import json as _json from django.test import TestCase from django.urls import reverse from django.utils import timezone from apps.applets.models import Applet from apps.drama.models import GameEvent, Note, ScrollPosition, record from apps.epic.models import Room from apps.lyric.models import User def _seed_billboard_applets(): for slug, name, cols, rows in [ ("my-scrolls", "My Scrolls", 4, 3), ("my-buds", "My Buds", 4, 3), ("most-recent-scroll", "Most Recent Scroll", 8, 6), ]: Applet.objects.get_or_create( slug=slug, defaults={"name": name, "grid_cols": cols, "grid_rows": rows, "context": "billboard"}, ) class BillboardViewTest(TestCase): def setUp(self): self.user = User.objects.create(email="test@billboard.io") self.client.force_login(self.user) _seed_billboard_applets() def test_uses_billboard_template(self): response = self.client.get("/billboard/") self.assertTemplateUsed(response, "apps/billboard/billboard.html") def test_passes_applets_context(self): response = self.client.get("/billboard/") self.assertIn("applets", response.context) slugs = [e["applet"].slug for e in response.context["applets"]] self.assertIn("my-scrolls", slugs) self.assertIn("my-buds", slugs) self.assertIn("most-recent-scroll", slugs) def test_passes_my_rooms_context(self): room = Room.objects.create(name="Test Room", owner=self.user) response = self.client.get("/billboard/") self.assertIn(room, response.context["my_rooms"]) def test_passes_recent_room_and_events(self): room = Room.objects.create(name="Test Room", owner=self.user) record( room, GameEvent.SLOT_FILLED, actor=self.user, slot_number=1, token_type="coin", token_display="Coin-on-a-String", renewal_days=7, ) response = self.client.get("/billboard/") self.assertEqual(response.context["recent_room"], room) self.assertEqual(len(response.context["recent_events"]), 1) def test_recent_events_capped_at_36(self): room = Room.objects.create(name="Test Room", owner=self.user) for i in range(40): record( room, GameEvent.SLOT_FILLED, actor=self.user, slot_number=1, token_type="coin", token_display="Coin-on-a-String", renewal_days=7, ) response = self.client.get("/billboard/") self.assertEqual(len(response.context["recent_events"]), 36) def test_recent_events_in_chronological_order(self): room = Room.objects.create(name="Test Room", owner=self.user) for _ in range(3): record( room, GameEvent.SLOT_FILLED, actor=self.user, slot_number=1, token_type="coin", token_display="Coin-on-a-String", renewal_days=7, ) response = self.client.get("/billboard/") events = response.context["recent_events"] timestamps = [e.timestamp for e in events] self.assertEqual(timestamps, sorted(timestamps)) def test_recent_room_is_none_when_no_events(self): response = self.client.get("/billboard/") self.assertIsNone(response.context["recent_room"]) self.assertEqual(list(response.context["recent_events"]), []) # ── recent_buds + recent_notes (applet feed) ────────────────────── # Mirrors the recent_posts pattern: each in-grid applet now lists # its own most-recent items (capped at 3) plus an empty-state row. def test_passes_recent_buds_context(self): first = User.objects.create(email="first-bud@test.io") second = User.objects.create(email="second-bud@test.io") self.user.buds.add(first) self.user.buds.add(second) response = self.client.get("/billboard/") # Most-recently-added bud is first self.assertEqual(list(response.context["recent_buds"]), [second, first]) def test_recent_buds_capped_at_3(self): added = [ User.objects.create(email=f"bud{i}@test.io") for i in range(5) ] for u in added: self.user.buds.add(u) response = self.client.get("/billboard/") recent = list(response.context["recent_buds"]) self.assertEqual(len(recent), 3) # Newest three in newest-first order self.assertEqual(recent, list(reversed(added))[:3]) def test_recent_buds_empty_when_no_buds(self): response = self.client.get("/billboard/") self.assertEqual(list(response.context["recent_buds"]), []) def