Project: Decent-authentication

Publisher: Leesmith

In order to recover a forgotten password
As a user attempting to sign in
I want to reset my password

A link for "Forgot password" is visible
Clicking link takes me to the reset password page
An input for "Email" is visible (required)
A "Reset Password" button is visible
After entering an email and clicking "Submit":
- I receive an email
- I am sent to the sign in page and I see a flash notice that my email was sent
Email contains a link to the password reset page
Clicking link in email takes me to the password reset page
Reset password token is valid for a maximum of two hours
If reset token is expired, I should see a flash alert that token is expired
An input for "Password" is visibile
An input for "Password confirmation" is visible
An input for "Change Password" is visible
Entering matching passwords and clicking "Update Password":
- I am on the sign in page
- I see a flash notice that my password has been reset

Given

the following user:

And

I am on the sign in page

When

I follow "Forgot password"

Then

I should be on the new password reset page

Scenarios

When: I fill in "Email" with "[email protected]"
And: I press "Reset Password"
Then: I should be on the sign in page
And: I should see "An email was just sent to you with password reset instructions"

When: I fill in "Email" with "[email protected]"
And: I press "Reset Password"
Then: I should be on the sign in page
And: I should see "An email was just sent to you with password reset instructions"
And: "[email protected]" should receive an email
When: I open the email
And: I click the first link in the email
Then: I should see "Change Password"
When: I fill in "Password" with ""
And: I fill in "Password confirmation" with ""
And: I press "Change Password"
Then: I should see "Password confirmation can't be blank"
When: I fill in "Password" with "newsecret"
And: I fill in "Password confirmation" with "newsecret"
And: I press "Change Password"
Then: I should be on the sign in page
And: I should see "Your password was successfully changed"

When: I fill in "Email" with "[email protected]"
And: I press "Reset Password"
Then: I should be on the sign in page
And: I should see "An email was just sent to you with password reset instructions"
And: "[email protected]" should receive an email
And: I let my password token expire
When: I open the email
And: I click the first link in the email
Then: I should see "Change Password"
When: I fill in "Password" with "newsecret"
And: I fill in "Password confirmation" with "newsecret"
And: I press "Change Password"
Then: I should be on the new password reset page
And: I should see "Password reset has expired"

Last published almost 6 years ago by leesmith.