chore: init commit

in worker.../repo/GITFOLDER.zip is the .git folder.

worker-toolkit-stocks-in-the-future/repo/test/controllers/students_controller_test.rb

@@ -0,0 +1,131 @@
+# frozen_string_literal: true
+
+require "test_helper"
+
+class StudentsControllerTest < ActionDispatch::IntegrationTest
+  setup do
+    @classroom = create(:classroom)
+    @teacher = create(:teacher, classroom: @classroom)
+    @student = create(:student, classroom: @classroom)
+    @other_classroom = create(:classroom)
+    @other_student = create(:student, classroom: @other_classroom)
+  end
+
+  test "students cannot access student management actions" do
+    sign_in @student
+
+    get new_classroom_student_path(@classroom)
+    assert_redirected_to @student.portfolio_path
+
+    get edit_classroom_student_path(@classroom, @student)
+    assert_redirected_to @student.portfolio_path
+
+    patch classroom_student_path(@classroom, @student), params: { student: { username: "hacked" } }
+    assert_redirected_to @student.portfolio_path
+
+    assert_no_difference("User.kept.count") do
+      delete classroom_student_path(@classroom, @student)
+    end
+    assert_redirected_to @student.portfolio_path
+  end
+
+  test "teacher can create student in their classroom" do
+    sign_in @teacher
+
+    assert_difference("User.count") do
+      assert_difference("Student.count") do
+        post classroom_students_path(@classroom), params: {
+          student: {
+            username: "newstudent",
+            email: "newstudent@example.com"
+          }
+        }
+      end
+    end
+
+    student = Student.last
+    assert_equal @classroom, student.classroom
+    assert_not_nil student.encrypted_password
+    assert_redirected_to classroom_path(@classroom)
+    assert_match(/created successfully/, flash[:notice])
+  end
+
+  test "student creation creates portfolio automatically" do
+    sign_in @teacher
+
+    assert_difference("Portfolio.count") do
+      post classroom_students_path(@classroom), params: {
+        student: {
+          username: "newstudent",
+          email: "newstudent@example.com"
+        }
+      }
+    end
+
+    student = Student.last
+    assert_not_nil student.portfolio
+    assert_equal 0, student.portfolio.calculate_total_value
+  end
+
+  test "student creation generates memorable password" do
+    sign_in @teacher
+
+    post classroom_students_path(@classroom), params: {
+      student: {
+        username: "newstudent",
+        email: "newstudent@example.com"
+      }
+    }
+
+    assert_match(/password:/, flash[:notice].downcase)
+  end
+
+  test "teacher can update student in their classroom" do
+    sign_in @teacher
+
+    patch classroom_student_path(@classroom, @student), params: {
+      student: {
+        username: "updatedname",
+        email: "updated@example.com"
+      }
+    }
+
+    @student.reload
+    assert_equal "updatedname", @student.username
+    assert_equal "updated@example.com", @student.email
+    assert_redirected_to classroom_path(@classroom)
+  end
+
+  test "teacher can delete student from their classroom" do
+    sign_in @teacher
+
+    assert_difference("User.kept.count", -1) do
+      delete classroom_student_path(@classroom, @student)
+    end
+
+    assert_redirected_to classroom_path(@classroom)
+    assert_match(/deleted successfully/, flash[:notice])
+    assert @student.reload.discarded?
+  end
+
+  test "teacher can reset student password" do
+    sign_in @teacher
+    original_password = @student.encrypted_password
+
+    patch reset_password_classroom_student_path(@classroom, @student)
+
+    @student.reload
+    assert_not_equal original_password, @student.encrypted_password
+    assert_redirected_to classroom_path(@classroom)
+    assert_match(/password reset/i, flash[:notice])
+    assert_match(/new password:/i, flash[:notice])
+  end
+
+  test "password reset generates memorable password" do
+    sign_in @teacher
+
+    patch reset_password_classroom_student_path(@classroom, @student)
+
+    assert_match(/new password: \w+\d+/i, flash[:notice])
+  end
+end