Sha256: e06dcb1442780272f819974c77640d93792372ba1437c19daa11d61c5c85e9ad
Contents?: true
Size: 848 Bytes
Versions: 7
Compression:
Stored size: 848 Bytes
Contents
require 'spec_helper'
describe 'Picture renderung security' do
let(:picture) { Alchemy::Picture.create(:image_file => File.new(File.expand_path('../../fixtures/image.png', __FILE__))) }
# Prevent the signup view from being rendered.
before { allow(Alchemy.user_class).to receive(:count).and_return 1 }
context "passing no security token" do
it 'should return a bad request (400)' do
visit "/pictures/#{picture.id}/show/image.png"
expect(page.status_code).to eq(400)
end
end
context "passing correct security token" do
before do
visit "/pictures/#{picture.id}/show/image.png?sh=#{picture.security_token}"
end
it 'should return image' do
expect(page.body).to match(/PNG/)
end
it 'should return status ok (200)' do
expect(page.status_code).to eq(200)
end
end
end
Version data entries
7 entries across 7 versions & 2 rubygems