adzerk 0.1

data/test/campaign_api_spec.rb

@@ -0,0 +1,238 @@
+require 'spec_helper'
+
+describe "Campaign API" do
+  
+  $campaign_url = 'http://www.adzerk.com'
+  @@campaign = $adzerk::Campaign.new
+  @@advertiser = $adzerk::Advertiser.new
+  @@channel = $adzerk::Channel.new
+  
+  before(:all) do
+    new_advertiser = {
+      'Title' => "Test"
+    }
+    response = @@advertiser.create(new_advertiser)
+    $brandId = JSON.parse(response.body)["Id"].to_s
+
+    new_channel = {
+      'Title' => 'Test Channel ' + rand(1000000).to_s,
+      'Commission' => '0',
+      'Engine' => 'CPM',
+      'Keywords' => 'test',
+      'CPM' => '10.00',
+      'AdTypes' => [0,1,2,3,4]
+    }  
+    response = @@channel.create(new_channel)
+    $channelId = JSON.parse(response.body)["Id"].to_s
+    
+  end
+  
+  it "should create a new campaign with no flights" do
+    $campaign_Name = 'Test campaign ' + rand(1000000).to_s
+    $campaign_StartDate = "1/1/2011"
+    $campaign_EndDate = "12/31/2011"
+    $campaign_IsActive = false
+    $campaign_Price = '10.00'
+    $campaign_BrandId = $brandId.to_i
+    $campaign_Flights = []
+    
+    new_campaign = {
+      'Name' => $campaign_Name,
+      'StartDate' => $campaign_StartDate,
+      'EndDate' => $campaign_EndDate,
+      'IsActive' => $campaign_IsActive,
+      'Price' => $campaign_Price,
+      'BrandId' => $campaign_BrandId,
+      'Flights' => $campaign_Flights,
+      'IsDeleted' => false
+    }
+  
+    response = @@campaign.create(new_campaign)
+    $campaign_id = JSON.parse(response.body)["Id"].to_s
+    $campaign_Name.should == JSON.parse(response.body)["Name"]
+    # JSON.parse(response.body)["StartDate"].should == "/Date(1293858000000-0500)/"
+    # JSON.parse(response.body)["EndDate"].should == "/Date(1325307600000-0500)/"
+    $campaign_IsActive.should == JSON.parse(response.body)["IsActive"]
+    $campaign_Price.to_f.should == JSON.parse(response.body)["Price"]
+    $campaign_BrandId.should == JSON.parse(response.body)["BrandId"]
+    JSON.parse(response.body)["IsDeleted"].should == false
+    $campaign_Flights.should == JSON.parse(response.body)["Flights"]
+  end
+  
+  it "should create a new campaign with one flight" do
+    $campaign_Flights1 = [{
+      'StartDate' => "1/1/2011",
+      'EndDate' => "12/31/2011",
+      'NoEndDate' => false,
+      'Price' => "5.00",
+      'Keywords' => "test, test2",
+      'Name' => "Test",
+      'ChannelId' => $channelId,
+      'Impressions' => 10000,
+      'IsDeleted' => false
+    }]
+    new1_campaign = {
+      'Name' => $campaign_Name,
+      'StartDate' => $campaign_StartDate,
+      'EndDate' => $campaign_EndDate,
+      'IsActive' => $campaign_IsActive,
+      'Price' => $campaign_Price,
+      'BrandId' => $campaign_BrandId,
+      'IsDeleted' => false,
+      'Flights' => $campaign_Flights1
+    }
+    response = @@campaign.create(new1_campaign)
+    $campaign_id1 = JSON.parse(response.body)["Id"].to_s
+    $campaign_Name.should == JSON.parse(response.body)["Name"]
+    # JSON.parse(response.body)["StartDate"].should == "/Date(1293858000000-0500)/"
+    # JSON.parse(response.body)["EndDate"].should == "/Date(1325307600000-0500)/"
+    $campaign_IsActive.should == JSON.parse(response.body)["IsActive"]
+    JSON.parse(response.body)["IsDeleted"].should == false
+    $campaign_Price.to_f.should == JSON.parse(response.body)["Price"]
+    $campaign_BrandId.should == JSON.parse(response.body)["BrandId"]
+    #$campaign_Flights1.to_json.should == JSON.parse(response.body)["Flights"]
+  end
+  
+  it "should create a new campaign with two flights" do
+    $campaign_Flights2 = [{
+      'StartDate' => "1/1/2011",
+      'EndDate' => "12/31/2011",
+      'NoEndDate' => false,
+      'Price' => "5.00",
+      'Keywords' => "test, test2",
+      'Name' => "Test",
+      'ChannelId' => $channelId,
+      'Impressions' => 10000
+    },{
+      'StartDate' => "1/1/2010",
+      'EndDate' => "12/31/2012",
+      'NoEndDate' => false,
+      'Price' => "10.00",
+      'Keywords' => "test, test2, test3",
+      'Name' => "Test3",
+      'ChannelId' => $channelId,
+      'Impressions' => 15000
+    }]
+    new2_campaign = {
+      'Name' => $campaign_Name,
+      'StartDate' => $campaign_StartDate,
+      'EndDate' => $campaign_EndDate,
+      'IsActive' => $campaign_IsActive,
+      'Price' => $campaign_Price,
+      'BrandId' => $campaign_BrandId,
+      'Flights' => $campaign_Flights2
+    }
+    response = @@campaign.create(new2_campaign)
+    $campaign_id2 = JSON.parse(response.body)["Id"].to_s
+    JSON.parse(response.body)["Flights"].length.should == 2
+  end
+  
+  it "should list a specific campaign" do
+    response = @@campaign.get($campaign_id)
+    response.body.should == '{"Id":' + $campaign_id + ',"Name":"' + $campaign_Name + '","StartDate":"\/Date(1293840000000+0000)\/","EndDate":"\/Date(1325289600000+0000)\/","IsActive":false,"Price":' + $campaign_Price + ',"BrandId":' + $campaign_BrandId.to_s + ',"IsDeleted":false}'
+  end
+  
+  it "should update a campaign" do
+    $campaign_Name = 'Test campaign ' + rand(1000000).to_s
+    $campaign_StartDate = "1/1/2011"
+    $campaign_EndDate = "12/31/2011"
+    $campaign_IsActive = false
+    $campaign_Price = '10.00'
+    $campaign_Flights = []
+    
+    new_campaign = {
+      'Id' => $campaign_id,
+      'Name' => $campaign_Name,
+      'StartDate' => $campaign_StartDate,
+      'EndDate' => $campaign_EndDate,
+      'IsActive' => $campaign_IsActive,
+      'Price' => $campaign_Price,
+      'BrandId' => $campaign_BrandId,
+      'Flights' => $campaign_Flights,
+      'IsDeleted' => false
+    }
+  
+    response = @@campaign.update(new_campaign)
+    $campaign_id = JSON.parse(response.body)["Id"].to_s
+    $campaign_Name.should == JSON.parse(response.body)["Name"]
+    # JSON.parse(response.body)["StartDate"].should == "/Date(1293858000000-0500)/"
+    # JSON.parse(response.body)["EndDate"].should == "/Date(1325307600000-0500)/"
+    $campaign_IsActive.should == JSON.parse(response.body)["IsActive"]
+    $campaign_Price.to_f.should == JSON.parse(response.body)["Price"]
+    $campaign_BrandId.should == JSON.parse(response.body)["BrandId"]
+    JSON.parse(response.body)["IsDeleted"].should == false
+    $campaign_Flights.should == JSON.parse(response.body)["Flights"]
+  end
+  
+  it "should list all campaigns" do
+    result = @@campaign.list()
+    result.length.should > 0
+    # result["Items"].last["Id"].to_s.should == $campaign_id
+    # result["Items"].last["Title"].should == $u_campaign_title
+    # result["Items"].last["Commission"].should == $u_campaign_commission.to_f
+    # result["Items"].last["Engine"].should == $u_campaign_engine
+    # result["Items"].last["Keywords"].should == $u_campaign_keywords
+    # result["Items"].last["CPM"].to_s.should == $u_campaign_CPM.to_f.to_s
+    # result["Items"].last["AdTypes"].should == $u_campaign_AdTypes
+  end
+  
+  it "should delete a new campaign" do
+    response = @@campaign.delete($campaign_id)
+    response.body.should == 'OK'
+  end
+  
+  it "should not get individual deleted campaign" do
+    response = @@campaign.get($campaign_id)
+    true.should == !response.body.scan(/Object/).nil?
+  end
+  
+  it "should not update deleted campaigns" do
+    updated_campaign = {
+      'Id' => $campaign_id,
+      'Name' => $campaign_Name,
+      'StartDate' => $campaign_StartDate,
+      'EndDate' => $campaign_EndDate,
+      'IsActive' => $campaign_IsActive,
+      'Price' => $campaign_Price,
+      'BrandId' => $campaign_BrandId,
+      'Flights' => $campaign_Flights,
+      'IsDeleted' => false
+    }
+    response = @@campaign.update(updated_campaign)
+  end
+  
+  it "should not create/update a campaign with a brandId that doesn't belong to it" do
+    new_campaign = {
+      'Name' => 'Test campaign ' + rand(1000000).to_s,
+      'StartDate' => "1/1/2011",
+      'EndDate' => "12/31/2011",
+      'IsActive' => false,
+      'Price' => '10.00',
+      'BrandId' => '123',
+      'Flights' => [],
+      'IsDeleted' => false
+    }  
+    response = @@campaign.create(new_campaign)
+    true.should == !response.body.scan(/Object/).nil?
+    
+    updated_campaign = {
+      'Id' => $campaign_id,
+      'Name' => 'Test campaign ' + rand(1000000).to_s,
+      'StartDate' => "1/1/2011",
+      'EndDate' => "12/31/2011",
+      'IsActive' => false,
+      'Price' => '10.00',
+      'BrandId' => '123',
+      'Flights' => [],
+      'IsDeleted' => false
+    }  
+    response = @@campaign.update(updated_campaign)
+    true.should == !response.body.scan(/Object/).nil?
+  end
+  
+  it "should not retrieve a campaign with a brandId that doesn't belong to it" do
+    response = @@campaign.get('123')
+    true.should == !response.body.scan(/Object/).nil?
+  end
+
+end

data/test/channel_api_security_spec.rb

@@ -0,0 +1,51 @@
+require 'spec_helper'
+require 'net/http'
+describe "Channel API security" do
+
+  channel_url = 'http://www.adzerk.com'
+  channel = $adzerk::Channel.new
+
+  it "should reject unauthenticated GET requests" do
+ 	uri = URI.parse(ENV['ADZERK_API_HOST'] + 'channel/')	
+	http = Net::HTTP.new(uri.host, uri.port)
+    	request = Net::HTTP::Get.new(uri.request_uri)
+    	http.request(request).response.code.should_not == 200
+  end
+
+  it "should reject GET requests with null API keys" do
+	uri = URI.parse(ENV['ADZERK_API_HOST'] + 'channel/')
+	http = Net::HTTP.new(uri.host, uri.port)
+    	request = Net::HTTP::Get.new(uri.request_uri)
+    	request.add_field "X-Adzerk-ApiKey", ""
+    	http.request(request).response.code.should_not == 200
+  end
+
+  it "should reject GET requests with SQL injection attack as API keys" do
+        uri = URI.parse(ENV['ADZERK_API_HOST'] + 'channel/')
+        http = Net::HTTP.new(uri.host, uri.port)
+        request = Net::HTTP::Get.new(uri.request_uri)
+        request.add_field "X-Adzerk-ApiKey", "hi' or 1=1--"
+        http.request(request).response.code.should_not == 200
+  end
+  
+  it "should reject an attempt to delete a channel not of the same network" do
+	channel.delete("14").response.code.should_not == 200	
+  end
+
+
+  it "should reject an attempt to update a channel not of the same network" do
+	updated_channel = {
+      		'Id' => 14,
+     		'Title' => "The Impossible Dream",
+      		'Commission' => 0,
+      		'Engine' => "CPM",
+      		'Keywords' => "bigfoot",
+      		'CPM' => "10.00",
+      		'AdTypes' => [0,1,2,3,4]
+    	}
+	channel.update(updated_channel).response.code.should_not == 200
+  end
+
+end
+
+

