disabled_rest_api_test.rb
60 lines
| 1.8 KiB
| text/x-ruby
|
RubyLexer
|
r4395 | require File.expand_path('../../../test_helper', __FILE__) | ||
|
r3106 | |||
|
r4243 | class ApiTest::DisabledRestApiTest < ActionController::IntegrationTest | ||
|
r7395 | fixtures :projects, :trackers, :issue_statuses, :issues, | ||
:enumerations, :users, :issue_categories, | ||||
:projects_trackers, | ||||
:roles, | ||||
:member_roles, | ||||
:members, | ||||
:enabled_modules, | ||||
:workflows | ||||
|
r3106 | |||
def setup | ||||
Setting.rest_api_enabled = '0' | ||||
Setting.login_required = '1' | ||||
end | ||||
def teardown | ||||
Setting.rest_api_enabled = '1' | ||||
Setting.login_required = '0' | ||||
end | ||||
|
r6549 | |||
|
r8358 | def test_with_a_valid_api_token | ||
@user = User.generate_with_protected! | ||||
|
r8959 | @token = Token.create!(:user => @user, :action => 'api') | ||
|
r3106 | |||
|
r8358 | get "/news.xml?key=#{@token.value}" | ||
assert_response :unauthorized | ||||
assert_equal User.anonymous, User.current | ||||
|
r6549 | |||
|
r8358 | get "/news.json?key=#{@token.value}" | ||
assert_response :unauthorized | ||||
assert_equal User.anonymous, User.current | ||||
end | ||||
|
r6549 | |||
|
r8358 | def test_with_valid_username_password_http_authentication | ||
@user = User.generate_with_protected!(:password => 'my_password', :password_confirmation => 'my_password') | ||||
|
r3106 | |||
|
r8358 | get "/news.xml", nil, credentials(@user.login, 'my_password') | ||
assert_response :unauthorized | ||||
assert_equal User.anonymous, User.current | ||||
|
r6549 | |||
|
r8358 | get "/news.json", nil, credentials(@user.login, 'my_password') | ||
assert_response :unauthorized | ||||
assert_equal User.anonymous, User.current | ||||
end | ||||
|
r3106 | |||
|
r8358 | def test_with_valid_token_http_authentication | ||
@user = User.generate_with_protected! | ||||
|
r8959 | @token = Token.create!(:user => @user, :action => 'api') | ||
|
r3106 | |||
|
r8358 | get "/news.xml", nil, credentials(@token.value, 'X') | ||
assert_response :unauthorized | ||||
assert_equal User.anonymous, User.current | ||||
|
r6549 | |||
|
r8358 | get "/news.json", nil, credentials(@token.value, 'X') | ||
assert_response :unauthorized | ||||
assert_equal User.anonymous, User.current | ||||
|
r3106 | end | ||
end | ||||