Harden public demo for 0.3.16

tests/integration/test_auth_login.py

@@ -135,15 +135,54 @@ def test_demo_login_logs_in_and_seeds_environment(client):
     # Het gevulde dashboard rendert zonder fouten.
     dashboard = client.get(reverse("dashboard:today"))
     assert dashboard.status_code == 200
+    dashboard_html = dashboard.content.decode("utf-8")
+    assert "Profiel actief" in dashboard_html
+    assert "Radar actief" not in dashboard_html
+    assert "Nog geen persoonlijke matches" not in dashboard_html
+
+    sources = client.get(reverse("sources:list"))
+    assert sources.status_code == 200
+    assert "minstens één import actief" in sources.content.decode("utf-8")
 
 
 def test_demo_login_is_idempotent(client):
-    from apps.jobs.models import JobPosting
+    from datetime import timedelta
+
+    from django.utils import timezone
+
+    from apps.jobs.models import Application, JobPosting
+    from apps.profiles.models import SearchProfile
+    from apps.sources.models import MailboxConnection, Source
 
     client.post(reverse("demo-login"))
     first = JobPosting.objects.count()
+    demo_user = get_user_model().objects.get(username=settings.DEMO_USERNAME)
+    profile = SearchProfile.objects.get(user=demo_user, is_active=True)
+    job = profile.scores.order_by("-score").first().job
+    job.status = JobPosting.Status.EXPIRED
+    job.last_seen = timezone.now() - timedelta(days=30)
+    job.save(update_fields=["status", "last_seen"])
+    application = Application.objects.filter(user=demo_user).first()
+    application.follow_up_date = timezone.localdate() - timedelta(days=14)
+    application.save(update_fields=["follow_up_date"])
+
+    client.logout()
     client.post(reverse("demo-login"))
     assert JobPosting.objects.count() == first
+    job.refresh_from_db()
+    application.refresh_from_db()
+    assert job.status == JobPosting.Status.ACTIVE
+    assert job.last_seen.date() == timezone.localdate()
+    assert application.follow_up_date > timezone.localdate()
+    assert profile.scores.count() == 6
+    assert MailboxConnection.objects.filter(user=demo_user, enabled=True).count() == 9
+    assert Source.objects.filter(source_type=Source.Type.EMAIL, failure_count=0).count() >= 9
+
+
+def test_login_password_field_has_no_mask_placeholder(client):
+    html = client.get(reverse("login")).content.decode("utf-8")
+    assert 'id="id_password"' in html
+    assert 'placeholder="••••••••"' not in html
 
 
 def test_demo_account_is_read_only_and_session_is_bounded(client):