use strict; use warnings; use Test::More; use lib 't/lib'; use Test::WWW::Mechanize::Catalyst 'TestApp'; my $mech = Test::WWW::Mechanize::Catalyst->new; $mech->get_ok('http://localhost/token/form'); my ($form) = $mech->forms; ok( $form, 'Found form' ); ok( $form->find_input('basic_form'), 'found input field' ); ok( my $token = $form->find_input('_token'), 'found token field' ); $token = $token->value; like( $token, qr/^[a-z0-9]+$/, 'token value looks like a token' ); ok( my $res = $mech->submit_form( fields => { 'basic_form' => 1, '_token' => "123" } ), 'submit with different token' ); unlike( $res->as_string, qr/VALID/, 'form is not valid' ); $mech->get_ok('http://localhost/token/form'); ok( $res = $mech->submit_form( fields => { '_token' => $token } ), 'submit with token only' ); unlike( $res->as_string, qr/VALID/, 'basic_form is required' ); $mech->get_ok('http://localhost/token/form'); ok( $res = $mech->submit_form( fields => { 'basic_form' => 1, '_token' => $token } ), 'submit with valid token' ); like( $res->as_string, qr/VALID/, 'form is valid' ); $mech->get_ok( 'http://localhost/token/count_token', 'get token count' ); is( $mech->content, 4, "4 tokens" ); $mech->get_ok( 'http://localhost/tokenexpire/form', 'get token with negative expiration time' ); ($form) = $mech->forms; ok( $form, 'Found form' ); ok( $form->find_input('basic_form'), 'found input field' ); ok( $token = $form->find_input('token'), 'found token field' ); for(4..21) { $mech->get_ok('http://localhost/token/count_token'); is($mech->content, $_ > 20 ? 20 : $_); $mech->get_ok('http://localhost/token/form', 'get form #' . $_); } ($form) = $mech->forms; ok( $token = $form->find_input('_token'), 'found token field' ); ok( $res = $mech->submit_form( fields => { 'basic_form' => 1, '_token' => $token->value } ), 'submit with valid token' ); is( $mech->content, 'VALID', 'form is valid' ); done_testing;