spec/rack/oauth2/server/authorize/code_spec.rb in rack-oauth2-0.11.0 vs spec/rack/oauth2/server/authorize/code_spec.rb in rack-oauth2-0.12.0

@@ -2,11 +2,11 @@
 
 describe Rack::OAuth2::Server::Authorize::Code do
   let(:request)            { Rack::MockRequest.new app }
   let(:redirect_uri)       { 'http://client.example.com/callback' }
   let(:authorization_code) { 'authorization_code' }  
-  let(:response)           { request.get "/?response_type=code&client_id=client&redirect_uri=#{redirect_uri}" }
+  let(:response)           { request.get "/?response_type=code&client_id=client&redirect_uri=#{redirect_uri}&state=state" }
 
   context 'when approved' do
     subject { response }
     let :app do
       Rack::OAuth2::Server::Authorize.new do |request, response|
@@ -14,15 +14,15 @@
         response.code = authorization_code
         response.approve!
       end
     end
     its(:status)   { should == 302 }
-    its(:location) { should == "#{redirect_uri}?code=#{authorization_code}" }
+    its(:location) { should == "#{redirect_uri}?code=#{authorization_code}&state=state" }
 
     context 'when redirect_uri already includes query' do
       let(:redirect_uri) { 'http://client.example.com/callback?k=v' }
-      its(:location)     { should == "#{redirect_uri}&code=#{authorization_code}" }
+      its(:location)     { should == "#{redirect_uri}&code=#{authorization_code}&state=state" }
     end
 
     context 'when redirect_uri is missing' do
       let(:redirect_uri) { nil }
       it do
@@ -49,9 +49,9 @@
       response.status.should == 302
       error_message = {
         :error => :access_denied,
         :error_description => Rack::OAuth2::Server::Authorize::ErrorMethods::DEFAULT_DESCRIPTION[:access_denied]
       }
-      response.location.should == "#{redirect_uri}?#{error_message.to_query}"
+      response.location.should == "#{redirect_uri}?#{error_message.to_query}&state=state"
     end
   end
 end
\ No newline at end of file