actionpack 2.3.18 → 3.0.0.beta

data/test/controller/send_file_test.rb

@@ -1,171 +0,0 @@
-# encoding: utf-8
-require 'abstract_unit'
-
-module TestFileUtils
-  def file_name() File.basename(__FILE__) end
-  def file_path() File.expand_path(__FILE__) end
-  def file_data() @data ||= File.open(file_path, 'rb') { |f| f.read } end
-end
-
-class SendFileController < ActionController::Base
-  include TestFileUtils
-  layout "layouts/standard" # to make sure layouts don't interfere
-
-  attr_writer :options
-  def options() @options ||= {} end
-
-  def file() send_file(file_path, options) end
-  def data() send_data(file_data, options) end
-  def multibyte_text_data() send_data("Кирилица\n祝您好運", options) end
-
-  def rescue_action(e) raise end
-end
-
-class SendFileTest < ActionController::TestCase
-  tests SendFileController
-  include TestFileUtils
-
-  Mime::Type.register "image/png", :png unless defined? Mime::PNG
-
-  def setup
-    @controller = SendFileController.new
-    @request = ActionController::TestRequest.new
-    @response = ActionController::TestResponse.new
-  end
-
-  def test_file_nostream
-    @controller.options = { :stream => false }
-    response = nil
-    assert_nothing_raised { response = process('file') }
-    assert_not_nil response
-    assert_kind_of String, response.body
-    assert_equal file_data, response.body
-  end
-
-  def test_file_stream
-    response = nil
-    assert_nothing_raised { response = process('file') }
-    assert_not_nil response
-    assert_kind_of Proc, response.body
-
-    require 'stringio'
-    output = StringIO.new
-    output.binmode
-    output.string.force_encoding(file_data.encoding) if output.string.respond_to?(:force_encoding)
-    assert_nothing_raised { response.body.call(response, output) }
-    assert_equal file_data, output.string
-  end
-
-  def test_file_url_based_filename
-    @controller.options = { :url_based_filename => true }
-    response = nil
-    assert_nothing_raised { response = process('file') }
-    assert_not_nil response
-    assert_equal "attachment", response.headers["Content-Disposition"]
-  end
-
-  def test_x_sendfile_header
-    @controller.options = { :x_sendfile => true }
-
-    response = nil
-    assert_nothing_raised { response = process('file') }
-    assert_not_nil response
-
-    assert_equal @controller.file_path, response.headers['X-Sendfile']
-    assert response.body.blank?
-    assert !response.etag?, response.headers.inspect
-  end
-
-  def test_data
-    response = nil
-    assert_nothing_raised { response = process('data') }
-    assert_not_nil response
-
-    assert_kind_of String, response.body
-    assert_equal file_data, response.body
-  end
-
-  def test_headers_after_send_shouldnt_include_charset
-    response = process('data')
-    assert_equal "application/octet-stream", response.content_type
-
-    response = process('file')
-    assert_equal "application/octet-stream", response.content_type
-  end
-
-  # Test that send_file_headers! is setting the correct HTTP headers.
-  def test_send_file_headers!
-    options = {
-      :length => 1,
-      :type => Mime::PNG,
-      :disposition => 'disposition',
-      :filename => 'filename'
-    }
-
-    # Do it a few times: the resulting headers should be identical
-    # no matter how many times you send with the same options.
-    # Test resolving Ticket #458.