test_passes_recent_notes_context(self): Note.objects.create( user=self.user, slug="stargazer", earned_at=timezone.now() - timezone.timedelta(days=2), ) Note.objects.create( user=self.user, slug="super-schizo", earned_at=timezone.now(), ) response = self.client.get("/billboard/") slugs = [n.slug for n in response.context["recent_notes"]] # Most-recently-earned first self.assertEqual(slugs, ["super-schizo", "stargazer"]) def test_recent_notes_capped_at_3(self): slugs = ["stargazer", "super-schizo", "super-nomad", "ladidah", "doodah"] base = timezone.now() for i, slug in enumerate(slugs): Note.objects.create( user=self.user, slug=slug, earned_at=base - timezone.timedelta(hours=i), ) response = self.client.get("/billboard/") names = [n.slug for n in response.context["recent_notes"]] self.assertEqual(len(names), 3) # Newest-first; oldest two trimmed self.assertEqual(names, slugs[:3]) def test_recent_notes_excludes_other_users(self): other = User.objects.create(email="other-note@test.io") Note.objects.create(user=other, slug="stargazer", earned_at=timezone.now()) response = self.client.get("/billboard/") self.assertEqual(list(response.context["recent_notes"]), []) def test_recent_notes_empty_when_no_notes(self): response = self.client.get("/billboard/") self.assertEqual(list(response.context["recent_notes"]), []) # ── 3-column applet row contract ────────────────────────────────── # Each applet's list item renders ` | <body> | <ts>` — # title + body wrapped in `.row-title` / `.row-body`, timestamp # in a `<time class="row-ts">` element. The body shows the # most-recent activity (post line / room event / note description / # bud's active title). Right column carries `relative_ts` text. def test_my_posts_applet_row_shows_latest_line_and_ts(self): from apps.billboard.models import Line, Post post = Post.objects.create( owner=self.user, kind=Post.KIND_USER_POST, title="StampedPost", ) Line.objects.create(post=post, text="first line text", author=self.user) Line.objects.create(post=post, text="latest line text", author=self.user) response = self.client.get("/billboard/") body = response.content.decode() # Title preserved self.assertIn("StampedPost", body) # Latest line surfaces in the row body, not the older line self.assertIn("latest line text", body) # A <time> ts element renders on the row self.assertRegex(body, r'<time[^>]+class="[^"]*row-ts') def test_my_buds_applet_row_shows_active_title_and_since_ts(self): bud = User.objects.create(email="alice@test.io", username="alice") note = Note.objects.create( user=bud, slug="stargazer", earned_at=timezone.now(), ) bud.active_title = note bud.save() self.user.buds.add(bud) response = self.client.get("/billboard/") body = response.content.decode() # Bud handle shows; the active title surfaces as the row body; # the ts column carries a "since " prefix unique to buds self.assertIn("alice", body) self.assertIn("the Stargazer", body) self.assertRegex(body, r'class="[^"]*row-ts[^"]*"[^>]*>\s*since\s+') def test_my_buds_applet_row_no_active_title_no_body_or_ts(self): bud = User.objects.create(email="alice@test.io", username="alice") # No active_title donned self.user.buds.add(bud) response = self.client.get("/billboard/") body = response.content.decode() self.assertIn("alice", body) # Without an active title we don't render a "since" line self.assertNotRegex(body, r'class="[^"]*row-ts[^"]*"[^>]*>\s*since\s+') def test_my_notes_applet_row_shows_description_and_earned_at(self): Note.objects.create( user=self.user, slug="stargazer", earned_at=timezone.now(), ) response = self.client.get("/billboard/") body = response.content.decode() self.assertIn("Stargazer", body) # Description prefix from _NOTE_META — full string is 40 chars and # truncates to 32+"..." via the `truncate_title` filter, so assert # against the head only ("You saved your first personal" is 30 chars, # comfortably inside the truncation window). self.assertIn("You saved your first personal", body) # ts column