jro_apps/redmine Commit - r4325:541a371b412a

Backported r4357, r4358, r4360 and r4363 to r4367 from trunk....

Jean-Philippe Lang -

r4325:541a371b412a

parent child

Context file:

r4325:541a371b412a

Collapse all files

test/integration/api_test/http_basic_login_test.rb created 644 +31 0

@@ -0,0 +1,31
	1	require "#{File.dirname(__FILE__)}/../../test_helper"
	2
	3	class ApiTest::HttpBasicLoginTest < ActionController::IntegrationTest
	4	fixtures :all
	5
	6	def setup
	7	Setting.rest_api_enabled = '1'
	8	Setting.login_required = '1'
	9	end
	10
	11	def teardown
	12	Setting.rest_api_enabled = '0'
	13	Setting.login_required = '0'
	14	end
	15
	16	# Using the NewsController because it's a simple API.
	17	context "get /news" do
	18	setup do
	19	project = Project.find('onlinestore')
	20	EnabledModule.create(:project => project, :name => 'news')
	21	end
	22
	23	context "in :xml format" do
	24	should_allow_http_basic_auth_with_username_and_password(:get, "/projects/onlinestore/news.xml")
	25	end
	26
	27	context "in :json format" do
	28	should_allow_http_basic_auth_with_username_and_password(:get, "/projects/onlinestore/news.json")
	29	end
	30	end
	31	end

test/integration/api_test/http_basic_login_with_api_token_test.rb created 644 +27 0

@@ -0,0 +1,27
	1	require "#{File.dirname(__FILE__)}/../../test_helper"
	2
	3	class ApiTest::HttpBasicLoginWithApiTokenTest < ActionController::IntegrationTest
	4	fixtures :all
	5
	6	def setup
	7	Setting.rest_api_enabled = '1'
	8	Setting.login_required = '1'
	9	end
	10
	11	def teardown
	12	Setting.rest_api_enabled = '0'
	13	Setting.login_required = '0'
	14	end
	15
	16	# Using the NewsController because it's a simple API.
	17	context "get /news" do
	18
	19	context "in :xml format" do
	20	should_allow_http_basic_auth_with_key(:get, "/news.xml")
	21	end
	22
	23	context "in :json format" do
	24	should_allow_http_basic_auth_with_key(:get, "/news.json")
	25	end
	26	end
	27	end

