Adjusting signup anti-bot

Rodrigo Souto
1 parent 920f13a9
Showing 6 changed files with 55 additions and 57 deletions Show diff stats
app/controllers/public/account_controller.rb
app/models/environment.rb
app/views/account/_signup_form.rhtml
public/stylesheets/application.css
test/functional/account_controller_test.rb
test/integration/signup_test.rb
@@ -299,7 +299,7 @@ class AccountController &lt; ApplicationController
   end
   def clear_signup_start_time
-    Rails.cache.delete params[:signup_time_key]
+    Rails.cache.delete params[:signup_time_key] if params[:signup_time_key]
   end
   def may_be_a_bot
@@ -233,7 +233,7 @@ class Environment &lt; ActiveRecord::Base
     settings[:message_for_member_invitation] || InviteMember.mail_template
   end
-  settings_items :min_signup_delay, :type => Integer, :default => 25 #seconds
+  settings_items :min_signup_delay, :type => Integer, :default => 3 #seconds
   settings_items :activation_blocked_text, :type => String
   settings_items :message_for_disabled_enterprise, :type => String,
                  :default => _('This enterprise needs to be enabled.')
 <% if @block_bot %>
-  <div id="bot-notice">
-    <strong><%=_('How Fast!')%></strong>
-    <p><%=_('Looks like you are a robot. Please, prove that you are human.')%></p>
+  <div class="atention" style="font-size: 150%;">
+    <strong><%=_('Are you a robot?')%></strong> <br />
+    <%=_('Please, prove that you are human by filling the captcha.')%>
   </div>
 <% end %>
@@ -5636,16 +5636,6 @@ li.profile-activity-item.upload_image .activity-gallery-images-count-1 img {
 /* Signup interface {{{ */
-#bot-notice {
-  border: 3px solid #000;
-  background: #FE0;
-  padding: 5px 10px;
-  font-size: 150%;
-}
-#bot-notice p {
-  margin: 0px;
-}
-
 #url-check {
   margin: 0 0 -5px 0;
   width: 100%;
@@ -19,6 +19,7 @@ class AccountControllerTest &lt; ActionController::TestCase
     @controller = AccountController.new
     @request    = ActionController::TestRequest.new
     @response   = ActionController::TestResponse.new
+    disable_signup_bot_check
   end
   def test_local_files_reference
@@ -566,6 +567,7 @@ class AccountControllerTest &lt; ActionController::TestCase
     template.boxes[0].blocks << Block.new
     template.save!
     env = fast_create(Environment, :name => 'test_env')
+    disable_signup_bot_check(env)
     env.settings[:person_template_id] = template.id
     env.save!
@@ -882,26 +884,31 @@ class AccountControllerTest &lt; ActionController::TestCase
   protected
-    def new_user(options = {}, extra_options ={})
-      data = {:profile_data => person_data}
-      if extra_options[:profile_data]
-         data[:profile_data].merge! extra_options.delete(:profile_data)
-      end
-      data.merge! extra_options
-
-       post :signup, { :user => { :login => 'quire',
-                                 :email => 'quire@example.com',
-                                 :password => 'quire',
-                                 :password_confirmation => 'quire'
-                              }.merge(options)
-                    }.merge(data)
+  def new_user(options = {}, extra_options ={})
+    data = {:profile_data => person_data}
+    if extra_options[:profile_data]
+      data[:profile_data].merge! extra_options.delete(:profile_data)
     end
+    data.merge! extra_options
-    def auth_token(token)
-      CGI::Cookie.new('name' => 'auth_token', 'value' => token)
-    end
+    post :signup, { :user => { :login => 'quire',
+      :email => 'quire@example.com',
+      :password => 'quire',
+      :password_confirmation => 'quire'
+    }.merge(options)
+    }.merge(data)
+  end
-    def cookie_for(user)
-      auth_token users(user).remember_token
-    end
+  def auth_token(token)
+    CGI::Cookie.new('name' => 'auth_token', 'value' => token)
+  end
+
+  def cookie_for(user)
+    auth_token users(user).remember_token
+  end
+
+  def disable_signup_bot_check(environment = Environment.default)
+    environment.min_signup_delay = 0
+    environment.save!
