Merge pull request #3774 from stanhu/reset-token-only-if-not-persisted

Only clear the reset password token if the model has already been persisted
This commit is contained in:
Lucas Mazza
2015-12-09 10:54:36 -02:00
2 changed files with 20 additions and 3 deletions

View File

@@ -42,6 +42,17 @@ class RecoverableTest < ActiveSupport::TestCase
assert_nil user.reset_password_token
end
test 'should not clear reset password token for new user' do
user = new_user
assert_nil user.reset_password_token
user.send_reset_password_instructions
assert_present user.reset_password_token
user.save
assert_present user.reset_password_token
end
test 'should clear reset password token if changing password' do
user = create_user
assert_nil user.reset_password_token