You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
This repo is archived. You can view files and clone it, but cannot push or open issues/pull-requests.
xmrauctions/bids/tests/test_views.py

267 lines
12 KiB
Python

from secrets import token_urlsafe
from monero.seed import Seed
from django.test import TestCase
from django.contrib.auth.models import User
from django.core.paginator import Page
from django.shortcuts import reverse
from django.test.client import Client
from items.models import Item
from bids.models import ItemBid
from bids.forms import CreateItemBidForm
class ItemBidViewsTestCase(TestCase):
def setUp(self):
self.client = Client()
self.seller_password = token_urlsafe(32)
self.buyer_password = token_urlsafe(32)
self.seller = User.objects.create_user(
'seller', password=self.seller_password
)
self.buyer = User.objects.create_user(
'buyer', password=self.buyer_password
)
self.payout_address = Seed().public_address(net='stagenet')
self.return_address = Seed().public_address(net='stagenet')
self.whereabouts = 'Los Angeles, CA'
self.test_item = Item.objects.create(
owner=self.seller,
name='Test Item',
description='Test item',
ask_price_xmr=0.3,
payout_address=self.payout_address,
whereabouts=self.whereabouts
)
##### List Bids
def test_list_bids_requires_auth(self):
response = self.client.get(reverse('list_bids'))
self.assertTrue(response.url.startswith(reverse('login')))
self.assertEqual(response.status_code, 302)
def test_list_bids_returns_pagination(self):
ItemBid.objects.create(
item=self.test_item,
bidder=self.buyer,
bid_price_xmr=0.1,
return_address=self.return_address
)
self.client.login(username=self.buyer.username, password=self.buyer_password)
response = self.client.get(reverse('list_bids'))
response_w_str_arg = self.client.get(reverse('list_bids') + "?page=bar")
response_w_empty_pg = self.client.get(reverse('list_bids') + "?page=9001")
self.client.logout()
self.assertTrue(isinstance(response.context['bids'], Page), 'Paginated object not returned')
self.assertTrue(isinstance(response_w_str_arg.context['bids'], Page), 'Paginated object not returned')
self.assertTrue(isinstance(response_w_empty_pg.context['bids'], Page), 'Paginated object not returned')
def test_list_bids_returns_only_user_bids(self):
for i in range(1, 20):
u = User.objects.create_user(f'list_bids_test{i}', password=token_urlsafe(16))
ItemBid.objects.create(
item=self.test_item,
bidder=u,
bid_price_xmr=0.2,
return_address=self.return_address
)
ItemBid.objects.create(
item=self.test_item,
bidder=self.buyer,
bid_price_xmr=0.1,
return_address=self.return_address
)
self.client.login(username=self.buyer.username, password=self.buyer_password)
response = self.client.get(reverse('list_bids'))
self.client.logout()
# Test that buyer's bids are the only bids returned from view
all_bids = ItemBid.objects.all()
user_bids = all_bids.filter(bidder=self.buyer)
self.assertEqual(len(user_bids), len(response.context['bids']))
self.assertLess(len(user_bids), len(all_bids))
# Test that each bid belongs to the buyer
for bid in response.context['bids']:
self.assertEqual(bid.bidder, self.buyer)
##### Create Bid
def test_create_bid_requires_auth(self):
response = self.client.get(reverse('create_bid', args=[self.test_item.id]))
self.assertTrue(response.url.startswith(reverse('login')))
self.assertEqual(response.status_code, 302)
def test_create_bid_redirect_home_if_item_id_missing(self):
self.client.login(username=self.buyer.username, password=self.buyer_password)
response = self.client.get(reverse('create_bid', args=[9999]))
self.client.logout()
self.assertEqual(response.url, reverse('home'))
self.assertEqual(response.status_code, 302)
def test_create_bid_redirect_edit_if_bid_already_posted(self):
new_bid = ItemBid.objects.create(
item=self.test_item,
bidder=self.buyer,
bid_price_xmr=0.2,
return_address=self.return_address
)
self.client.login(username=self.buyer.username, password=self.buyer_password)
response = self.client.get(reverse('create_bid', args=[self.test_item.id]))
self.client.logout()
self.assertEqual(response.url, reverse('edit_bid', args=[new_bid.id]))
self.assertEqual(response.status_code, 302)
new_bid.delete()
def test_create_bid_redirect_item_if_user_owns_item(self):
self.client.login(username=self.seller.username, password=self.seller_password)
response = self.client.get(reverse('create_bid', args=[self.test_item.id]))
self.client.logout()
self.assertEqual(response.url, reverse('get_item', args=[self.test_item.id]))
self.assertEqual(response.status_code, 302)
def test_create_bid_redirect_item_if_item_unavailable(self):
self.test_item.available = False
self.test_item.save()
self.client.login(username=self.buyer.username, password=self.buyer_password)
response = self.client.get(reverse('create_bid', args=[self.test_item.id]))
self.client.logout()
self.assertEqual(response.url, reverse('get_item', args=[self.test_item.id]))
self.assertEqual(response.status_code, 302)
def test_create_bid_save_redirect_if_valid(self):
