Contents

require 'spec_helper'

shared_examples_for 'a warden authenticatable api' do
  context 'when user is authenticated' do
    let(:user) { create(:user) }
    let(:token_value) { user.g5_access_token }

    before { login_as(user, scope: :user) }
    after { logout }

    context 'when strict token validation is enabled' do
      before do
        G5AuthenticatableApi.strict_token_validation = true
      end

      include_examples 'token validation'
    end

    context 'when strict token validation is disabled' do
      before do
        G5AuthenticatableApi.strict_token_validation = false
        subject
      end

      it 'should be successful' do
        expect(response).to be_success
      end

      it 'should not validate the token against the auth server' do
        expect(a_request(:get, 'auth.g5search.com/oauth/token/info')).to_not have_been_made
      end
    end
  end

  context 'when user is not authenticated' do
    before do
     logout
     subject
    end

    it 'should be unauthorized' do
      expect(response).to be_http_unauthorized
    end

    it 'should return an authenticate header without details' do
      expect(response.headers).to include('WWW-Authenticate' => 'Bearer')
    end
  end
end

Version data entries

4 entries across 4 versions & 1 rubygems

Version	Path
g5_authenticatable_api-0.4.1	spec/support/shared_examples/warden_authenticatable_api.rb
g5_authenticatable_api-0.4.0	spec/support/shared_examples/warden_authenticatable_api.rb
g5_authenticatable_api-0.3.2	spec/support/shared_examples/warden_authenticatable_api.rb
g5_authenticatable_api-0.3.1	spec/support/shared_examples/warden_authenticatable_api.rb