auth0 4.7.0 → 4.12.0

data/spec/integration/lib/auth0/api/v2/api_users_spec.rb

@@ -1,21 +1,65 @@
 require 'spec_helper'
 describe Auth0::Api::V2::Users do
-  let(:client) { Auth0Client.new(v2_creds) }
-  let(:test_user_name) { "#{entity_suffix}-username" }
-  let(:test_user_email) { "#{entity_suffix}-#{test_user_name}@auth0.com" }
-  let(:test_user) do
-    VCR.use_cassette(
-      'Auth0_Api_V2_Users/create_test_user'
-    ) do
-      client.create_user(
-        test_user_name,
-        'email' => test_user_email,
-        'password' => Faker::Internet.password,
-        'connection' => Auth0::Api::AuthenticationEndpoints::UP_AUTH
+
+  attr_reader :client, :test_user_name, :test_user_email, :test_user, :test_user_secondary,
+              :test_role, :test_api_name, :test_permission_name, :test_permission
+
+  before(:all) do
+    @client ||= Auth0::Client.new(v2_creds)
+
+    @test_user_name = "#{entity_suffix}-username"
+    @test_user_email = "#{entity_suffix}-#{@test_user_name}@auth0.com"
+
+    @test_api_name = "#{entity_suffix}-test-api-for-users"
+    @test_api_scope = 'test:scope'
+
+    @test_permission_name = "#{entity_suffix}-test-permission-for-users"
+    @test_permission = Permission.new("#{entity_suffix}-test-permission-for-users", @test_api_name)
+
+    VCR.use_cassette('Auth0_Api_V2_Users/create_test_user') do
+      @test_user ||= client.create_user(
+        @test_user_name,
+        email: @test_user_email,
+        password: Faker::Internet.password,
+        connection: Auth0::Api::AuthenticationEndpoints::UP_AUTH
+      )
+    end
+
+    VCR.use_cassette('Auth0_Api_V2_Users/create_secondary_test_user') do
+      @test_user_secondary ||= client.create_user(
+        "#{test_user_name}-secondary",
+        email: "#{entity_suffix}-#{@test_user_name}-secondary@auth0.com",
+        password: Faker::Internet.password,
+        connection: Auth0::Api::AuthenticationEndpoints::UP_AUTH
+      )
+    end
+
+    VCR.use_cassette('Auth0_Api_V2_Users/create_test_api') do
+      @test_api ||= client.create_resource_server(
+        @test_api_name,
+        name: @test_api_name,
+        scopes: [{ value: @test_api_scope }]
+      )
+    end
+
+    VCR.use_cassette('Auth0_Api_V2_Users/create_test_role') do
+      @test_role ||= client.create_role(
+        "#{entity_suffix}-test-role-for-users",
+        description: 'Test role description'
       )
     end
   end
 
+  after(:all) do
+    VCR.use_cassette('Auth0_Api_V2_Users/delete_test_api') do
+      client.delete_resource_server @test_api['id']
+    end
+
+    VCR.use_cassette('Auth0_Api_V2_Users/delete_test_role') do
+      client.delete_role @test_role['id']
+    end
+  end
+
   describe '.create_user', vcr: true do
     it 'should return the created user' do
       expect(test_user).to include('user_id', 'email', 'email_verified', 'name')
@@ -138,45 +182,119 @@ describe Auth0::Api::V2::Users do
   describe '.patch_user', vcr: true do
     let(:patch_user_body) do
       {
+        'email_verified' => true,
         'user_metadata' => {
           'addresses' => { 'home_address' => '742 Evergreen Terrace' }
         }
       }
     end
 
-    it 'should raise an error when the user_id is missing' do
-      expect { client.patch_user('', {}) }.to raise_error Auth0::MissingUserId
+    it 'should patch the User successfully' do
+      expect(
+        client.patch_user(test_user['user_id'], patch_user_body)
+      ).to include(patch_user_body)
+    end
+  end
+
+  describe '.delete_user_provider', vcr: true do
+    it 'should attempt to delete the MFA provider for the User' do
+      expect { client.delete_user_provider test_user['user_id'], 'google-authenticator' }.to_not raise_error
     end
+  end
+
+  describe '.link_user_account', vcr: true do
+    let(:secondary_account_body) do
+      {
+        provider: 'auth0',
+        user_id: test_user_secondary['user_id']
+      }
+    end
+
+    it 'should link two Users successfully' do
+      expect { client.link_user_account test_user['user_id'], secondary_account_body }.to_not raise_error
+    end
+  end
 