test/integration/api_test/issues_test.rb created 644 +336 0

@@ -0,0 +1,336
	1	# Redmine - project management software
	2	# Copyright (C) 2006-2010 Jean-Philippe Lang
	3	#
	4	# This program is free software; you can redistribute it and/or
	5	# modify it under the terms of the GNU General Public License
	6	# as published by the Free Software Foundation; either version 2
	7	# of the License, or (at your option) any later version.
	8	#
	9	# This program is distributed in the hope that it will be useful,
	10	# but WITHOUT ANY WARRANTY; without even the implied warranty of
	11	# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	12	# GNU General Public License for more details.
	13	#
	14	# You should have received a copy of the GNU General Public License
	15	# along with this program; if not, write to the Free Software
	16	# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
	17
	18	require "#{File.dirname(__FILE__)}/../../test_helper"
	19
	20	class ApiTest::IssuesTest < ActionController::IntegrationTest
	21	fixtures :projects,
	22	:users,
	23	:roles,
	24	:members,
	25	:member_roles,
	26	:issues,
	27	:issue_statuses,
	28	:versions,
	29	:trackers,
	30	:projects_trackers,
	31	:issue_categories,
	32	:enabled_modules,
	33	:enumerations,
	34	:attachments,
	35	:workflows,
	36	:custom_fields,
	37	:custom_values,
	38	:custom_fields_projects,
	39	:custom_fields_trackers,
	40	:time_entries,
	41	:journals,
	42	:journal_details,
	43	:queries
	44
	45	def setup
	46	Setting.rest_api_enabled = '1'
	47	end
	48
	49	# Use a private project to make sure auth is really working and not just
	50	# only showing public issues.
	51	context "/index.xml" do
	52	should_allow_api_authentication(:get, "/projects/private-child/issues.xml")
	53	end
	54
	55	context "/index.json" do
	56	should_allow_api_authentication(:get, "/projects/private-child/issues.json")
	57	end
	58
	59	context "/index.xml with filter" do
	60	should_allow_api_authentication(:get, "/projects/private-child/issues.xml?status_id=5")
	61
	62	should "show only issues with the status_id" do
	63	get '/issues.xml?status_id=5'
	64	assert_tag :tag => 'issues',
	65	:children => { :count => Issue.visible.count(:conditions => {:status_id => 5}),
	66	:only => { :tag => 'issue' } }
	67	end
	68	end
	69
	70	context "/index.json with filter" do
	71	should_allow_api_authentication(:get, "/projects/private-child/issues.json?status_id=5")
	72
	73	should "show only issues with the status_id" do
	74	get '/issues.json?status_id=5'
	75
	76	json = ActiveSupport::JSON.decode(response.body)
	77	status_ids_used = json.collect {\|j\| j['status_id'] }
	78	assert_equal 3, status_ids_used.length
	79	assert status_ids_used.all? {\|id\| id == 5 }
	80	end
	81
	82	end
	83
	84	# Issue 6 is on a private project
	85	context "/issues/6.xml" do
	86	should_allow_api_authentication(:get, "/issues/6.xml")
	87	end
	88
	89	context "/issues/6.json" do
	90	should_allow_api_authentication(:get, "/issues/6.json")
	91	end
	92
	93	context "POST /issues.xml" do
	94	should_allow_api_authentication(:post,
	95	'/issues.xml',
	96	{:issue => {:project_id => 1, :subject => 'API test', :tracker_id => 2, :status_id => 3}},
	97	{:success_code => :created})
	98
	99	should "create an issue with the attributes" do
	100	assert_difference('Issue.count') do
	101	post '/issues.xml', {:issue => {:project_id => 1, :subject => 'API test', :tracker_id => 2, :status_id => 3}}, :authorization => credentials('jsmith')
	102	end
	103
	104	issue = Issue.first(:order => 'id DESC')
	105	assert_equal 1, issue.project_id
	106	assert_equal 2, issue.tracker_id
	107	assert_equal 3, issue.status_id
	108	assert_equal 'API test', issue.subject
	109	end
	110	end
	111
	112	context "POST /issues.xml with failure" do
	113	should_allow_api_authentication(:post,
	114	'/issues.xml',
	115	{:issue => {:project_id => 1}},
	116	{:success_code => :unprocessable_entity})
	117
	118	should "have an errors tag" do
	119	assert_no_difference('Issue.count') do
	120	post '/issues.xml', {:issue => {:project_id => 1}}, :authorization => credentials('jsmith')
	121	end
	122
	123	assert_tag :errors, :child => {:tag => 'error', :content => "Subject can't be blank"}
	124	end
	125	end
	126
	127	context "POST /issues.json" do
	128	should_allow_api_authentication(:post,
	129	'/issues.json',
	130	{:issue => {:project_id => 1, :subject => 'API test', :tracker_id => 2, :status_id => 3}},
	131	{:success_code => :created})
	132
	133	should "create an issue with the attributes" do
	134	assert_difference('Issue.count') do
	135	post '/issues.json', {:issue => {:project_id => 1, :subject => 'API test', :tracker_id => 2, :status_id => 3}}, :authorization => credentials('jsmith')
	136	end
	137
	138	issue = Issue.first(:order => 'id DESC')
	139	assert_equal 1, issue.project_id
	140	assert_equal 2, issue.tracker_id
	141	assert_equal 3, issue.status_id
	142	assert_equal 'API test', issue.subject
	143	end
	144
	145	end
	146
	147	context "POST /issues.json with failure" do
	148	should_allow_api_authentication(:post,
	149	'/issues.json',
	150	{:issue => {:project_id => 1}},
	151	{:success_code => :unprocessable_entity})
	152
	153	should "have an errors element" do
	154	assert_no_difference('Issue.count') do
	155	post '/issues.json', {:issue => {:project_id => 1}}, :authorization => credentials('jsmith')
	156	end
	157
	158	json = ActiveSupport::JSON.decode(response.body)
	159	assert_equal "can't be blank", json.first['subject']
	160	end
	161	end
	162
	163	# Issue 6 is on a private project
	164	context "PUT /issues/6.xml" do
	165	setup do
	166	@parameters = {:issue => {:subject => 'API update', :notes => 'A new note'}}
	167	@headers = { :authorization => credentials('jsmith') }
	168	end
	169
	170	should_allow_api_authentication(:put,
	171	'/issues/6.xml',
	172	{:issue => {:subject => 'API update', :notes => 'A new note'}},
	173	{:success_code => :ok})
	174
	175	should "not create a new issue" do
	176	assert_no_difference('Issue.count') do
	177	put '/issues/6.xml', @parameters, @headers
	178	end
	179	end
	180
	181	should "create a new journal" do
	182	assert_difference('Journal.count') do
	183	put '/issues/6.xml', @parameters, @headers
	184	end
	185	end
	186
	187	should "add the note to the journal" do
	188	put '/issues/6.xml', @parameters, @headers
	189
	190	journal = Journal.last
	191	assert_equal "A new note", journal.notes
	192	end
	193
	194	should "update the issue" do
	195	put '/issues/6.xml', @parameters, @headers
	196
	197	issue = Issue.find(6)
	198	assert_equal "API update", issue.subject
	199	end
	200
	201	end
	202
	203	context "PUT /issues/6.xml with failed update" do
	204	setup do
	205	@parameters = {:issue => {:subject => ''}}
	206	@headers = { :authorization => credentials('jsmith') }
	207	end
	208
	209	should_allow_api_authentication(:put,
	210	'/issues/6.xml',
	211	{:issue => {:subject => ''}}, # Missing subject should fail
	212	{:success_code => :unprocessable_entity})
	213
	214	should "not create a new issue" do
	215	assert_no_difference('Issue.count') do
	216	put '/issues/6.xml', @parameters, @headers
	217	end
	218	end
	219
	220	should "not create a new journal" do
	221	assert_no_difference('Journal.count') do
	222	put '/issues/6.xml', @parameters, @headers
	223	end
	224	end
	225
	226	should "have an errors tag" do
	227	put '/issues/6.xml', @parameters, @headers
	228
	229	assert_tag :errors, :child => {:tag => 'error', :content => "Subject can't be blank"}
	230	end
	231	end
	232
	233	context "PUT /issues/6.json" do
	234	setup do
	235	@parameters = {:issue => {:subject => 'API update', :notes => 'A new note'}}
	236	@headers = { :authorization => credentials('jsmith') }
	237	end
	238
	239	should_allow_api_authentication(:put,
	240	'/issues/6.json',
	241	{:issue => {:subject => 'API update', :notes => 'A new note'}},
	242	{:success_code => :ok})
	243
	244	should "not create a new issue" do
	245	assert_no_difference('Issue.count') do
	246	put '/issues/6.json', @parameters, @headers
	247	end
	248	end
	249
	250	should "create a new journal" do
	251	assert_difference('Journal.count') do
	252	put '/issues/6.json', @parameters, @headers
	253	end
	254	end
	255
	256	should "add the note to the journal" do
	257	put '/issues/6.json', @parameters, @headers
	258
	259	journal = Journal.last
	260	assert_equal "A new note", journal.notes
	261	end
	262
	263	should "update the issue" do
	264	put '/issues/6.json', @parameters, @headers
	265
	266	issue = Issue.find(6)
	267	assert_equal "API update", issue.subject
	268	end
	269
	270	end
	271
	272	context "PUT /issues/6.json with failed update" do
	273	setup do
	274	@parameters = {:issue => {:subject => ''}}
	275	@headers = { :authorization => credentials('jsmith') }
	276	end
	277
	278	should_allow_api_authentication(:put,
	279	'/issues/6.json',
	280	{:issue => {:subject => ''}}, # Missing subject should fail
	281	{:success_code => :unprocessable_entity})
	282
	283	should "not create a new issue" do
	284	assert_no_difference('Issue.count') do
	285	put '/issues/6.json', @parameters, @headers
	286	end
	287	end
	288
	289	should "not create a new journal" do
	290	assert_no_difference('Journal.count') do
	291	put '/issues/6.json', @parameters, @headers
	292	end
	293	end
	294
	295	should "have an errors attribute" do
	296	put '/issues/6.json', @parameters, @headers
	297
	298	json = ActiveSupport::JSON.decode(response.body)
	299	assert_equal "can't be blank", json.first['subject']
	300	end
	301	end
	302
	303	context "DELETE /issues/1.xml" do
	304	should_allow_api_authentication(:delete,
	305	'/issues/6.xml',
	306	{},
	307	{:success_code => :ok})
	308
	309	should "delete the issue" do
	310	assert_difference('Issue.count',-1) do
	311	delete '/issues/6.xml', {}, :authorization => credentials('jsmith')
	312	end
	313
	314	assert_nil Issue.find_by_id(6)
	315	end
	316	end
	317
	318	context "DELETE /issues/1.json" do
	319	should_allow_api_authentication(:delete,
	320	'/issues/6.json',
	321	{},
	322	{:success_code => :ok})
	323
	324	should "delete the issue" do
	325	assert_difference('Issue.count',-1) do
	326	delete '/issues/6.json', {}, :authorization => credentials('jsmith')
	327	end
	328
	329	assert_nil Issue.find_by_id(6)
	330	end
	331	end
	332
	333	def credentials(user, password=nil)
	334	ActionController::HttpAuthentication::Basic.encode_credentials(user, password \|\| user)
	335	end
	336	end

