Feature: Forgot password
In order to log in again
As a user who has forgotten my password
I want to reset my password
Scenario: Reset password with email address
Given a person called 'Alex' with login ID 'al3x'
And I am not logged in
When I click on 'Forgotten password?'
Then I should see the text 'Enter your login ID(.*)or email address'
When I fill in 'login_or_email' with 'alex@test.com'
And I click the 'Submit' button
Then I should see the text 'An email will shortly be sent to you with further instructions to change your password'
Scenario: Reset password with login ID
Given a person called 'Alex' with login ID 'al3x'
And I am not logged in
When I click on 'Forgotten password?'
And I fill in 'login_or_email' with 'al3x'
And I click the 'Submit' button
Then I should see the text 'An email will shortly be sent to you with further instructions to change your password'
Scenario: Reset password makes an email get sent
Given a person called 'Alex' with login ID 'al3x'
And there are no emails waiting to be sent
And I am not logged in
When I click on 'Forgotten password?'
And I fill in 'login_or_email' with 'al3x'
And I click the 'Submit' button
Then there should be 1 email on the queue
And that email should be addressed to 'Alex@test.com'
And that email should have the subject 'Password reset link from MyChores'
And that email should contain 'Dear Alex' in the body
And that email should contain 'The link below will enable you to change your MyChores password' in the body
And that email should contain the correct password reset link for Alex
And that email should contain 'Your login ID is: al3x' in the body
Scenario: Having sent the reset link you can still log in with the existing password
GivenScenario: Reset password makes an email get sent
When I click on 'Login'
And I fill in 'Login ID' with 'al3x'
And I fill in 'Password' with '12345'
And I click the 'Login' button
Then I should be logged in
Scenario: Fill in with a non-valid ID and nothing happens
Given a person called 'Alex' with login ID 'al3x'
And there are no emails waiting to be sent
And I am not logged in
When I click on 'Forgotten password?'
And I fill in 'login_or_email' with 'whoops!'
And I click the 'Submit' button
Then I should see the text 'Login ID or email not found'
And there should be 0 emails on the queue
Scenario: Fill in with nothing, and nothing happens
Given I am not logged in
When I click on 'Forgotten password?'
And I click the 'Submit' button
Then I should see the text 'If you are having trouble, email contact@mychores.co.uk for help'
Scenario: Use the link to reset password
Given a person called 'Alex' with login ID 'al3x'
And I am not logged in
When I visit the correct reset password link for Alex
And I fill in 'person_new_password' with 'chang3d'
And I fill in 'person_confirm_new_password' with 'chang3d'
And I click the 'Change' button
Then I should see the text 'Password changed successfully. You may now login with the new password'
And I should NOT be logged in
Scenario: Cannot reset the password without the right code
Given a person called 'Alex' with login ID 'al3x'
And I am not logged in
When I visit the incorrect reset password link for Alex
Then I should see the text 'Sorry, for security reasons you may not access this page without a valid link sent via email'
And I should NOT be logged in
Scenario: Changing the password changes the security code
Given a person called 'Alex' with login ID 'al3x'
And we already know the security code for Alex
And I am not logged in
When I visit the correct reset password link for Alex
And I fill in 'person_new_password' with 'chang3d'
And I fill in 'person_confirm_new_password' with 'chang3d'
And I click the 'Change' button
Then I should see the text 'Password changed successfully. You may now login with the new password'
And the security code for Alex should have changed
Scenario: Cannot use the same link again
Given a person called 'Alex' with login ID 'al3x'
And we already know the security code for Alex
And I am not logged in
When I visit the correct reset password link for Alex
And I fill in 'person_new_password' with 'chang3d'
And I fill in 'person_confirm_new_password' with 'chang3d'
And I click the 'Change' button
Then I should see the text 'Password changed successfully. You may now login with the new password'
When I try to use the same reset password link again for Alex
Then I should see the text 'Sorry, for security reasons you may not access this page without a valid link sent via email'
Scenario: Can now log in with the new password
GivenScenario: Use the link to reset password
When I click on 'Login'
And I fill in 'Login ID' with 'al3x'
And I fill in 'Password' with 'chang3d'
And I click the 'Login' button
Then I should be logged in
Scenario: Can no longer log in with the old password
GivenScenario: Use the link to reset password
When I click on 'Login'
And I fill in 'Login ID' with 'al3x'
And I fill in 'Password' with '12345'
And I click the 'Login' button
Then I should see the text 'Login failed - please try again'
Then I should NOT be logged in
Scenario: Cannot reset the password unless they match
Given a person called 'Alex' with login ID 'al3x'
And I am not logged in
When I visit the correct reset password link for Alex
And I fill in 'person_new_password' with 'whoops'
And I fill in 'person_confirm_new_password' with 'whatan00b'
And I click the 'Change' button
Then I should see the text 'New password did not match the confirmation'
Scenario: Password has not changed because they did not match
GivenScenario: Cannot reset the password unless they match
When I click on 'Login'
And I fill in 'Login ID' with 'al3x'
And I fill in 'Password' with '12345'
And I click the 'Login' button
Then I should be logged in
Scenario: Cannot reset the password if it is too short
Given a person called 'Alex' with login ID 'al3x'
And I am not logged in
When I visit the correct reset password link for Alex
And I fill in 'person_new_password' with '123'
And I fill in 'person_confirm_new_password' with '123'
And I click the 'Change' button
Then I should see the text 'New password must be at least 5 characters'
Scenario: Password has not changed because it was too short
GivenScenario: Cannot reset the password if it is too short
When I click on 'Login'
And I fill in 'Login ID' with 'al3x'
And I fill in 'Password' with '123'
And I click the 'Login' button
Then I should see the text 'Login failed - please try again'
And I should NOT be logged in
When I fill in 'Login ID' with 'al3x'
And I fill in 'Password' with '12345'
And I click the 'Login' button
Then I should be logged in