self.client.login(username=self.buyer.username, password=self.buyer_password)
response = self.client.post(reverse('create_bid', args=[self.test_item.id]), {
'bid_price_xmr': 0.2,
'return_address': self.return_address,
})
buyer_bid = ItemBid.objects.filter(bidder=self.buyer, item=self.test_item.id).first()
self.client.logout()
self.assertEqual(response.status_code, 302)
self.assertEqual(response.url, reverse('get_item', args=[self.test_item.id]))
self.assertTrue(buyer_bid)
buyer_bid.delete()
def test_create_bid_no_save_redirect_if_invalid(self):
self.client.login(username=self.buyer.username, password=self.buyer_password)
response = self.client.post(reverse('create_bid', args=[self.test_item.id]), {
'bid_price_xmr': 'invalid bid price',
'return_address': 'invalid return address',
})
buyer_bid = ItemBid.objects.filter(bidder=self.buyer, item=self.test_item.id).first()
self.client.logout()
self.assertEqual(response.status_code, 302)
self.assertEqual(response.url, reverse('create_bid', args=[self.test_item.id]))
self.assertIsNone(buyer_bid)
def test_create_bid_returns_valid_context(self):
self.client.login(username=self.buyer.username, password=self.buyer_password)
response = self.client.get(reverse('create_bid', args=[self.test_item.id]))
self.client.logout()
self.assertEqual(response.status_code, 200)
self.assertEqual(response.context['item'].id, self.test_item.id)
self.assertTrue(response.context['form'])
self.assertIsInstance(response.context['form'], CreateItemBidForm)
##### Edit Bid
def test_edit_bid_redirect_home_if_bid_id_missing(self):
self.client.login(username=self.buyer.username, password=self.buyer_password)
response = self.client.get(reverse('edit_bid', args=[9999]))
self.client.logout()
self.assertEqual(response.url, reverse('home'))
self.assertEqual(response.status_code, 302)
def test_edit_bid_redirect_item_if_user_is_seller(self):
new_bid = ItemBid.objects.create(
item=self.test_item,
bidder=self.buyer,
bid_price_xmr=0.2,
return_address=self.return_address
)
self.client.login(username=self.seller.username, password=self.seller_password)
response = self.client.get(reverse('edit_bid', args=[new_bid.id]))
self.client.logout()
self.assertEqual(response.url, reverse('get_item', args=[self.test_item.id]))
self.assertEqual(response.status_code, 302)
new_bid.delete()
def test_edit_bid_redirect_item_if_bid_is_accepted(self):
new_bid = ItemBid.objects.create(
item=self.test_item,
bidder=self.buyer,
bid_price_xmr=0.2,
return_address=self.return_address,
accepted=True
)
self.client.login(username=self.buyer.username, password=self.buyer_password)
response = self.client.get(reverse('edit_bid', args=[new_bid.id]))
self.client.logout()
self.assertEqual(response.url, reverse('get_item', args=[self.test_item.id]))
self.assertEqual(response.status_code, 302)
self.assertTrue(new_bid.accepted)
new_bid.delete()
def test_edit_bid_save_redirect_item_if_valid(self):
new_bid_price = 0.222
original_bid_price = 0.111
new_bid = ItemBid.objects.create(
item=self.test_item,
bidder=self.buyer,
bid_price_xmr=original_bid_price,
return_address=self.return_address
)
self.client.login(username=self.buyer.username, password=self.buyer_password)
response = self.client.post(reverse('edit_bid', args=[new_bid.id]), {
'bid_price_xmr': new_bid_price,
'return_address': self.return_address,
})
buyer_bid = ItemBid.objects.filter(bidder=self.buyer, item=self.test_item.id).first()
self.client.logout()
self.assertEqual(response.status_code, 302)
self.assertEqual(response.url, reverse('get_item', args=[self.test_item.id]))
self.assertTrue(buyer_bid)
self.assertEqual(buyer_bid.bid_price_xmr, new_bid_price)
new_bid.delete()
def test_edit_bid_redirect_create_bid_if_invalid(self):
new_bid_price = 0.222
original_bid_price = 0.111
new_bid = ItemBid.objects.create(
item=self.test_item,
bidder=self.buyer,
bid_price_xmr=original_bid_price,
return_address=self.return_address
)
self.client.login(username=self.buyer.username, password=self.buyer_password)
response = self.client.post(reverse('edit_bid', args=[new_bid.id]), {
'bid_price_xmr': new_bid_price,
'return_address': 'invalid string',
})
buyer_bid = ItemBid.objects.filter(bidder=self.buyer, item=self.test_item.id).first()
self.client.logout()
self.assertEqual(response.status_code, 302)
self.assertEqual(response.url, reverse('create_bid', args=[self.test_item.id]))
self.assertEqual(buyer_bid.bid_price_xmr, original_bid_price)
new_bid.delete()
def test_edit_bid_returns_valid_context(self):
new_bid = ItemBid.objects.create(
item=self.test_item,
bidder=self.buyer,
bid_price_xmr=0.1,
return_address=self.return_address
)
self.client.login(username=self.buyer.username, password=self.buyer_password)
response = self.client.get(reverse('edit_bid', args=[new_bid.id]))
self.client.logout()
self.assertEqual(response.status_code, 200)
self.assertEqual(response.context['bid'].id, new_bid.id)
self.assertTrue(response.context['form'])
self.assertIsInstance(response.context['form'], CreateItemBidForm)
new_bid.delete()