Spec: specify locked logic

spec/controllers/users/sessions_controller_spec.rb

@@ -36,6 +36,17 @@ describe Users::SessionsController, type: :controller do
           expect(response).to redirect_to(stored_path)
         end
       end
+
+      context 'when the user is locked' do
+        before { user.lock_access! }
+
+        it 'redirects to new_path' do
+          subject
+
+          expect(response).to redirect_to(new_user_session_path)
+          expect(flash.alert).to eq(I18n.t('devise.failure.invalid'))
+        end
+      end
     end
 
     context 'when the credentials are wrong' do

spec/features/sessions/sign_in_spec.rb

@@ -13,6 +13,17 @@ feature 'Signin in:' do
     expect(page).to have_current_path dossiers_path
   end
 
+  scenario 'an existing user can lock its account' do
+    visit root_path
+    click_on 'Connexion'
+
+    5.times { sign_in_with user.email, 'bad password' }
+    expect(user.reload.access_locked?).to be false
+
+    sign_in_with user.email, 'bad password'
+    expect(user.reload.access_locked?).to be true
+  end
+
   context 'when visiting a procedure' do
     let(:procedure) { create :simple_procedure, :with_service }