casino 3.0.4 → 4.0.0.pre.1

data/spec/processor/login_credential_acceptor_spec.rb

@@ -1,164 +0,0 @@
-require 'spec_helper'
-
-describe CASino::LoginCredentialAcceptorProcessor do
-  describe '#process' do
-    let(:listener) { Object.new }
-    let(:processor) { described_class.new(listener) }
-
-    context 'without a valid login ticket' do
-      it 'calls the #invalid_login_ticket method on the listener' do
-        listener.should_receive(:invalid_login_ticket).with(kind_of(CASino::LoginTicket))
-        processor.process
-      end
-    end
-
-    context 'with an expired login ticket' do
-      let(:expired_login_ticket) { FactoryGirl.create :login_ticket, :expired }
-
-      it 'calls the #invalid_login_ticket method on the listener' do
-        listener.should_receive(:invalid_login_ticket).with(kind_of(CASino::LoginTicket))
-        processor.process(lt: expired_login_ticket.ticket)
-      end
-    end
-
-    context 'with a valid login ticket' do
-      let(:login_ticket) { FactoryGirl.create :login_ticket }
-
-      context 'with invalid credentials' do
-        it 'calls the #invalid_login_credentials method on the listener' do
-          listener.should_receive(:invalid_login_credentials).with(kind_of(CASino::LoginTicket))
-          processor.process(lt: login_ticket.ticket)
-        end
-      end
-
-      context 'with valid credentials' do
-        let(:service) { 'https://www.example.org' }
-        let(:username) { 'testuser' }
-        let(:authenticator) { 'static' }
-        let(:login_data) { { lt: login_ticket.ticket, username: username, password: 'foobar123', service: service } }
-
-        before(:each) do
-          listener.stub(:user_logged_in)
-        end
-
-        context 'with rememberMe set' do
-          let(:login_data_with_remember_me) { login_data.merge(rememberMe: true) }
-
-          it 'calls the #user_logged_in method on the listener with an expiration date set' do
-            listener.should_receive(:user_logged_in).with(/^#{service}\/\?ticket=ST\-/, /^TGC\-/, kind_of(Time))
-            processor.process(login_data_with_remember_me)
-          end
-
-          it 'creates a long-term ticket-granting ticket' do
-            processor.process(login_data_with_remember_me)
-            tgt = CASino::TicketGrantingTicket.last
-            tgt.long_term.should == true
-          end
-        end
-
-        context 'with two-factor authentication enabled' do
-          let!(:user) { CASino::User.create! username: username, authenticator: authenticator }
-          let!(:two_factor_authenticator) { FactoryGirl.create :two_factor_authenticator, user: user }
-
-          it 'calls the `#two_factor_authentication_pending` method on the listener' do
-            listener.should_receive(:two_factor_authentication_pending).with(/^TGC\-/)
-            processor.process(login_data)
-          end
-        end
-
-        context 'with a not allowed service' do
-          before(:each) do
-            FactoryGirl.create :service_rule, :regex, url: '^https://.*'
-          end
-          let(:service) { 'http://www.example.org/' }
-
-          it 'calls the #service_not_allowed method on the listener' do
-            listener.should_receive(:service_not_allowed).with(service)
-            processor.process(login_data)
-          end
-        end
-
-        context 'when all authenticators raise an error' do
-          before(:each) do
-            CASino::StaticAuthenticator.any_instance.stub(:validate) do
-              raise CASino::Authenticator::AuthenticatorError, 'error123'
-            end
-          end
-
-          it 'calls the #invalid_login_credentials method on the listener' do
-            listener.should_receive(:invalid_login_credentials).with(kind_of(CASino::LoginTicket))
-            processor.process(login_data)
-          end
-        end
-
-        context 'without a service' do
-          let(:service) { nil }
-
-          it 'calls the #user_logged_in method on the listener' do
-            listener.should_receive(:user_logged_in).with(nil, /^TGC\-/)
-            processor.process(login_data)
-          end
-
-          it 'generates a ticket-granting ticket' do
-            lambda do
-              processor.process(login_data)
-            end.should change(CASino::TicketGrantingTicket, :count).by(1)
-          end
-
-          context 'when the user does not exist yet' do
-            it 'generates exactly one user' do
-              lambda do
-                processor.process(login_data)
-              end.should change(CASino::User, :count).by(1)
-            end
-
-            it 'sets the users attributes' do
-              processor.process(login_data)
-              user = CASino::User.last
-              user.username.should == username
-              user.authenticator.should == authenticator
-            end
-          end
-
-          context 'when the user already exists' do
-            it 'does not regenerate the user' do
-              CASino::User.create! username: username, authenticator: authenticator
-              lambda do
-                processor.process(login_data)
-              end.should_not change(CASino::User, :count)
-            end
-
-            it 'updates the extra attributes' do
-              user = CASino::User.create! username: username, authenticator: authenticator
-              lambda do
-                processor.process(login_data)
-                user.reload
-              end.should change(user, :extra_attributes)
-            end
-          end
-        end
-
-        context 'with a service' do
-          let(:service) { 'https://www.example.com' }
-
-          it 'calls the #user_logged_in method on the listener' do
-            listener.should_receive(:user_logged_in).with(/^#{service}\/\?ticket=ST\-/, /^TGC\-/)
-            processor.process(login_data)
-          end
-
-          it 'generates a service ticket' do
-            lambda do
-              processor.process(login_data)
-            end.should change(CASino::ServiceTicket, :count).by(1)
-          end
-
-          it 'generates a ticket-granting ticket' do
-            lambda do
-              processor.process(login_data)
-            end.should change(CASino::TicketGrantingTicket, :count).by(1)
-          end
-        end
-      end
-    end
-  end
-end

