Contents

describe 'an authenticated route' do
  if Rails::VERSION::MAJOR < 5
    # rubocop:disable Rails/HttpPositionalArguments
    subject { get '/authenticated', {}, headers }
    # rubocop:enable Rails/HttpPositionalArguments
  else
    subject { get '/authenticated', params: {}, headers: headers }
  end

  let(:headers) { {} }

  context 'when a valid Bearer token is present' do
    let(:login) { create(:login) }
    let(:headers) do
      { 'Authorization' => "Bearer #{login.oauth2_token}" }
    end

    it 'assigns the authenticated login to @current_login' do
      subject

      expect(assigns[:current_login]).to eq(login)
    end

    it "responds with the actual action's status" do
      subject

      expect(response).to have_http_status(200)
    end

    it "responds with the actual action's body" do
      subject

      expect(response.body).to eql('zuper content')
    end
  end

  context 'when no valid Bearer token is present' do
    it 'does not assign the authenticated login to @current_login' do
      subject

      expect(assigns[:current_login]).to be_nil
    end

    it 'responds with status 401' do
      subject

      expect(response).to have_http_status(401)
    end

    it 'responds with an empty body' do
      subject

      expect(response.body.strip).to be_empty
    end
  end
end

Version data entries

3 entries across 3 versions & 1 rubygems

Version	Path
rails_api_auth-0.1.0	spec/requests/authenticated_spec.rb
rails_api_auth-0.0.8	spec/requests/authenticated_spec.rb
rails_api_auth-0.0.7	spec/requests/authenticated_spec.rb