require 'spec_helper' if defined?(ActionController::Request) describe ApiAuth::RequestDrivers::ActionControllerRequest do let(:timestamp) { Time.now.utc.httpdate } let(:request) do ActionController::Request.new( 'AUTHORIZATION' => 'APIAuth 1044:12345', 'PATH_INFO' => '/resource.xml', 'QUERY_STRING' => 'foo=bar&bar=foo', 'REQUEST_METHOD' => 'PUT', 'CONTENT_MD5' => '1B2M2Y8AsgTpgAmY7PhCfg==', 'CONTENT_TYPE' => 'text/plain', 'CONTENT_LENGTH' => '11', 'HTTP_DATE' => timestamp, 'rack.input' => StringIO.new("hello\nworld") ) end subject(:driven_request) { ApiAuth::RequestDrivers::ActionControllerRequest.new(request) } describe 'getting headers correctly' do it 'gets the content_type' do expect(driven_request.content_type).to eq('text/plain') end it 'gets the content_md5' do expect(driven_request.content_md5).to eq('1B2M2Y8AsgTpgAmY7PhCfg==') end it 'gets the request_uri' do expect(driven_request.request_uri).to eq('/resource.xml?foo=bar&bar=foo') end it 'gets the timestamp' do expect(driven_request.timestamp).to eq(timestamp) end it 'gets the authorization_header' do expect(driven_request.authorization_header).to eq('APIAuth 1044:12345') end describe '#calculated_md5' do it 'calculates md5 from the body' do expect(driven_request.calculated_md5).to eq('kZXQvrKoieG+Be1rsZVINw==') end it 'treats no body as empty string' do request.env['rack.input'] = StringIO.new request.env['CONTENT_LENGTH'] = 0 expect(driven_request.calculated_md5).to eq('1B2M2Y8AsgTpgAmY7PhCfg==') end end describe 'http_method' do context 'when put request' do let(:request) do ActionController::Request.new('REQUEST_METHOD' => 'PUT') end it 'returns upcased put' do expect(driven_request.http_method).to eq('PUT') end end context 'when get request' do let(:request) do ActionController::Request.new('REQUEST_METHOD' => 'GET') end it 'returns upcased get' do expect(driven_request.http_method).to eq('GET') end end end end describe 'setting headers correctly' do let(:request) do ActionController::Request.new( 'PATH_INFO' => '/resource.xml', 'QUERY_STRING' => 'foo=bar&bar=foo', 'REQUEST_METHOD' => 'PUT', 'CONTENT_TYPE' => 'text/plain', 'CONTENT_LENGTH' => '11', 'rack.input' => StringIO.new("hello\nworld") ) end describe '#populate_content_md5' do context 'when getting' do it "doesn't populate content-md5" do request.env['REQUEST_METHOD'] = 'GET' driven_request.populate_content_md5 expect(request.env['Content-MD5']).to be_nil end end context 'when posting' do it 'populates content-md5' do request.env['REQUEST_METHOD'] = 'POST' driven_request.populate_content_md5 expect(request.env['Content-MD5']).to eq('kZXQvrKoieG+Be1rsZVINw==') end it 'refreshes the cached headers' do driven_request.populate_content_md5 expect(driven_request.content_md5).to eq('kZXQvrKoieG+Be1rsZVINw==') end end context 'when putting' do it 'populates content-md5' do request.env['REQUEST_METHOD'] = 'PUT' driven_request.populate_content_md5 expect(request.env['Content-MD5']).to eq('kZXQvrKoieG+Be1rsZVINw==') end it 'refreshes the cached headers' do driven_request.populate_content_md5 expect(driven_request.content_md5).to eq('kZXQvrKoieG+Be1rsZVINw==') end end context 'when deleting' do it "doesn't populate content-md5" do request.env['REQUEST_METHOD'] = 'DELETE' driven_request.populate_content_md5 expect(request.env['Content-MD5']).to be_nil end end end describe '#set_date' do before do allow(Time).to receive_message_chain(:now, :utc, :httpdate).and_return(timestamp) end it 'sets the date header of the request' do driven_request.set_date expect(request.env['HTTP_DATE']).to eq(timestamp) end it 'refreshes the cached headers' do driven_request.set_date expect(driven_request.timestamp).to eq(timestamp) end end describe '#set_auth_header' do it 'sets the auth header' do driven_request.set_auth_header('APIAuth 1044:54321') expect(request.env['Authorization']).to eq('APIAuth 1044:54321') end end end describe 'md5_mismatch?' do context 'when getting' do before do request.env['REQUEST_METHOD'] = 'GET' end it 'is false' do expect(driven_request.md5_mismatch?).to be false end end context 'when posting' do before do request.env['REQUEST_METHOD'] = 'POST' end context 'when calculated matches sent' do before do request.env['CONTENT_MD5'] = 'kZXQvrKoieG+Be1rsZVINw==' end it 'is false' do expect(driven_request.md5_mismatch?).to be false end end context "when calculated doesn't match sent" do before do request.env['CONTENT_MD5'] = '3' end it 'is true' do expect(driven_request.md5_mismatch?).to be true end end end context 'when putting' do before do request.env['REQUEST_METHOD'] = 'PUT' end context 'when calculated matches sent' do before do request.env['CONTENT_MD5'] = 'kZXQvrKoieG+Be1rsZVINw==' end it 'is false' do expect(driven_request.md5_mismatch?).to be false end end context "when calculated doesn't match sent" do before do request.env['CONTENT_MD5'] = '3' end it 'is true' do expect(driven_request.md5_mismatch?).to be true end end end context 'when deleting' do before do request.env['REQUEST_METHOD'] = 'DELETE' end it 'is false' do expect(driven_request.md5_mismatch?).to be false end end end end describe 'fetch_headers' do it 'returns request headers' do expect(driven_request.fetch_headers).to include('CONTENT-TYPE' => 'text/plain') end end end