Django test user password

Question

I have written a REST API for updating a user's password. Since it is impossible to unhash the password stored by django, how am I suppose to test my API besides asserting the response status_code?

Answer 1

You can check a user's password with User.check_password(password_to_check). This will return True if the password is correct. (see documentation here)

Note that if you have created a user in your unit test and then change a password for the user, you need to update the user reference before you can see the new password, like this:

// create self.user 
// change the password to "newpassword"
self.user = User.objects.get(username="username")  # get user again so that you can see updated password
self.assertEquals(self.user.check_password("newpassword"), True)