-    it 'should raise an error when the body is missing' do
+  describe '.unlink_user_account', vcr: true do
+    it 'should unlink two Users successfully' do
       expect do
-        client.patch_user(test_user['user_id'], {})
-      end.to raise_error Auth0::InvalidParameter
+        client.unlink_user_account test_user['user_id'], 'auth0', test_user_secondary['user_id']
+      end.to_not raise_error
     end
+  end
 
-    it 'should patch email_verified and return the updated data' do
-      expect(
-        client.patch_user(
-          test_user['user_id'],
-          'email_verified' => true
-        )
-      ).to include('email_verified' => true)
+  describe '.user_logs', vcr: true do
+    it 'should get Logs for a User successfully' do
+      expect { client.user_logs( test_user['user_id'], per_page: 2 ) }.to_not raise_error
     end
+  end
 
-    it 'should patch user_metadata and return the updated user' do
-      expect(
-        client.patch_user(test_user['user_id'], patch_user_body)
-      ).to include(patch_user_body)
+  describe '.add_user_roles', vcr: true do
+    it 'should add a Role to a User successfully' do
+      expect { client.add_user_roles test_user['user_id'], [ test_role['id'] ] }.to_not raise_error
     end
   end
 
-  describe '.delete_user', vcr: true do
-    it 'should raise an error when the user_id is missing' do
-      expect { client.delete_user '' }.to raise_error Auth0::MissingUserId
+  describe '.get_user_roles', vcr: true do
+    it 'should get Roles for a User successfully' do
+      expect( client.get_user_roles(test_user['user_id']).first ).to include(
+        'id' => test_role['id']
+      )
+    end
+  end
+
+  describe '.remove_user_roles', vcr: true do
+    it 'should remove a Role from a User successfully' do
+      expect { client.remove_user_roles test_user['user_id'], [ test_role['id'] ] }.to_not raise_error
+    end
+  end
+
+  describe '.get_enrollments', vcr: true do
+    it 'should get Enrollments for a User successfully' do
+      expect { client.get_enrollments test_user['user_id'] }.to_not raise_error
+    end
+  end
+
+  describe '.add_user_permissions', vcr: true do
+    it 'should add a Permissions for a User successfully' do
+      expect { client.add_user_permissions test_user['user_id'], [ test_permission ] }.to_not raise_error
+    end
+  end
+
+  describe '.get_user_permissions', vcr: true do
+    let(:test_get_user_permissions) do
+      client.get_user_permissions test_user['user_id']
+    end
+
+    it 'should get exactly 1 Permission for a User successfully' do
+      expect( test_get_user_permissions.count ).to eq 1
     end
 
-    it 'should delete the user successfully' do
+    it 'should get the correct Permission for a User successfully' do
+      expect( test_get_user_permissions.first['permission_name'] ).to eq test_permission_name
+      expect( test_get_user_permissions.first['resource_server_name'] ).to eq test_api_name
+    end
+  end
+
+  describe '.remove_user_permissions', vcr: true do
+    it 'should remove a Permission from a User successfully' do
+      expect { client.remove_user_permissions test_user['user_id'], [ test_permission ] }.to_not raise_error
+    end
+  end
+
+  describe '.invalidate_browsers', vcr: true do
+    it 'should invalidate MFA browsers for the User successfully' do
+      expect { client.invalidate_browsers test_user['user_id'] }.to_not raise_error
+    end
+  end
+
+  describe '.delete_user', vcr: true do
+    it 'should delete the User successfully' do
       expect { client.delete_user test_user['user_id'] }.to_not raise_error
     end
+
+    it 'should delete the secondary User successfully' do
+      expect { client.delete_user test_user_secondary['user_id'] }.to_not raise_error
+    end
   end
 end

data/spec/integration/lib/auth0/auth0_client_spec.rb

@@ -44,19 +44,18 @@ describe Auth0::Client do
     api_version: 2, token: 'token'
   }, Auth0::InvalidApiNamespace
 
