jro_apps/redmine Commit - r6549:0cbd686a85cb

12

Setting.rest_api_enabled = '1'

12

Setting.rest_api_enabled = '1'

13

Setting.login_required = '0'

13

Setting.login_required = '0'

14

end

14

end

15

16

# Using the NewsController because it's a simple API.

16

# Using the NewsController because it's a simple API.

17

context "get /news with the API disabled" do

17

context "get /news with the API disabled" do

18

23

@token = Token.generate!(:user => @user, :action => 'api')

23

@token = Token.generate!(:user => @user, :action => 'api')

24

get "/news.xml?key=#{@token.value}"

24

get "/news.xml?key=#{@token.value}"

25

end

25

end

26

27

should_respond_with :unauthorized

27

should_respond_with :unauthorized

28

should_respond_with_content_type :xml

28

should_respond_with_content_type :xml

29

should "not login as the user" do

29

should "not login as the user" do

37

@authorization = ActionController::HttpAuthentication::Basic.encode_credentials(@user.login, 'my_password')

37

@authorization = ActionController::HttpAuthentication::Basic.encode_credentials(@user.login, 'my_password')

38

get "/news.xml", nil, :authorization => @authorization

38

get "/news.xml", nil, :authorization => @authorization

39

end

39

end

40

41

should_respond_with :unauthorized

41

should_respond_with :unauthorized

42

should_respond_with_content_type :xml

42

should_respond_with_content_type :xml

43

should "not login as the user" do

43

should "not login as the user" do

52

@authorization = ActionController::HttpAuthentication::Basic.encode_credentials(@token.value, 'X')

52

@authorization = ActionController::HttpAuthentication::Basic.encode_credentials(@token.value, 'X')

53

get "/news.xml", nil, :authorization => @authorization

53

get "/news.xml", nil, :authorization => @authorization

54

end

54

end

55

56

should_respond_with :unauthorized

56

should_respond_with :unauthorized

57

should_respond_with_content_type :xml

57

should_respond_with_content_type :xml

58

should "not login as the user" do

58

should "not login as the user" do

68

@token = Token.generate!(:user => @user, :action => 'api')

68

@token = Token.generate!(:user => @user, :action => 'api')

69

get "/news.json?key=#{@token.value}"

69

get "/news.json?key=#{@token.value}"

70

end

70

end

71

72

should_respond_with :unauthorized

72

should_respond_with :unauthorized

73

should_respond_with_content_type :json

73

should_respond_with_content_type :json

74

should "not login as the user" do

74

should "not login as the user" do

82

@authorization = ActionController::HttpAuthentication::Basic.encode_credentials(@user.login, 'my_password')

82

@authorization = ActionController::HttpAuthentication::Basic.encode_credentials(@user.login, 'my_password')

83

get "/news.json", nil, :authorization => @authorization

83

get "/news.json", nil, :authorization => @authorization

84

end

84

end

85

86

should_respond_with :unauthorized

86

should_respond_with :unauthorized

87

should_respond_with_content_type :json

87

should_respond_with_content_type :json

88

should "not login as the user" do

88

should "not login as the user" do

104

assert_equal User.anonymous, User.current

104

assert_equal User.anonymous, User.current

105

end

105

end

106

end

106

end

107

108

end

108

end

109

end

109

end

110

end

110

end

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

                 Setting.rest_api_enabled = '1'
                 Setting.login_required = '0'
               end
               # Using the NewsController because it's a simple API.
               context "get /news with the API disabled" do
                       @token = Token.generate!(:user => @user, :action => 'api')
                       get "/news.xml?key=#{@token.value}"
                     end
                     should_respond_with :unauthorized
                     should_respond_with_content_type :xml
                     should "not login as the user" do
                       @authorization = ActionController::HttpAuthentication::Basic.encode_credentials(@user.login, 'my_password')
                       get "/news.xml", nil, :authorization => @authorization
                     end
                     should_respond_with :unauthorized
                     should_respond_with_content_type :xml
                     should "not login as the user" do
                       @authorization = ActionController::HttpAuthentication::Basic.encode_credentials(@token.value, 'X')
                       get "/news.xml", nil, :authorization => @authorization
                     end
                     should_respond_with :unauthorized
                     should_respond_with_content_type :xml
                     should "not login as the user" do
                       @token = Token.generate!(:user => @user, :action => 'api')
                       get "/news.json?key=#{@token.value}"
                     end
                     should_respond_with :unauthorized
                     should_respond_with_content_type :json
                     should "not login as the user" do
                       @authorization = ActionController::HttpAuthentication::Basic.encode_credentials(@user.login, 'my_password')
                       get "/news.json", nil, :authorization => @authorization
                     end
                     should_respond_with :unauthorized
                     should_respond_with_content_type :json
                     should "not login as the user" do
                       assert_equal User.anonymous, User.current
                     end
                   end
                 end
               end
             end