present self.assertRegex(body, r'<time[^>]+class="[^"]*row-ts') def test_my_scrolls_applet_row_shows_latest_event_and_ts(self): room = Room.objects.create(name="StampedRoom", owner=self.user) record( room, GameEvent.SLOT_FILLED, actor=self.user, slot_number=1, token_type="coin", token_display="Coin-on-a-String", renewal_days=7, ) response = self.client.get("/billboard/") body = response.content.decode() self.assertIn("StampedRoom", body) # The slot-fill prose mentions the token; we just check the room's # scroll row carries a <time> + some body content (event prose) self.assertRegex(body, r'<time[^>]+class="[^"]*row-ts') class SaveScrollPositionViewTest(TestCase): def setUp(self): self.user = User.objects.create(email="reader@test.io") self.client.force_login(self.user) self.room = Room.objects.create(name="Test Room", owner=self.user) self.url = f"/billboard/room/{self.room.id}/scroll-position/" def test_get_returns_405(self): response = self.client.get(self.url) self.assertEqual(response.status_code, 405) class ToggleBillboardAppletsTest(TestCase): def setUp(self): self.user = User.objects.create(email="test@toggle.io") self.client.force_login(self.user) _seed_billboard_applets() def test_toggle_hides_unchecked_applets(self): response = self.client.post( reverse("billboard:toggle_applets"), {"applets": ["my-scrolls"]}, ) self.assertEqual(response.status_code, 302) from apps.applets.models import UserApplet contacts = Applet.objects.get(slug="my-buds") ua = UserApplet.objects.get(user=self.user, applet=contacts) self.assertFalse(ua.visible) def test_toggle_returns_partial_on_htmx(self): response = self.client.post( reverse("billboard:toggle_applets"), {"applets": ["my-scrolls"]}, HTTP_HX_REQUEST="true", ) self.assertEqual(response.status_code, 200) self.assertTemplateUsed(response, "apps/billboard/_partials/_applets.html") def test_htmx_toggle_response_renders_most_recent_scroll_with_real_events(self): # Seed a room + event so Most Recent Scroll renders prose, not the empty fallback. room = Room.objects.create(name="Sound Chamber", owner=self.user) record( room, GameEvent.SLOT_FILLED, actor=self.user, slot_number=1, token_type="coin", token_display="Coin-on-a-String", renewal_days=7, ) response = self.client.post( reverse("billboard:toggle_applets"), {"applets": [ "my-scrolls", "my-buds", "most-recent-scroll", ]}, HTTP_HX_REQUEST="true", ) self.assertEqual(response.status_code, 200) self.assertContains(response, "Coin-on-a-String") # And My Scrolls renders the room name (needs my_rooms in context). self.assertContains(response, "Sound Chamber") def test_htmx_toggle_response_has_single_applet_menu_div(self): # The response is hx-swapped into the page; if it contains both the menu # div and the applets-container div, the original menu remains and the # next gear-click resurrects stale form state. Response must contain the # menu exactly once (the wrapper) — never two siblings of the same id. response = self.client.post( reverse("billboard:toggle_applets"), {"applets": ["my-scrolls"]}, HTTP_HX_REQUEST="true", ) body = response.content.decode("utf-8") self.assertEqual(body.count('id="id_billboard_applet_menu"'), 1) def test_second_toggle_preserves_prior_hidden_state(self): # First toggle: hide My Buds only. self.client.post( reverse("billboard:toggle_applets"), {"applets": [ "new-post", "my-posts", "my-scrolls", "most-recent-scroll", ]}, HTTP_HX_REQUEST="true", ) # Second toggle: hide Most Recent Scroll additionally — My Buds must stay hidden. self.client.post( reverse("billboard:toggle_applets"), {"applets": [ "new-post", "my-posts", "my-scrolls", ]}, HTTP_HX_REQUEST="true", ) from apps.applets.models import UserApplet contacts = Applet.objects.get(slug="my-buds") most_recent_scroll = Applet.objects.get(slug="most-recent-scroll") self.assertFalse( UserApplet.objects.get(user=self.user, applet=contacts).visible ) self.assertFalse( UserApplet.objects.get(user=self.user, applet=most_recent_scroll).visible ) class BillscrollViewTest(TestCase): def setUp(self): self.user = User.objects.create(email="test@billscroll.io") self.client.force_login(self.user) self.room = Room.objects.create(name="Test Room", owner=self.user) record( self.room, GameEvent.SLOT_FILLED, actor=self.user, slot_number=1, token_type="coin", token_display="Coin-on-a-String", renewal_days=7, ) def test_uses_scroll_template(self): response = self.client.get(f"/billboard/room/{self.room.id}/scroll/") self.assertTemplateUsed(response, "apps/billboard/scroll.html") def test_passes_events_context(self): response = self.client.get(f"/billboard/room/{self.room.id}/scroll/") self.assertIn("events", response.context) self.assertEqual(response.context["events"].count(), 1) def test_passes_page_class_billscroll(self): response = self.client.get(f"/billboard/room/{self.room.id}/scroll/") self.assertEqual(response.context["page_class"], "page-billscroll") def test_passes_scroll_position_zero_when_none_saved(self): response = self.client.get(f"/billboard/room/{self.room.id}/scroll/") self.assertEqual(response.context["scroll_position"], 0) def test_passes_saved_scroll_position_in_context(self): ScrollPosition.objects.create(user=self.user, room=self.room, position=250) response = self.client.get(f"/billboard/room/{self.room.id}/scroll/") self.assertEqual(response.context["scroll_position"], 250) def test_scroll_renders_event_body_and_time_columns(self): response = self.client.get(f"/billboard/room/{self.room.id}/scroll/") self.assertContains(response, 'class="drama-event-body"') self.assertContains(response, 'class="drama-event-time"') class NotePageViewTest(TestCase): def setUp(self): self.user = User.objects.create(email="recog@test.io") self.client.force_login(self.user) def test_requires_login(self): self.client.logout() response = self.client.get("/billboard/my-notes/") self.assertEqual(response.status_code, 302) def test_returns_200(self): response = self.client.get("/billboard/my-notes/") self.assertEqual(response.status_code, 200) def test_uses_note_page_template(self): response = self.client.get("/billboard/my-notes/") self.assertTemplateUsed(response, "apps/billboard/my_notes.html") def test_passes_notes_in_context(self): recog = Note.objects.create( user=self.user, slug="stargazer", earned_at=timezone.now() ) response = self.client.get("/billboard/my-notes/") self.assertIn(recog, response.context["notes"]) def test_excludes_other_users_notes(self): other = User.objects.create(email="other@test.io") Note.objects.create( user=other, slug="stargazer", earned_at=timezone.now() ) response = self.client.get("/billboard/my-notes/") self.assertEqual(list(response.context["notes"]), []) def test_renders_recog_list_and_items(self): Note.objects.create( user=self.user, slug="stargazer", earned_at=timezone.now() ) response = self.client.get("/billboard/my-notes/") self.assertContains(response, 'class="note-list"') self.assertContains(response, 'class="note-item"') def test_renders_recog_item_title_description_image_box(self): Note.objects.create( user=self.user, slug="stargazer", earned_at=timezone.now() ) response = self.client.get("/billboard/my-notes/") self.assertContains(response, 'class="note-item__title"') self.assertContains(response, 'class="note-item__description"') self.assertContains(response, 'class="note-item__image-box"') def test_palette_modal_renders_swatch_labels(self): """Each palette option in the swatch modal should display its human-readable label next to the swatch body so the user knows what they are choosing.""" Note.objects.create( user=self.user, slug="stargazer", earned_at=timezone.now() ) response = self.client.get("/billboard/my-notes/") self.assertContains(response, 'class="note-swatch-label"') self.assertContains(response, "Bardo") self.assertContains(response, "Sheol") class NoteSetPaletteViewTest(TestCase): def setUp(self): self.user = User.objects.create(email="setpal@test.io") self.client.force_login(self.user) self.note = Note.objects.create( user=self.user, slug="stargazer", earned_at=timezone.now(), ) self.url = "/billboard/note/stargazer/set-palette" def test_requires_login(self): self.client.logout() response = self.client.post( self.url, data=_json.dumps({"palette": "palette-bardo"}), content_type="application/json", ) self.assertEqual(response.status_code, 302) def test_sets_palette_on_note(self): self.client.post( self.url, data=_json.dumps({"palette": "palette-bardo"}), content_type="application/json", ) self.note.refresh_from_db() self.assertEqual(self.note.palette, "palette-bardo") def test_returns_200_with_ok(self): response = self.client.post( self.url, data=_json.dumps({"palette": "palette-bardo"}), content_type="application/json", ) self.assertEqual(response.status_code, 200) self.assertEqual(response.json(), {"ok": True}) def test_returns_404_for_slug_user_does_not_own(self): response = self.client.post( "/billboard/note/schizo/set-palette", data=_json.dumps({"palette": "palette-bardo"}), content_type="application/json", ) self.assertEqual(response.status_code, 404) def test_also_saves_user_palette(self): """note_set_palette must persist the choice to user.palette so the palette survives page navigation (sitewide commitment).""" self.client.post( self.url, data=_json.dumps({"palette": "palette-bardo"}), content_type="application/json", ) self.user.refresh_from_db() self.assertEqual(self.user.palette, "palette-bardo") class NoteEquipTitleViewTest(TestCase): def setUp(self): self.user = User.objects.create(email="don@test.io") self.client.force_login(self.user) self.note = Note.objects.create( user=self.user, slug="stargazer", earned_at=timezone.now(), ) def test_don_sets_active_title(self): self.client.post("/billboard/note/stargazer/don") self.user.refresh_from_db() self.assertEqual(self.user.active_title, self.note) def test_doff_clears_active_title(self): self.user.active_title = self.note self.user.save(update_fields=["active_title"]) self.client.post("/billboard/note/stargazer/doff") self.user.refresh_from_db() self.assertIsNone(self.user.active_title) def test_don_returns_200_with_title(self): response = self.client.post("/billboard/note/stargazer/don") self.assertEqual(response.status_code, 200) self.assertEqual(response.json()["title"], "Stargazer") def test_doff_returns_200(self): response = self.client.post("/billboard/note/stargazer/doff") self.assertEqual(response.status_code, 200) data = response.json() self.assertTrue(data["ok"]) self.assertEqual(data["greeting"], "Welcome,") self.assertEqual(data["title"], "Earthman") def test_don_requires_login(self): self.client.logout() response = self.client.post("/billboard/note/stargazer/don") self.assertEqual(response.status_code, 302) def test_don_returns_404_for_unowned_note(self): other = User.objects.create(email="other@test.io") Note.objects.create(user=other, slug="stargazer", earned_at=timezone.now()) self.client.logout() self.client.force_login(other) response = self.client.post("/billboard/note/stargazer/don") # other user's own note — should work self.assertEqual(response.status_code, 200) class SaveScrollPositionTest(TestCase): def setUp(self): self.user = User.objects.create(email="test@savescroll.io") self.client.force_login(self.user) self.room = Room.objects.create(name="Test Room", owner=self.user) def test_post_saves_scroll_position(self): self.client.post( f"/billboard/room/{self.room.id}/scroll-position/", {"position": 300}, ) sp = ScrollPosition.objects.get(user=self.user, room=self.room) self.assertEqual(sp.position, 300) def test_post_updates_existing_position(self): ScrollPosition.objects.create(user=self.user, room=self.room, position=100) self.client.post( f"/billboard/room/{self.room.id}/scroll-position/", {"position": 450}, ) self.assertEqual( ScrollPosition.objects.get(user=self.user, room=self.room).position, 450 ) def test_post_returns_204(self): response = self.client.post( f"/billboard/room/{self.room.id}/scroll-position/", {"position": 100}, ) self.assertEqual(response.status_code, 204) def test_post_requires_login(self): self.client.logout() response = self.client.post( f"/billboard/room/{self.room.id}/scroll-position/", {"position": 100}, ) self.assertEqual(response.status_code, 302) class PostLineRelativeTimestampTest(TestCase): """post.html mirrors scroll.html's bucketed `relative_ts` time rendering: same-day Lines show a time; older ones collapse to weekday / month-day / month-day-year. Bypasses `auto_now_add` with a queryset .update() so the test can backdate Lines.""" def setUp(self): self.owner = User.objects.create(email="owner@post-ts.io", username="owner") self.client.force_login(self.owner) from apps.billboard.models import Line, Post self.Line = Line self.post = Post.objects.create(owner=self.owner, title="Stamp") def _backdate(self, line, **delta): from apps.billboard.models import Line Line.objects.filter(pk=line.pk).update( created_at=timezone.now() - timezone.timedelta(**delta) ) def test_recent_line_renders_clock_time(self): self.Line.objects.create(post=self.post, text="now", author=self.owner) response = self.client.get(reverse("billboard:view_post", args=[self.post.id])) self.assertRegex( response.content.decode(), r'class="post-line-time"[^>]*>\s*\d+:\d{2}\s*[ap]\.m\.\s*<', ) def test_two_day_old_line_renders_weekday(self): line = self.Line.objects.create(post=self.post, text="old", author=self.owner) self._backdate(line, days=2) response = self.client.get(reverse("billboard:view_post", args=[self.post.id])) import re m = re.search( r'class="post-line-time"[^>]*>\s*(\w+)\s*<', response.content.decode() ) self.assertIsNotNone(m, "no .post-line-time cell rendered") self.assertIn(m.group(1), {"Mon", "Tue", "Wed", "Thu", "Fri", "Sat", "Sun"}) def test_thirty_day_old_line_renders_day_month(self): line = self.Line.objects.create(post=self.post, text="oldr", author=self.owner) self._backdate(line, days=30) response = self.client.get(reverse("billboard:view_post", args=[self.post.id])) self.assertRegex( response.content.decode(), r'class="post-line-time"[^>]*>\s*\d{2}\s\w{3}\s*<', ) class DeletePostViewTest(TestCase): """billboard:delete_post — owner can hard-delete; non-owners are no-op; note_unlock Posts are protected (defence-in-depth alongside the menu branch that doesn't render DEL on admin-Posts).""" def setUp(self): from apps.billboard.models import Line, Post self.Post = Post self.owner = User.objects.create(email="del-owner@test.io") self.other = User.objects.create(email="del-other@test.io") self.post = Post.objects.create( owner=self.owner, kind=Post.KIND_USER_POST, title="X", ) Line.objects.create(post=self.post, text="x", author=self.owner) def test_owner_post_redirects_to_my_posts(self): self.client.force_login(self.owner) response = self.client.post( reverse("billboard:delete_post", args=[self.post.id]) ) self.assertRedirects( response, reverse("billboard:my_posts", args=[self.owner.id]), fetch_redirect_response=False, ) def test_owner_post_deletes_post(self): self.client.force_login(self.owner) self.client.post(reverse("billboard:delete_post", args=[self.post.id])) self.assertFalse(self.Post.objects.filter(id=self.post.id).exists()) def test_non_owner_cannot_delete(self): self.client.force_login(self.other) self.client.post(reverse("billboard:delete_post", args=[self.post.id])) self.assertTrue(self.Post.objects.filter(id=self.post.id).exists()) def test_get_does_not_delete(self): self.client.force_login(self.owner) self.client.get(reverse("billboard:delete_post", args=[self.post.id])) self.assertTrue(self.Post.objects.filter(id=self.post.id).exists()) def test_note_unlock_post_is_protected(self): # Even the owner can't DEL a system thread — the gear menu doesn't # render DEL for note_unlock, but the view is hardened in case the # POST is forged. admin_post = self.Post.objects.create( owner=self.owner, kind=self.Post.KIND_NOTE_UNLOCK, title="Notes", ) self.client.force_login(self.owner) self.client.post(reverse("billboard:delete_post", args=[admin_post.id])) self.assertTrue(self.Post.objects.filter(id=admin_post.id).exists()) class AbandonPostViewTest(TestCase): """billboard:abandon_post — invitee removes themselves from post.shared_with; owner unaffected; other invitees unaffected; admin Posts protected from BYE.""" def setUp(self): from apps.billboard.models import Line, Post self.Post = Post self.owner = User.objects.create(email="abandon-owner@test.io") self.invitee = User.objects.create(email="abandon-invitee@test.io") self.other = User.objects.create(email="abandon-other@test.io") self.post = Post.objects.create( owner=self.owner, kind=Post.KIND_USER_POST, title="Shared", ) Line.objects.create(post=self.post, text="x", author=self.owner) self.post.shared_with.add(self.invitee, self.other) def test_invitee_redirects_to_my_posts(self): self.client.force_login(self.invitee) response = self.client.post( reverse("billboard:abandon_post", args=[self.post.id]) ) self.assertRedirects( response, reverse("billboard:my_posts", args=[self.invitee.id]), fetch_redirect_response=False, ) def test_invitee_is_removed_from_shared_with(self): self.client.force_login(self.invitee) self.client.post(reverse("billboard:abandon_post", args=[self.post.id])) self.post.refresh_from_db() self.assertNotIn(self.invitee, self.post.shared_with.all()) def test_post_survives_invitee_abandonment(self): self.client.force_login(self.invitee) self.client.post(reverse("billboard:abandon_post", args=[self.post.id])) self.post.refresh_from_db() self.assertEqual(self.post.owner, self.owner) self.assertIn(self.other, self.post.shared_with.all()) def test_get_does_not_remove(self): self.client.force_login(self.invitee) self.client.get(reverse("billboard:abandon_post", args=[self.post.id])) self.post.refresh_from_db() self.assertIn(self.invitee, self.post.shared_with.all()) def test_non_invitee_post_is_no_op(self): random_user = User.objects.create(email="random@test.io") self.client.force_login(random_user) self.client.post(reverse("billboard:abandon_post", args=[self.post.id])) self.post.refresh_from_db() self.assertIn(self.invitee, self.post.shared_with.all()) self.assertIn(self.other, self.post.shared_with.all()) def test_note_unlock_post_is_protected(self): # Admin Posts have no recipients to begin with, but harden the view # so a forged BYE can't strip shared_with anyway. admin_post = self.Post.objects.create( owner=self.owner, kind=self.Post.KIND_NOTE_UNLOCK, title="Notes", ) admin_post.shared_with.add(self.invitee) self.client.force_login(self.invitee) self.client.post(reverse("billboard:abandon_post", args=[admin_post.id])) admin_post.refresh_from_db() self.assertIn(self.invitee, admin_post.shared_with.all()) class AnonymousPostViewerTest(TestCase): """view_post has no @login_required (Percival ch.18 anonymous-post lab — ownerless Posts are viewable by anyone). The gear menu's NVM target reverses `my_posts user_id=request.user.id`, which previously exploded w. NoReverseMatch when request.user.id was None (anonymous user). Gear menu must be gated on is_authenticated; the post body still renders for anonymous viewers of ownerless posts.""" def setUp(self): from apps.billboard.models import Post # Ownerless Post — matches the Percival anonymous-share contract # exercised by apps.dashboard.tests.integrated.test_views.SharePostTest. # No Line needed; the empty post still exercises the template render. self.post = Post.objects.create(title="Public-ish") def test_anonymous_can_view_ownerless_post_without_500(self): response = self.client.get( reverse("billboard:view_post", args=[self.post.id]) ) self.assertEqual(response.status_code, 200) def test_anonymous_gets_no_gear_menu(self): response = self.client.get( reverse("billboard:view_post", args=[self.post.id]) ) self.assertNotIn(b"id_post_menu", response.content)