Merge lp:~mhall119/summit/csrf-fix-from-production into lp:summit

[Chris Johnston]

Fixes token problems

[Chris Johnston (cjohnston)]

Merging from production

review: Approve

=== modified file 'summit/sponsor/templates/sponsor/nonlaunchpadreview.html'
--- summit/sponsor/templates/sponsor/nonlaunchpadreview.html	2011-11-26 02:57:25 +0000
+++ summit/sponsor/templates/sponsor/nonlaunchpadreview.html	2011-12-23 21:54:24 +0000
@@ -25,6 +25,7 @@
 </p>
 {% endfor %}
 <form method="post">
+{% csrf_token %}
 <table>
 <tr>
   <td><select name="score">

=== modified file 'summit/sponsor/templates/sponsor/nonlaunchpadstep0.html'
--- summit/sponsor/templates/sponsor/nonlaunchpadstep0.html	2011-02-01 00:09:34 +0000
+++ summit/sponsor/templates/sponsor/nonlaunchpadstep0.html	2011-12-23 21:54:24 +0000
@@ -22,6 +22,7 @@
 
     <article class='main-content'>
         <form method="post">
+            {% csrf_token %}
             <table>
                 <tr><th>Summit:</th><td><span>{{ summit.name }}<br/>{{ summit.location }}</span></td></tr>
                 <tr><td colspan="2"><h2>Your details</h2></td></tr>

=== modified file 'summit/sponsor/templates/sponsor/nonlaunchpadstep1.html'
--- summit/sponsor/templates/sponsor/nonlaunchpadstep1.html	2010-03-05 10:33:36 +0000
+++ summit/sponsor/templates/sponsor/nonlaunchpadstep1.html	2011-12-23 21:54:24 +0000
@@ -15,6 +15,7 @@
 </p>
 
 <form method="post">
+{% csrf_token %}
 <table>
 {{ form }}
 </table>

=== modified file 'summit/sponsor/templates/sponsor/review.html'
--- summit/sponsor/templates/sponsor/review.html	2011-10-31 21:43:10 +0000
+++ summit/sponsor/templates/sponsor/review.html	2011-12-23 21:54:24 +0000
@@ -54,6 +54,7 @@
 </p>
 {% endfor %}
 <form method="post">
+{% csrf_token %}
 <table>
 <tr>
   <td><select name="score">

=== modified file 'summit/sponsor/templates/sponsor/step0.html'
--- summit/sponsor/templates/sponsor/step0.html	2011-02-14 00:20:03 +0000
+++ summit/sponsor/templates/sponsor/step0.html	2011-12-23 21:54:24 +0000
@@ -23,6 +23,7 @@
     <article class='main-content'>
 
         <form method="post">
+            {% csrf_token %}
             <table>
                 <tr><th>Summit:</th><td><span>{{ summit.name }}<br/>{{ summit.location }}</span></td></tr>
                 <tr><td colspan="2"><h2>Your details</h2></td></tr>

=== modified file 'summit/sponsor/templates/sponsor/step1.html'
--- summit/sponsor/templates/sponsor/step1.html	2010-08-25 00:22:58 +0000
+++ summit/sponsor/templates/sponsor/step1.html	2011-12-23 21:54:24 +0000
@@ -22,6 +22,7 @@
 
 <article class="main-content">
 <form method="post">
+{% csrf_token %}
 <table>
 {{ form }}
 </table>

=== modified file 'summit/sponsor/templates/sponsor/suggestionreview.html'
--- summit/sponsor/templates/sponsor/suggestionreview.html	2011-11-26 19:42:40 +0000
+++ summit/sponsor/templates/sponsor/suggestionreview.html	2011-12-23 21:54:24 +0000
@@ -22,6 +22,7 @@
 </p>
 {% endfor %}
 <form method="post">
+{% csrf_token %}
 <table>
 <tr>
   <td><select name="score">

=== modified file 'summit/sponsor/templates/sponsor/suggeststep0.html'
--- summit/sponsor/templates/sponsor/suggeststep0.html	2011-02-01 00:09:34 +0000
+++ summit/sponsor/templates/sponsor/suggeststep0.html	2011-12-23 21:54:24 +0000
@@ -24,6 +24,7 @@
 
