+ def test_update_nonexistent(self):
+ response = self.app.get(url_for(controller='transfer',
+ action='edit'))
+ params = self.sample_params.copy()
+ params[token_key] = response.form[token_key].value
+ self.app.post(url_for(controller='transfer',
+ action='update',
+ id=21424),
+ params=params,
+ status=404)
+
+ def test_xsrf_protection(self):
+ self.app.post(url_for(controller='transfer',
+ action='update'),
+ params=self.sample_params,
+ status=403)
+
+
+ def test_update_get_redirects(self):
+ response = self.app.get(url_for(controller='transfer',
+ action='update'),
+ status=302)
+ assert (dict(response.headers)['location'] ==
+ url_for(controller='transfer', action='edit', qualified=True))
+
+ def test_delete_nonexistent(self):
+ self.app.get(url_for(controller='transfer',
+ action='delete',
+ id=124244),
+ status=404)
+
+ def test_destroy_nonexistent(self):
+ response = self.app.get(url_for(controller='transfer',
+ action='edit'))
+ params = self.sample_params.copy()
+ params[token_key] = response.form[token_key].value
+ self.app.post(url_for(controller='transfer',
+ action='destroy',
+ id=124344),
+ params=params,
+ status=404)
+
+ def test_delete_xsrf_protection(self):
+ self.app.post(url_for(controller='transfer',
+ action='destroy',
+ id=1),
+ params={'delete': 'Delete'},
+ status=403)
+
+ def setUp(self):
+ self.sample_params = {
+ 'debtor_id': '1',
+ 'creditor_id': '2',
+ 'amount': '33.98',
+ 'date': '4/1/2007',
+ 'description': 'Example transfer params.'}
+