login test cases

tests/test_routes.py

@@ -65,6 +65,127 @@ def test_signup_user_already_logged_in(self):
         response = self.app.get('/signup')
         self.assertEqual(response.status_code, 302)
         self.assertEqual(response.location, '/')
+
+import unittest
+from unittest.mock import patch, MagicMock
+from flask import session
+from app import app
+
+class TestSignup(unittest.TestCase):
+    def setUp(self):
+        """Set up test client."""
+        self.app = app.test_client()
+        self.app.testing = True
+
+    @patch('app.routes.USERS_DB.find_one')
+    @patch('app.routes.USERS_DB.insert_one')
+    @patch('app.routes.bcrypt.hashpw')
+    def test_signup_success(self, mock_hashpw, mock_insert_one, mock_find_one):
+        """Test successful signup."""
+        mock_find_one.return_value = None
+        mock_hashpw.return_value = b'hashed_password'
+
+        response = self.app.post('/signup', data={
+            'username': 'newuser',
+            'password': 'password123',
+            'confirm_password': 'password123'
+        })
+        self.assertEqual(response.status_code, 302)
+        self.assertEqual(response.location, '/')
+        mock_find_one.assert_called_once_with({"username": 'newuser'})
+        mock_insert_one.assert_called_once()
+        with self.app.session_transaction() as sess:
+            self.assertEqual(sess['username'], 'newuser')
+
+    @patch('app.routes.USERS_DB.find_one')
+    def test_signup_passwords_not_matching(self, mock_find_one):
+        """Test signup with passwords not matching."""
+        mock_find_one.return_value = None
+
+        response = self.app.post('/signup', data={
+            'username': 'newuser',
+            'password': 'password123',
+            'confirm_password': 'password456'
+        })
+
+        self.assertEqual(response.status_code, 200)
+        self.assertIn(b'Passwords do not match!', response.data)
+        mock_find_one.assert_not_called()
+
+    @patch('app.routes.USERS_DB.find_one')
+    def test_signup_username_exists(self, mock_find_one):
+        """Test signup with username already existing."""
+        mock_find_one.return_value = {'username': 'existinguser'}
+
+        response = self.app.post('/signup', data={
+            'username': 'existinguser',
+            'password': 'password123',
+            'confirm_password': 'password123'
+        })
+
+        self.assertEqual(response.status_code, 200)
+        self.assertIn(b'Username already exists! Please login or use a different username.', response.data)
+        mock_find_one.assert_called_once_with({"username": 'existinguser'})
+
+    def test_signup_user_already_logged_in(self):
+        """Test signup when user is already logged in."""
+        with self.app.session_transaction() as sess:
+            sess['username'] = 'loggedinuser'
+
+        response = self.app.get('/signup')
+        self.assertEqual(response.status_code, 302)
+        self.assertEqual(response.location, '/')
+
+class TestLogin(unittest.TestCase):
+    def setUp(self):
+        """Set up test client."""
+        self.app = app.test_client()
+        self.app.testing = True
+
+    @patch('app.routes.USERS_DB.find_one')
+    @patch('app.routes.bcrypt.checkpw')
+    def test_login_success(self, mock_checkpw, mock_find_one):
+        """Test successful login."""
+        mock_find_one.return_value = {'username': 'testuser', 'password': b'hashed_password'}
+        mock_checkpw.return_value = True
+
+        response = self.app.post('/login', data={
+            'username': 'testuser',
+            'password': 'password123'
+        })
+        self.assertEqual(response.status_code, 302)
+        self.assertEqual(response.location, '/')
+        mock_find_one.assert_called_once_with({"username": 'testuser'})
+        mock_checkpw.assert_called_once_with(b'password123', b'hashed_password')
+        with self.app.session_transaction() as sess:
+            self.assertEqual(sess['username'], 'testuser')
+
+    @patch('app.routes.USERS_DB.find_one')
+    @patch('app.routes.bcrypt.checkpw')
+    def test_login_invalid_credentials(self, mock_checkpw, mock_find_one):
+        """Test login with invalid username or password."""
+        mock_find_one.return_value = {'username': 'testuser', 'password': b'hashed_password'}
+        mock_checkpw.return_value = False
+
+        response = self.app.post('/login', data={
+            'username': 'testuser',
+            'password': 'wrongpassword'
+        })
+        self.assertEqual(response.status_code, 302)
+        self.assertEqual(response.location, '/login')
+        # self.assertIn(b'Invalid username or password.', response.data)
+        mock_find_one.assert_called_once_with({"username": 'testuser'})
+        mock_checkpw.assert_called_once_with(b'wrongpassword', b'hashed_password')
+
+    def test_login_user_already_logged_in(self):
+        """Test login when user is already logged in."""
+        with self.app.session_transaction() as sess:
+            sess['username'] = 'loggedinuser'
+
+        response = self.app.get('/login')
+        self.assertEqual(response.status_code, 302)
+        self.assertEqual(response.location, '/')
+
 class TestGetUser(unittest.TestCase):
     def setUp(self):
         """Set up test client."""