-    @controller.headers = {}
-    @controller.send(:send_file_headers!, options)
-    @controller.send(:send_file_headers!, options)
-    @controller.send(:send_file_headers!, options)
-
-    h = @controller.headers
-    assert_equal '1', h['Content-Length']
-    assert_equal 'image/png', h['Content-Type']
-    assert_equal 'disposition; filename="filename"', h['Content-Disposition']
-    assert_equal 'binary', h['Content-Transfer-Encoding']
-
-    # test overriding Cache-Control: no-cache header to fix IE open/save dialog
-    @controller.headers = { 'Cache-Control' => 'no-cache' }
-    @controller.send(:send_file_headers!, options)
-    h = @controller.headers
-    assert_equal 'private', h['Cache-Control']
-  end
-
-  def test_send_file_headers_with_mime_lookup_with_symbol
-    options = {
-      :length => 1,
-      :type => :png
-    }
-
-    @controller.headers = {}
-    @controller.send(:send_file_headers!, options)
-
-    headers = @controller.headers
-
-    assert_equal 'image/png', headers['Content-Type']
-  end
-  
-
-  def test_send_file_headers_with_bad_symbol
-    options = {
-      :length => 1,
-      :type => :this_type_is_not_registered
-    }
-
-    @controller.headers = {}
-    assert_raise(ArgumentError){ @controller.send(:send_file_headers!, options) }
-  end
-
-  %w(file data).each do |method|
-    define_method "test_send_#{method}_status" do
-      @controller.options = { :stream => false, :status => 500 }
-      assert_nothing_raised { assert_not_nil process(method) }
-      assert_equal '500 Internal Server Error', @response.status
-    end
-
-    define_method "test_default_send_#{method}_status" do
-      @controller.options = { :stream => false }
-      assert_nothing_raised { assert_not_nil process(method) }
-      assert_equal ActionController::Base::DEFAULT_RENDER_STATUS_CODE, @response.status
-    end
-  end
-
-  def test_send_data_content_length_header
-    @controller.headers = {}
-    @controller.options = { :type => :text, :filename => 'file_with_utf8_text' }
-    process('multibyte_text_data')
-    assert_equal '29', @controller.headers['Content-Length']
-  end
-end

data/test/controller/session/abstract_store_test.rb

@@ -1,64 +0,0 @@
-require 'abstract_unit'
-
-# You need to start a memcached server inorder to run these tests
-class AbstractStoreTest < ActionController::IntegrationTest
-  SessionKey = '_myapp_session'
-  DispatcherApp = ActionController::Dispatcher.new
-
-  class TestController < ActionController::Base
-    def get_session
-      session[:test] = 'test'
-      head :ok
-    end
-  end
-
-  def test_expiry_after
-    with_test_route_set(:expire_after => 5 * 60) do
-      get 'get_session'
-      assert_response :success
-      assert_match /expires=\S+/, headers['Set-Cookie']
-    end
-  end
-
-protected
-
-  def with_test_route_set(options = {})
-    with_routing do |set|
-      set.draw do |map|
-        map.with_options :controller => "abstract_store_test/test" do |c|
-          c.connect "/:action"
-        end
-      end
-
-      options = { :key => SessionKey, :secret => 'SessionSecret' }.merge!(options)
-      @integration_session = open_session(TestStore.new(DispatcherApp, options))
-
-      yield
-    end
-  end
-
-  class TestStore < ActionController::Session::AbstractStore
-    def initialize(app, options = {})
-      super
-      @_store = Hash.new({})
-    end
-
-  private
-
-    def get_session(env, sid)
-      sid ||= generate_sid
-      session = @_store[sid]
-      [sid, session]
-    end
-
-    def set_session(env, sid, session_data)
-      @_store[sid] = session_data
-    end
-
-    def destroy(env)
-      @_store.delete(sid)
-    end
-  end
-
-end
-

data/test/controller/session/cookie_store_test.rb

@@ -1,354 +0,0 @@
-require 'abstract_unit'
-require 'stringio'
-
-class CookieStoreTest < ActionController::IntegrationTest
-  SessionKey = '_myapp_session'
-  SessionSecret = 'b3c631c314c0bbca50c1b2843150fe33'
-
-  DispatcherApp = ActionController::Dispatcher.new
-
-  Verifier = ActiveSupport::MessageVerifier.new(SessionSecret, 'SHA1')
-
-  SignedBar = "BAh7BjoIZm9vIghiYXI%3D--fef868465920f415f2c0652d6910d3af288a0367"
-
-  class TestController < ActionController::Base
-    def no_session_access
-      head :ok
-    end
-
-    def persistent_session_id
-      render :text => session[:session_id]
-    end
-
-    def set_session_value
-      session[:foo] = "bar"
-      render :text => Rack::Utils.escape(Verifier.generate(session.to_hash))
-    end
-
-    def get_session_value
-      render :text => "foo: #{session[:foo].inspect}"
-    end
-
-    def get_session_id
-      render :text => "foo: #{session[:foo].inspect}; id: #{request.session_options[:id]}"
-    end
-
-    def get_session_id_only
-      render :text => "id: #{request.session_options[:id]}"      
-    end
-
-    def call_session_clear