data/test/channel_api_spec.rb

@@ -0,0 +1,111 @@
+require 'spec_helper'
+
+describe "Channel API" do
+  
+  $channel_url = 'http://www.adzerk.com'
+  @@channel = $adzerk::Channel.new
+  
+  it "should create a new channel" do
+    $channel_title = 'Test Channel ' + rand(1000000).to_s
+    $channel_commission = '0'
+    $channel_engine = 'CPM'
+    $channel_keywords = 'test, another test'
+    $channel_CPM = '10.00'
+    $channel_AdTypes = [0,1,2,3,4]
+    
+    new_channel = {
+      'Title' => $channel_title,
+      'Commission' => $channel_commission,
+      'Engine' => $channel_engine,
+      'Keywords' => $channel_keywords,
+      'CPM' => $channel_CPM,
+      'AdTypes' => $channel_AdTypes
+    }
+  
+    response = @@channel.create(new_channel)
+    $channel_id = JSON.parse(response.body)["Id"].to_s
+    $channel_title.should == JSON.parse(response.body)["Title"]
+    $channel_commission.to_f.should == JSON.parse(response.body)["Commission"]
+    $channel_engine.should == JSON.parse(response.body)["Engine"]
+    $channel_keywords.should == JSON.parse(response.body)["Keywords"]
+    $channel_CPM.to_f.should == JSON.parse(response.body)["CPM"]
+    $channel_AdTypes.should == JSON.parse(response.body)["AdTypes"]
+  end
+  
+  it "should list a specific channel" do
+    response = @@channel.get($channel_id)
+    response.body.should == '{"Id":' + $channel_id + ',"Title":"' + $channel_title + '","Commission":' + $channel_commission.to_s + ',"Engine":"' + $channel_engine + '","Keywords":"' + $channel_keywords + '","CPM":' + $channel_CPM + ',"AdTypes":' + $channel_AdTypes.to_json + ',"IsDeleted":false}'
+  end
+  
+  it "should update a channel" do
+    $u_channel_title = 'Test Channel ' + rand(1000000).to_s + 'test'
+    $u_channel_commission = '1'
+    $u_channel_engine = 'CPI'
+    $u_channel_keywords = 'another test'
+    $u_channel_CPM = '0'
+    $u_channel_AdTypes = [4,5,6,7,8]
+    
+    updated_channel = {
+      'Id' => $channel_id,
+      'Title' => $u_channel_title,
+      'Commission' => $u_channel_commission,
+      'Engine' => $u_channel_engine,
+      'Keywords' => $u_channel_keywords,
+      'CPM' => $u_channel_CPM,
+      'AdTypes' => $u_channel_AdTypes
+    }
+  
+    response = @@channel.update(updated_channel)
+    $channel_id = JSON.parse(response.body)["Id"].to_s
+    $u_channel_title.should == JSON.parse(response.body)["Title"]
+    $u_channel_commission.to_f.should == JSON.parse(response.body)["Commission"]
+    $u_channel_engine.should == JSON.parse(response.body)["Engine"]
+    $u_channel_keywords.should == JSON.parse(response.body)["Keywords"]
+    $u_channel_CPM.to_f.should == JSON.parse(response.body)["CPM"]
+    $u_channel_AdTypes.should == JSON.parse(response.body)["AdTypes"]
+  end
+  
+  it "should list all channels" do
+    result = @@channel.list()
+    result.length.should > 0
+    result["Items"].last["Id"].to_s.should == $channel_id
+    result["Items"].last["Title"].should == $u_channel_title
+    result["Items"].last["Commission"].should == $u_channel_commission.to_f
+    result["Items"].last["Engine"].should == $u_channel_engine
+    result["Items"].last["Keywords"].should == $u_channel_keywords
+    result["Items"].last["CPM"].to_s.should == $u_channel_CPM.to_f.to_s
+    result["Items"].last["AdTypes"].should == $u_channel_AdTypes
+  end
+  