+  end
 end
@@ -7,33 +7,18 @@ class SignupTest &lt; ActionController::IntegrationTest
     ActionController::Integration::Session.any_instance.stubs(:https?).returns(true)
   end
-  # helper
-  def registering_with_bot_test(min_signup_delay, sleep_secs)
-    env = Environment.default
-    env.min_signup_delay = min_signup_delay
-    env.save!
-    get '/account/signup'
-    assert_response :success
-    get '/account/signup_time'
-    assert_response :success
-    data = ActiveSupport::JSON.decode response.body
-    sleep sleep_secs
-    post '/account/signup', :user => { :login => 'someone', :password => 'test', :password_confirmation => 'test', :email => 'someone@example.com' }, :signup_time_key => data['key']
-    assert_response :success
-  end
-
-  def test_signup_form_submition_must_be_blocked_for_fast_bots
-    count = User.count
-    registering_with_bot_test 5, 1
+  def test_signup_form_submission_must_be_blocked_for_fast_bots
+    assert_no_difference User, :count do
+      registering_with_bot_test 5, 1
+    end
     assert_template 'signup'
-    assert_equal count, User.count
     assert_match /you are a robot/, response.body
   end
-  def test_signup_form_submition_must_not_block_after_min_signup_delay
-    count = User.count
-    registering_with_bot_test 1, 2
-    assert_equal count+1, User.count
+  def test_signup_form_submission_must_not_block_after_min_signup_delay
+    assert_difference User, :count, 1 do
+      registering_with_bot_test 1, 2
+    end
   end
   def test_should_require_acceptance_of_terms_for_signup
@@ -63,4 +48,20 @@ class SignupTest &lt; ActionController::IntegrationTest
   end
+  private
+
+  def registering_with_bot_test(min_signup_delay, sleep_secs)
+    env = Environment.default
+    env.min_signup_delay = min_signup_delay
+    env.save!
+    get '/account/signup'
+    assert_response :success
+    get '/account/signup_time'
+    assert_response :success
+    data = ActiveSupport::JSON.decode response.body
+    sleep sleep_secs
+    post '/account/signup', :user => { :login => 'someone', :password => 'test', :password_confirmation => 'test', :email => 'someone@example.com' }, :signup_time_key => data['key']
+    assert_response :success
+  end
+
 end
	@@ -299,7 +299,7 @@ class AccountController < ApplicationController		@@ -299,7 +299,7 @@ class AccountController < ApplicationController
299	end	299	end
300		300
301	def clear_signup_start_time	301	def clear_signup_start_time
302	- Rails.cache.delete params[:signup_time_key]	302	+ Rails.cache.delete params[:signup_time_key] if params[:signup_time_key]
303	end	303	end
304		304
305	def may_be_a_bot	305	def may_be_a_bot
	@@ -233,7 +233,7 @@ class Environment < ActiveRecord::Base		@@ -233,7 +233,7 @@ class Environment < ActiveRecord::Base
233	settings[:message_for_member_invitation] \|\| InviteMember.mail_template	233	settings[:message_for_member_invitation] \|\| InviteMember.mail_template
234	end	234	end
235		235
236	- settings_items :min_signup_delay, :type => Integer, :default => 25 #seconds	236	+ settings_items :min_signup_delay, :type => Integer, :default => 3 #seconds
237	settings_items :activation_blocked_text, :type => String	237	settings_items :activation_blocked_text, :type => String
238	settings_items :message_for_disabled_enterprise, :type => String,	238	settings_items :message_for_disabled_enterprise, :type => String,
239	:default => _('This enterprise needs to be enabled.')	239	:default => _('This enterprise needs to be enabled.')
	@@ -5636,16 +5636,6 @@ li.profile-activity-item.upload_image .activity-gallery-images-count-1 img {		@@ -5636,16 +5636,6 @@ li.profile-activity-item.upload_image .activity-gallery-images-count-1 img {
5636		5636
5637	/* Signup interface {{{ */	5637	/* Signup interface {{{ */
5638		5638
5639	-#bot-notice {
5640	- border: 3px solid #000;
5641	- background: #FE0;
5642	- padding: 5px 10px;
5643	- font-size: 150%;
5644	-}
5645	-#bot-notice p {
5646	- margin: 0px;
5647	-}
5648	-
5649	#url-check {	5639	#url-check {
5650	margin: 0 0 -5px 0;	5640	margin: 0 0 -5px 0;
5651	width: 100%;	5641	width: 100%;