Contents

require 'spec_helper'

describe ProtectedController do

  describe 'get :index' do
    before do
      client = Client.create! :name => 'test', :redirect_uri => 'http://localhost:3000', :website => 'http://localhost'
      @user = User.create! :name => 'ryan sonnek', :email => '[e-mail]'
      @token = AccessToken.create! :client => client, :user => @user
    end
    context 'with valid bearer token in header' do
      before do
        @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token.token}"
        get :index, :format => 'json'
      end
      it { should respond_with :ok }
    end
    context 'with invalid bearer token in query param' do
      before do
        get :index, :bearer_token => 'invalid', :format => 'json'
      end
      it { should respond_with :unauthorized }
    end
    context 'with valid bearer token in header and query string' do
      before do
        @request.env['HTTP_AUTHORIZATION'] = "Bearer #{@token.token}"
        get :index, :bearer_token => @token.token, :format => 'json'
      end
      it { should respond_with :unauthorized }
    end
  end
end

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
devise_oauth2_providable-0.2.3	spec/rails_app/spec/controllers/protected_controller_spec.rb