test/integration/api_test/token_authentication_test.rb created 644 +26 0

@@ -0,0 +1,26
	1	require "#{File.dirname(__FILE__)}/../../test_helper"
	2
	3	class ApiTest::TokenAuthenticationTest < ActionController::IntegrationTest
	4	fixtures :all
	5
	6	def setup
	7	Setting.rest_api_enabled = '1'
	8	Setting.login_required = '1'
	9	end
	10
	11	def teardown
	12	Setting.rest_api_enabled = '0'
	13	Setting.login_required = '0'
	14	end
	15
	16	# Using the NewsController because it's a simple API.
	17	context "get /news" do
	18	context "in :xml format" do
	19	should_allow_key_based_auth(:get, "/news.xml")
	20	end
	21
	22	context "in :json format" do
	23	should_allow_key_based_auth(:get, "/news.json")
	24	end
	25	end
	26	end

app/controllers/issues_controller.rb +1 -1

             # Redmine - project management software
             # Copyright (C) 2006-2008  Jean-Philippe Lang
             #
             # This program is free software; you can redistribute it and/or
             # modify it under the terms of the GNU General Public License
             # as published by the Free Software Foundation; either version 2
             # of the License, or (at your option) any later version.
             #
             # This program is distributed in the hope that it will be useful,
             # but WITHOUT ANY WARRANTY; without even the implied warranty of
             # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
             # GNU General Public License for more details.
             #
             # You should have received a copy of the GNU General Public License
             # along with this program; if not, write to the Free Software
             # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
             class IssuesController < ApplicationController
               menu_item :new_issue, :only => [:new, :create]
               default_search_scope :issues
               before_filter :find_issue, :only => [:show, :edit, :update]
               before_filter :find_issues, :only => [:bulk_edit, :bulk_update, :move, :perform_move, :destroy]
               before_filter :find_project, :only => [:new, :create]
               before_filter :authorize, :except => [:index]
               before_filter :find_optional_project, :only => [:index]
               before_filter :check_for_default_issue_status, :only => [:new, :create]
               before_filter :build_new_issue_from_params, :only => [:new, :create]
-              accept_key_auth :index, :show
+              accept_key_auth :index, :show, :create, :update, :destroy
               rescue_from Query::StatementInvalid, :with => :query_statement_invalid
               helper :journals
               helper :projects
               include ProjectsHelper
               helper :custom_fields
               include CustomFieldsHelper
               helper :issue_relations
               include IssueRelationsHelper
               helper :watchers
               include WatchersHelper
               helper :attachments
               include AttachmentsHelper
               helper :queries
               include QueriesHelper
               helper :sort
               include SortHelper
               include IssuesHelper
               helper :timelog
               include Redmine::Export::PDF
               verify :method => [:post, :delete],
                      :only => :destroy,
                      :render => { :nothing => true, :status => :method_not_allowed }
               verify :method => :post, :only => :create, :render => {:nothing => true, :status => :method_not_allowed }
               verify :method => :post, :only => :bulk_update, :render => {:nothing => true, :status => :method_not_allowed }
               verify :method => :put, :only => :update, :render => {:nothing => true, :status => :method_not_allowed }
               def index
                 retrieve_query
                 sort_init(@query.sort_criteria.empty? ? [['id', 'desc']] : @query.sort_criteria)
                 sort_update(@query.sortable_columns)
                 if @query.valid?
                   limit = case params[:format]
                   when 'csv', 'pdf'
                     Setting.issues_export_limit.to_i
                   when 'atom'
                     Setting.feeds_limit.to_i
                   else
                     per_page_option
                   end
                   @issue_count = @query.issue_count
                   @issue_pages = Paginator.new self, @issue_count, limit, params['page']
                   @issues = @query.issues(:include => [:assigned_to, :tracker, :priority, :category, :fixed_version],
                                           :order => sort_clause,
                                           :offset => @issue_pages.current.offset,
                                           :limit => limit)
                   @issue_count_by_group = @query.issue_count_by_group
                   respond_to do |format|
                     format.html { render :template => 'issues/index.rhtml', :layout => !request.xhr? }
                     format.xml  { render :layout => false }
                     format.json { render :text => @issues.to_json, :layout => false }
                     format.atom { render_feed(@issues, :title => "#{@project || Setting.app_title}: #{l(:label_issue_plural)}") }
                     format.csv  { send_data(issues_to_csv(@issues, @project), :type => 'text/csv; header=present', :filename => 'export.csv') }
                     format.pdf  { send_data(issues_to_pdf(@issues, @project, @query), :type => 'application/pdf', :filename => 'export.pdf') }
                   end
                 else
                   # Send html if the query is not valid
                   render(:template => 'issues/index.rhtml', :layout => !request.xhr?)
                 end
               rescue ActiveRecord::RecordNotFound
                 render_404
               end
               def show
                 @journals = @issue.journals.find(:all, :include => [:user, :details], :order => "#{Journal.table_name}.created_on ASC")
                 @journals.each_with_index {|j,i| j.indice = i+1}
                 @journals.reverse! if User.current.wants_comments_in_reverse_order?
                 @changesets = @issue.changesets.visible.all
                 @changesets.reverse! if User.current.wants_comments_in_reverse_order?
                 @allowed_statuses = @issue.new_statuses_allowed_to(User.current)
                 @edit_allowed = User.current.allowed_to?(:edit_issues, @project)
                 @priorities = IssuePriority.all
                 @time_entry = TimeEntry.new
                 respond_to do |format|
                   format.html { render :template => 'issues/show.rhtml' }
                   format.xml  { render :layout => false }
                   format.json { render :text => @issue.to_json, :layout => false }
                   format.atom { render :template => 'journals/index', :layout => false, :content_type => 'application/atom+xml' }
                   format.pdf  { send_data(issue_to_pdf(@issue), :type => 'application/pdf', :filename => "#{@project.identifier}-#{@issue.id}.pdf") }
                 end
               end
               # Add a new issue
               # The new issue will be created from an existing one if copy_from parameter is given
               def new
                 respond_to do |format|
                   format.html { render :action => 'new', :layout => !request.xhr? }
                   format.js { render :partial => 'attributes' }
                 end
               end
               def create
                 call_hook(:controller_issues_new_before_save, { :params => params, :issue => @issue })
                 if @issue.save
                   attachments = Attachment.attach_files(@issue, params[:attachments])
                   render_attachment_warning_if_needed(@issue)
                   flash[:notice] = l(:notice_successful_create)
                   call_hook(:controller_issues_new_after_save, { :params => params, :issue => @issue})
                   respond_to do |format|
                     format.html {
                       redirect_to(params[:continue] ?  { :action => 'new', :project_id => @project, :issue => {:tracker_id => @issue.tracker, :parent_issue_id => @issue.parent_issue_id}.reject {|k,v| v.nil?} } :
                                   { :action => 'show', :id => @issue })
                     }
                     format.xml  { render :action => 'show', :status => :created, :location => url_for(:controller => 'issues', :action => 'show', :id => @issue) }
                     format.json { render :text => @issue.to_json, :status => :created, :location => url_for(:controller => 'issues', :action => 'show'), :layout => false }
