(test) Authentication Tests

klinkoberstar commented 6 months ago

This pull request creates a series of tests for the authorization routes and provides some security tests for authentication.

This PR will close #126 and close #127

Describe your changes

Updated a few things in the conftest.py file:

We need a secret key for the in-memory DB to run, added a placeholder key for testing
Added 3 fixtures:
- capture_templates: extract the template of the current page, so we can assert that the proper template is rendered, after a successful 200 response
- test_user: creates an instance of the test user in the database. This is needed to test the login functionality for a user already in the database, as well as to test the password changes
- login_client: creates a logged-in state, to test functionalities that require the user already be logged in (i.e. change password, etc.)

Three different test files:

auth_basic_test.py: tests to check login, logout, and sign-up functionality
auth_change_password_test.py: a suite of tests specifically focused on different scenarios under which the password is changed
auth_security_test.py: additional tests to put pressure on authentication security

aaronhaefner commented 6 months ago

@klinkoberstar can you merge in main and address merge conflicts? We just merged #129 which adds some rules to docstrings.

klinkoberstar commented 6 months ago

@klinkoberstar can you merge in main and address merge conflicts? We just merged #129 which adds some rules to docstrings.

I've merged in main, addressed the conflicts, and updated the docstrings to comply with new reqs!

aaronhaefner commented 6 months ago

I would also add some logging to your tests throughout. db_test.py has examples.

klinkoberstar commented 6 months ago

I would also add some logging to your tests throughout. db_test.py has examples.

logging has been added!