klmp200/Sith
1
0
Fork 0
mirror of https://github.com/ae-utbm/sith.git synced 2024-11-22 14:13:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

eboutic: check basket amount upon command validation

Browse Source
This commit is contained in:
Skia 2019-03-15 01:48:42 +01:00
parent d56990b91f
commit 03eeffdea0
2 changed files with 46 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

44
eboutic/tests.py
View File

@ -67,8 +67,6 @@ class EbouticTest(TestCase):
urllib.parse.quote_plus(b64sig), urllib.parse.quote_plus(b64sig),
) )
response = self.client.get(url) response = self.client.get(url)
self.assertTrue(response.status_code == 200)
self.assertTrue(response.content.decode("utf-8") == "")
return response return response
def test_buy_simple_product_with_sith_account(self): def test_buy_simple_product_with_sith_account(self):
@ -140,6 +138,8 @@ class EbouticTest(TestCase):
) )
response = self.generate_bank_valid_answer_from_page_content(response.content) response = self.generate_bank_valid_answer_from_page_content(response.content)
self.assertTrue(response.status_code == 200)
self.assertTrue(response.content.decode("utf-8") == "")
response = self.client.get( response = self.client.get(
reverse( reverse(
@ -161,6 +161,42 @@ class EbouticTest(TestCase):
" <td>Carte bancaire</td>" in str(response.content) " <td>Carte bancaire</td>" in str(response.content)
) )
def test_alter_basket_with_credit_card(self):
self.client.login(username="subscriber", password="plop")
response = self.client.post(
reverse("eboutic:main"),
{"action": "add_product", "product_id": self.barbar.id},
)
self.assertTrue(
'<input type="hidden" name="action" value="add_product">\\n'
' <button type="submit" name="product_id" value="4"> + </button>\\n'
"</form>\\n Barbar: 1.70 \\xe2\\x82\\xac</li>" in str(response.content)
)
response = self.client.post(reverse("eboutic:command"))
self.assertTrue(
"<tr>\\n <td>Barbar</td>\\n <td>1</td>\\n"
" <td>1.70 \\xe2\\x82\\xac</td>\\n </tr>"
in str(response.content)
)
response_altered = self.client.post(
reverse("eboutic:main"),
{"action": "add_product", "product_id": self.barbar.id},
)
self.assertTrue(
'<input type="hidden" name="action" value="add_product">\\n'
' <button type="submit" name="product_id" value="4"> + </button>\\n'
"</form>\\n Barbar: 3.40 \\xe2\\x82\\xac</li>"
in str(response_altered.content)
)
response = self.generate_bank_valid_answer_from_page_content(response.content)
self.assertTrue(response.status_code == 400)
self.assertTrue(
"Payment failed with error: SuspiciousOperation('Basket total and amount do not match'"
in response.content.decode("utf-8")
)
def test_buy_refill_product_with_credit_card(self): def test_buy_refill_product_with_credit_card(self):
self.client.login(username="subscriber", password="plop") self.client.login(username="subscriber", password="plop")
response = self.client.post( response = self.client.post(
@ -181,6 +217,8 @@ class EbouticTest(TestCase):
) )
response = self.generate_bank_valid_answer_from_page_content(response.content) response = self.generate_bank_valid_answer_from_page_content(response.content)
self.assertTrue(response.status_code == 200)
self.assertTrue(response.content.decode("utf-8") == "")
response = self.client.get( response = self.client.get(
reverse( reverse(
@ -227,6 +265,8 @@ class EbouticTest(TestCase):
) )
response = self.generate_bank_valid_answer_from_page_content(response.content) response = self.generate_bank_valid_answer_from_page_content(response.content)
self.assertTrue(response.status_code == 200)
self.assertTrue(response.content.decode("utf-8") == "")
response = self.client.get( response = self.client.get(
reverse( reverse(

4
eboutic/views.py
View File

@ -271,6 +271,10 @@ class EtransactionAutoAnswer(View):
) )
if b is None: if b is None:
raise SuspiciousOperation("Basket does not exists") raise SuspiciousOperation("Basket does not exists")
if int(b.get_total() * 100) != int(request.GET["Amount"]):
raise SuspiciousOperation(
"Basket total and amount do not match"
)
i = Invoice() i = Invoice()
i.user = b.user i.user = b.user
i.payment_method = "CARD" i.payment_method = "CARD"