                   end
                   return
                 else
                   respond_to do |format|
                     format.html { render :action => 'new' }
                     format.xml  { render(:xml => @issue.errors, :status => :unprocessable_entity); return }
                     format.json { render :text => object_errors_to_json(@issue), :status => :unprocessable_entity, :layout => false }
                   end
                 end
               end
               # Attributes that can be updated on workflow transition (without :edit permission)
               # TODO: make it configurable (at least per role)
               UPDATABLE_ATTRS_ON_TRANSITION = %w(status_id assigned_to_id fixed_version_id done_ratio) unless const_defined?(:UPDATABLE_ATTRS_ON_TRANSITION)
               def edit
                 update_issue_from_params
                 @journal = @issue.current_journal
                 respond_to do |format|
                   format.html { }
                   format.xml  { }
                 end
               end
               def update
                 update_issue_from_params
                 if @issue.save_issue_with_child_records(params, @time_entry)
                   render_attachment_warning_if_needed(@issue)
                   flash[:notice] = l(:notice_successful_update) unless @issue.current_journal.new_record?
                   respond_to do |format|
                     format.html { redirect_back_or_default({:action => 'show', :id => @issue}) }
                     format.xml  { head :ok }
                     format.json  { head :ok }
                   end
                 else
                   render_attachment_warning_if_needed(@issue)
                   flash[:notice] = l(:notice_successful_update) unless @issue.current_journal.new_record?
                   @journal = @issue.current_journal
                   respond_to do |format|
                     format.html { render :action => 'edit' }
                     format.xml  { render :xml => @issue.errors, :status => :unprocessable_entity }
                     format.json { render :text => object_errors_to_json(@issue), :status => :unprocessable_entity, :layout => false }
                   end
                 end
               end
               # Bulk edit a set of issues
               def bulk_edit
                 @issues.sort!
                 @available_statuses = Workflow.available_statuses(@project)
                 @custom_fields = @project.all_issue_custom_fields
               end
               def bulk_update
                 @issues.sort!
                 attributes = parse_params_for_bulk_issue_attributes(params)
                 unsaved_issue_ids = []
                 @issues.each do |issue|
                   issue.reload
                   journal = issue.init_journal(User.current, params[:notes])
                   issue.safe_attributes = attributes
                   call_hook(:controller_issues_bulk_edit_before_save, { :params => params, :issue => issue })
                   unless issue.save
                     # Keep unsaved issue ids to display them in flash error
                     unsaved_issue_ids << issue.id
                   end
                 end
                 set_flash_from_bulk_issue_save(@issues, unsaved_issue_ids)
                 redirect_back_or_default({:controller => 'issues', :action => 'index', :project_id => @project})
               end
               def destroy
                 @hours = TimeEntry.sum(:hours, :conditions => ['issue_id IN (?)', @issues]).to_f
                 if @hours > 0
                   case params[:todo]
                   when 'destroy'
                     # nothing to do
                   when 'nullify'
                     TimeEntry.update_all('issue_id = NULL', ['issue_id IN (?)', @issues])
                   when 'reassign'
                     reassign_to = @project.issues.find_by_id(params[:reassign_to_id])
                     if reassign_to.nil?
                       flash.now[:error] = l(:error_issue_not_found_in_project)
                       return
                     else
                       TimeEntry.update_all("issue_id = #{reassign_to.id}", ['issue_id IN (?)', @issues])
                     end
                   else
                     unless params[:format] == 'xml' || params[:format] == 'json'
                       # display the destroy form if it's a user request
                       return
                     end
                   end
                 end
                 @issues.each(&:destroy)
                 respond_to do |format|
                   format.html { redirect_to :action => 'index', :project_id => @project }
                   format.xml  { head :ok }
                   format.json  { head :ok }
                 end
               end
             private
               def find_issue
                 @issue = Issue.find(params[:id], :include => [:project, :tracker, :status, :author, :priority, :category])
                 @project = @issue.project
               rescue ActiveRecord::RecordNotFound
                 render_404
               end
               def find_project
                 project_id = (params[:issue] && params[:issue][:project_id]) || params[:project_id]
                 @project = Project.find(project_id)
               rescue ActiveRecord::RecordNotFound
                 render_404
               end
               # Used by #edit and #update to set some common instance variables
               # from the params
               # TODO: Refactor, not everything in here is needed by #edit
               def update_issue_from_params
                 @allowed_statuses = @issue.new_statuses_allowed_to(User.current)
                 @priorities = IssuePriority.all
                 @edit_allowed = User.current.allowed_to?(:edit_issues, @project)
                 @time_entry = TimeEntry.new
                 @notes = params[:notes] || (params[:issue].present? ? params[:issue][:notes] : nil)
                 @issue.init_journal(User.current, @notes)
                 # User can change issue attributes only if he has :edit permission or if a workflow transition is allowed
                 if (@edit_allowed || !@allowed_statuses.empty?) && params[:issue]
                   attrs = params[:issue].dup
                   attrs.delete_if {|k,v| !UPDATABLE_ATTRS_ON_TRANSITION.include?(k) } unless @edit_allowed
                   attrs.delete(:status_id) unless @allowed_statuses.detect {|s| s.id.to_s == attrs[:status_id].to_s}
                   @issue.safe_attributes = attrs
                 end
               end
               # TODO: Refactor, lots of extra code in here
               # TODO: Changing tracker on an existing issue should not trigger this
               def build_new_issue_from_params
                 if params[:id].blank?
                   @issue = Issue.new
                   @issue.copy_from(params[:copy_from]) if params[:copy_from]
                   @issue.project = @project
                 else
                   @issue = @project.issues.visible.find(params[:id])
                 end
                 @issue.project = @project
                 # Tracker must be set before custom field values
                 @issue.tracker ||= @project.trackers.find((params[:issue] && params[:issue][:tracker_id]) || params[:tracker_id] || :first)
                 if @issue.tracker.nil?
                   render_error l(:error_no_tracker_in_project)
                   return false
                 end
                 @issue.start_date ||= Date.today
                 if params[:issue].is_a?(Hash)
                   @issue.safe_attributes = params[:issue]
                   if User.current.allowed_to?(:add_issue_watchers, @project) && @issue.new_record?
                     @issue.watcher_user_ids = params[:issue]['watcher_user_ids']
                   end
                 end
                 @issue.author = User.current
                 @priorities = IssuePriority.all
                 @allowed_statuses = @issue.new_statuses_allowed_to(User.current, true)
               end
               def check_for_default_issue_status
                 if IssueStatus.default.nil?
                   render_error l(:error_no_default_issue_status)
                   return false
                 end
               end
               def parse_params_for_bulk_issue_attributes(params)
                 attributes = (params[:issue] || {}).reject {|k,v| v.blank?}
                 attributes.keys.each {|k| attributes[k] = '' if attributes[k] == 'none'}
                 attributes[:custom_field_values].reject! {|k,v| v.blank?} if attributes[:custom_field_values]
                 attributes
               end
             end