-      session.clear
-      head :ok
-    end
-
-    def call_reset_session_twice
-      reset_session
-      reset_session
-      head :ok
-    end
-
-    def call_reset_session
-      reset_session
-      head :ok
-    end
-
-    def raise_data_overflow
-      session[:foo] = 'bye!' * 1024
-      head :ok
-    end
-
-    def set_session_value_and_cookie
-      cookies["foo"] = "bar"
-      session[:foo] = "bar"
-      render :text => Rack::Utils.escape(Verifier.generate(session.to_hash))
-    end
-
-    def rescue_action(e) raise end
-  end
-
-  def test_raises_argument_error_if_missing_session_key
-    assert_raise(ArgumentError, nil.inspect) {
-      ActionController::Session::CookieStore.new(nil,
-        :key => nil, :secret => SessionSecret)
-    }
-
-    assert_raise(ArgumentError, ''.inspect) {
-      ActionController::Session::CookieStore.new(nil,
-        :key => '', :secret => SessionSecret)
-    }
-  end
-
-  def test_raises_argument_error_if_missing_secret
-    assert_raise(ArgumentError, nil.inspect) {
-      ActionController::Session::CookieStore.new(nil,
-       :key => SessionKey, :secret => nil)
-    }
-
-    assert_raise(ArgumentError, ''.inspect) {
-      ActionController::Session::CookieStore.new(nil,
-       :key => SessionKey, :secret => '')
-    }
-  end
-
-  def test_raises_argument_error_if_secret_is_probably_insecure
-    assert_raise(ArgumentError, "password".inspect) {
-      ActionController::Session::CookieStore.new(nil,
-       :key => SessionKey, :secret => "password")
-    }
-
-    assert_raise(ArgumentError, "secret".inspect) {
-      ActionController::Session::CookieStore.new(nil,
-       :key => SessionKey, :secret => "secret")
-    }
-
-    assert_raise(ArgumentError, "12345678901234567890123456789".inspect) {
-      ActionController::Session::CookieStore.new(nil,
-       :key => SessionKey, :secret => "12345678901234567890123456789")
-    }
-  end
-
-  def test_setting_session_value
-    with_test_route_set do
-      get '/set_session_value'
-      assert_response :success
-      assert_equal "_myapp_session=#{response.body}; path=/; HttpOnly",
-        headers['Set-Cookie']
-   end
-  end
-
-  def test_getting_session_value
-    with_test_route_set do
-      cookies[SessionKey] = SignedBar
-      get '/get_session_value'
-      assert_response :success
-      assert_equal 'foo: "bar"', response.body
-   end
-  end
-
-  def test_getting_session_id
-    with_test_route_set do
-      cookies[SessionKey] = SignedBar
-      get '/persistent_session_id'
-      assert_response :success
-      assert_equal response.body.size, 32
-      session_id = response.body
-
-      get '/get_session_id'
-      assert_response :success
-      assert_equal "foo: \"bar\"; id: #{session_id}", response.body
-      
-      get '/get_session_id_only'
-      assert_response :success
-      assert_equal "id: #{session_id}", response.body, "should be able to read session id without accessing the session hash"
-    end
-  end
-
-  def test_disregards_tampered_sessions
-    with_test_route_set do
-      cookies[SessionKey] = "BAh7BjoIZm9vIghiYXI%3D--123456780"
-      get '/get_session_value'
-      assert_response :success
-      assert_equal 'foo: nil', response.body
-    end
-  end
-
-  def test_does_not_set_secure_cookies_over_http
-    with_test_route_set(:secure => true) do
-      get '/set_session_value'
-      assert_response :success
-      assert_equal nil, headers['Set-Cookie']
-    end
-  end
-
-  def test_does_set_secure_cookies_over_https
-    with_test_route_set(:secure => true) do
-      get '/set_session_value', nil, 'HTTPS' => 'on'
-      assert_response :success
-      assert_equal "_myapp_session=#{response.body}; path=/; secure; HttpOnly",
-        headers['Set-Cookie']
-    end
-  end
-
-  def test_close_raises_when_data_overflows
-    with_test_route_set do
-      assert_raise(ActionController::Session::CookieStore::CookieOverflow) {
-        get '/raise_data_overflow'
-      }
-    end
-  end
-
-  def test_doesnt_write_session_cookie_if_session_is_not_accessed
-    with_test_route_set do
-      get '/no_session_access'
-      assert_response :success
-      assert_equal nil, headers['Set-Cookie']
-    end
-  end
-
-  def test_doesnt_write_session_cookie_if_session_is_unchanged
-    with_test_route_set do
-      cookies[SessionKey] = "BAh7BjoIZm9vIghiYXI%3D--" +
-        "fef868465920f415f2c0652d6910d3af288a0367"
-      get '/no_session_access'
-      assert_response :success
-      assert_equal nil, headers['Set-Cookie']
-    end
-  end
-
-  def test_calling_session_reset_twice
-    with_test_route_set do
-      get '/set_session_value'
-      assert_response :success
-      session_payload = response.body
-      assert_equal "_myapp_session=#{response.body}; path=/; HttpOnly",
-        headers['Set-Cookie']
-
-      get '/call_reset_session_twice'