     <article class='main-content'>
         <form method="post">
+            {% csrf_token %}
             <table>
                 <tr><th>Summit:</th><td><span>{{ summit.name }}<br/>{{ summit.location }}</span></td></tr>
                 <tr><td colspan="2"><h2>Your details</h2></td></tr>

=== modified file 'summit/sponsor/templates/sponsor/suggeststep1.html'
--- summit/sponsor/templates/sponsor/suggeststep1.html	2010-10-03 22:43:07 +0000
+++ summit/sponsor/templates/sponsor/suggeststep1.html	2011-12-23 21:54:24 +0000
@@ -17,6 +17,7 @@
 </p>
 
 <form method="post">
+{% csrf_token %}
 <table>
 {{ form }}
 </table>

=== modified file 'summit/sponsor/tests.py'
--- summit/sponsor/tests.py	2011-08-27 18:05:04 +0000
+++ summit/sponsor/tests.py	2011-12-23 21:54:24 +0000
@@ -32,6 +32,86 @@
 )
 from summit.sponsor.forms import SponsorshipSuggestionForm
 
+class TestSponsorshipApplicationTestCase(djangotest.TestCase):
+
+    def setUp(self):
+        self.client = djangotest.Client(enforce_csrf_checks=True)
+        self.summit = Summit.objects.create(
+            name='test-summit',
+            title='Test Summit',
+            location='Test Location',
+            description='Test Summit Description',
+            timezone='UTC',
+            last_update=datetime.datetime.now(),
+            state='sponsor',
+            date_start=(datetime.datetime.now() + datetime.timedelta(days=1)),
+            date_end=(datetime.datetime.now() + datetime.timedelta(days=6)),
+        )
+        
+        self.user = User.objects.create(
+            username='testuser',
+            first_name='Test',
+            last_name='User',
+            is_superuser=True,
+        )
+        self.user.set_password('password')
+        self.user.save()
+        
+        self.form_data_0 = {
+            '0-location': 'Test Location',
+            '0-country': 'US',
+            '0-about': 'Test About Description',
+            '0-video_tos': 'Fake TOS text',
+            '0-video_agreement': 1,
+            'wizard_step': 0,
+        }
+
+        self.form_data_1 = {
+            '1-needs_travel': 0,
+            '1-needs_accomodation': 0,
+            '1-would_crew': 'False',
+            '1-diet': 'None',
+            '1-further_info': 'Nothing',
+            'wizard_step': 1,
+        }
+
+    def test_application_process(self):
+        self.assertEquals(0, Sponsorship.objects.filter(user=self.user).count())
+
+        auth = self.client.login(username='testuser', password='password')
+        response = self.client.get('/test-summit/sponsorship/')
+        self.assertContains(response, 'csrfmiddlewaretoken')
+        data = self.form_data_0
+        # Add csrftoken to form data
+        data['csrfmiddlewaretoken'] = self.client.cookies['csrftoken'].value
+        response = self.client.post('/test-summit/sponsorship/', data)
+        self.assertEquals(200, response.status_code)
+        self.assertContains(response, 'Finish')
+        
+        self.assertContains(response, 'csrfmiddlewaretoken')
+        data.update(self.form_data_1)
+        # Scrape the hashed value from the template context
+        data['hash_0'] = response.context['previous_fields'][response.context['previous_fields'].index('hash_0')+15:response.context['previous_fields'].index('hash_0')+55]
+        data['csrfmiddlewaretoken'] = self.client.cookies['csrftoken'].value
+        response = self.client.post('/test-summit/sponsorship/', data, follow=False)
+        self.assertEquals(302, response.status_code)
+        self.assertEquals(response._headers['location'], ('Location', 'http://testserver/test-summit/sponsorship/done'))
+
+        self.assertEquals(1, Sponsorship.objects.filter(user=self.user).count())
+        
+    def test_suggest_process(self):
+        auth = self.client.login(username='testuser', password='password')
+        response = self.client.get('/test-summit/suggestsponsorship/')
+        self.assertContains(response, 'csrfmiddlewaretoken')
+        # TODO: Finish testing the process
+
+    def test_nonlaunchpad_process(self):
+        auth = self.client.login(username='testuser', password='password')
+        response = self.client.get('/test-summit/nonlaunchpadsponsorship/')
+        self.assertContains(response, 'csrfmiddlewaretoken')
+        # TODO: Finish testing the process
+
+
 class SponsorshipDisplayTestCase(djangotest.TestCase):
     """Tests for the 'reschedule' management command."""