Contents

## NOT CAPYBARA
#  ActionDispatch::IntegrationTest
#  http://guides.rubyonrails.org/testing.html#integration-testing
#  used so we can test POST actions ^_^

require 'test_helper'

class PasswordTokenTest < ActionDispatch::IntegrationTest

  setup do
    @user         = create_user
    @client_app   = create_client_app
    @password     = "password"
    Opro.setup {|config| config.password_exchange_enabled = true}
  end


  test "exchange a password and email for an access_token" do
    params = {:client_id      => @client_app.client_id ,
              :client_secret  => @client_app.client_secret,
              :password       => @password,
              :email          => @user.email }

    post oauth_token_path(params)

    json_hash = JSON.parse(response.body)
    assert json_hash['access_token'].present?
  end

  test "do not provide access_token for invalid password or email" do
    params = {:client_id      => @client_app.client_id ,
              :client_secret  => @client_app.client_secret,
              :password       => @password,
              :email          => @user.email }

    post oauth_token_path(params.merge(:password => @password + "invalid"))
    json_hash = JSON.parse(response.body)
    assert json_hash['access_token'].blank?

    post oauth_token_path(params.merge(:email    => "invalid" + @user.email ))
    json_hash = JSON.parse(response.body)
    assert json_hash['access_token'].blank?
  end

  test "Only allow authenticated apps" do
    Opro::Oauth::TokenController.any_instance.stubs(:oauth_valid_password_auth?).
                          with(@client_app.client_id, @client_app.client_secret).
                          returns(false)

    params = {:client_id      => @client_app.client_id ,
              :client_secret  => @client_app.client_secret,
              :password       => @password,
              :email          => @user.email }

    post oauth_token_path(params)
    json_hash = JSON.parse(response.body)
    assert json_hash['access_token'].blank?
  end

end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
opro-0.2.1.pre	test/integration/action_dispatch/password_token_test.rb
opro-0.2.0	test/integration/action_dispatch/password_token_test.rb