test/integration/api_test/disabled_rest_api_test.rb ~~test/integration/disabled_rest_api_test.rb~~ renamed +2 -2

-            require "#{File.dirname(__FILE__)}/../test_helper"
+            require "#{File.dirname(__FILE__)}/../../test_helper"
-            class DisabledRestApi < ActionController::IntegrationTest
+            class ApiTest::DisabledRestApiTest < ActionController::IntegrationTest
               fixtures :all
               def setup
                 Setting.rest_api_enabled = '0'
                 Setting.login_required = '1'
               end
               def teardown
                 Setting.rest_api_enabled = '1'
                 Setting.login_required = '0'
               end
               # Using the NewsController because it's a simple API.
               context "get /news with the API disabled" do
                 context "in :xml format" do
                   context "with a valid api token" do
                     setup do
                       @user = User.generate_with_protected!
                       @token = Token.generate!(:user => @user, :action => 'api')
                       get "/news.xml?key=#{@token.value}"
                     end
                     should_respond_with :unauthorized
                     should_respond_with_content_type :xml
                     should "not login as the user" do
                       assert_equal User.anonymous, User.current
                     end
                   end
                   context "with a valid HTTP authentication" do
                     setup do
                       @user = User.generate_with_protected!(:password => 'my_password', :password_confirmation => 'my_password')
                       @authorization = ActionController::HttpAuthentication::Basic.encode_credentials(@user.login, 'my_password')
                       get "/news.xml", nil, :authorization => @authorization
                     end
                     should_respond_with :unauthorized
                     should_respond_with_content_type :xml
                     should "not login as the user" do
                       assert_equal User.anonymous, User.current
                     end
                   end
                   context "with a valid HTTP authentication using the API token" do
                     setup do
                       @user = User.generate_with_protected!
                       @token = Token.generate!(:user => @user, :action => 'api')
                       @authorization = ActionController::HttpAuthentication::Basic.encode_credentials(@token.value, 'X')
                       get "/news.xml", nil, :authorization => @authorization
                     end
                     should_respond_with :unauthorized
                     should_respond_with_content_type :xml
                     should "not login as the user" do
                       assert_equal User.anonymous, User.current
                     end
                   end
                 end
                 context "in :json format" do
                   context "with a valid api token" do
                     setup do
                       @user = User.generate_with_protected!
                       @token = Token.generate!(:user => @user, :action => 'api')
                       get "/news.json?key=#{@token.value}"
                     end
                     should_respond_with :unauthorized
                     should_respond_with_content_type :json
                     should "not login as the user" do
                       assert_equal User.anonymous, User.current
                     end
                   end
                   context "with a valid HTTP authentication" do
                     setup do
                       @user = User.generate_with_protected!(:password => 'my_password', :password_confirmation => 'my_password')
                       @authorization = ActionController::HttpAuthentication::Basic.encode_credentials(@user.login, 'my_password')
                       get "/news.json", nil, :authorization => @authorization
                     end
                     should_respond_with :unauthorized
                     should_respond_with_content_type :json
                     should "not login as the user" do
                       assert_equal User.anonymous, User.current
                     end
                   end
                   context "with a valid HTTP authentication using the API token" do
                     setup do
                       @user = User.generate_with_protected!
                       @token = Token.generate!(:user => @user, :action => 'api')
                       @authorization = ActionController::HttpAuthentication::Basic.encode_credentials(@token.value, 'DoesNotMatter')
                       get "/news.json", nil, :authorization => @authorization
                     end
                     should_respond_with :unauthorized
                     should_respond_with_content_type :json
                     should "not login as the user" do
                       assert_equal User.anonymous, User.current
                     end
                   end
                 end
               end
             end

test/integration/api_test/projects_test.rb ~~test/integration/projects_api_test.rb~~ renamed +4 -7

