Section 6.1: Make a User model with password

Author: Ryan Bigg

ticketee/Gemfile

@@ -28,7 +28,7 @@ gem 'font-awesome-rails', '~> 4.2'
 gem 'simple_form', '3.1.0.rc2'
 
 # Use ActiveModel has_secure_password
-# gem 'bcrypt', '~> 3.1.7'
+gem 'bcrypt', '~> 3.1.9'
 
 # Use Unicorn as the app server
 # gem 'unicorn'

ticketee/Gemfile.lock

@@ -37,6 +37,7 @@ GEM
       thread_safe (~> 0.1)
       tzinfo (~> 1.1)
     arel (6.0.0.beta2)
+    bcrypt (3.1.9)
     binding_of_caller (0.7.3.pre1)
       debug_inspector (>= 0.0.1)
     bootstrap-sass (3.3.0.1)
@@ -186,6 +187,7 @@ PLATFORMS
   ruby
 
 DEPENDENCIES
+  bcrypt (~> 3.1.9)
   bootstrap-sass (~> 3.3)
   byebug
   capybara (~> 2.4)

ticketee/app/models/user.rb

@@ -0,0 +1,3 @@
+class User < ActiveRecord::Base
+  has_secure_password
+end

ticketee/db/migrate/20141112021638_create_users.rb

@@ -0,0 +1,11 @@
+class CreateUsers < ActiveRecord::Migration
+  def change
+    create_table :users do |t|
+      t.string :name
+      t.string :email
+      t.string :password_digest
+
+      t.timestamps null: false
+    end
+  end
+end

ticketee/db/schema.rb

@@ -11,7 +11,7 @@
 #
 # It's strongly recommended that you check this file into your version control system.
 
-ActiveRecord::Schema.define(version: 20141112001034) do
+ActiveRecord::Schema.define(version: 20141112021638) do
 
   create_table "projects", force: true do |t|
     t.string   "name"
@@ -30,4 +30,12 @@
 
   add_index "tickets", ["project_id"], name: "index_tickets_on_project_id"
 
+  create_table "users", force: true do |t|
+    t.string   "name"
+    t.string   "email"
+    t.string   "password_digest"
+    t.datetime "created_at",      null: false
+    t.datetime "updated_at",      null: false
+  end
+
 end

ticketee/spec/models/user_spec.rb

@@ -0,0 +1,48 @@
+require "rails_helper"
+
+describe User do
+  describe "passwords" do
+    it "needs a password and confirmation to save" do
+      user = User.new(email: "[email protected]")
+
+      user.save
+      expect(user).to_not be_valid
+
+      user.password = "password"
+      user.password_confirmation = ""
+      user.save
+      expect(user).to_not be_valid
+
+      user.password_confirmation = "password"
+      user.save
+      expect(user).to be_valid
+    end
+
+    it "needs password and confirmation to match" do
+      user = User.create(
+            email: "[email protected]",
+            password: "hunter2",
+            password_confirmation: "hunter")
+
+      expect(user).to_not be_valid
+    end
+  end
+
+  describe "authentication" do
+    let(:user) do
+      User.create(
+        name: "[email protected]",
+        password: "hunter2",
+        password_confirmation: "hunter2"
+      )
+    end
+
+    it "authenticates with a correct password" do
+      expect(user.authenticate("hunter2")).to be
+    end
+
+    it "does not authenticate with an incorrect password" do
+      expect(user.authenticate("hunter1")).to_not be
+    end
+  end
+end