-      assert_response :success
-      assert_not_equal "", headers['Set-Cookie']
-      assert_not_equal session_payload, cookies[SessionKey]
-
-      get '/get_session_value'
-      assert_response :success
-      assert_equal 'foo: nil', response.body
-    end
-  end
-
-  def test_setting_session_value_after_session_reset
-    with_test_route_set do
-      get '/set_session_value'
-      assert_response :success
-      session_payload = response.body
-      assert_equal "_myapp_session=#{response.body}; path=/; HttpOnly",
-        headers['Set-Cookie']
-
-      get '/call_reset_session'
-      assert_response :success
-      assert_not_equal "", headers['Set-Cookie']
-      assert_not_equal session_payload, cookies[SessionKey]
-
-      get '/get_session_value'
-      assert_response :success
-      assert_equal 'foo: nil', response.body
-    end
-  end
-
-  def test_setting_session_value_after_session_reset
-    with_test_route_set do
-      get '/set_session_value'
-      assert_response :success
-      session_payload = response.body
-      assert_equal "_myapp_session=#{response.body}; path=/; HttpOnly",
-        headers['Set-Cookie']
-
-      get '/call_reset_session'
-      assert_response :success
-      assert_not_equal "", headers['Set-Cookie']
-      assert_not_equal session_payload, cookies[SessionKey]
-
-      get '/get_session_value'
-      assert_response :success
-      assert_equal 'foo: nil', response.body
-    end
-  end
-
-  def test_setting_session_value_after_session_clear
-    with_test_route_set do
-      get '/set_session_value'
-      assert_response :success
-      session_payload = response.body
-      assert_equal "_myapp_session=#{response.body}; path=/; HttpOnly",
-        headers['Set-Cookie']
-
-      get '/call_session_clear'
-      assert_response :success
-
-      get '/get_session_value'
-      assert_response :success
-      assert_equal 'foo: nil', response.body
-    end
-  end
-
-  def test_getting_from_nonexistent_session
-    with_test_route_set do
-      get '/get_session_value'
-      assert_response :success
-      assert_equal 'foo: nil', response.body
-      assert_nil headers['Set-Cookie'], "should only create session on write, not read"
-    end
-  end
-
-  # {:foo=>#<SessionAutoloadTest::Foo bar:"baz">, :session_id=>"ce8b0752a6ab7c7af3cdb8a80e6b9e46"}  
-  SignedSerializedCookie = "BAh7BzoIZm9vbzodU2Vzc2lvbkF1dG9sb2FkVGVzdDo6Rm9vBjoJQGJhciIIYmF6Og9zZXNzaW9uX2lkIiVjZThiMDc1MmE2YWI3YzdhZjNjZGI4YTgwZTZiOWU0Ng==--2bf3af1ae8bd4e52b9ac2099258ace0c380e601c"
-  
-  def test_deserializes_unloaded_classes_on_get_id
-    with_test_route_set do
-      with_autoload_path "session_autoload_test" do
-        cookies[SessionKey] = SignedSerializedCookie
-        get '/get_session_id_only'
-        assert_response :success
-        assert_equal 'id: ce8b0752a6ab7c7af3cdb8a80e6b9e46', response.body, "should auto-load unloaded class"
-      end
-    end
-  end  
-  
-  def test_deserializes_unloaded_classes_on_get_value
-    with_test_route_set do
-      with_autoload_path "session_autoload_test" do 
-        cookies[SessionKey] = SignedSerializedCookie
-        get '/get_session_value'
-        assert_response :success
-        assert_equal 'foo: #<SessionAutoloadTest::Foo bar:"baz">', response.body, "should auto-load unloaded class"
-      end
-    end
-  end
-
-  def test_persistent_session_id
-    with_test_route_set do
-      cookies[SessionKey] = SignedBar
-      get '/persistent_session_id'
-      assert_response :success
-      assert_equal response.body.size, 32
-      session_id = response.body
-      get '/persistent_session_id'
-      assert_equal session_id, response.body
-      reset!
-      get '/persistent_session_id'
-      assert_not_equal session_id, response.body
-    end
-  end
-
-  def test_setting_session_value_and_cookie
-    with_test_route_set do
-      get '/set_session_value_and_cookie'
-      assert_response :success
-      assert_equal({"_myapp_session" => response.body, "foo" => "bar"}, cookies)
-    end
-  end
-
-  private
-    def with_test_route_set(options = {})
-      with_routing do |set|
-        set.draw do |map|
-          map.with_options :controller => "cookie_store_test/test" do |c|
-            c.connect "/:action"
-          end
-        end
-        
-        options = { :key => SessionKey, :secret => SessionSecret }.merge!(options)
-        @integration_session = open_session(ActionController::Session::CookieStore.new(DispatcherApp, options))
-        
-        yield
-      end
-    end
-
-    def unmarshal_session(cookie_string)
-      session = Rack::Utils.parse_query(cookie_string, ';,').inject({}) {|h,(k,v)|
-        h[k] = Array === v ? v.first : v
-        h
-      }[SessionKey]
-      verifier = ActiveSupport::MessageVerifier.new(SessionSecret, 'SHA1')
-      verifier.verify(session)
-    end
-end