             # Redmine - project management software
             # Copyright (C) 2006-2010  Jean-Philippe Lang
             #
             # This program is free software; you can redistribute it and/or
             # modify it under the terms of the GNU General Public License
             # as published by the Free Software Foundation; either version 2
             # of the License, or (at your option) any later version.
             #
             # This program is distributed in the hope that it will be useful,
             # but WITHOUT ANY WARRANTY; without even the implied warranty of
             # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
             # GNU General Public License for more details.
             #
             # You should have received a copy of the GNU General Public License
             # along with this program; if not, write to the Free Software
             # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
-            require "#{File.dirname(__FILE__)}/../test_helper"
+            require "#{File.dirname(__FILE__)}/../../test_helper"
-            class ProjectsApiTest < ActionController::IntegrationTest
+            class ApiTest::ProjectsTest < ActionController::IntegrationTest
               fixtures :projects, :versions, :users, :roles, :members, :member_roles, :issues, :journals, :journal_details,
                        :trackers, :projects_trackers, :issue_statuses, :enabled_modules, :enumerations, :boards, :messages,
                        :attachments, :custom_fields, :custom_values, :time_entries
               def setup
                 Setting.rest_api_enabled = '1'
               end
               def test_index
                 get '/projects.xml'
                 assert_response :success
                 assert_equal 'application/xml', @response.content_type
               end
               def test_show
                 get '/projects/1.xml'
                 assert_response :success
                 assert_equal 'application/xml', @response.content_type
               end
               def test_create
                 attributes = {:name => 'API test', :identifier => 'api-test'}
                 assert_difference 'Project.count' do
                   post '/projects.xml', {:project => attributes}, :authorization => credentials('admin')
                 end
+                assert_response :created
+                assert_equal 'application/xml', @response.content_type
                 project = Project.first(:order => 'id DESC')
                 attributes.each do |attribute, value|
                   assert_equal value, project.send(attribute)
                 end
-                assert_response :created
-                assert_equal 'application/xml', @response.content_type
-                assert_tag 'project', :child => {:tag => 'id', :content => project.id.to_s}
               end
               def test_create_failure
                 attributes = {:name => 'API test'}
                 assert_no_difference 'Project.count' do
                   post '/projects.xml', {:project => attributes}, :authorization => credentials('admin')
                 end
                 assert_response :unprocessable_entity
                 assert_equal 'application/xml', @response.content_type
                 assert_tag :errors, :child => {:tag => 'error', :content => "Identifier can't be blank"}
               end
               def test_update
                 attributes = {:name => 'API update'}
                 assert_no_difference 'Project.count' do
                   put '/projects/1.xml', {:project => attributes}, :authorization => credentials('jsmith')
                 end
                 assert_response :ok
                 assert_equal 'application/xml', @response.content_type
                 project = Project.find(1)
                 attributes.each do |attribute, value|
                   assert_equal value, project.send(attribute)
                 end
               end
               def test_update_failure
                 attributes = {:name => ''}
                 assert_no_difference 'Project.count' do
                   put '/projects/1.xml', {:project => attributes}, :authorization => credentials('jsmith')
                 end
                 assert_response :unprocessable_entity
                 assert_equal 'application/xml', @response.content_type
                 assert_tag :errors, :child => {:tag => 'error', :content => "Name can't be blank"}
               end
               def test_destroy
                 assert_difference 'Project.count', -1 do
                   delete '/projects/2.xml', {}, :authorization => credentials('admin')
                 end
                 assert_response :ok
                 assert_equal 'application/xml', @response.content_type
                 assert_nil Project.find_by_id(2)
               end
               def credentials(user, password=nil)
                 ActionController::HttpAuthentication::Basic.encode_credentials(user, password || user)
               end
             end

