1
0
Fork 0
mirror of https://github.com/maybe-finance/maybe.git synced 2025-07-21 22:29:38 +02:00

Add/remove members and invitations (#1744)

* Add/remove members and invitations

* Lint
This commit is contained in:
Josh Pigford 2025-01-30 13:13:37 -06:00 committed by GitHub
parent 282c05345d
commit 0696e1f2f7
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
10 changed files with 188 additions and 29 deletions

View file

@ -2,7 +2,7 @@ require "test_helper"
class InvitationsControllerTest < ActionDispatch::IntegrationTest
setup do
sign_in @user = users(:family_admin)
sign_in @admin = users(:family_admin)
@invitation = invitations(:one)
end
@ -25,7 +25,7 @@ class InvitationsControllerTest < ActionDispatch::IntegrationTest
invitation = Invitation.order(created_at: :desc).first
assert_equal "member", invitation.role
assert_equal @user, invitation.inviter
assert_equal @admin, invitation.inviter
assert_equal "new@example.com", invitation.email
assert_redirected_to settings_profile_path
assert_equal I18n.t("invitations.create.success"), flash[:notice]
@ -59,8 +59,8 @@ class InvitationsControllerTest < ActionDispatch::IntegrationTest
invitation = Invitation.order(created_at: :desc).first
assert_equal "admin", invitation.role
assert_equal @user.family, invitation.family
assert_equal @user, invitation.inviter
assert_equal @admin.family, invitation.family
assert_equal @admin, invitation.inviter
end
test "should handle invalid invitation creation" do
@ -86,4 +86,29 @@ class InvitationsControllerTest < ActionDispatch::IntegrationTest
get accept_invitation_url("invalid-token")
assert_response :not_found
end
test "admin can remove pending invitation" do
assert_difference("Invitation.count", -1) do
delete invitation_url(@invitation)
end
assert_redirected_to settings_profile_path
assert_equal I18n.t("invitations.destroy.success"), flash[:notice]
end
test "non-admin cannot remove invitations" do
sign_in users(:family_member)
assert_no_difference("Invitation.count") do
delete invitation_url(@invitation)
end
assert_redirected_to settings_profile_path
assert_equal I18n.t("invitations.destroy.not_authorized"), flash[:alert]
end
test "should handle invalid invitation removal" do
delete invitation_url(id: "invalid-id")
assert_response :not_found
end
end