generated from westfarn/web_django_template
westfarn
dd37a2a268
## Summary - Slim the public contact form to email, interest, and message. Name, phone, and address live on the customer profile instead. - Customers can register, sign in, save shipping details, and view order history. Logged-in checkout creates a Stripe Customer and saves cards on Stripe (`setup_future_usage`); we only store `stripe_customer_id`. - Shipment tracking: EasyPost tracker lookup + webhook, plus paste-in numbers from Pirate Ship/Shippo. Customers see carrier status on their orders; `dispatch_due` refreshes open shipments. - Product reviews (1–5) only after a paid/fulfilled purchase of that product. Fixes #7 ## Test plan - [ ] Contact form submits with only email + message; extra name/phone/address fields are ignored - [ ] Register, sign in, save profile (name/phone/shipping) - [ ] Guest checkout still works; after signup, prior orders with that email show in history - [ ] Logged-in checkout prefills shipping and does not collect card data locally - [ ] Portal: buy label or paste a Pirate Ship tracking number, confirm status/events; customer order page shows tracking - [ ] Product page: non-buyers cannot review; buyers can leave one 1–5 star review - [ ] Non-staff users hitting `/portal/` redirect to `/account/` Reviewed-on: #8
129 lines
4.6 KiB
Python
129 lines
4.6 KiB
Python
from django.contrib.auth import get_user_model
|
|
from django.contrib.auth.tokens import default_token_generator
|
|
from django.core import mail
|
|
from django.test import Client, TestCase
|
|
from django.urls import reverse
|
|
from django.utils.encoding import force_bytes
|
|
from django.utils.http import urlsafe_base64_encode
|
|
|
|
from accounts.models import CustomerProfile
|
|
from shop.models import Order
|
|
|
|
User = get_user_model()
|
|
|
|
|
|
class CustomerAccountTests(TestCase):
|
|
def test_register_login_and_profile(self):
|
|
client = Client()
|
|
response = client.post(
|
|
reverse("account:register"),
|
|
{
|
|
"email": "buyer@example.com",
|
|
"first_name": "Pat",
|
|
"last_name": "Lee",
|
|
"password1": "s3cure-pass-123",
|
|
"password2": "s3cure-pass-123",
|
|
},
|
|
)
|
|
self.assertEqual(response.status_code, 302)
|
|
user = User.objects.get(email="buyer@example.com")
|
|
self.assertEqual(user.username, "buyer@example.com")
|
|
self.assertFalse(user.is_staff)
|
|
self.assertTrue(CustomerProfile.objects.filter(user=user).exists())
|
|
|
|
client.logout()
|
|
login = client.post(
|
|
reverse("account:login"),
|
|
{"username": "buyer@example.com", "password": "s3cure-pass-123"},
|
|
)
|
|
self.assertEqual(login.status_code, 302)
|
|
|
|
save = client.post(
|
|
reverse("account:profile"),
|
|
{
|
|
"first_name": "Patricia",
|
|
"last_name": "Lee",
|
|
"phone": "6305550100",
|
|
"address_line1": "10 Main St",
|
|
"address_city": "Aurora",
|
|
"address_state": "IL",
|
|
"address_zip": "60505",
|
|
},
|
|
)
|
|
self.assertEqual(save.status_code, 302)
|
|
user.refresh_from_db()
|
|
profile = user.customer_profile
|
|
self.assertEqual(user.first_name, "Patricia")
|
|
self.assertEqual(profile.phone, "6305550100")
|
|
self.assertEqual(profile.shipping_address.get("line1"), "10 Main St")
|
|
|
|
def test_register_claims_guest_orders(self):
|
|
order = Order.objects.create(
|
|
number="ORD-CLAIM-001",
|
|
email="buyer@example.com",
|
|
status=Order.Status.PAID,
|
|
amount="18.00",
|
|
)
|
|
client = Client()
|
|
client.post(
|
|
reverse("account:register"),
|
|
{
|
|
"email": "buyer@example.com",
|
|
"password1": "s3cure-pass-123",
|
|
"password2": "s3cure-pass-123",
|
|
},
|
|
)
|
|
order.refresh_from_db()
|
|
self.assertEqual(order.user.email, "buyer@example.com")
|
|
history = client.get(reverse("account:orders"))
|
|
self.assertEqual(history.status_code, 200)
|
|
self.assertContains(history, "ORD-CLAIM-001")
|
|
|
|
def test_customer_cannot_open_portal(self):
|
|
User.objects.create_user(
|
|
username="buyer@example.com",
|
|
email="buyer@example.com",
|
|
password="s3cure-pass-123",
|
|
)
|
|
client = Client()
|
|
client.login(username="buyer@example.com", password="s3cure-pass-123")
|
|
response = client.get(reverse("dashboard:home"))
|
|
self.assertEqual(response.status_code, 302)
|
|
self.assertEqual(response["Location"], reverse("account:home"))
|
|
|
|
def test_password_reset_sends_mail_and_sets_new_password(self):
|
|
user = User.objects.create_user(
|
|
username="buyer@example.com",
|
|
email="buyer@example.com",
|
|
password="s3cure-pass-123",
|
|
)
|
|
client = Client()
|
|
login_page = client.get(reverse("account:login"))
|
|
self.assertContains(login_page, reverse("account:password_reset"))
|
|
posted = client.post(
|
|
reverse("account:password_reset"),
|
|
{"email": "buyer@example.com"},
|
|
)
|
|
self.assertEqual(posted.status_code, 302)
|
|
self.assertEqual(len(mail.outbox), 1)
|
|
self.assertIn("password-reset", mail.outbox[0].body)
|
|
uid = urlsafe_base64_encode(force_bytes(user.pk))
|
|
token = default_token_generator.make_token(user)
|
|
confirm_url = reverse(
|
|
"account:password_reset_confirm",
|
|
kwargs={"uidb64": uid, "token": token},
|
|
)
|
|
bounced = client.get(confirm_url)
|
|
self.assertEqual(bounced.status_code, 302)
|
|
set_url = bounced["Location"]
|
|
saved = client.post(
|
|
set_url,
|
|
{
|
|
"new_password1": "n3wer-pass-456",
|
|
"new_password2": "n3wer-pass-456",
|
|
},
|
|
)
|
|
self.assertEqual(saved.status_code, 302)
|
|
user.refresh_from_db()
|
|
self.assertTrue(user.check_password("n3wer-pass-456"))
|