Initial commit (history cleared)

spec/support/capybara_shared.rb

@@ -0,0 +1,58 @@
+# frozen_string_literal: true
+# By default this will return true, and thus all of the Capybara specs will
+# fail until a developer using the site for training has patched up all of
+# the vulnerabilities.
+#
+# However, RailsGoat maintainers need the Capybara features to pass to indicate
+# changes to the site have not inadvertently removed or fixed any vulnerabilities
+# since the whole point is to provide a site for a developer to fix.
+$displayed_spec_notice = false
+
+def verifying_fixed?
+  maintainer_env_name = "RAILSGOAT_MAINTAINER"
+  result = !ENV[maintainer_env_name]
+  if !$displayed_spec_notice && result
+    puts <<-NOTICE
+
+    ******************************************************************************
+    You are running the RailsGoat Capybara Specs in Training mode. These specs
+    are supposed to fail, indicating vulnerabilities exist. They contain spoilers,
+    so do not read the code in spec/vulnerabilities if your goal is to learn more
+    about patching the vulnerabilities. You should fix the vulnerabilities in the
+    application in order to get these specs to pass**. You can use them to measure
+    your progress.
+
+    These same specs will pass if you set the #{maintainer_env_name} ENV variable.
+
+    **NOTE: The RSpec skip feature is used to toggle the outcome of these specs
+    between Training mode and RailsGoat Maintainer mode. When the vulnerabilities
+    are removed, the specs will pass instead. Try to get a fully passing suite.
+    ******************************************************************************
+
+    NOTICE
+    $displayed_spec_notice = true
+  end
+  result
+end
+
+def login(user)
+  visit "/"
+  fill_in "email", with: user.email
+  fill_in "password", with: user.clear_password
+  find("input[type='submit'][value='Login']").click
+end
+
+# Configure Selenium with headless Chrome for JavaScript testing
+# This works across macOS, Linux, and Windows without requiring Firefox
+Capybara.register_driver :selenium_chrome_headless do |app|
+  options = Selenium::WebDriver::Chrome::Options.new
+  options.add_argument("--headless")
+  options.add_argument("--disable-gpu")
+  options.add_argument("--no-sandbox")
+  options.add_argument("--disable-dev-shm-usage")
+  options.add_argument("--window-size=1920,1080")
+
+  Capybara::Selenium::Driver.new(app, browser: :chrome, options: options)
+end
+
+Capybara.javascript_driver = :selenium_chrome_headless

spec/support/user_fixture.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+class UserFixture
+  def self.reset_all_users
+    User.delete_all
+    Rails.application.load_seed
+  end
+
+  def self.normal_user
+    password = "thi$ 1s cOmplExEr"
+    User.create!(first_name: "Joe", last_name: "Schmoe", email: "joe@schmoe.com",
+                 password: password, password_confirmation: password).tap do |user|
+      def user.clear_password
+        "thi$ 1s cOmplExEr"
+      end
+    end
+  end
+
+  def self.admin_user
+    User.where(admin: true).first
+  end
+end