summaryrefslogtreecommitdiffstats
path: root/test/test_helper.rb
diff options
context:
space:
mode:
authorEric Davis <edavis@littlestreamsoftware.com>2010-11-01 15:45:03 +0000
committerEric Davis <edavis@littlestreamsoftware.com>2010-11-01 15:45:03 +0000
commitbed79f523bd64d900a4e615efe7eb3e0cfc0abd8 (patch)
tree74d935f4e66cf1ad0e9d943dc8f55b4cf1c35ffd /test/test_helper.rb
parentd5fde17bf5d0b8788871f60ff08b203da527de92 (diff)
downloadredmine-bed79f523bd64d900a4e615efe7eb3e0cfc0abd8.tar.gz
redmine-bed79f523bd64d900a4e615efe7eb3e0cfc0abd8.zip
Refactor: convert api key tests to shoulda macros for reuse. #6447
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@4358 e93f8b46-1217-0410-a6f0-8f06a7374b81
Diffstat (limited to 'test/test_helper.rb')
-rw-r--r--test/test_helper.rb55
1 files changed, 55 insertions, 0 deletions
diff --git a/test/test_helper.rb b/test/test_helper.rb
index db44bb9b8..001638754 100644
--- a/test/test_helper.rb
+++ b/test/test_helper.rb
@@ -185,6 +185,61 @@ class ActiveSupport::TestCase
assert !user.new_record?
end
end
+
+ # Test that a request allows full key authentication
+ #
+ # @param [Symbol] http_method the HTTP method for request (:get, :post, :put, :delete)
+ # @param [String] url the request url, without the key=ZXY parameter
+ def self.should_allow_key_based_auth(http_method, url)
+ context "should allow key based auth using key=X for #{url}" do
+ context "with a valid api token" do
+ setup do
+ @user = User.generate_with_protected!
+ @token = Token.generate!(:user => @user, :action => 'api')
+ send(http_method, url + "?key=#{@token.value}")
+ end
+
+ should_respond_with :success
+ should_respond_with_content_type_based_on_url(url)
+ should "login as the user" do
+ assert_equal @user, User.current
+ end
+ end
+
+ context "with an invalid api token" do
+ setup do
+ @user = User.generate_with_protected!
+ @token = Token.generate!(:user => @user, :action => 'feeds')
+ send(http_method, url + "?key=#{@token.value}")
+ end
+
+ should_respond_with :unauthorized
+ should_respond_with_content_type_based_on_url(url)
+ should "not login as the user" do
+ assert_equal User.anonymous, User.current
+ end
+ end
+ end
+
+ end
+
+ # Uses should_respond_with_content_type based on what's in the url:
+ #
+ # '/project/issues.xml' => should_respond_with_content_type :xml
+ # '/project/issues.json' => should_respond_with_content_type :json
+ #
+ # @param [String] url Request
+ def self.should_respond_with_content_type_based_on_url(url)
+ case
+ when url.match(/xml/i)
+ should_respond_with_content_type :xml
+ when url.match(/json/i)
+ should_respond_with_content_type :json
+ else
+ raise "Unknown content type for should_respond_with_content_type_based_on_url: #{url}"
+ end
+
+ end
end
# Simple module to "namespace" all of the API tests