function UserPasswordResetTestCase::testUserPasswordResetLoggedIn

Test user password reset while logged in.

File

modules/user/user.test, line 708

Class

UserPasswordResetTestCase

Tests resetting a user password.

Code

function testUserPasswordResetLoggedIn($use_direct_login_link = FALSE) {
    $another_account = $this->drupalCreateUser();
    $account = $this->drupalCreateUser();
    $this->drupalLogin($account);
    // Make sure the test account has a valid password.
    user_save($account, array(
        'pass' => user_password(),
    ));
    // Try to use the login link while logged in as a different user.
    // Generate one time login link.
    $reset_url = $this->generateResetURL($another_account, $use_direct_login_link);
    $this->drupalGet($reset_url);
    $this->assertRaw(t('Another user (%other_user) is already logged into the site on this computer, but you tried to use a one-time link for user %resetting_user. Please <a href="!logout">logout</a> and try using the link again.', array(
        '%other_user' => $account->name,
        '%resetting_user' => $another_account->name,
        '!logout' => url('user/logout'),
    )));
    // Test the link for a deleted user while logged in.
    user_delete($another_account->uid);
    $this->drupalGet($reset_url);
    $this->assertText('The one-time login link you clicked is invalid.');
    // Generate a one time login link for the logged-in user.
    $fapi_action = $use_direct_login_link ? 'build' : 'submit';
    variable_del("user_test_pass_reset_form_{$fapi_action}_{$account->uid}");
    $reset_url = $this->generateResetURL($account, $use_direct_login_link);
    $this->drupalGet($reset_url);
    if ($use_direct_login_link) {
        // The form is never fully built; user is logged out (session destroyed)
        // and redirected to the same URL, then logged in again and redirected
        // during form build.
        $form_built = variable_get("user_test_pass_reset_form_build_{$account->uid}", FALSE);
        $this->assertTrue(!$form_built, 'The password reset form was never fully built.');
    }
    else {
        $this->assertUrl($this->getConfirmURL($reset_url), array(), 'The user is redirected to the reset password confirm form.');
        $this->assertText('Reset password');
        $this->drupalPost(NULL, NULL, t('Log in'));
        // The form was fully processed before redirecting.
        $form_submit_handled = variable_get("user_test_pass_reset_form_submit_{$account->uid}", FALSE);
        $this->assertTrue($form_submit_handled, 'A custom submit handler executed.');
    }
    $this->assertText('You have just used your one-time login link. It is no longer necessary to use this link to log in. Please change your password.');
    // The user can change the forgotten password on the page they are
    // redirected to.
    $pass = user_password();
    $edit = array(
        'pass[pass1]' => $pass,
        'pass[pass2]' => $pass,
    );
    $this->drupalPost(NULL, $edit, t('Save'));
    $this->assertText('The changes have been saved.');
}