-  let(:token) { ENV['MASTER_JWT'] }
-  let(:v2_credentials) { { domain: ENV['DOMAIN'] } }
+  let(:v2_credentials) { { domain: 'test.auth0.com' } }
 
   shared_examples 'valid credentials' do
     it { expect { Auth0Client.new(credentials) }.to_not raise_error }
   end
 
   it_should_behave_like 'valid credentials' do
-    let(:credentials) { v2_credentials.merge(token: token) }
+    let(:credentials) { v2_credentials.merge(token: 'TEST_API_TOKEN') }
   end
 
   it_should_behave_like 'valid credentials' do
-    let(:credentials) { v2_credentials.merge(access_token: ENV['MASTER_JWT']) }
+    let(:credentials) { v2_credentials.merge(access_token: 'TEST_API_TOKEN') }
   end
 
   context 'client headers' do

data/spec/lib/auth0/api/authentication_endpoints_spec.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # rubocop:disable Metrics/BlockLength
 require 'spec_helper'
 describe Auth0::Api::AuthenticationEndpoints do
@@ -20,7 +22,7 @@ describe Auth0::Api::AuthenticationEndpoints do
         grant_type: 'client_credentials',
         client_id: @instance.client_id,
         client_secret: @instance.client_secret,
-        audience: @instance.audience,
+        audience: @instance.audience
       ).and_return('access_token' => 'AccessToken')
 
       expect(@instance.api_token.token).to eql 'AccessToken'
@@ -32,7 +34,7 @@ describe Auth0::Api::AuthenticationEndpoints do
         grant_type: 'client_credentials',
         client_id: @instance.client_id,
         client_secret: @instance.client_secret,
-        audience: '__test_audience__',
+        audience: '__test_audience__'
       ).and_return('access_token' => 'AccessToken')
 
       expect(
@@ -47,7 +49,7 @@ describe Auth0::Api::AuthenticationEndpoints do
       allow(@instance).to receive(:post).with(
         '/oauth/token', client_id: @instance.client_id, client_secret: @instance.client_secret, grant_type: 'client_credentials'
       )
-                            .and_return('access_token' => 'AccessToken')
+                                        .and_return('access_token' => 'AccessToken')
 
       expect(@instance).to receive(:post).with(
         '/oauth/token', client_id: @instance.client_id, client_secret: @instance.client_secret, grant_type: 'client_credentials'
@@ -90,7 +92,6 @@ describe Auth0::Api::AuthenticationEndpoints do
     it { expect { @instance.obtain_user_tokens('code', '') }.to raise_error 'Must supply a valid redirect_uri' }
   end
 
-
   context '.exchange_auth_code_for_tokens' do
     it { is_expected.to respond_to(:exchange_auth_code_for_tokens) }
 
@@ -183,7 +184,6 @@ describe Auth0::Api::AuthenticationEndpoints do
       ).to eq 'AccessToken'
     end
 
-
     it 'is expected to make post request to /oauth/token with custom params' do
       allow(@instance).to receive(:post).with(
         '/oauth/token',
@@ -241,7 +241,6 @@ describe Auth0::Api::AuthenticationEndpoints do
     end
 
     it 'should make post to /oauth/token with custom params' do
-
       allow(@instance).to receive(:post).with(
         '/oauth/token',
         username: 'test@test.com',
@@ -355,7 +354,8 @@ describe Auth0::Api::AuthenticationEndpoints do
       expect(@instance).to receive(:post).with(
         '/passwordless/start',
         client_id: @instance.client_id,
-        connection:  'email',
+        client_secret: @instance.client_secret,
+        connection: 'email',
         email: 'test@test.com',
         send: 'code',
         authParams: {
@@ -388,6 +388,7 @@ describe Auth0::Api::AuthenticationEndpoints do
       expect(@instance).to receive(:post).with(
         '/passwordless/start',
         client_id: @instance.client_id,
+        client_secret: @instance.client_secret,
         connection: 'sms',
         phone_number: phone_number
       )
@@ -550,7 +551,7 @@ describe Auth0::Api::AuthenticationEndpoints do
   context '.userinfo' do
     it { is_expected.to respond_to(:user_info) }
     it 'is expected to make a GET request to /userinfo' do
-      is_expected.to receive(:get).with('/userinfo', {}, {'Authorization' => 'Bearer access-token'})
+      is_expected.to receive(:get).with('/userinfo', {}, { 'Authorization' => 'Bearer access-token' })
       subject.userinfo 'access-token'
     end
   end
@@ -603,7 +604,7 @@ describe Auth0::Api::AuthenticationEndpoints do
 
