Sha256: 1fb6e87a8e3472aa6ee8df5510611147fb490dd39d911f54764207c75900210b
Contents?: true
Size: 1.37 KB
Versions: 18
Compression:
Stored size: 1.37 KB
Contents
# frozen_string_literal: true
require 'rails_helper'
RSpec.describe G5Authenticatable::Authorization, type: :controller do
controller(ActionController::Base) do
include G5Authenticatable::Authorization
def index
raise Pundit::NotAuthorizedError.new(query: 'index?',
record: 'mock_record')
end
end
it 'should mixin the authorize method' do
expect(controller).to respond_to(:authorize)
end
it 'should mixin the policy_scope method' do
expect(controller).to respond_to(:policy_scope)
end
describe '#user_not_authorized' do
subject(:user_not_authorized) { safe_get :index, format: format }
context 'when format is json' do
let(:format) { :json }
it 'is forbidden' do
user_not_authorized
expect(response).to be_forbidden
end
it 'renders the json error message' do
user_not_authorized
expect(JSON.parse(response.body)).to eq('error' => 'Access forbidden')
end
end
context 'when format is html' do
let(:format) { :html }
it 'is forbidden' do
user_not_authorized
expect(response).to be_forbidden
end
it 'renders the static 403.html' do
user_not_authorized
expect(response.body).to include(
'<title>Access forbidden (403)</title>'
)
end
end
end
end
Version data entries
18 entries across 18 versions & 1 rubygems