feat: initial release of volumen — a file-based Markdown blog engine

test/users_test.rb

@@ -0,0 +1,114 @@
+# frozen_string_literal: true
+
+require "test_helper"
+require "tmpdir"
+require "fileutils"
+
+class UsersTest < Minitest::Test
+  def setup
+    @dir = Dir.mktmpdir
+    @path = File.join(@dir, "users.toml")
+  end
+
+  def teardown
+    FileUtils.remove_entry(@dir)
+  end
+
+  def test_bootstrap_user_from_hash
+    hash = Volumen::Password.hash("secret")
+    users = Volumen::Users.new(path: @path, bootstrap_hash: hash)
+    assert_equal 1, users.all.length
+    assert users.authenticate("admin", "secret")
+  end
+
+  def test_no_users_without_file_or_hash
+    refute_predicate Volumen::Users.new(path: @path), :any?
+  end
+
+  def test_add_and_authenticate
+    users = Volumen::Users.new(path: @path)
+    assert users.add("alice", "wonderland")
+    assert_path_exists @path
+    assert users.authenticate("alice", "wonderland")
+    refute users.authenticate("alice", "nope")
+  end
+
+  def test_add_rejects_duplicate
+    users = Volumen::Users.new(path: @path)
+    users.add("alice", "x")
+    assert_nil users.add("alice", "y")
+  end
+
+  def test_update_password
+    users = Volumen::Users.new(path: @path)
+    users.add("alice", "old")
+    users.update_password("alice", "new")
+    refute users.authenticate("alice", "old")
+    assert users.authenticate("alice", "new")
+  end
+
+  def test_rename
+    users = Volumen::Users.new(path: @path)
+    users.add("alice", "x")
+    assert users.rename("alice", "alicia")
+    assert_nil users.find("alice")
+    assert users.find("alicia")
+  end
+
+  def test_delete_keeps_last_user
+    users = Volumen::Users.new(path: @path)
+    users.add("alice", "x")
+    assert_nil users.delete("alice")
+    users.add("bob", "y")
+    assert users.delete("bob")
+    assert_nil users.find("bob")
+  end
+
+  def test_default_role_is_author
+    users = Volumen::Users.new(path: @path)
+    users.add("alice", "x")
+    assert_equal "author", users.find("alice").role
+  end
+
+  def test_add_with_explicit_role
+    users = Volumen::Users.new(path: @path)
+    users.add("boss", "x", "admin")
+    assert_equal "admin", users.find("boss").role
+  end
+
+  def test_invalid_role_falls_back_to_default
+    users = Volumen::Users.new(path: @path)
+    users.add("alice", "x", "wizard")
+    assert_equal "author", users.find("alice").role
+  end
+
+  def test_bootstrap_user_is_admin
+    users = Volumen::Users.new(path: @path, bootstrap_hash: Volumen::Password.hash("s"))
+    assert_equal "admin", users.find("admin").role
+  end
+
+  def test_set_role
+    users = Volumen::Users.new(path: @path)
+    users.add("alice", "x", "admin")
+    users.add("bob", "y", "author")
+    assert users.set_role("bob", "admin")
+    assert_equal "admin", users.find("bob").role
+  end
+
+  def test_cannot_demote_last_admin
+    users = Volumen::Users.new(path: @path)
+    users.add("alice", "x", "admin")
+    users.add("bob", "y", "author")
+    assert_nil users.set_role("alice", "author")
+    assert_equal "admin", users.find("alice").role
+  end
+
+  def test_cannot_delete_last_admin
+    users = Volumen::Users.new(path: @path)
+    users.add("alice", "x", "admin")
+    users.add("bob", "y", "author")
+    assert_nil users.delete("alice")
+    users.add("carol", "z", "admin")
+    assert users.delete("alice")
+  end
+end