Merge "Suggestions to enhance the SQL call pattern."

[gigi.git] / tests / org / cacert / gigi / TestPasswordReset.java

diff --git a/tests/org/cacert/gigi/TestPasswordReset.java b/tests/org/cacert/gigi/TestPasswordReset.java
index 384ec31df7f7ff2f28438929ffe8bc607e58c13a..18402106e8382261b3634d8a126e220331f31110 100644 (file)
--- a/tests/org/cacert/gigi/TestPasswordReset.java
+++ b/tests/org/cacert/gigi/TestPasswordReset.java
@@ -27,6 +27,23 @@ public class TestPasswordReset extends ClientTest {
         assertNotNull(login(u.getEmail(), TEST_PASSWORD + "'"));
     }
 
+    @Test
+    public void testDoubleUse() throws IOException, GigiApiException {
+        User u2 = User.getResetWithToken(id, pub);
+        assertSame(u, u2);
+        assertNotNull(login(u.getEmail(), TEST_PASSWORD));
+        u2.consumePasswordResetTicket(id, priv, TEST_PASSWORD + "'");
+        assertEquals("", login(u.getEmail(), TEST_PASSWORD));
+        assertNotNull(login(u.getEmail(), TEST_PASSWORD + "'"));
+        try {
+            u2.consumePasswordResetTicket(id, priv, TEST_PASSWORD + "''");
+            fail("Exception expected.");
+        } catch (GigiApiException e) {
+            // expected
+        }
+        assertNotNull(login(u.getEmail(), TEST_PASSWORD + "'"));
+    }
+
     @Test
     public void testInternalWrongTk() throws IOException, GigiApiException {
         User u2 = User.getResetWithToken(id, pub + "'");