     it 'is expected to return a logout url with a client ID' do
       expect(@instance.logout_url(return_to, include_client: true).to_s).to eq(
-        "https://#{@instance.domain}/v2/logout" +
+        "https://#{@instance.domain}/v2/logout" \
           "?returnTo=http%3A%2F%2Freturnto.com&client_id=#{@instance.client_id}"
       )
     end
@@ -653,7 +654,7 @@ describe Auth0::Api::AuthenticationEndpoints do
     end
 
     it 'is expected to get the wsfed url with wctx' do
-      expect(@instance.wsfed_url(UP_AUTH, {wctx: 'wctx_test'}).to_s).to eq(
+      expect(@instance.wsfed_url(UP_AUTH, { wctx: 'wctx_test' }).to_s).to eq(
         "https://#{@instance.domain}/wsfed/#{@instance.client_id}" \
           "?whr=#{UP_AUTH}&wctx=wctx_test"
       )
@@ -672,5 +673,31 @@ describe Auth0::Api::AuthenticationEndpoints do
       )
     end
   end
+
+  # Auth0::API::AuthenticationEndpoints.validate_id_token
+  context '.validate_id_token' do
+    it { expect(@instance).to respond_to(:validate_id_token) }
+
+    it 'is expected not to raise an error with default values' do
+      stub_request(:get, 'https://test.auth0.com/.well-known/jwks.json').to_return(body: JWKS_RESPONSE_1.to_json)
+      token = 'eyJhbGciOiJSUzI1NiIsImtpZCI6InRlc3Qta2V5LTEifQ.eyJpc3MiOiJodHRwczovL3Rlc3QuYXV0aDAuY29tLyIsInN1YiI6ImF1dGgwfDEyMzQ1Njc4OSIsImF1ZCI6WyJfX3Rlc3RfYXVkaWVuY2VfXyIsIl9fdGVzdF9jbGllbnRfaWRfXyJdLCJleHAiOjI1MzgzMDExNDYsImlhdCI6MTU4NzU5MjU2MSwiYXpwIjoiX190ZXN0X2NsaWVudF9pZF9fIn0.X35Hfa1C9RtuJIj7Eky2iO4elY9XqCDRy8ieFAft63vGds9vhP38x8QHbJifmLs6vDEOySKfJMWhklp3oaXm6Tk6gyUQEaliW_pXUgZt8C3Xo125R8BMCDQeVJg8Abevbg6FpHpYztWpQuI609tmpoTczx7pXMmAneg6e4LNYvvtzaFD_0M0cxtjkm4OcevCJszNBru3tdXwRynkGbMYeXgoa_FumAshRvIvh-4dtkyNWsepo5IVTvixxF3FVoFaXOOycmFXh9gxOppG4lvE78AFB9AQ9LNS-DNhcXszbPs9KHMrg2bqhSL8Razqd3m2a1MXkdLMBD5DY499MVnb5w'
+
+      expect { @instance.validate_id_token(token) }.to_not raise_exception
+    end
+
+    it 'is expected not to raise an error with custom values' do
+      token = 'eyJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJpc3N1ZXIiLCJzdWIiOiJhdXRoMHwxMjM0NTY3ODkiLCJhdWQiOlsiYXVkaWVuY2UiLCJhbm90aGVyX2F1ZGllbmNlIl0sImV4cCI6MjUzODMwMTE0NiwiaWF0IjoxNTg3NTkyNTYxLCJub25jZSI6Im5vbmNlIiwiYXpwIjoiYXVkaWVuY2UiLCJhdXRoX3RpbWUiOjE1ODc2Nzg5NjF9.u39qTvuUmbzj5jsXjATXxjxJt0u064G1IAumoi18gm0'
+
+      expect do
+        @instance.validate_id_token(token,
+                                    algorithm: Auth0::Algorithm::HS256.secret('secret'),
+                                    leeway: 100,
+                                    nonce: 'nonce',
+                                    max_age: 2538301146,
+                                    issuer: 'issuer',
+                                    audience: 'audience')
+      end.to_not raise_exception
+    end
+  end
 end
 # rubocop:enable Metrics/BlockLength

