<%= form.label :first_name, class: "bg-soil w-fit text-white font-medium italic px-3 uppercase ml-8 -mb-[10px] z-10 text-xs" %>
@@ -24,8 +24,9 @@
<%= form.label :email, class: "bg-soil w-fit text-white font-medium italic px-3 uppercase ml-8 -mb-[10px] z-10 text-xs" %>
<%= form.text_field :email, required: true, class: "bg-transparent border-2 border-mango rounded-none h-11 px-3 text-white focus:outline-0 focus:border-yellow-400" %>
+
- <%= form.submit "Sign", class: "flex justify-center items-center px-8 min-h-11 bg-mango font-medium italic uppercase text-white text-lg cursor-pointer rounded-none border-2 border-mango hover:bg-persimmon hover:border-persimmon focus:outline-0 focus:border-yellow-400" %>
+ <%= form.submit "Sign", class: "flex justify-center items-center px-8 min-h-11 bg-mango font-medium italic uppercase text-white text-lg cursor-pointer rounded-none border-2 border-mango hover:bg-persimmon hover:border-persimmon focus:outline-0 focus:border-yellow-400", data: { action: "recaptcha#validate" } %>
<% end %>
<%= render "pledges/form/swirly_arrow" %>
diff --git a/config/initializers/filter_parameter_logging.rb b/config/initializers/filter_parameter_logging.rb
index c010b83..aabf35f 100644
--- a/config/initializers/filter_parameter_logging.rb
+++ b/config/initializers/filter_parameter_logging.rb
@@ -4,5 +4,5 @@
# Use this to limit dissemination of sensitive information.
# See the ActiveSupport::ParameterFilter documentation for supported notations and behaviors.
Rails.application.config.filter_parameters += [
- :passw, :email, :secret, :token, :_key, :crypt, :salt, :certificate, :otp, :ssn
+ :passw, :email, :secret, :token, :_key, :crypt, :salt, :certificate, :otp, :ssn, :g_recaptcha_response
]
diff --git a/spec/rails_helper.rb b/spec/rails_helper.rb
index 20880be..ae4fd6c 100644
--- a/spec/rails_helper.rb
+++ b/spec/rails_helper.rb
@@ -1,14 +1,15 @@
# This file is copied to spec/ when you run 'rails generate rspec:install'
-require 'spec_helper'
-ENV['RAILS_ENV'] ||= 'test'
-require_relative '../config/environment'
+require "spec_helper"
+ENV["RAILS_ENV"] ||= "test"
+require_relative "../config/environment"
# Prevent database truncation if the environment is production
abort("The Rails environment is running in production mode!") if Rails.env.production?
# Uncomment the line below in case you have `--require rails_helper` in the `.rspec` file
# that will avoid rails generators crashing because migrations haven't been run yet
# return unless Rails.env.test?
-require 'rspec/rails'
+require "rspec/rails"
# Add additional requires below this line. Rails is not loaded until this point!
+ActiveJob::Base.queue_adapter = :test
# Requires supporting ruby files with custom matchers and macros, etc, in
# spec/support/ and its subdirectories. Files matching `spec/**/*_spec.rb` are
@@ -35,7 +36,7 @@
RSpec.configure do |config|
# Remove this line if you're not using ActiveRecord or ActiveRecord fixtures
config.fixture_paths = [
- Rails.root.join('spec/fixtures')
+ Rails.root.join("spec/fixtures")
]
# If you're not using ActiveRecord, or you'd prefer not to run each of your
diff --git a/spec/requests/pledges_spec.rb b/spec/requests/pledges_spec.rb
new file mode 100644
index 0000000..cb353ce
--- /dev/null
+++ b/spec/requests/pledges_spec.rb
@@ -0,0 +1,41 @@
+require "rails_helper"
+
+describe PledgesController do
+ include ActionMailer::TestHelper
+ include ActiveJob::TestHelper
+
+ describe "#create" do
+ let(:first_name) { "Isaac" }
+ let(:last_name) { "Newton" }
+ let(:email) { "inewton@example.net" }
+ let(:token) { "motion_token" }
+ let(:params) do
+ {
+ pledge: {
+ first_name: first_name,
+ last_name: last_name,
+ email: email,
+ g_recaptcha_response: token
+ }
+ }
+ end
+ let(:recaptcha_stub) { double call: true }
+
+ before do
+ allow(Recaptcha).to receive(:new).and_return recaptcha_stub
+ post "/pledges", params: params
+ end
+
+ it "creates a new pledge" do
+ expect(Pledge.count).to eq 1
+ end
+
+ it "enqueues an email job" do
+ expect(enqueued_jobs.first[:job]).to eq ActionMailer::MailDeliveryJob
+ end
+
+ it "redirects to the root" do
+ expect(response.code).to eq "302"
+ end
+ end
+end
diff --git a/spec/services/recaptcha_spec.rb b/spec/services/recaptcha_spec.rb
new file mode 100644
index 0000000..d52d61a
--- /dev/null
+++ b/spec/services/recaptcha_spec.rb
@@ -0,0 +1,50 @@
+require "rails_helper"
+
+describe Recaptcha do
+ subject { described_class.new(token: double) }
+
+ describe "#call" do
+ let(:response) { double body: "{\n \"success\": true,\n \"challenge_ts\": \"2024-11-25T00:03:52Z\",\n \"hostname\": \"example.net\",\n \"score\": 0.9,\n \"action\": \"submit\"\n}" }
+
+ before do
+ allow(Rails.logger).to receive_messages(info: nil, warn: nil, error: nil)
+ allow(Net::HTTP).to receive(:post_form).and_return response
+ end
+
+ context "safe form submission" do
+ it "logs an info message and returns true" do
+ expect(subject.call).to eq true
+ expect(Rails.logger).to have_received(:info)
+ end
+ end
+
+ context "unsafe form submission" do
+ let(:response) { double body: "{\n \"success\": false,\n \"challenge_ts\": \"2024-11-25T00:03:52Z\",\n \"hostname\": \"example.net\",\n \"score\": 0.1,\n \"action\": \"submit\"\n}" }
+
+ it "logs a warning message and returns false" do
+ expect(subject.call).to eq false
+ expect(Rails.logger).to have_received(:warn)
+ end
+ end
+
+ context "invalid reCAPTCHA call" do
+ let(:response) { double body: "{\n \"success\": false,\n \"error-codes\": [\n \"invalid-input-response\"\n ]\n}" }
+
+ it "logs a warning message and returns false" do
+ expect(subject.call).to eq false
+ expect(Rails.logger).to have_received(:warn)
+ end
+ end
+
+ context "StandardError" do
+ before do
+ allow(Net::HTTP).to receive(:post_form).and_raise(StandardError)
+ end
+
+ it "logs an error message and returns false" do
+ expect(subject.call).to eq false
+ expect(Rails.logger).to have_received(:error)
+ end
+ end
+ end
+end