data/spec/processor/login_credential_requestor_spec.rb

@@ -1,145 +0,0 @@
-require 'spec_helper'
-
-describe CASino::LoginCredentialRequestorProcessor do
-  describe '#process' do
-    let(:listener) { Object.new }
-    let(:processor) { described_class.new(listener) }
-
-    context 'with a not allowed service' do
-      before(:each) do
-        FactoryGirl.create :service_rule, :regex, url: '^https://.*'
-      end
-      let(:service) { 'http://www.example.org/' }
-      let(:params) { { service: service } }
-
-      it 'calls the #service_not_allowed method on the listener' do
-        listener.should_receive(:service_not_allowed).with(service)
-        processor.process(params)
-      end
-    end
-
-    context 'when logged out' do
-      it 'calls the #user_not_logged_in method on the listener' do
-        listener.should_receive(:user_not_logged_in).with(kind_of(CASino::LoginTicket))
-        processor.process
-      end
-
-      context 'with gateway parameter' do
-        context 'with a service' do
-          let(:service) { 'http://example.com/' }
-          let(:params) { { service: service, gateway: 'true' } }
-
-          it 'calls the #user_logged_in method on the listener' do
-            listener.should_receive(:user_logged_in).with(service)
-            processor.process(params)
-          end
-        end
-
-        context 'without a service' do
-          let(:params) { { gateway: 'true' } }
-
-          it 'calls the #user_not_logged_in method on the listener' do
-            listener.should_receive(:user_not_logged_in).with(kind_of(CASino::LoginTicket))
-            processor.process
-          end
-        end
-      end
-    end
-
-    context 'when logged in' do
-      let(:ticket_granting_ticket) { FactoryGirl.create :ticket_granting_ticket }
-      let(:user_agent) { ticket_granting_ticket.user_agent }
-      let(:cookies) { { tgt: ticket_granting_ticket.ticket } }
-
-      before(:each) do
-        listener.stub(:user_logged_in)
-      end
-
-      context 'when two-factor authentication is pending' do
-        let(:ticket_granting_ticket) { FactoryGirl.create :ticket_granting_ticket, :awaiting_two_factor_authentication }
-
-        it 'calls the #user_not_logged_in method on the listener' do
-          listener.should_receive(:user_not_logged_in).with(kind_of(CASino::LoginTicket))
-          processor.process(nil, cookies, user_agent)
-        end
-      end
-
-      context 'when ticket-granting ticket expired' do
-        before(:each) do
-          ticket_granting_ticket.created_at = 25.hours.ago
-          ticket_granting_ticket.save!
-        end
-
-        it 'calls the #user_not_logged_in method on the listener' do
-          listener.should_receive(:user_not_logged_in).with(kind_of(CASino::LoginTicket))
-          processor.process(nil, cookies, user_agent)
-        end
-      end
-
-      context 'with a service' do
-        let(:service) { 'http://example.com/' }
-        let(:params) { { service: service } }
-
-        it 'calls the #user_logged_in method on the listener' do
-          listener.should_receive(:user_logged_in).with(/^#{service}\?ticket=ST\-/)
-          processor.process(params, cookies, user_agent)
-        end
-
-        it 'generates a service ticket' do
-          lambda do
-            processor.process(params, cookies, user_agent)
-          end.should change(CASino::ServiceTicket, :count).by(1)
-        end
-
-        context 'with renew parameter' do
-          it 'calls the #user_not_logged_in method on the listener' do
-            listener.should_receive(:user_not_logged_in).with(kind_of(CASino::LoginTicket))
-            processor.process(params.merge({ renew: 'true' }), cookies)
-          end
-        end
-      end
-
-      context 'with a service with nested attributes' do
-        let(:service) { 'http://example.com/?a%5B%5D=test&a%5B%5D=example' }
-        let(:params) { { service: service } }
-
-        it 'does not remove the attributes' do
-          listener.should_receive(:user_logged_in).with(/\?a%5B%5D=test&a%5B%5D=example&ticket=ST\-[^&]+$/)
-          processor.process(params, cookies, user_agent)
-        end
-      end
-
-      context 'with a broken service' do
-        let(:service) { '%3Atest' }
-        let(:params) { { service: service } }
-
-        it 'calls the #user_logged_in method on the listener' do
-          listener.should_receive(:user_logged_in).with(nil)
-          processor.process(params, cookies, user_agent)
-        end
-      end
-
-      context 'without a service' do
-        it 'calls the #user_logged_in method on the listener' do
-          listener.should_receive(:user_logged_in).with(nil)
-          processor.process(nil, cookies, user_agent)
-        end
-
-        it 'does not generate a service ticket' do
-          lambda do
-            processor.process(nil, cookies, user_agent)
-          end.should change(CASino::ServiceTicket, :count).by(0)
-        end
-
-        context 'with a changed browser' do
-          let(:user_agent) { 'FooBar 1.0' }
-
-          it 'calls the #user_not_logged_in method on the listener' do
-            listener.should_receive(:user_not_logged_in).with(kind_of(CASino::LoginTicket))
-            processor.process(nil, cookies, user_agent)
-          end
-        end
-      end
-    end
-  end
-end

data/spec/processor/logout_other_sessions_spec.rb

@@ -1,53 +0,0 @@
-require 'spec_helper'
-
-describe CASino::OtherSessionsDestroyerProcessor do
-  describe '#process' do
-    let(:listener) { Object.new }
-    let(:processor) { described_class.new(listener) }
-    let(:cookies) { { tgt: tgt } }
-    let(:url) { nil }
-    let(:params) { { :service => url } unless url.nil? }
-
-    before(:each) do
-      listener.stub(:other_sessions_destroyed)
-    end
-
-    context 'with an existing ticket-granting ticket' do
-      let(:user) { FactoryGirl.create :user }
-      let!(:other_users_ticket_granting_tickets) { FactoryGirl.create_list :ticket_granting_ticket, 3 }
-      let!(:other_ticket_granting_tickets) { FactoryGirl.create_list :ticket_granting_ticket, 3, user: user }
-      let!(:ticket_granting_ticket) { FactoryGirl.create :ticket_granting_ticket, user: user }
-      let(:tgt) { ticket_granting_ticket.ticket }
-      let(:user_agent) { ticket_granting_ticket.user_agent }
-
-      it 'deletes all other ticket-granting tickets' do
-        lambda do
-          processor.process(params, cookies, user_agent)
-        end.should change(CASino::TicketGrantingTicket, :count).by(-3)
-      end
-
-      it 'calls the #user_logged_out method on the listener' do
-        listener.should_receive(:other_sessions_destroyed).with(nil)
-        processor.process(params, cookies, user_agent)
-      end
-
-      context 'with an URL' do
-        let(:url) { 'http://www.example.com' }
-
-        it 'calls the #user_logged_out method on the listener and passes the URL' do
-          listener.should_receive(:other_sessions_destroyed).with(url)
-          processor.process(params, cookies, user_agent)
-        end
-      end
-    end
-
-    context 'with an invlaid ticket-granting ticket' do
-      let(:tgt) { 'TGT-lalala' }
-
-      it 'calls the #other_sessions_destroyed method on the listener' do
-        listener.should_receive(:other_sessions_destroyed).with(nil)
-        processor.process(params, cookies)
-      end
-    end
-  end
-end

data/spec/processor/logout_spec.rb

@@ -1,72 +0,0 @@
-require 'spec_helper'
-
-describe CASino::LogoutProcessor do
-  describe '#process' do
-    let(:listener) { Object.new }
-    let(:processor) { described_class.new(listener) }
-    let(:cookies) { { tgt: tgt } }
-    let(:url) { nil }
-    let(:params) { { :url => url } unless url.nil? }
-
-    before(:each) do
-      listener.stub(:user_logged_out)
-    end
-
-    context 'with an existing ticket-granting ticket' do
-      let(:ticket_granting_ticket) { FactoryGirl.create :ticket_granting_ticket }
-      let(:tgt) { ticket_granting_ticket.ticket }
-      let(:user_agent) { ticket_granting_ticket.user_agent }
-
-      it 'deletes the ticket-granting ticket' do
-        processor.process(params, cookies, user_agent)
-        CASino::TicketGrantingTicket.where(id: ticket_granting_ticket.id).first.should == nil
-      end
-
-      it 'calls the #user_logged_out method on the listener' do
-        listener.should_receive(:user_logged_out).with(nil)
-        processor.process(params, cookies, user_agent)
-      end
-
-      context 'with an URL' do
-        let(:url) { 'http://www.example.com' }
-
-        it 'calls the #user_logged_out method on the listener and passes the URL' do
-          listener.should_receive(:user_logged_out).with(url)
-          processor.process(params, cookies, user_agent)
-        end
-      end
-
-      context 'with a service' do
-        let(:params) { { :service => url } }
-        let(:url) { 'http://www.example.org' }
-
-        context '(whitelisted)' do
-          it 'calls the #user_logged_out method on the listener and passes the URL and the redirect_immediate flag' do
-            listener.should_receive(:user_logged_out).with(url, true)
-            processor.process(params, cookies, user_agent)
-          end
-        end
-
-        context '(not whitelisted)' do
-          before(:each) do
-            FactoryGirl.create :service_rule, :regex, url: '^https://.*'
-          end
-
-          it 'calls the #user_logged_out method on the listener and passes no URL' do
-            listener.should_receive(:user_logged_out).with(nil)
-            processor.process(params, cookies, user_agent)
-          end
-        end
-      end
-    end
-
-    context 'with an invlaid ticket-granting ticket' do
-      let(:tgt) { 'TGT-lalala' }
-
-      it 'calls the #user_logged_out method on the listener' do
-        listener.should_receive(:user_logged_out).with(nil)
-        processor.process(params, cookies)
-      end
-    end
-  end
-end

data/spec/processor/processor_concern/service_tickets_spec.rb

@@ -1,49 +0,0 @@
-require 'spec_helper'
-
-describe CASino::ProcessorConcern::ServiceTickets do
-  let(:class_with_mixin) {
-    Class.new do
-      include CASino::ProcessorConcern::ServiceTickets
-    end
-  }
-  subject {
-    class_with_mixin.new
-  }
-
-  describe '#acquire_service_ticket' do
-    let(:ticket_granting_ticket) { FactoryGirl.create :ticket_granting_ticket }
-    let(:service) { 'http://www.example.com/' }
-
-    context 'with a ticket-granting ticket with existing service tickets' do
-      let!(:service_ticket) { FactoryGirl.create :service_ticket, ticket_granting_ticket: ticket_granting_ticket, service: service }
-      let!(:other_service_ticket) { FactoryGirl.create :service_ticket, ticket_granting_ticket: ticket_granting_ticket }
-
-      it 'does not change the service tickets count' do
-        expect do
-          subject.acquire_service_ticket(ticket_granting_ticket, service)
-        end.to_not change(CASino::ServiceTicket, :count)
-      end
-
-      it 'deletes the old service ticket' do
-        subject.acquire_service_ticket(ticket_granting_ticket, service)
-        expect { service_ticket.reload }.to raise_error(ActiveRecord::RecordNotFound)
-      end
-    end
-
-    context 'with a service url another ticket-granting ticket has a service ticket for' do
-      let!(:service_ticket) { FactoryGirl.create :service_ticket, ticket_granting_ticket: ticket_granting_ticket, service: service }
-      let!(:other_ticket_granting_ticket) { FactoryGirl.create :ticket_granting_ticket }
-
-      it 'does change the service tickets count' do
-        expect do
-          subject.acquire_service_ticket(other_ticket_granting_ticket, service)
-        end.to change(CASino::ServiceTicket, :count).by(1)
-      end
-
-      it 'does not delete the other service ticket' do
-        subject.acquire_service_ticket(other_ticket_granting_ticket, service)
-        expect { service_ticket.reload }.not_to raise_error
-      end
-    end
-  end
-end