Client.logout() also clears any force_authenticate

1 files changed, 13 insertions, 1 deletions

diff --git a/tests/test_testing.py b/tests/test_testing.py
index 9fd5966e..f5d2cbcd 100644
--- a/tests/test_testing.py
+++ b/tests/test_testing.py
@@ -109,7 +109,7 @@ class TestAPITestClient(TestCase):
 
     def test_can_logout(self):
         """
-        `logout()` reset stored credentials
+        `logout()` resets stored credentials
         """
         self.client.credentials(HTTP_AUTHORIZATION='example')
         response = self.client.get('/view/')
@@ -118,6 +118,18 @@ class TestAPITestClient(TestCase):
         response = self.client.get('/view/')
         self.assertEqual(response.data['auth'], b'')
 
+    def test_logout_resets_force_authenticate(self):
+        """
+        `logout()` resets any `force_authenticate`
+        """
+        user = User.objects.create_user('example', 'example@example.com', 'password')
+        self.client.force_authenticate(user)
+        response = self.client.get('/view/')
+        self.assertEqual(response.data['user'], 'example')
+        self.client.logout()
+        response = self.client.get('/view/')
+        self.assertEqual(response.data['user'], b'')
+
     def test_follow_redirect(self):
         """
         Follow redirect by setting follow argument.