test/test_helper.rb +232 0

             # redMine - project management software
             # Copyright (C) 2006  Jean-Philippe Lang
             #
             # This program is free software; you can redistribute it and/or
             # modify it under the terms of the GNU General Public License
             # as published by the Free Software Foundation; either version 2
             # of the License, or (at your option) any later version.
             #
             # This program is distributed in the hope that it will be useful,
             # but WITHOUT ANY WARRANTY; without even the implied warranty of
             # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
             # GNU General Public License for more details.
             #
             # You should have received a copy of the GNU General Public License
             # along with this program; if not, write to the Free Software
             # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
             ENV["RAILS_ENV"] = "test"
             require File.expand_path(File.dirname(__FILE__) + "/../config/environment")
             require 'test_help'
             require File.expand_path(File.dirname(__FILE__) + '/helper_testcase')
             require File.join(RAILS_ROOT,'test', 'mocks', 'open_id_authentication_mock.rb')
             require File.expand_path(File.dirname(__FILE__) + '/object_daddy_helpers')
             include ObjectDaddyHelpers
             class ActiveSupport::TestCase
               # Transactional fixtures accelerate your tests by wrapping each test method
               # in a transaction that's rolled back on completion.  This ensures that the
               # test database remains unchanged so your fixtures don't have to be reloaded
               # between every test method.  Fewer database queries means faster tests.
               #
               # Read Mike Clark's excellent walkthrough at
               #   http://clarkware.com/cgi/blosxom/2005/10/24#Rails10FastTesting
               #
               # Every Active Record database supports transactions except MyISAM tables
               # in MySQL.  Turn off transactional fixtures in this case; however, if you
               # don't care one way or the other, switching from MyISAM to InnoDB tables
               # is recommended.
               self.use_transactional_fixtures = true
               # Instantiated fixtures are slow, but give you @david where otherwise you
               # would need people(:david).  If you don't want to migrate your existing
               # test cases which use the @david style and don't mind the speed hit (each
               # instantiated fixtures translates to a database query per test method),
               # then set this back to true.
               self.use_instantiated_fixtures  = false
               # Add more helper methods to be used by all tests here...
               def log_user(login, password)
                 User.anonymous
                 get "/login"
                 assert_equal nil, session[:user_id]
                 assert_response :success
                 assert_template "account/login"
                 post "/login", :username => login, :password => password
                 assert_equal login, User.find(session[:user_id]).login
               end
               def uploaded_test_file(name, mime)
                 ActionController::TestUploadedFile.new(ActiveSupport::TestCase.fixture_path + "/files/#{name}", mime)
               end
               # Mock out a file
               def self.mock_file
                 file = 'a_file.png'
                 file.stubs(:size).returns(32)
                 file.stubs(:original_filename).returns('a_file.png')
                 file.stubs(:content_type).returns('image/png')
                 file.stubs(:read).returns(false)
                 file
               end
               def mock_file
                 self.class.mock_file
               end
               # Use a temporary directory for attachment related tests
               def set_tmp_attachments_directory
                 Dir.mkdir "#{RAILS_ROOT}/tmp/test" unless File.directory?("#{RAILS_ROOT}/tmp/test")
                 Dir.mkdir "#{RAILS_ROOT}/tmp/test/attachments" unless File.directory?("#{RAILS_ROOT}/tmp/test/attachments")
                 Attachment.storage_path = "#{RAILS_ROOT}/tmp/test/attachments"
               end
               def with_settings(options, &block)
                 saved_settings = options.keys.inject({}) {|h, k| h[k] = Setting[k].dup; h}
                 options.each {|k, v| Setting[k] = v}
                 yield
                 saved_settings.each {|k, v| Setting[k] = v}
               end
               def change_user_password(login, new_password)
                 user = User.first(:conditions => {:login => login})
                 user.password, user.password_confirmation = new_password, new_password
                 user.save!
               end
               def self.ldap_configured?
                 @test_ldap = Net::LDAP.new(:host => '127.0.0.1', :port => 389)
                 return @test_ldap.bind
               rescue Exception => e
                 # LDAP is not listening
                 return nil
               end
               # Returns the path to the test +vendor+ repository
               def self.repository_path(vendor)
                 File.join(RAILS_ROOT.gsub(%r{config\/\.\.}, ''), "/tmp/test/#{vendor.downcase}_repository")
               end
               # Returns true if the +vendor+ test repository is configured
               def self.repository_configured?(vendor)
                 File.directory?(repository_path(vendor))
               end
               # Shoulda macros
               def self.should_render_404
                 should_respond_with :not_found
                 should_render_template 'common/404'
               end
               def self.should_have_before_filter(expected_method, options = {})
                 should_have_filter('before', expected_method, options)
               end
               def self.should_have_after_filter(expected_method, options = {})
                 should_have_filter('after', expected_method, options)
               end
               def self.should_have_filter(filter_type, expected_method, options)
                 description = "have #{filter_type}_filter :#{expected_method}"
                 description << " with #{options.inspect}" unless options.empty?
                 should description do
                   klass = "action_controller/filters/#{filter_type}_filter".classify.constantize
                   expected = klass.new(:filter, expected_method.to_sym, options)
                   assert_equal 1, @controller.class.filter_chain.select { |filter|
                     filter.method == expected.method && filter.kind == expected.kind &&
                     filter.options == expected.options && filter.class == expected.class
                   }.size
                 end
               end
               def self.should_show_the_old_and_new_values_for(prop_key, model, &block)
                 context "" do
                   setup do
                     if block_given?
                       instance_eval &block
                     else
                       @old_value = model.generate!
                       @new_value = model.generate!
                     end
                   end
                   should "use the new value's name" do
                     @detail = JournalDetail.generate!(:property => 'attr',
                                                       :old_value => @old_value.id,
                                                       :value => @new_value.id,
                                                       :prop_key => prop_key)
                     assert_match @new_value.name, show_detail(@detail, true)
                   end
                   should "use the old value's name" do
                     @detail = JournalDetail.generate!(:property => 'attr',
                                                       :old_value => @old_value.id,
                                                       :value => @new_value.id,
                                                       :prop_key => prop_key)
                     assert_match @old_value.name, show_detail(@detail, true)
                   end
                 end
               end
               def self.should_create_a_new_user(&block)
                 should "create a new user" do
                   user = instance_eval &block
                   assert user
                   assert_kind_of User, user
                   assert !user.new_record?
                 end
               end
+              # Test that a request allows the three types of API authentication
+              #
+              # * HTTP Basic with username and password
+              # * HTTP Basic with an api key for the username
+              # * Key based with the key=X parameter
+              #
+              # @param [Symbol] http_method the HTTP method for request (:get, :post, :put, :delete)
+              # @param [String] url the request url
+              # @param [optional, Hash] parameters additional request parameters
+              # @param [optional, Hash] options additional options
+              # @option options [Symbol] :success_code Successful response code (:success)
+              # @option options [Symbol] :failure_code Failure response code (:unauthorized)
+              def self.should_allow_api_authentication(http_method, url, parameters={}, options={})
+                should_allow_http_basic_auth_with_username_and_password(http_method, url, parameters, options)
+                should_allow_http_basic_auth_with_key(http_method, url, parameters, options)
+                should_allow_key_based_auth(http_method, url, parameters, options)
+              end
+              # Test that a request allows the username and password for HTTP BASIC
+              #
+              # @param [Symbol] http_method the HTTP method for request (:get, :post, :put, :delete)
+              # @param [String] url the request url
+              # @param [optional, Hash] parameters additional request parameters
+              # @param [optional, Hash] options additional options
+              # @option options [Symbol] :success_code Successful response code (:success)
+              # @option options [Symbol] :failure_code Failure response code (:unauthorized)
+              def self.should_allow_http_basic_auth_with_username_and_password(http_method, url, parameters={}, options={})