data/spec/lib/auth0/api/v2/anomaly_spec.rb

@@ -0,0 +1,26 @@
+require 'spec_helper'
+describe Auth0::Api::V2::Anomaly do
+  before :all do
+    dummy_instance = DummyClass.new
+    dummy_instance.extend(Auth0::Api::V2::Anomaly)
+    @instance = dummy_instance
+  end
+
+  context '.check_if_ip_is_blocked' do
+    it { expect(@instance).to respond_to(:check_if_ip_is_blocked) }
+    it 'expect client to send get to /api/v2/anomaly/blocks/ips/192.0.2.0' do
+      expect(@instance).to receive(:get).with('/api/v2/anomaly/blocks/ips/192.0.2.0')
+      expect { @instance.check_if_ip_is_blocked('192.0.2.0') }.not_to raise_error
+    end
+    it { expect { @instance.check_if_ip_is_blocked('') }.to raise_error('Must specify an IP') }
+  end
+
+  context '.remove_ip_block' do
+    it { expect(@instance).to respond_to(:remove_ip_block) }
+    it 'expect client to send delete to /api/v2/anomaly/blocks/ips/192.0.2.0' do
+      expect(@instance).to receive(:delete).with('/api/v2/anomaly/blocks/ips/192.0.2.0')
+      expect { @instance.remove_ip_block('192.0.2.0') }.not_to raise_error
+    end
+    it { expect { @instance.remove_ip_block('') }.to raise_error('Must specify an IP') }
+  end
+end

data/spec/lib/auth0/api/v2/client_grants_spec.rb

@@ -13,15 +13,32 @@ describe Auth0::Api::V2::ClientGrants do
     it 'is expected to get /api/v2/client-grants/' do
       expect(@instance).to receive(:get).with(
         '/api/v2/client-grants',
+        client_id: nil,
+        audience: nil,
         page: nil,
         per_page: nil
       )
       expect { @instance.client_grants }.not_to raise_error
     end
 
+    it 'is expected to send get /api/v2/client-grants/ with client_id and audience' do
+      audience = "https://samples.auth0.com/api/v2/"
+
+      expect(@instance).to receive(:get).with(
+        '/api/v2/client-grants',
+        client_id: '1',
+        audience: audience,
+        page: nil,
+        per_page: nil
+      )
+      expect { @instance.client_grants(client_id: '1', audience: audience) }.not_to raise_error
+    end
+
     it 'is expected to send get /api/v2/client-grants/ with pagination' do
       expect(@instance).to receive(:get).with(
         '/api/v2/client-grants',
+        client_id: nil,
+        audience: nil,
         page: 1,
         per_page: 2
       )

data/spec/lib/auth0/api/v2/guardian_spec.rb

@@ -0,0 +1,154 @@
+require 'spec_helper'
+describe Auth0::Api::V2::Guardian do
+  before :all do
+    dummy_instance = DummyClass.new
+    dummy_instance.extend(Auth0::Api::V2::Guardian)
+    @instance = dummy_instance
+  end
+
+  context '.guardian_factors' do
+    it 'is expected to respond to a guardian_factors method' do
+      expect(@instance).to respond_to(:guardian_factors)
+    end
+
+    it 'is expected to respond to a get_guardian_factors method' do
+      expect(@instance).to respond_to(:get_guardian_factors)
+    end
+
+    it 'is expected to get /api/v2/guardian/factors' do
+      expect(@instance).to receive(:get).with(
+        '/api/v2/guardian/factors'
+      )
+      expect { @instance.guardian_factors }.not_to raise_error
+    end
+  end
+
+  context '.guardian_enrollment' do
+    it 'is expected to respond to a guardian_enrollment method' do
+      expect(@instance).to respond_to(:guardian_enrollment)
+    end
+
+    it 'is expected to call get request to /api/v2/guardian/enrollments/ENROLLMENT_ID' do
+      expect(@instance).to receive(:get).with(
+        '/api/v2/guardian/enrollments/ENROLLMENT_ID'
+      )
+      expect { @instance.guardian_enrollment('ENROLLMENT_ID') }.not_to raise_error
+    end
+
+    it 'is expected to raise an exception when the enrollment ID is empty' do
+      expect { @instance.guardian_enrollment(nil) }.to raise_exception(Auth0::MissingParameter)
+    end
+  end
+
+  context '.delete_guardian_enrollment' do
+    it 'is expected to respond to a delete_guardian_enrollment method' do
+      expect(@instance).to respond_to(:delete_guardian_enrollment)
+    end
+
+    it 'is expected to delete /api/v2/guardian/enrollments/ENROLLMENT_ID' do
+      expect(@instance).to receive(:delete).with('/api/v2/guardian/enrollments/ENROLLMENT_ID')
+      @instance.delete_guardian_enrollment('ENROLLMENT_ID')
+    end
+
+    it 'is expected not to delete /api/v2/guardian/enrollments/ENROLLMENT_ID if enrollment_id is blank' do
+      expect(@instance).not_to receive(:delete)
+      expect { @instance.delete_guardian_enrollment(nil) }.to raise_exception(
+        Auth0::MissingParameter
+      )
+    end
+  end
+
+  context '.guardian_sms_templates' do
+    it 'is expected to respond to a guardian_sms_templates method' do
+      expect(@instance).to respond_to(:guardian_sms_templates)
+    end
+
+    it 'is expected to call get request to /api/v2/guardian/factors/sms/templates' do
+      expect(@instance).to receive(:get).with(
+        '/api/v2/guardian/factors/sms/templates'
+      )
+      expect { @instance.guardian_sms_templates }.not_to raise_error
+    end
+  end
+
+  context '.guardian_update_enrollment_verification_templates' do
+    it 'is expected to respond to a guardian_update_enrollment_verification_templates method' do
+      expect(@instance).to respond_to(:guardian_update_enrollment_verification_templates)
+    end
+
+    it 'is expected to patch /api/v2/guardian/factors/sms/templates' do
+      expect(@instance).to receive(:put).with('/api/v2/guardian/factors/sms/templates', 'BODY')
+      @instance.guardian_update_enrollment_verification_templates('BODY')
+    end
+  end
+
+  context '.guardian_sns_provider_config' do
+    it 'is expected to respond to a guardian_sns_provider_config method' do
+      expect(@instance).to respond_to(:guardian_sns_provider_config)
+    end
+
+    it 'is expected to call get request to /api/v2/guardian/factors/push-notification/providers/sns' do
+      expect(@instance).to receive(:get).with(
+        '/api/v2/guardian/factors/push-notification/providers/sns'
+      )
+      expect { @instance.guardian_sns_provider_config }.not_to raise_error
+    end
+  end
+
+  context '.guardian_update_sns_provider_config' do
+    it 'is expected to respond to a guardian_update_sns_provider_config method' do
+      expect(@instance).to respond_to(:guardian_update_sns_provider_config)
+    end
+
+    it 'is expected to patch /api/v2/guardian/factors/push-notification/providers/sns' do
+      expect(@instance).to receive(:put).with('/api/v2/guardian/factors/push-notification/providers/sns', 'BODY')
+      @instance.guardian_update_sns_provider_config('BODY')
+    end
+  end
+
+  context '.guardian_twillo_provider_config' do
+    it 'is expected to respond to a guardian_twillo_provider_config method' do
+      expect(@instance).to respond_to(:guardian_twillo_provider_config)
+    end
+
+    it 'is expected to call get request to /api/v2/guardian/factors/sms/providers/twilio' do
+      expect(@instance).to receive(:get).with(
+        '/api/v2/guardian/factors/sms/providers/twilio'
+      )
+      expect { @instance.guardian_twillo_provider_config }.not_to raise_error
+    end
+  end
+
+  context '.guardian_update_twillo_provider_config' do
+    it 'is expected to respond to a guardian_update_twillo_provider_config method' do
+      expect(@instance).to respond_to(:guardian_update_twillo_provider_config)
+    end
+
+    it 'is expected to patch /api/v2/guardian/factors/sms/providers/twilio' do
+      expect(@instance).to receive(:put).with('/api/v2/guardian/factors/sms/providers/twilio', 'BODY')
+      @instance.guardian_update_twillo_provider_config('BODY')
+    end
+  end
+
+  context '.guardian_create_enrollment_ticket' do
+    it 'is expected to respond to a guardian_create_enrollment_ticket method' do
+      expect(@instance).to respond_to(:guardian_create_enrollment_ticket)
+    end
+
+    it 'is expected to post /api/v2/guardian/enrollments/ticket' do
+      expect(@instance).to receive(:post).with('/api/v2/guardian/enrollments/ticket', 'BODY')
+      @instance.guardian_create_enrollment_ticket('BODY')
+    end
+  end
+
+  context '.guardian_update_factor' do
+    it 'is expected to respond to a guardian_update_factor method' do
+      expect(@instance).to respond_to(:guardian_update_factor)
+    end
+
+    it 'is expected to patch /api/v2/guardian/factors/NAME' do
+      expect(@instance).to receive(:put).with('/api/v2/guardian/factors/NAME', 'BODY')
+      @instance.guardian_update_factor('NAME', 'BODY')
+    end
+  end
+end