mirror of
https://github.com/Ocelot-Social-Community/Ocelot-Social.git
synced 2025-12-13 07:46:06 +00:00
56 lines
2.1 KiB
Gherkin
56 lines
2.1 KiB
Gherkin
Feature: User change password
|
|
As a user
|
|
I want to change my password in my settings
|
|
For security, e.g. if I exposed my password by accident
|
|
|
|
Login via email and password is a well-known authentication procedure and you
|
|
can assure to the server that you are who you claim to be. Either if you
|
|
exposed your password by acccident and you want to invalidate the exposed
|
|
password or just out of an good habit, you want to change your password.
|
|
|
|
Background:
|
|
Given the following "users" are in the database:
|
|
| email | password | id | name | slug | termsAndConditionsAgreedVersion |
|
|
| peterpan@example.org | exposed | id-of-peter-pan | Peter Pan | peter-pan | 0.0.4 |
|
|
And I am logged in as "peter-pan"
|
|
And I navigate to page "/settings"
|
|
And I click on "security menu"
|
|
|
|
Scenario: Incorrect Old Password
|
|
When I fill the password form with:
|
|
| Your old password | incorrect |
|
|
| Your new password | secure |
|
|
| Confirm new password | secure |
|
|
And I submit the form
|
|
And I see a "failure toaster" message:
|
|
"""
|
|
Old password is not correct
|
|
"""
|
|
|
|
Scenario: Incorrect Password Repeat
|
|
When I fill the password form with:
|
|
| Your old password | exposed |
|
|
| Your new password | secure |
|
|
| Confirm new password | eruces |
|
|
And I cannot submit the form
|
|
|
|
Scenario: Change my password
|
|
Given I navigate to page "/settings"
|
|
And I click on "security menu"
|
|
When I fill the password form with:
|
|
| Your old password | exposed |
|
|
| Your new password | secure |
|
|
| Confirm new password | secure |
|
|
And I submit the form
|
|
And I see a "success toaster" message:
|
|
"""
|
|
Password successfully changed!
|
|
"""
|
|
And I log out
|
|
Then I fill in my credentials "peterpan@example.org" "exposed"
|
|
And I click on "submit button"
|
|
And I cannot login anymore
|
|
But I fill in my credentials "peterpan@example.org" "secure"
|
|
And I click on "submit button"
|
|
And I can login successfully
|