diff options
author | GitLab Bot <gitlab-bot@gitlab.com> | 2023-12-23 01:00:14 +0300 |
---|---|---|
committer | GitLab Bot <gitlab-bot@gitlab.com> | 2023-12-23 01:00:14 +0300 |
commit | 5e7d11cf899a99940fd8f8ed2147c2d420c45166 (patch) | |
tree | 83066f4ae653cbd8df613c5dfc9f01317316aa34 /spec | |
parent | 0a12f9eb64aad31364cb4567987b266a6dfd9c2d (diff) |
Add latest changes from gitlab-org/security/gitlab@16-6-stable-ee
Diffstat (limited to 'spec')
-rw-r--r-- | spec/models/concerns/recoverable_by_any_email_spec.rb | 36 |
1 files changed, 12 insertions, 24 deletions
diff --git a/spec/models/concerns/recoverable_by_any_email_spec.rb b/spec/models/concerns/recoverable_by_any_email_spec.rb index 1e701f145be..c17507cae83 100644 --- a/spec/models/concerns/recoverable_by_any_email_spec.rb +++ b/spec/models/concerns/recoverable_by_any_email_spec.rb @@ -52,31 +52,19 @@ RSpec.describe RecoverableByAnyEmail, feature_category: :system_access do it_behaves_like 'does not send the password reset email' end - end - - describe '#send_reset_password_instructions' do - let_it_be(:user) { create(:user) } - let_it_be(:opts) { { email: 'random@email.com' } } - let_it_be(:token) { 'passwordresettoken' } - - before do - allow(user).to receive(:set_reset_password_token).and_return(token) - end - - subject { user.send_reset_password_instructions(opts) } - it 'sends the email' do - expect { subject }.to have_enqueued_mail(DeviseMailer, :reset_password_instructions) - end - - it 'calls send_reset_password_instructions_notification with correct arguments' do - expect(user).to receive(:send_reset_password_instructions_notification).with(token, opts) - - subject - end - - it 'returns the generated token' do - expect(subject).to eq(token) + context 'with one email matching user and one not matching' do + let(:email) { [verified_email.email, 'other_email@example.com'] } + + it 'sends an email only to the user verified email' do + expect { send_reset_password_instructions } + .to have_enqueued_mail(DeviseMailer, :reset_password_instructions) + .with( + user, + anything, # reset token + to: user.verified_emails(include_private_email: false) + ) + end end end end |