session(admin, created_at: 1.hour.ago)
+
+ visit "/sessions/#{old_session.token}"
+
+ assert_equal "/", current_path
+ assert_equal "You are already logged in.", flash_notice
+ end
+
+ test "logout session without email" do
+ admin = admins(:super)
+ login(admin)
+ admin.sessions.last.update!(email: nil)
+
+ visit "/"
+
+ assert_equal "/login", current_path
+ assert_equal "Please log in to access your account.", flash_alert
+ end
+
+ test "logout expired session" do
+ admin = admins(:super)
+ login(admin)
+ admin.sessions.last.update!(created_at: 1.year.ago)
+
+ visit "/"
+
+ assert_equal "/login", current_path
+ assert_equal "Your session has expired, please log in again.", flash_alert
+
+ visit "/"
+
+ assert_equal "/login", current_path
+ assert_equal "Please log in to access your account.", flash_alert
+ end
+
+ test "update last usage column every hour when using the session" do
+ admin = admins(:super)
+
+ travel_to Time.new(2018, 7, 6, 1) do
+ login(admin)
+
+ session = admin.sessions.last
+ assert_equal Time.new(2018, 7, 6, 1), session.last_used_at
+ assert_equal "127.0.0.1", session.last_remote_addr
+ assert_equal "Other", session.last_user_agent.to_s
+ end
+
+ travel_to Time.new(2018, 7, 6, 1, 59) do
+ visit "/"
+ assert_equal Time.new(2018, 7, 6, 1), admin.sessions.last.last_used_at
+ end
+
+ travel_to Time.new(2018, 7, 6, 2, 0, 1) do
+ visit "/"
+ assert_equal Time.new(2018, 7, 6, 2, 0, 1), admin.sessions.last.last_used_at
+ end
+ end
+
+ test "revoke session on logout" do
+ admin = admins(:super)
+ login(admin)
+ session = admin.sessions.last
+
+ visit "/"
+
+ assert_changes -> { session.reload.revoked_at }, from: nil do
+ click_link "Logout"
+ end
+
+ visit "/"
+
+ assert_equal "/login", current_path
+ assert_equal "Please log in to access your account.", flash_alert
+ end
+end
diff --git a/test/test_helper.rb b/test/test_helper.rb
new file mode 100644
index 000000000..7da4fd7e3
--- /dev/null
+++ b/test/test_helper.rb
@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+ENV["RAILS_ENV"] ||= "test"
+require_relative "../config/environment"
+require "rails/test_help"
+
+require "support/sessions_helper"
+require "support/mail_templates_helper"
+
+module ActiveSupport
+ class TestCase
+ include ActiveJob::TestHelper
+
+ include SessionsHelper
+ include MailTemplatesHelper
+
+ # Run tests in parallel with specified workers
+ parallelize(workers: :number_of_processors)
+
+ # Setup all fixtures in test/fixtures/*.yml for all tests in alphabetical order.
+ fixtures :all
+
+ setup do
+ Tenant.connect("acme")
+ end
+
+ teardown do
+ Tenant.disconnect
+ end
+ end
+end