Testing access attributes on the Microsoft MVC framework

1\[Authorize\]  
2     public ActionResult ChangePassword()  
3     {  
4  
5         ViewData\["PasswordLength"\] = MembershipService.MinPasswordLength;  
6  
7         return View();  
8     }

 1\[TestMethod, RunOnWeb(true)\]  
 2public void LogOn\_FormContainingValidLoggedDetails\_RedirectedToChangePasswordView()  
 3{  
 4  
 5    // Arrange  
 6    // Fake out the membership service using Typemock, allow call through to the original  
 7    // class so that we don't need to fake out all the methods that will be called  
 8    var fakeMembershipService = Isolate.Fake.Instance<AccountMembershipService>(Members.CallOriginal);  
 9    // set that the Validate method will return true with the correct UID and password  
10    Isolate.WhenCalled(() => fakeMembershipService.ValidateUser("testid", "goodpass")).WillReturn(true);  
11  
12    // Intercept the next call to the AccountController and slip in the faked service  
13    Isolate.Swap.NextInstance<AccountMembershipService>().With(fakeMembershipService);  
14  
15    // Create the Ivonna test session  
16    var session = new TestSession();  
17  
18    // Create the POST request, setting the AutoRedirect flag so that it does not  
19    // actually do the redirect at the end of processing. We just check where it would   
20    // redirect if we let it, this avoids an extra round trip  
21    WebRequest request = new WebRequest(@"/Account/LogOn", "POST", null, null) { AutoRedirect = false };  
22      
23    // Fill in the form values with all the fields that would be sent on the Logon view submission  
24    request.FormValues.Add("username", "testid");  
25    request.FormValues.Add("password", "goodPass");   
26    request.FormValues.Add("rememberMe", false.ToString());  
27    request.FormValues.Add("returnUrl", @"/Account/ChangePassword");  
28  
29    // Act  
30    // Process the request  
31    WebResponse response = session.ProcessRequest(request);  
32  
33    // Assert  
34    // Check that we have been redirected to the correct page  
35    Assert.AreEqual(@"/Account/ChangePassword", response.RedirectLocation);  
36}

 1\[TestMethod, RunOnWeb\]  
 2   public void Home\_IsNotLoggedOn\_SeeLogonButton()  
 3   {  
 4       // Arrange  
 5       // create the Ivonna test session  
 6       var session = new TestSession();  
 7       // create the request for the page we want  
 8       WebRequest request = new WebRequest(@"/");  
 9       // set no user   
10  
11       // Act  
12       WebResponse response = session.ProcessRequest(request);  
13  
14       // Assert  
15       Assert.AreEqual(@"/", response.Url);  
16       // we can check some html items on the form  
17       Assert.IsTrue(response.BodyAsString.Contains("<h2>Welcome to ASP.NET MVC!</h2>"));  
18       Assert.IsTrue(response.BodyAsString.Contains("\[ <a href="/Account/LogOn">Log On</a> \]"));  
19   }

 1  
 2        \[TestMethod, RunOnWeb\]  
 3        public void Home\_IsLoggedOn\_SeeLogOffButton()  
 4        {  
 5            // Arrange  
 6            // create the Ivonna test session  
 7            var session = new TestSession();  
 8            // create the request for the page we want  
 9            WebRequest request = new WebRequest(@"/");  
10            // Pass in a user and the frame does the rest  
11            request.User = new System.Security.Principal.GenericPrincipal(new System.Security.Principal.GenericIdentity("testid"), null);  
12  
13            // Act  
14            WebResponse response = session.ProcessRequest(request);  
15  
16            // Assert  
17            Assert.AreEqual(@"/", response.Url);  
18            // we can check some html items on the form  
19            Assert.IsTrue(response.BodyAsString.Contains("<h2>Welcome to ASP.NET MVC!</h2>"));  
20            Assert.IsTrue(response.BodyAsString.Contains("Welcome <b>testid</b>!"));  
21            Assert.IsTrue(response.BodyAsString.Contains("\[ <a href="/Account/LogOff">Log Off</a> \]"));  
22        }

 1\[TestMethod, RunOnWeb\]  
 2       public void ShowChangePassword\_NotAuthenticated\_RedirectToLogonView()  
 3       {  
 4           // Arrange  
 5           var session = new TestSession();  
 6           var request = new WebRequest(@"/Account/ChangePassword");  
 7           // we set no value for the request.User property  
 8  
 9           // Act  
10           var response = session.ProcessRequest(request);  
11  
12           // Assert  
13           // redirected to the logon page  
14           Assert.AreEqual(@"Account/LogOn?ReturnUrl=%2fAccount%2fChangePassword", response.Url);  
15       }  

 1\[TestMethod, RunOnWeb\]  
 2   public void ShowChangePassword\_Authenticated\_ShowChangePasswordView()  
 3   {  
 4       // Arrange  
 5       var session = new TestSession();  
 6       var request = new WebRequest(@"/Account/ChangePassword");  
 7       // just pass in a user, using the fact that Ivonna has a built-in authentication faking  
 8       request.User = new System.Security.Principal.GenericPrincipal(new System.Security.Principal.GenericIdentity("testid"), null);  
 9  
10       // Act  
11       var response = session.ProcessRequest(request);  
12  
13       // Assert  
14       Assert.AreEqual(@"/Account/ChangePassword", response.Url);  
15       // we can also check the page content, but probably don't need to in this case  
16       Assert.IsTrue(response.BodyAsString.Contains("Use the form below to change your password."));  
17       Assert.IsTrue(response.BodyAsString.Contains("Welcome <b>testid</b>!"));  
18       Assert.IsTrue(response.BodyAsString.Contains("\[ <a href="/Account/LogOff">Log Off</a> \]"));  
19  
20   }

 1\[TestMethod, RunOnWeb\]  
 2   public void ShowStaffOnlyChangePassword\_Authenticated\_ShowChangePasswordView()  
 3   {  
 4       // Arrange  
 5       var session = new TestSession();  
 6       var request = new WebRequest(@"/Account/ChangePassword");  
 7       // just pass in a user, using the fact that Ivonna has a built-in authentication faking  
 8       request.User = new System.Security.Principal.GenericPrincipal(new System.Security.Principal.GenericIdentity("testid") , new string\[\] {"Staff"});  
 9         
10       // Act  
11       var response = session.ProcessRequest(request);  
12  
13       // Assert  
14       Assert.AreEqual(@"/Account/ChangePassword", response.Url);  
15       // we can also check the page content, but probably don't need to in this case  
16       Assert.IsTrue(response.BodyAsString.Contains("Use the form below to change your password."));  
17       Assert.IsTrue(response.BodyAsString.Contains("Welcome <b>testid</b>!"));  
18       Assert.IsTrue(response.BodyAsString.Contains("\[ <a href="/Account/LogOff">Log Off</a> \]"));  
19  
20   }