+  it "should delete a new channel" do
+    response = @@channel.delete($channel_id)
+    response.body.should == 'OK'
+  end
+  
+  it "should not list deleted channels" do
+    result = @@channel.list()
+    result["Items"].each do |r|
+      r["Id"].to_s.should_not == $channel_id
+    end
+  end
+  
+  it "should not get individual deleted channel" do
+    response = @@channel.get($channel_id)
+    response.body.should == '{"Id":0,"Commission":0,"CPM":0,"IsDeleted":false}'
+  end
+  
+  it "should not update deleted channels" do
+    updated_channel = {
+      'Id' => $channel_id,
+      'Title' => $u_channel_title + "test",
+      'Commission' => $u_channel_commission,
+      'Engine' => $u_channel_engine,
+      'Keywords' => $u_channel_keywords,
+      'CPM' => $u_channel_CPM,
+      'AdTypes' => $u_channel_AdTypes
+    }
+    response = @@channel.update(updated_channel)
+    response.body.should == '{"Id":0,"Commission":0,"CPM":0,"IsDeleted":false}'
+  end
+
+end

data/test/creative_api_spec.rb

@@ -0,0 +1,167 @@
+require 'spec_helper'
+
+describe "Creative API" do
+  
+  $creative_url = 'http://www.adzerk.com'
+  @@creative = $adzerk::Creative.new
+  @@advertiser = $adzerk::Advertiser.new
+  
+  before(:all) do
+    new_advertiser = {
+      'Title' => "Test"
+    }
+    response = @@advertiser.create(new_advertiser)
+    $brandId = JSON.parse(response.body)["Id"]
+  end
+  
+  it "should create a creative" do
+    $Title = 'Test creative ' + rand(1000000).to_s
+    $ImageName = ""
+    $Url = "http://adzerk.com"
+    $Body = "Test text"
+    $BrandId = $brandId
+    $AdTypeId = 18
+    $IsActive = true
+    $Alt = "test alt"
+    $IsDeleted = false
+    $IsSync = false
+    
+    new_creative = {
+      'Title' => $Title,
+      'ImageName' => $ImageName,
+      'Url' => $Url,
+      'Body' => $Body,
+      'BrandId' => $BrandId,
+      'AdTypeId' => $AdTypeId,
+      'IsActive' => $IsActive,
+      'Alt' => $Alt,
+      'IsDeleted' => $IsDeleted,
+      'IsSync' => $IsSync
+    }
+    response = @@creative.create(new_creative, '250x250.gif')
+    
+    $creative_id = JSON.parse(response)["Id"].to_s
+    JSON.parse(response.body)["Title"].should == $Title
+    JSON.parse(response.body)["Url"].should == $Url
+    JSON.parse(response.body)["Body"].should == $Body
+    JSON.parse(response.body)["BrandId"].should == $BrandId
+    JSON.parse(response.body)["AdTypeId"].should == $AdTypeId
+    JSON.parse(response.body)["IsActive"].should == $IsActive
+    JSON.parse(response.body)["Alt"].should == $Alt
+    JSON.parse(response.body)["IsDeleted"].should == $IsDeleted
+    JSON.parse(response.body)["IsSync"].should == $IsSync
+    
+  end
+
+  it "should get a specific creative" do
+    response = @@creative.get($creative_id)
+    JSON.parse(response.body)["Id"].to_s.should == $creative_id
+    JSON.parse(response.body)["Title"].should == $Title
+    JSON.parse(response.body)["Url"].should == $Url
+    JSON.parse(response.body)["Body"].should == $Body
+    JSON.parse(response.body)["BrandId"].should == $BrandId
+    JSON.parse(response.body)["AdTypeId"].should == $AdTypeId
+    JSON.parse(response.body)["IsActive"].should == $IsActive
+    JSON.parse(response.body)["Alt"].should == $Alt
+    JSON.parse(response.body)["IsDeleted"].should == $IsDeleted
+    JSON.parse(response.body)["IsSync"].should == $IsSync
