@@ -62,62 +62,6 @@ def test_password_reset(api_client: TestClient, unique_user: TestUser, casing: s
62
62
assert response .status_code == 400
63
63
64
64
65
- @pytest .mark .parametrize ("use_default_user" , [True , False ], ids = ["default user" , "non-default user" ])
66
- def test_update_password_without_current_password (
67
- api_client : TestClient , use_default_user : bool , database : AllRepositories
68
- ):
69
- settings = get_app_settings ()
70
- if use_default_user :
71
- users = database .users .page_all (PaginationQuery (query_filter = f"email={ settings ._DEFAULT_EMAIL } " ))
72
- if not users .items :
73
- user = database .users .create (
74
- {
75
- "full_name" : "Change Me" ,
76
- "username" : "admin" ,
77
- "email" : settings ._DEFAULT_EMAIL ,
78
- "password" : settings ._DEFAULT_PASSWORD ,
79
- "group" : settings .DEFAULT_GROUP ,
80
- "admin" : True ,
81
- }
82
- )
83
- else :
84
- user = users .items [0 ]
85
- else :
86
- user = database .users .create (
87
- {
88
- "full_name" : "Non Default User" ,
89
- "username" : "non-default-user" ,
90
- "email" : random_email (),
91
- "password" : settings ._DEFAULT_PASSWORD ,
92
- "group" : settings .DEFAULT_GROUP ,
93
- "admin" : True ,
94
- }
95
- )
96
-
97
- old_form_data = {"username" : user .email , "password" : settings ._DEFAULT_PASSWORD }
98
- response = api_client .post (api_routes .auth_token , data = old_form_data )
99
- assert response .status_code == 200
100
- token = response .json ()["access_token" ]
101
- old_headers = {"Authorization" : f"Bearer { token } " }
102
-
103
- new_password = random_string ()
104
- payload = ChangePassword (new_password = new_password ).model_dump () # current password is not passed here
105
- response = api_client .put (api_routes .users_password , json = payload , headers = old_headers )
106
- if use_default_user :
107
- assert response .status_code == 200
108
- else :
109
- # even if the default password is correct, we shouldn't authenticate without passing it
110
- assert response .status_code == 400
111
-
112
- # Test Login
113
- new_form_data = {"username" : user .email , "password" : new_password }
114
- response = api_client .post (api_routes .auth_token , data = new_form_data )
115
- if use_default_user :
116
- assert response .status_code == 200
117
- else :
118
- assert response .status_code == 401
119
-
120
-
121
65
@pytest .mark .parametrize ("casing" , ["lower" , "upper" , "mixed" ])
122
66
def test_password_reset_ldap (ldap_user : PrivateUser , casing : str ):
123
67
cased_email = ""
0 commit comments