python/fastapi-users
1
0
Fork 0
mirror of https://github.com/fastapi-users/fastapi-users.git synced 2026-03-13 07:49:55 +08:00
Code Issues Packages Projects Releases Wiki Activity

Fix password update None handling. (#1275)

Browse Source
This commit is contained in:
Mike Fotinakis
2023-08-26 04:14:26 -04:00
committed by GitHub
parent 830898c5bf
commit 0bf4e218f0
3 changed files with 39 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
tests/test_router_users.py
View File

@@ -826,6 +826,33 @@ class TestUpdateUser:
updated_user = mock_user_db.update.call_args[0][0]
assert updated_user.hashed_password != current_hashed_password
async def test_valid_body_password_unchanged_unverified_superuser(
self,
mocker,
mock_user_db,
test_app_client: Tuple[httpx.AsyncClient, bool],
user: UserModel,
superuser: UserModel,
):
client, requires_verification = test_app_client
mocker.spy(mock_user_db, "update")
current_hashed_password = user.hashed_password
json = {"password": None}
response = await client.patch(
f"/{user.id}",
json=json,
headers={"Authorization": f"Bearer {superuser.id}"},
)
if requires_verification:
assert response.status_code == status.HTTP_403_FORBIDDEN
else:
assert response.status_code == status.HTTP_200_OK
assert mock_user_db.update.called is True
updated_user = mock_user_db.update.call_args[0][0]
assert updated_user.hashed_password == current_hashed_password
@pytest.mark.router
@pytest.mark.asyncio