+  end
+
+  it "should update a specific creative" do
+    update_creative = {
+      'Id' => $creative_id.to_i,
+      'Title' => $Title,
+      'ImageName' => $ImageName,
+      'Url' => $Url,
+      'Body' => $Body,
+      'BrandId' => $BrandId,
+      'AdTypeId' => $AdTypeId,
+      'IsActive' => $IsActive,
+      'Alt' => $Alt,
+      'IsDeleted' => $IsDeleted,
+      'IsSync' => $IsSync
+    }
+    response = @@creative.update(update_creative)
+    # JSON.parse(response.body)["Id"].should == $creative_id
+    # JSON.parse(response.body)["Title"].should == $Title
+    # JSON.parse(response.body)["Url"].should == $Url
+    # JSON.parse(response.body)["Body"].should == $Body
+    # JSON.parse(response.body)["BrandId"].should == $BrandId
+    # JSON.parse(response.body)["AdTypeId"].should == $AdTypeId
+    # JSON.parse(response.body)["IsActive"].should == $IsActive
+    # JSON.parse(response.body)["Alt"].should == $Alt
+    # JSON.parse(response.body)["IsDeleted"].should == $IsDeleted
+    # JSON.parse(response.body)["IsSync"].should == $IsSync
+  end
+
+  it "should list all creatives for an advertiser" do
+    response = @@creative.list($BrandId)
+    entry = response["Items"].last.to_json
+    JSON.parse(entry)["Id"].should == $creative_id.to_i
+    JSON.parse(entry)["Title"].should == $Title
+    JSON.parse(entry)["Url"].should == $Url
+    JSON.parse(entry)["Body"].should == $Body
+    JSON.parse(entry)["BrandId"].should == $BrandId
+    JSON.parse(entry)["AdTypeId"].should == $AdTypeId
+    JSON.parse(entry)["IsActive"].should == $IsActive
+    JSON.parse(entry)["Alt"].should == $Alt
+    JSON.parse(entry)["IsDeleted"].should == $IsDeleted
+    JSON.parse(entry)["IsSync"].should == $IsSync
+  end
+
+  it "should delete the creatives after creating it" do
+    response = @@creative.delete($creative_id)
+    response.body.should == "OK"
+  end
+
+  it "should not use a brandId it doesn't have access to when creating" do 
+    new_creative = {
+      'Title' => $Title,
+      'ImageName' => $ImageName,
+      'Url' => $Url,
+      'Body' => $Body,
+      'BrandId' => 1,
+      'AdTypeId' => $AdTypeId,
+      'IsActive' => $IsActive,
+      'Alt' => $Alt,
+      'IsDeleted' => $IsDeleted,
+      'IsSync' => $IsSync
+    }
+    begin
+      response = @@creative.create(new_creative)
+    rescue Exception => e
+      response = e
+    end
+  
+    response.to_s.scan("302 Found").should_not == nil
+  end
+
+  it "should not use a brandId it doesn't have access to when updating" do 
+    new_creative = {
+      'Id' => $creative_id.to_i,
+      'Title' => $Title,
+      'ImageName' => $ImageName,
+      'Url' => $Url,
+      'Body' => $Body,
+      'BrandId' => 1,
+      'AdTypeId' => $AdTypeId,
+      'IsActive' => $IsActive,
+      'Alt' => $Alt,
+      'IsDeleted' => $IsDeleted,
+      'IsSync' => $IsSync
+    }
+    response = @@creative.update(new_creative)
+    true.should == !response.body.scan(/Object/).nil?
+  end
+
+  it "should not retrieve a creative it doesn't have access to" do
+    response = @@creative.get("123")
+    true.should == !response.body.scan(/Object/).nil?
+  end
+
+  it "should not delete a creative it doesn't have access to" do
+    response = @@creative.delete("123")
+    true.should == !response.body.scan(/Object/).nil?
+  end
+      
+end