test/client_test.rb in gowalla-0.4.2 vs test/client_test.rb in gowalla-0.5.1

@@ -8,10 +8,17 @@
     end
 
 
   end
 
+  context "when accessing the API anonymously" do
+    should "send requests unencrypted over plain HTTP" do
+      @client = Gowalla::Client.new
+      @client.api_url.should == 'http://api.gowalla.com'
+    end
+  end
+
   context "when using basic auth" do
     should "configure api_key, username, and password for easy access" do
 
       Gowalla.configure do |config|
         config.api_key = 'api_key'
@@ -20,16 +27,27 @@
         config.password = 'password'
       end
 
       @client = Gowalla::Client.new
 
-      stub_get('http://username:[e-mail]/trips', 'trips.json')
+      stub_get('https://username:[e-mail]/trips', 'trips.json')
       trips = @client.trips
 
       @client.username.should == 'username'
     end
+    
+    should "use HTTPS to avoid sending password in plain text" do
+      Gowalla.configure do |config|
+        config.api_key = 'api_key'
+        config.username = 'username'
+        config.password = 'password'
+      end
 
+      @client = Gowalla::Client.new
+      @client.api_url.should == 'https://api.gowalla.com'
+    end
+
     should "configure test mode" do
       Gowalla.configure do |config|
         config.api_key = 'api_key'
         config.api_secret = nil
         config.username = 'username'
@@ -56,9 +74,13 @@
     should "confiure api_key, api_secret" do
       @client.api_secret.should == 'api_secret'
       @client.oauth_client.id.should == 'api_key'
     end
 
+    should "use HTTPS to avoid sending credentials in plain text" do
+      @client.api_url.should == 'https://api.gowalla.com'
+    end
+    
     should "create an OAuth2 client" do
       @client.oauth_client.class.to_s.should == "OAuth2::Client"
     end
 
     should "indicate if it needs an access_token" do