David Heinemeier Hansson
48 lines
1.7 KiB
Ruby
48 lines
1.7 KiB
Ruby
require "test_helper"
|
|
|
|
class ApiTest < ActionDispatch::IntegrationTest
|
|
setup do
|
|
@davids_bearer_token = bearer_token_env(identity_access_tokens(:davids_api_token).token)
|
|
@jasons_bearer_token = bearer_token_env(identity_access_tokens(:jasons_api_token).token)
|
|
end
|
|
|
|
test "authenticate with valid access token" do
|
|
get boards_path(format: :json), env: @davids_bearer_token
|
|
assert_response :success
|
|
end
|
|
|
|
test "fail to authenticate with invalid access token" do
|
|
get boards_path(format: :json), env: bearer_token_env("nonsense")
|
|
assert_response :unauthorized
|
|
end
|
|
|
|
test "changing data requires a write-endowed access token" do
|
|
post boards_path(format: :json), params: { board: { name: "My new board" } }, env: @jasons_bearer_token
|
|
assert_response :unauthorized
|
|
|
|
post boards_path(format: :json), params: { board: { name: "My new board" } }, env: @davids_bearer_token
|
|
assert_response :success
|
|
end
|
|
|
|
test "get boards" do
|
|
get boards_path(format: :json), env: @davids_bearer_token
|
|
assert_equal users(:david).boards.count, @response.parsed_body.count
|
|
|
|
get board_path(boards(:writebook), format: :json), env: @davids_bearer_token
|
|
assert_equal boards(:writebook).name, @response.parsed_body["name"]
|
|
end
|
|
|
|
test "create board" do
|
|
post boards_path(format: :json), params: { board: { name: "My new board" } }, env: @davids_bearer_token
|
|
assert_equal board_path(Board.last), @response.headers["Location"]
|
|
|
|
get board_path(Board.last, format: :json), env: @davids_bearer_token
|
|
assert_equal "My new board", @response.parsed_body["name"]
|
|
end
|
|
|
|
private
|
|
def bearer_token_env(token)
|
|
{ "HTTP_AUTHORIZATION" => "Bearer #{token}" }
|
|
end
|
|
end
|