+                success_code = options[:success_code] || :success
+                failure_code = options[:failure_code] || :unauthorized
+                context "should allow http basic auth using a username and password for #{http_method} #{url}" do
+                  context "with a valid HTTP authentication" do
+                    setup do
+                      @user = User.generate_with_protected!(:password => 'my_password', :password_confirmation => 'my_password', :admin => true) # Admin so they can access the project
+                      @authorization = ActionController::HttpAuthentication::Basic.encode_credentials(@user.login, 'my_password')
+                      send(http_method, url, parameters, {:authorization => @authorization})
+                    end
+                    should_respond_with success_code
+                    should_respond_with_content_type_based_on_url(url)
+                    should "login as the user" do
+                      assert_equal @user, User.current
+                    end
+                  end
+                  context "with an invalid HTTP authentication" do
+                    setup do
+                      @user = User.generate_with_protected!
+                      @authorization = ActionController::HttpAuthentication::Basic.encode_credentials(@user.login, 'wrong_password')
+                      send(http_method, url, parameters, {:authorization => @authorization})
+                    end
+                    should_respond_with failure_code
+                    should_respond_with_content_type_based_on_url(url)
+                    should "not login as the user" do
+                      assert_equal User.anonymous, User.current
+                    end
+                  end
+                  context "without credentials" do
+                    setup do
+                      send(http_method, url, parameters, {:authorization => ''})
+                    end
+                    should_respond_with failure_code
+                    should_respond_with_content_type_based_on_url(url)
+                    should "include_www_authenticate_header" do
+                      assert @controller.response.headers.has_key?('WWW-Authenticate')
+                    end
+                  end
+                end
+              end
+              # Test that a request allows the API key with HTTP BASIC
+              #
+              # @param [Symbol] http_method the HTTP method for request (:get, :post, :put, :delete)
+              # @param [String] url the request url
+              # @param [optional, Hash] parameters additional request parameters
+              # @param [optional, Hash] options additional options
+              # @option options [Symbol] :success_code Successful response code (:success)
+              # @option options [Symbol] :failure_code Failure response code (:unauthorized)
+              def self.should_allow_http_basic_auth_with_key(http_method, url, parameters={}, options={})
+                success_code = options[:success_code] || :success
+                failure_code = options[:failure_code] || :unauthorized
+                context "should allow http basic auth with a key for #{http_method} #{url}" do
+                  context "with a valid HTTP authentication using the API token" do
+                    setup do
+                      @user = User.generate_with_protected!(:admin => true)
+                      @token = Token.generate!(:user => @user, :action => 'api')
+                      @authorization = ActionController::HttpAuthentication::Basic.encode_credentials(@token.value, 'X')
+                      send(http_method, url, parameters, {:authorization => @authorization})
+                    end
+                    should_respond_with success_code
+                    should_respond_with_content_type_based_on_url(url)
+                    should_be_a_valid_response_string_based_on_url(url)
+                    should "login as the user" do
+                      assert_equal @user, User.current
+                    end
+                  end
+                  context "with an invalid HTTP authentication" do
+                    setup do
+                      @user = User.generate_with_protected!
+                      @token = Token.generate!(:user => @user, :action => 'feeds')
+                      @authorization = ActionController::HttpAuthentication::Basic.encode_credentials(@token.value, 'X')
+                      send(http_method, url, parameters, {:authorization => @authorization})
+                    end
+                    should_respond_with failure_code
+                    should_respond_with_content_type_based_on_url(url)
+                    should "not login as the user" do
+                      assert_equal User.anonymous, User.current
+                    end
+                  end
+                end
+              end
+              # Test that a request allows full key authentication
+              #
+              # @param [Symbol] http_method the HTTP method for request (:get, :post, :put, :delete)
+              # @param [String] url the request url, without the key=ZXY parameter
+              # @param [optional, Hash] parameters additional request parameters
+              # @param [optional, Hash] options additional options
+              # @option options [Symbol] :success_code Successful response code (:success)
+              # @option options [Symbol] :failure_code Failure response code (:unauthorized)
+              def self.should_allow_key_based_auth(http_method, url, parameters={}, options={})
+                success_code = options[:success_code] || :success
+                failure_code = options[:failure_code] || :unauthorized
+                context "should allow key based auth using key=X for #{http_method} #{url}" do
+                  context "with a valid api token" do
+                    setup do
+                      @user = User.generate_with_protected!(:admin => true)
+                      @token = Token.generate!(:user => @user, :action => 'api')
+                      # Simple url parse to add on ?key= or &key=
+                      request_url = if url.match(/\?/)
+                                      url + "&key=#{@token.value}"
+                                    else
+                                      url + "?key=#{@token.value}"
+                                    end
+                      send(http_method, request_url, parameters)
+                    end
+                    should_respond_with success_code
+                    should_respond_with_content_type_based_on_url(url)
+                    should_be_a_valid_response_string_based_on_url(url)
+                    should "login as the user" do
+                      assert_equal @user, User.current
+                    end
+                  end
+                  context "with an invalid api token" do
+                    setup do
+                      @user = User.generate_with_protected!
+                      @token = Token.generate!(:user => @user, :action => 'feeds')
+                      # Simple url parse to add on ?key= or &key=
+                      request_url = if url.match(/\?/)
+                                      url + "&key=#{@token.value}"
+                                    else
+                                      url + "?key=#{@token.value}"
+                                    end
+                      send(http_method, request_url, parameters)
+                    end
+                    should_respond_with failure_code
+                    should_respond_with_content_type_based_on_url(url)
+                    should "not login as the user" do
+                      assert_equal User.anonymous, User.current
+                    end
+                  end
+                end
+              end
+              # Uses should_respond_with_content_type based on what's in the url:
+              #
+              # '/project/issues.xml' => should_respond_with_content_type :xml
+              # '/project/issues.json' => should_respond_with_content_type :json
+              #
+              # @param [String] url Request
+              def self.should_respond_with_content_type_based_on_url(url)
+                case
+                when url.match(/xml/i)
+                  should_respond_with_content_type :xml
+                when url.match(/json/i)
+                  should_respond_with_content_type :json
+                else
+                  raise "Unknown content type for should_respond_with_content_type_based_on_url: #{url}"
+                end
+              end
+              # Uses the url to assert which format the response should be in
+              #
+              # '/project/issues.xml' => should_be_a_valid_xml_string
+              # '/project/issues.json' => should_be_a_valid_json_string
+              #
+              # @param [String] url Request
+              def self.should_be_a_valid_response_string_based_on_url(url)
+                case
+                when url.match(/xml/i)
+                  should_be_a_valid_xml_string
+                when url.match(/json/i)
+                  should_be_a_valid_json_string
+                else
+                  raise "Unknown content type for should_be_a_valid_response_based_on_url: #{url}"
+                end
+              end
+              # Checks that the response is a valid JSON string
+              def self.should_be_a_valid_json_string
+                should "be a valid JSON string (or empty)" do
+                  assert (response.body.blank? || ActiveSupport::JSON.decode(response.body))
+                end
+              end
+              # Checks that the response is a valid XML string
+              def self.should_be_a_valid_xml_string
+                should "be a valid XML string" do
+                  assert REXML::Document.new(response.body)
+                end
+              end
+            end
+            # Simple module to "namespace" all of the API tests
+            module ApiTest
             end

test/integration/api_token_login_test.rb removed 0 -80

NO CONTENT: file was removed

test/integration/http_basic_login_test.rb removed 0 -103

NO CONTENT: file was removed

test/integration/http_basic_login_with_api_token_test.rb removed 0 -84

NO CONTENT: file was removed

test/integration/issues_api_test.rb removed 0 -349

NO CONTENT: file was removed

General Comments 0

Write
Preview

You need to be logged in to leave comments. Login now

No TODOs yet

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages