cotweet-authlogic 2.1.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- data/.gitignore +9 -0
- data/CHANGELOG.rdoc +345 -0
- data/LICENSE +20 -0
- data/README.rdoc +246 -0
- data/Rakefile +41 -0
- data/VERSION.yml +5 -0
- data/authlogic.gemspec +216 -0
- data/generators/session/session_generator.rb +9 -0
- data/generators/session/templates/session.rb +2 -0
- data/init.rb +1 -0
- data/lib/authlogic.rb +64 -0
- data/lib/authlogic/acts_as_authentic/base.rb +107 -0
- data/lib/authlogic/acts_as_authentic/email.rb +110 -0
- data/lib/authlogic/acts_as_authentic/logged_in_status.rb +60 -0
- data/lib/authlogic/acts_as_authentic/login.rb +141 -0
- data/lib/authlogic/acts_as_authentic/magic_columns.rb +24 -0
- data/lib/authlogic/acts_as_authentic/password.rb +355 -0
- data/lib/authlogic/acts_as_authentic/perishable_token.rb +105 -0
- data/lib/authlogic/acts_as_authentic/persistence_token.rb +68 -0
- data/lib/authlogic/acts_as_authentic/restful_authentication.rb +61 -0
- data/lib/authlogic/acts_as_authentic/session_maintenance.rb +139 -0
- data/lib/authlogic/acts_as_authentic/single_access_token.rb +65 -0
- data/lib/authlogic/acts_as_authentic/validations_scope.rb +32 -0
- data/lib/authlogic/authenticates_many/association.rb +42 -0
- data/lib/authlogic/authenticates_many/base.rb +55 -0
- data/lib/authlogic/controller_adapters/abstract_adapter.rb +67 -0
- data/lib/authlogic/controller_adapters/merb_adapter.rb +30 -0
- data/lib/authlogic/controller_adapters/rails_adapter.rb +48 -0
- data/lib/authlogic/controller_adapters/sinatra_adapter.rb +61 -0
- data/lib/authlogic/crypto_providers/aes256.rb +43 -0
- data/lib/authlogic/crypto_providers/bcrypt.rb +90 -0
- data/lib/authlogic/crypto_providers/md5.rb +34 -0
- data/lib/authlogic/crypto_providers/sha1.rb +35 -0
- data/lib/authlogic/crypto_providers/sha256.rb +50 -0
- data/lib/authlogic/crypto_providers/sha512.rb +50 -0
- data/lib/authlogic/crypto_providers/wordpress.rb +43 -0
- data/lib/authlogic/i18n.rb +83 -0
- data/lib/authlogic/i18n/translator.rb +15 -0
- data/lib/authlogic/random.rb +33 -0
- data/lib/authlogic/regex.rb +25 -0
- data/lib/authlogic/session/activation.rb +58 -0
- data/lib/authlogic/session/active_record_trickery.rb +64 -0
- data/lib/authlogic/session/base.rb +37 -0
- data/lib/authlogic/session/brute_force_protection.rb +96 -0
- data/lib/authlogic/session/callbacks.rb +99 -0
- data/lib/authlogic/session/cookies.rb +130 -0
- data/lib/authlogic/session/existence.rb +93 -0
- data/lib/authlogic/session/foundation.rb +71 -0
- data/lib/authlogic/session/http_auth.rb +58 -0
- data/lib/authlogic/session/id.rb +41 -0
- data/lib/authlogic/session/klass.rb +78 -0
- data/lib/authlogic/session/magic_columns.rb +95 -0
- data/lib/authlogic/session/magic_states.rb +59 -0
- data/lib/authlogic/session/params.rb +101 -0
- data/lib/authlogic/session/password.rb +240 -0
- data/lib/authlogic/session/perishable_token.rb +18 -0
- data/lib/authlogic/session/persistence.rb +70 -0
- data/lib/authlogic/session/priority_record.rb +34 -0
- data/lib/authlogic/session/scopes.rb +101 -0
- data/lib/authlogic/session/session.rb +62 -0
- data/lib/authlogic/session/timeout.rb +82 -0
- data/lib/authlogic/session/unauthorized_record.rb +50 -0
- data/lib/authlogic/session/validation.rb +82 -0
- data/lib/authlogic/test_case.rb +120 -0
- data/lib/authlogic/test_case/mock_controller.rb +45 -0
- data/lib/authlogic/test_case/mock_cookie_jar.rb +14 -0
- data/lib/authlogic/test_case/mock_logger.rb +10 -0
- data/lib/authlogic/test_case/mock_request.rb +19 -0
- data/lib/authlogic/test_case/rails_request_adapter.rb +30 -0
- data/rails/init.rb +1 -0
- data/shoulda_macros/authlogic.rb +69 -0
- data/test/acts_as_authentic_test/base_test.rb +18 -0
- data/test/acts_as_authentic_test/email_test.rb +101 -0
- data/test/acts_as_authentic_test/logged_in_status_test.rb +36 -0
- data/test/acts_as_authentic_test/login_test.rb +109 -0
- data/test/acts_as_authentic_test/magic_columns_test.rb +27 -0
- data/test/acts_as_authentic_test/password_test.rb +236 -0
- data/test/acts_as_authentic_test/perishable_token_test.rb +90 -0
- data/test/acts_as_authentic_test/persistence_token_test.rb +55 -0
- data/test/acts_as_authentic_test/restful_authentication_test.rb +40 -0
- data/test/acts_as_authentic_test/session_maintenance_test.rb +84 -0
- data/test/acts_as_authentic_test/single_access_test.rb +44 -0
- data/test/authenticates_many_test.rb +16 -0
- data/test/crypto_provider_test/aes256_test.rb +14 -0
- data/test/crypto_provider_test/bcrypt_test.rb +14 -0
- data/test/crypto_provider_test/sha1_test.rb +23 -0
- data/test/crypto_provider_test/sha256_test.rb +14 -0
- data/test/crypto_provider_test/sha512_test.rb +14 -0
- data/test/fixtures/companies.yml +5 -0
- data/test/fixtures/employees.yml +17 -0
- data/test/fixtures/projects.yml +3 -0
- data/test/fixtures/users.yml +24 -0
- data/test/i18n_test.rb +33 -0
- data/test/libs/affiliate.rb +7 -0
- data/test/libs/company.rb +6 -0
- data/test/libs/employee.rb +7 -0
- data/test/libs/employee_session.rb +2 -0
- data/test/libs/ldaper.rb +3 -0
- data/test/libs/ordered_hash.rb +9 -0
- data/test/libs/project.rb +3 -0
- data/test/libs/user.rb +5 -0
- data/test/libs/user_session.rb +6 -0
- data/test/random_test.rb +42 -0
- data/test/session_test/activation_test.rb +43 -0
- data/test/session_test/active_record_trickery_test.rb +36 -0
- data/test/session_test/brute_force_protection_test.rb +101 -0
- data/test/session_test/callbacks_test.rb +6 -0
- data/test/session_test/cookies_test.rb +112 -0
- data/test/session_test/credentials_test.rb +0 -0
- data/test/session_test/existence_test.rb +64 -0
- data/test/session_test/http_auth_test.rb +28 -0
- data/test/session_test/id_test.rb +17 -0
- data/test/session_test/klass_test.rb +40 -0
- data/test/session_test/magic_columns_test.rb +62 -0
- data/test/session_test/magic_states_test.rb +60 -0
- data/test/session_test/params_test.rb +53 -0
- data/test/session_test/password_test.rb +106 -0
- data/test/session_test/perishability_test.rb +15 -0
- data/test/session_test/persistence_test.rb +21 -0
- data/test/session_test/scopes_test.rb +60 -0
- data/test/session_test/session_test.rb +59 -0
- data/test/session_test/timeout_test.rb +52 -0
- data/test/session_test/unauthorized_record_test.rb +13 -0
- data/test/session_test/validation_test.rb +23 -0
- data/test/test_helper.rb +182 -0
- metadata +254 -0
|
@@ -0,0 +1,112 @@
|
|
|
1
|
+
require 'test_helper'
|
|
2
|
+
|
|
3
|
+
module SessionTest
|
|
4
|
+
module CookiesTest
|
|
5
|
+
class ConfiTest < ActiveSupport::TestCase
|
|
6
|
+
def test_cookie_key
|
|
7
|
+
UserSession.cookie_key = "my_cookie_key"
|
|
8
|
+
assert_equal "my_cookie_key", UserSession.cookie_key
|
|
9
|
+
|
|
10
|
+
UserSession.cookie_key "user_credentials"
|
|
11
|
+
assert_equal "user_credentials", UserSession.cookie_key
|
|
12
|
+
end
|
|
13
|
+
|
|
14
|
+
def test_default_cookie_key
|
|
15
|
+
assert_equal "user_credentials", UserSession.cookie_key
|
|
16
|
+
assert_equal "back_office_user_credentials", BackOfficeUserSession.cookie_key
|
|
17
|
+
end
|
|
18
|
+
|
|
19
|
+
def test_remember_me
|
|
20
|
+
UserSession.remember_me = true
|
|
21
|
+
assert_equal true, UserSession.remember_me
|
|
22
|
+
session = UserSession.new
|
|
23
|
+
assert_equal true, session.remember_me
|
|
24
|
+
|
|
25
|
+
UserSession.remember_me false
|
|
26
|
+
assert_equal false, UserSession.remember_me
|
|
27
|
+
session = UserSession.new
|
|
28
|
+
assert_equal false, session.remember_me
|
|
29
|
+
end
|
|
30
|
+
|
|
31
|
+
def test_remember_me_for
|
|
32
|
+
UserSession.remember_me_for = 3.years
|
|
33
|
+
assert_equal 3.years, UserSession.remember_me_for
|
|
34
|
+
session = UserSession.new
|
|
35
|
+
session.remember_me = true
|
|
36
|
+
assert_equal 3.years, session.remember_me_for
|
|
37
|
+
|
|
38
|
+
UserSession.remember_me_for 3.months
|
|
39
|
+
assert_equal 3.months, UserSession.remember_me_for
|
|
40
|
+
session = UserSession.new
|
|
41
|
+
session.remember_me = true
|
|
42
|
+
assert_equal 3.months, session.remember_me_for
|
|
43
|
+
end
|
|
44
|
+
end
|
|
45
|
+
|
|
46
|
+
class InstanceMethodsTest < ActiveSupport::TestCase
|
|
47
|
+
def test_credentials
|
|
48
|
+
session = UserSession.new
|
|
49
|
+
session.credentials = {:remember_me => true}
|
|
50
|
+
assert_equal true, session.remember_me
|
|
51
|
+
end
|
|
52
|
+
|
|
53
|
+
def test_remember_me
|
|
54
|
+
session = UserSession.new
|
|
55
|
+
assert_equal false, session.remember_me
|
|
56
|
+
assert !session.remember_me?
|
|
57
|
+
|
|
58
|
+
session.remember_me = false
|
|
59
|
+
assert_equal false, session.remember_me
|
|
60
|
+
assert !session.remember_me?
|
|
61
|
+
|
|
62
|
+
session.remember_me = true
|
|
63
|
+
assert_equal true, session.remember_me
|
|
64
|
+
assert session.remember_me?
|
|
65
|
+
|
|
66
|
+
session.remember_me = nil
|
|
67
|
+
assert_nil session.remember_me
|
|
68
|
+
assert !session.remember_me?
|
|
69
|
+
|
|
70
|
+
session.remember_me = "1"
|
|
71
|
+
assert_equal "1", session.remember_me
|
|
72
|
+
assert session.remember_me?
|
|
73
|
+
|
|
74
|
+
session.remember_me = "true"
|
|
75
|
+
assert_equal "true", session.remember_me
|
|
76
|
+
assert session.remember_me?
|
|
77
|
+
end
|
|
78
|
+
|
|
79
|
+
def test_remember_me_until
|
|
80
|
+
session = UserSession.new
|
|
81
|
+
assert_nil session.remember_me_until
|
|
82
|
+
|
|
83
|
+
session.remember_me = true
|
|
84
|
+
assert 3.months.from_now <= session.remember_me_until
|
|
85
|
+
end
|
|
86
|
+
|
|
87
|
+
def test_persist_persist_by_cookie
|
|
88
|
+
ben = users(:ben)
|
|
89
|
+
assert !UserSession.find
|
|
90
|
+
set_cookie_for(ben)
|
|
91
|
+
assert session = UserSession.find
|
|
92
|
+
assert_equal ben, session.record
|
|
93
|
+
end
|
|
94
|
+
|
|
95
|
+
def test_after_save_save_cookie
|
|
96
|
+
ben = users(:ben)
|
|
97
|
+
session = UserSession.new(ben)
|
|
98
|
+
assert session.save
|
|
99
|
+
assert_equal "#{ben.persistence_token}::#{ben.id}", controller.cookies["user_credentials"]
|
|
100
|
+
end
|
|
101
|
+
|
|
102
|
+
def test_after_destroy_destroy_cookie
|
|
103
|
+
ben = users(:ben)
|
|
104
|
+
set_cookie_for(ben)
|
|
105
|
+
session = UserSession.find
|
|
106
|
+
assert controller.cookies["user_credentials"]
|
|
107
|
+
assert session.destroy
|
|
108
|
+
assert !controller.cookies["user_credentials"]
|
|
109
|
+
end
|
|
110
|
+
end
|
|
111
|
+
end
|
|
112
|
+
end
|
|
File without changes
|
|
@@ -0,0 +1,64 @@
|
|
|
1
|
+
require 'test_helper'
|
|
2
|
+
|
|
3
|
+
module SessionTest
|
|
4
|
+
module ExistenceTest
|
|
5
|
+
class ClassMethodsTest < ActiveSupport::TestCase
|
|
6
|
+
def test_create
|
|
7
|
+
ben = users(:ben)
|
|
8
|
+
assert UserSession.create(:login => "somelogin", :password => "badpw2").new_session?
|
|
9
|
+
assert !UserSession.create(:login => ben.login, :password => "benrocks").new_session?
|
|
10
|
+
assert_raise(Authlogic::Session::Existence::SessionInvalidError) { UserSession.create!(:login => ben.login, :password => "badpw") }
|
|
11
|
+
assert !UserSession.create!(:login => ben.login, :password => "benrocks").new_session?
|
|
12
|
+
end
|
|
13
|
+
end
|
|
14
|
+
|
|
15
|
+
class IsntaceMethodsTest < ActiveSupport::TestCase
|
|
16
|
+
def test_new_session
|
|
17
|
+
session = UserSession.new
|
|
18
|
+
assert session.new_session?
|
|
19
|
+
|
|
20
|
+
set_session_for(users(:ben))
|
|
21
|
+
session = UserSession.find
|
|
22
|
+
assert !session.new_session?
|
|
23
|
+
end
|
|
24
|
+
|
|
25
|
+
def test_save_with_nothing
|
|
26
|
+
session = UserSession.new
|
|
27
|
+
assert !session.save
|
|
28
|
+
assert session.new_session?
|
|
29
|
+
end
|
|
30
|
+
|
|
31
|
+
def test_save_with_block
|
|
32
|
+
ben = users(:ben)
|
|
33
|
+
session = UserSession.new
|
|
34
|
+
block_result = session.save do |result|
|
|
35
|
+
assert !result
|
|
36
|
+
end
|
|
37
|
+
assert !block_result
|
|
38
|
+
assert session.new_session?
|
|
39
|
+
end
|
|
40
|
+
|
|
41
|
+
def test_save_with_bang
|
|
42
|
+
session = UserSession.new
|
|
43
|
+
assert_raise(Authlogic::Session::Existence::SessionInvalidError) { session.save! }
|
|
44
|
+
|
|
45
|
+
session.unauthorized_record = users(:ben)
|
|
46
|
+
assert_nothing_raised { session.save! }
|
|
47
|
+
end
|
|
48
|
+
|
|
49
|
+
def test_destroy
|
|
50
|
+
ben = users(:ben)
|
|
51
|
+
session = UserSession.new
|
|
52
|
+
assert !session.valid?
|
|
53
|
+
assert !session.errors.empty?
|
|
54
|
+
assert session.destroy
|
|
55
|
+
assert session.errors.empty?
|
|
56
|
+
session.unauthorized_record = ben
|
|
57
|
+
assert session.save
|
|
58
|
+
assert session.record
|
|
59
|
+
assert session.destroy
|
|
60
|
+
assert !session.record
|
|
61
|
+
end
|
|
62
|
+
end
|
|
63
|
+
end
|
|
64
|
+
end
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
require 'test_helper'
|
|
2
|
+
|
|
3
|
+
module SessionTest
|
|
4
|
+
class HttpAuthTest < ActiveSupport::TestCase
|
|
5
|
+
class ConfiTest < ActiveSupport::TestCase
|
|
6
|
+
def test_allow_http_basic_auth
|
|
7
|
+
UserSession.allow_http_basic_auth = false
|
|
8
|
+
assert_equal false, UserSession.allow_http_basic_auth
|
|
9
|
+
|
|
10
|
+
UserSession.allow_http_basic_auth true
|
|
11
|
+
assert_equal true, UserSession.allow_http_basic_auth
|
|
12
|
+
end
|
|
13
|
+
end
|
|
14
|
+
|
|
15
|
+
class InstanceMethodsTest < ActiveSupport::TestCase
|
|
16
|
+
def test_persist_persist_by_http_auth
|
|
17
|
+
ben = users(:ben)
|
|
18
|
+
http_basic_auth_for { assert !UserSession.find }
|
|
19
|
+
http_basic_auth_for(ben) do
|
|
20
|
+
assert session = UserSession.find
|
|
21
|
+
assert_equal ben, session.record
|
|
22
|
+
assert_equal ben.login, session.login
|
|
23
|
+
assert_equal "benrocks", session.send(:protected_password)
|
|
24
|
+
end
|
|
25
|
+
end
|
|
26
|
+
end
|
|
27
|
+
end
|
|
28
|
+
end
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
require 'test_helper'
|
|
2
|
+
|
|
3
|
+
module SessionTest
|
|
4
|
+
class IdTest < ActiveSupport::TestCase
|
|
5
|
+
def test_credentials
|
|
6
|
+
session = UserSession.new
|
|
7
|
+
session.credentials = [:my_id]
|
|
8
|
+
assert_equal :my_id, session.id
|
|
9
|
+
end
|
|
10
|
+
|
|
11
|
+
def test_id
|
|
12
|
+
session = UserSession.new
|
|
13
|
+
session.id = :my_id
|
|
14
|
+
assert_equal :my_id, session.id
|
|
15
|
+
end
|
|
16
|
+
end
|
|
17
|
+
end
|
|
@@ -0,0 +1,40 @@
|
|
|
1
|
+
require 'test_helper'
|
|
2
|
+
|
|
3
|
+
module SessionTest
|
|
4
|
+
module KlassTest
|
|
5
|
+
class ConfigTest < ActiveSupport::TestCase
|
|
6
|
+
def test_authenticate_with
|
|
7
|
+
UserSession.authenticate_with = Employee
|
|
8
|
+
assert_equal "Employee", UserSession.klass_name
|
|
9
|
+
assert_equal Employee, UserSession.klass
|
|
10
|
+
|
|
11
|
+
UserSession.authenticate_with User
|
|
12
|
+
assert_equal "User", UserSession.klass_name
|
|
13
|
+
assert_equal User, UserSession.klass
|
|
14
|
+
end
|
|
15
|
+
|
|
16
|
+
def test_klass
|
|
17
|
+
assert_equal User, UserSession.klass
|
|
18
|
+
end
|
|
19
|
+
|
|
20
|
+
def test_klass_name
|
|
21
|
+
assert_equal "User", UserSession.klass_name
|
|
22
|
+
end
|
|
23
|
+
|
|
24
|
+
def test_guessed_klass_name
|
|
25
|
+
assert_equal "User", UserSession.guessed_klass_name
|
|
26
|
+
assert_equal "BackOfficeUser", BackOfficeUserSession.guessed_klass_name
|
|
27
|
+
end
|
|
28
|
+
end
|
|
29
|
+
|
|
30
|
+
class InstanceMethodsTest < ActiveSupport::TestCase
|
|
31
|
+
def test_record_method
|
|
32
|
+
ben = users(:ben)
|
|
33
|
+
set_session_for(ben)
|
|
34
|
+
session = UserSession.find
|
|
35
|
+
assert_equal ben, session.record
|
|
36
|
+
assert_equal ben, session.user
|
|
37
|
+
end
|
|
38
|
+
end
|
|
39
|
+
end
|
|
40
|
+
end
|
|
@@ -0,0 +1,62 @@
|
|
|
1
|
+
require 'test_helper'
|
|
2
|
+
|
|
3
|
+
module SessionTest
|
|
4
|
+
module MagicColumnsTest
|
|
5
|
+
class ConfigTest < ActiveSupport::TestCase
|
|
6
|
+
def test_last_request_at_threshold_config
|
|
7
|
+
UserSession.last_request_at_threshold = 2.minutes
|
|
8
|
+
assert_equal 2.minutes, UserSession.last_request_at_threshold
|
|
9
|
+
|
|
10
|
+
UserSession.last_request_at_threshold 0
|
|
11
|
+
assert_equal 0, UserSession.last_request_at_threshold
|
|
12
|
+
end
|
|
13
|
+
end
|
|
14
|
+
|
|
15
|
+
class InstanceMethodsTest < ActiveSupport::TestCase
|
|
16
|
+
def test_after_persisting_set_last_request_at
|
|
17
|
+
ben = users(:ben)
|
|
18
|
+
assert !UserSession.create(ben).new_session?
|
|
19
|
+
|
|
20
|
+
set_cookie_for(ben)
|
|
21
|
+
old_last_request_at = ben.last_request_at
|
|
22
|
+
assert UserSession.find
|
|
23
|
+
ben.reload
|
|
24
|
+
assert ben.last_request_at != old_last_request_at
|
|
25
|
+
end
|
|
26
|
+
|
|
27
|
+
def test_valid_increase_failed_login_count
|
|
28
|
+
ben = users(:ben)
|
|
29
|
+
old_failed_login_count = ben.failed_login_count
|
|
30
|
+
assert UserSession.create(:login => ben.login, :password => "wrong").new_session?
|
|
31
|
+
ben.reload
|
|
32
|
+
assert_equal old_failed_login_count + 1, ben.failed_login_count
|
|
33
|
+
end
|
|
34
|
+
|
|
35
|
+
def test_before_save_update_info
|
|
36
|
+
ben = users(:ben)
|
|
37
|
+
|
|
38
|
+
# increase failed login count
|
|
39
|
+
assert UserSession.create(:login => ben.login, :password => "wrong").new_session?
|
|
40
|
+
ben.reload
|
|
41
|
+
|
|
42
|
+
# grab old values
|
|
43
|
+
old_login_count = ben.login_count
|
|
44
|
+
old_failed_login_count = ben.failed_login_count
|
|
45
|
+
old_last_login_at = ben.last_login_at
|
|
46
|
+
old_current_login_at = ben.current_login_at
|
|
47
|
+
old_last_login_ip = ben.last_login_ip
|
|
48
|
+
old_current_login_ip = ben.current_login_ip
|
|
49
|
+
|
|
50
|
+
assert !UserSession.create(:login => ben.login, :password => "benrocks").new_session?
|
|
51
|
+
|
|
52
|
+
ben.reload
|
|
53
|
+
assert_equal old_login_count + 1, ben.login_count
|
|
54
|
+
assert_equal 0, ben.failed_login_count
|
|
55
|
+
assert_equal old_current_login_at, ben.last_login_at
|
|
56
|
+
assert ben.current_login_at != old_current_login_at
|
|
57
|
+
assert_equal old_current_login_ip, ben.last_login_ip
|
|
58
|
+
assert_equal "1.1.1.1", ben.current_login_ip
|
|
59
|
+
end
|
|
60
|
+
end
|
|
61
|
+
end
|
|
62
|
+
end
|
|
@@ -0,0 +1,60 @@
|
|
|
1
|
+
require 'test_helper'
|
|
2
|
+
|
|
3
|
+
module SessionTest
|
|
4
|
+
module SessionTest
|
|
5
|
+
class ConfigTest < ActiveSupport::TestCase
|
|
6
|
+
def test_disable_magic_states_config
|
|
7
|
+
UserSession.disable_magic_states = true
|
|
8
|
+
assert_equal true, UserSession.disable_magic_states
|
|
9
|
+
|
|
10
|
+
UserSession.disable_magic_states false
|
|
11
|
+
assert_equal false, UserSession.disable_magic_states
|
|
12
|
+
end
|
|
13
|
+
end
|
|
14
|
+
|
|
15
|
+
class InstanceMethodsTest < ActiveSupport::TestCase
|
|
16
|
+
def test_disabling_magic_states
|
|
17
|
+
UserSession.disable_magic_states = true
|
|
18
|
+
|
|
19
|
+
ben = users(:ben)
|
|
20
|
+
ben.update_attribute(:active, false)
|
|
21
|
+
assert UserSession.create(ben)
|
|
22
|
+
|
|
23
|
+
UserSession.disable_magic_states = false
|
|
24
|
+
end
|
|
25
|
+
|
|
26
|
+
def test_validate_validate_magic_states_active
|
|
27
|
+
session = UserSession.new
|
|
28
|
+
ben = users(:ben)
|
|
29
|
+
session.unauthorized_record = ben
|
|
30
|
+
assert session.valid?
|
|
31
|
+
|
|
32
|
+
ben.update_attribute(:active, false)
|
|
33
|
+
assert !session.valid?
|
|
34
|
+
assert session.errors[:base].size > 0
|
|
35
|
+
end
|
|
36
|
+
|
|
37
|
+
def test_validate_validate_magic_states_approved
|
|
38
|
+
session = UserSession.new
|
|
39
|
+
ben = users(:ben)
|
|
40
|
+
session.unauthorized_record = ben
|
|
41
|
+
assert session.valid?
|
|
42
|
+
|
|
43
|
+
ben.update_attribute(:approved, false)
|
|
44
|
+
assert !session.valid?
|
|
45
|
+
assert session.errors[:base].size > 0
|
|
46
|
+
end
|
|
47
|
+
|
|
48
|
+
def test_validate_validate_magic_states_confirmed
|
|
49
|
+
session = UserSession.new
|
|
50
|
+
ben = users(:ben)
|
|
51
|
+
session.unauthorized_record = ben
|
|
52
|
+
assert session.valid?
|
|
53
|
+
|
|
54
|
+
ben.update_attribute(:confirmed, false)
|
|
55
|
+
assert !session.valid?
|
|
56
|
+
assert session.errors[:base].size > 0
|
|
57
|
+
end
|
|
58
|
+
end
|
|
59
|
+
end
|
|
60
|
+
end
|
|
@@ -0,0 +1,53 @@
|
|
|
1
|
+
require 'test_helper'
|
|
2
|
+
|
|
3
|
+
module SessionTest
|
|
4
|
+
module ParamsTest
|
|
5
|
+
class ConfigTest < ActiveSupport::TestCase
|
|
6
|
+
def test_params_key
|
|
7
|
+
UserSession.params_key = "my_params_key"
|
|
8
|
+
assert_equal "my_params_key", UserSession.params_key
|
|
9
|
+
|
|
10
|
+
UserSession.params_key "user_credentials"
|
|
11
|
+
assert_equal "user_credentials", UserSession.params_key
|
|
12
|
+
end
|
|
13
|
+
|
|
14
|
+
def test_single_access_allowed_request_types
|
|
15
|
+
UserSession.single_access_allowed_request_types = ["my request type"]
|
|
16
|
+
assert_equal ["my request type"], UserSession.single_access_allowed_request_types
|
|
17
|
+
|
|
18
|
+
UserSession.single_access_allowed_request_types ["application/rss+xml", "application/atom+xml"]
|
|
19
|
+
assert_equal ["application/rss+xml", "application/atom+xml"], UserSession.single_access_allowed_request_types
|
|
20
|
+
end
|
|
21
|
+
end
|
|
22
|
+
|
|
23
|
+
class InstanceMethodsTest < ActiveSupport::TestCase
|
|
24
|
+
def test_persist_persist_by_params
|
|
25
|
+
ben = users(:ben)
|
|
26
|
+
session = UserSession.new
|
|
27
|
+
|
|
28
|
+
assert !session.persisting?
|
|
29
|
+
set_params_for(ben)
|
|
30
|
+
|
|
31
|
+
assert !session.persisting?
|
|
32
|
+
assert !session.unauthorized_record
|
|
33
|
+
assert !session.record
|
|
34
|
+
assert_nil controller.session["user_credentials"]
|
|
35
|
+
|
|
36
|
+
set_request_content_type("text/plain")
|
|
37
|
+
assert !session.persisting?
|
|
38
|
+
assert !session.unauthorized_record
|
|
39
|
+
assert_nil controller.session["user_credentials"]
|
|
40
|
+
|
|
41
|
+
set_request_content_type("application/atom+xml")
|
|
42
|
+
assert session.persisting?
|
|
43
|
+
assert_equal ben, session.record
|
|
44
|
+
assert_nil controller.session["user_credentials"] # should not persist since this is single access
|
|
45
|
+
|
|
46
|
+
set_request_content_type("application/rss+xml")
|
|
47
|
+
assert session.persisting?
|
|
48
|
+
assert_equal ben, session.unauthorized_record
|
|
49
|
+
assert_nil controller.session["user_credentials"]
|
|
50
|
+
end
|
|
51
|
+
end
|
|
52
|
+
end
|
|
53
|
+
end
|