authpwn_rails 0.10.12 → 0.11.0

data/VERSION

@@ -1 +1 @@
-0.10.12
+0.11.0

data/authpwn_rails.gemspec

@@ -5,7 +5,7 @@
 
 Gem::Specification.new do |s|
   s.name = "authpwn_rails"
-  s.version = "0.10.12"
+  s.version = "0.11.0"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ["Victor Costan"]

data/lib/authpwn_rails/test_extensions.rb

@@ -58,7 +58,12 @@ module ControllerTestExtensions
   # Tests that need to disable transactional fixures should specify the user's
   # password.
   def set_http_basic_user(user, password = nil)
-    unless password
+    if user.nil?
+      request.env.delete 'HTTP_AUTHORIZATION'
+      return self
+    end
+
+    if password.nil?
       password = 'password'
       credential = Credentials::Password.where(:user_id => user.id).first
       if credential
@@ -78,7 +83,7 @@ module ControllerTestExtensions
 
     request.env['HTTP_AUTHORIZATION'] =
         "Basic #{::Base64.strict_encode64("#{email}:#{password}")}"
-    user
+    self
   end
 end  # module Authpwn::ControllerTestExtensions
 

data/test/http_basic_controller_test.rb

@@ -52,6 +52,14 @@ class HttpBasicControllerTest < ActionController::TestCase
     assert_equal 'No user', response.body
   end
 
+  test "reset user credentials in header" do
+    set_http_basic_user @user, 'pa55w0rd'
+    set_http_basic_user nil
+    get :show
+    assert_nil assigns(:current_user)
+    assert_equal 'No user', response.body
+  end
+
   test "mocked user credentials in header" do
     set_http_basic_user @user
     get :show

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: authpwn_rails
 version: !ruby/object:Gem::Version
-  version: 0.10.12
+  version: 0.11.0
   prerelease: 
 platform: ruby
 authors:
@@ -278,7 +278,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '0'
       segments:
       - 0
-      hash: 546732945991405653
+      hash: 903064775847745508
 required_rubygems_version: !ruby/object:Gem::Requirement
   none: false
   requirements: