devise 3.5.10 → 4.8.0

data/test/generators/devise_generator_test.rb

@@ -1,39 +0,0 @@
-require 'test_helper'
-
-require "generators/devise/devise_generator"
-
-class DeviseGeneratorTest < Rails::Generators::TestCase
-  tests Devise::Generators::DeviseGenerator
-  destination File.expand_path("../../tmp", __FILE__)
-
-  setup do
-    prepare_destination
-    copy_routes
-  end
-
-  test "route generation for simple model names" do
-    run_generator %w(monster name:string)
-    assert_file "config/routes.rb", /devise_for :monsters/
-  end
-
-  test "route generation for namespaced model names" do
-    run_generator %w(monster/goblin name:string)
-    match = /devise_for :goblins, class_name: "Monster::Goblin"/
-    assert_file "config/routes.rb", match
-  end
-
-  test "route generation with skip routes" do
-    run_generator %w(monster name:string --skip-routes)
-    match = /devise_for :monsters, skip: :all/
-    assert_file "config/routes.rb", match
-  end
-
-  def copy_routes
-    routes = File.expand_path("../../rails_app/config/routes.rb", __FILE__)
-    destination = File.join(destination_root, "config")
-
-    FileUtils.mkdir_p(destination)
-    FileUtils.cp routes, destination
-  end
-
-end

data/test/generators/install_generator_test.rb

@@ -1,13 +0,0 @@
-require "test_helper"
-
-class InstallGeneratorTest < Rails::Generators::TestCase
-  tests Devise::Generators::InstallGenerator
-  destination File.expand_path("../../tmp", __FILE__)
-  setup :prepare_destination
-
-  test "Assert all files are properly created" do
-    run_generator
-    assert_file "config/initializers/devise.rb"
-    assert_file "config/locales/devise.en.yml"
-  end
-end

data/test/generators/mongoid_generator_test.rb

@@ -1,23 +0,0 @@
-require "test_helper"
-
-if DEVISE_ORM == :mongoid
-  require "generators/mongoid/devise_generator"
-
-  class MongoidGeneratorTest < Rails::Generators::TestCase
-    tests Mongoid::Generators::DeviseGenerator
-    destination File.expand_path("../../tmp", __FILE__)
-    setup :prepare_destination
-
-    test "all files are properly created" do
-      run_generator %w(monster)
-      assert_file "app/models/monster.rb", /devise/
-    end
-
-    test "all files are properly deleted" do
-      run_generator %w(monster)
-      run_generator %w(monster), behavior: :revoke
-      assert_no_file "app/models/monster.rb"
-    end
-  end
-end
-

data/test/generators/views_generator_test.rb

@@ -1,103 +0,0 @@
-require "test_helper"
-
-class ViewsGeneratorTest < Rails::Generators::TestCase
-  tests Devise::Generators::ViewsGenerator
-  destination File.expand_path("../../tmp", __FILE__)
-  setup :prepare_destination
-
-  test "Assert all views are properly created with no params" do
-    run_generator
-    assert_files
-    assert_shared_links
-  end
-
-  test "Assert all views are properly created with scope param" do
-    run_generator %w(users)
-    assert_files "users"
-    assert_shared_links "users"
-
-    run_generator %w(admins)
-    assert_files "admins"
-    assert_shared_links "admins"
-  end
-
-  test "Assert views with simple form" do
-    run_generator %w(-b simple_form_for)
-    assert_files
-    assert_file "app/views/devise/confirmations/new.html.erb", /simple_form_for/
-
-    run_generator %w(users -b simple_form_for)
-    assert_files "users"
-    assert_file "app/views/users/confirmations/new.html.erb", /simple_form_for/
-  end
-
-  test "Assert views with markerb" do
-    run_generator %w(--markerb)
-    assert_files nil, mail_template_engine: "markerb"
-  end
-
-
-  test "Assert only views within specified directories" do
-    run_generator %w(-v sessions registrations)
-    assert_file "app/views/devise/sessions/new.html.erb"
-    assert_file "app/views/devise/registrations/new.html.erb"
-    assert_file "app/views/devise/registrations/edit.html.erb"
-    assert_no_file "app/views/devise/confirmations/new.html.erb"
-    assert_no_file "app/views/devise/mailer/confirmation_instructions.html.erb"
-  end
-
-  test "Assert mailer specific directory with simple form" do
-    run_generator %w(-v mailer -b simple_form_for)
-    assert_file "app/views/devise/mailer/confirmation_instructions.html.erb"
-    assert_file "app/views/devise/mailer/reset_password_instructions.html.erb"
-    assert_file "app/views/devise/mailer/unlock_instructions.html.erb"
-  end
-
-  test "Assert specified directories with scope" do
-    run_generator %w(users -v sessions)
-    assert_file "app/views/users/sessions/new.html.erb"
-    assert_no_file "app/views/users/confirmations/new.html.erb"
-  end
-
-  test "Assert specified directories with simple form" do
-    run_generator %w(-v registrations -b simple_form_for)
-    assert_file "app/views/devise/registrations/new.html.erb", /simple_form_for/
-    assert_no_file "app/views/devise/confirmations/new.html.erb"
-    end
-
-  test "Assert specified directories with markerb" do
-    run_generator %w(--markerb -v passwords mailer)
-    assert_file "app/views/devise/passwords/new.html.erb"
-    assert_no_file "app/views/devise/confirmations/new.html.erb"
-    assert_file "app/views/devise/mailer/reset_password_instructions.markerb"
-  end
-
-  def assert_files(scope = nil, options={})
-    scope = "devise" if scope.nil?
-    mail_template_engine = options[:mail_template_engine] || "html.erb"
-
-    assert_file "app/views/#{scope}/confirmations/new.html.erb"
-    assert_file "app/views/#{scope}/mailer/confirmation_instructions.#{mail_template_engine}"
-    assert_file "app/views/#{scope}/mailer/reset_password_instructions.#{mail_template_engine}"
-    assert_file "app/views/#{scope}/mailer/unlock_instructions.#{mail_template_engine}"
-    assert_file "app/views/#{scope}/passwords/edit.html.erb"
-    assert_file "app/views/#{scope}/passwords/new.html.erb"
-    assert_file "app/views/#{scope}/registrations/new.html.erb"
-    assert_file "app/views/#{scope}/registrations/edit.html.erb"
-    assert_file "app/views/#{scope}/sessions/new.html.erb"
-    assert_file "app/views/#{scope}/shared/_links.html.erb"
-    assert_file "app/views/#{scope}/unlocks/new.html.erb"
-  end
-
-  def assert_shared_links(scope = nil)
-    scope = "devise" if scope.nil?
-    link = /<%= render \"#{scope}\/shared\/links\" %>/
-
-    assert_file "app/views/#{scope}/passwords/edit.html.erb", link
-    assert_file "app/views/#{scope}/passwords/new.html.erb", link
-    assert_file "app/views/#{scope}/confirmations/new.html.erb", link
-    assert_file "app/views/#{scope}/registrations/new.html.erb", link
-    assert_file "app/views/#{scope}/sessions/new.html.erb", link
-    assert_file "app/views/#{scope}/unlocks/new.html.erb", link
-  end
-end

data/test/helpers/devise_helper_test.rb

@@ -1,49 +0,0 @@
-require 'test_helper'
-
-class DeviseHelperTest < ActionDispatch::IntegrationTest
-  setup do
-    model_labels = { models: { user: "the user" } }
-    translations = {
-      errors: { messages: { not_saved: {
-        one: "Can't save %{resource} because of 1 error",
-        other: "Can't save %{resource} because of %{count} errors",
-      } } },
-      activerecord: model_labels,
-      mongoid: model_labels
-    }
-
-    I18n.available_locales
-    I18n.backend.store_translations(:en, translations)
-  end
-
-  teardown do
-    I18n.reload!
-  end
-
-  test 'test errors.messages.not_saved with single error from i18n' do
-    get new_user_registration_path
-
-    fill_in 'password', with: 'new_user123'
-    fill_in 'password confirmation', with: 'new_user123'
-    click_button 'Sign up'
-
-    assert_have_selector '#error_explanation'
-    assert_contain "Can't save the user because of 1 error"
-  end
-
-  test 'test errors.messages.not_saved with multiple errors from i18n' do
-    # Dirty tracking behavior prevents email validations from being applied:
-    #    https://github.com/mongoid/mongoid/issues/756
-    (pending "Fails on Mongoid < 2.1"; break) if defined?(Mongoid) && Mongoid::VERSION.to_f < 2.1
-
-    get new_user_registration_path
-
-    fill_in 'email', with: 'invalid_email'
-    fill_in 'password', with: 'new_user123'
-    fill_in 'password confirmation', with: 'new_user321'
-    click_button 'Sign up'
-
-    assert_have_selector '#error_explanation'
-    assert_contain "Can't save the user because of 2 errors"
-  end
-end

data/test/integration/authenticatable_test.rb

@@ -1,729 +0,0 @@
-require 'test_helper'
-
-class AuthenticationSanityTest < ActionDispatch::IntegrationTest
-  test 'home should be accessible without sign in' do
-    visit '/'
-    assert_response :success
-    assert_template 'home/index'
-  end
-
-  test 'sign in as user should not authenticate admin scope' do
-    sign_in_as_user
-    assert warden.authenticated?(:user)
-    assert_not warden.authenticated?(:admin)
-  end
-
-  test 'sign in as admin should not authenticate user scope' do
-    sign_in_as_admin
-    assert warden.authenticated?(:admin)
-    assert_not warden.authenticated?(:user)
-  end
-
-  test 'sign in as both user and admin at same time' do
-    sign_in_as_user
-    sign_in_as_admin
-    assert warden.authenticated?(:user)
-    assert warden.authenticated?(:admin)
-  end
-
-  test 'sign out as user should not touch admin authentication if sign_out_all_scopes is false' do
-    swap Devise, sign_out_all_scopes: false do
-      sign_in_as_user
-      sign_in_as_admin
-      get destroy_user_session_path
-      assert_not warden.authenticated?(:user)
-      assert warden.authenticated?(:admin)
-    end
-  end
-
-  test 'sign out as admin should not touch user authentication if sign_out_all_scopes is false' do
-    swap Devise, sign_out_all_scopes: false do
-      sign_in_as_user
-      sign_in_as_admin
-
-      get destroy_admin_session_path
-      assert_not warden.authenticated?(:admin)
-      assert warden.authenticated?(:user)
-    end
-  end
-
-  test 'sign out as user should also sign out admin if sign_out_all_scopes is true' do
-    swap Devise, sign_out_all_scopes: true do
-      sign_in_as_user
-      sign_in_as_admin
-
-      get destroy_user_session_path
-      assert_not warden.authenticated?(:user)
-      assert_not warden.authenticated?(:admin)
-    end
-  end
-
-  test 'sign out as admin should also sign out user if sign_out_all_scopes is true' do
-    swap Devise, sign_out_all_scopes: true do
-      sign_in_as_user
-      sign_in_as_admin
-
-      get destroy_admin_session_path
-      assert_not warden.authenticated?(:admin)
-      assert_not warden.authenticated?(:user)
-    end
-  end
-
-  test 'not signed in as admin should not be able to access admins actions' do
-    get admins_path
-    assert_redirected_to new_admin_session_path
-    assert_not warden.authenticated?(:admin)
-  end
-
-  test 'signed in as user should not be able to access admins actions' do
-    sign_in_as_user
-    assert warden.authenticated?(:user)
-    assert_not warden.authenticated?(:admin)
-
-    get admins_path
-    assert_redirected_to new_admin_session_path
-  end
-
-  test 'signed in as admin should be able to access admin actions' do
-    sign_in_as_admin
-    assert warden.authenticated?(:admin)
-    assert_not warden.authenticated?(:user)
-
-    get admins_path
-
-    assert_response :success
-    assert_template 'admins/index'
-    assert_contain 'Welcome Admin'
-  end
-
-  test 'authenticated admin should not be able to sign as admin again' do
-    sign_in_as_admin
-    get new_admin_session_path
-
-    assert_response :redirect
-    assert_redirected_to admin_root_path
-    assert warden.authenticated?(:admin)
-  end
-
-  test 'authenticated admin should be able to sign out' do
-    sign_in_as_admin
-    assert warden.authenticated?(:admin)
-
-    get destroy_admin_session_path
-    assert_response :redirect
-    assert_redirected_to root_path
-
-    get root_path
-    assert_contain 'Signed out successfully'
-    assert_not warden.authenticated?(:admin)
-  end
-
-  test 'unauthenticated admin set message on sign out' do
-    get destroy_admin_session_path
-    assert_response :redirect
-    assert_redirected_to root_path
-
-    get root_path
-    assert_contain 'Signed out successfully'
-  end
-
-  test 'scope uses custom failure app' do
-    put "/en/accounts/management"
-    assert_equal "Oops, not found", response.body
-    assert_equal 404, response.status
-  end
-end
-
-class AuthenticationRoutesRestrictions < ActionDispatch::IntegrationTest
-  test 'not signed in should not be able to access private route (authenticate denied)' do
-    get private_path
-    assert_redirected_to new_admin_session_path
-    assert_not warden.authenticated?(:admin)
-  end
-
-  test 'signed in as user should not be able to access private route restricted to admins (authenticate denied)' do
-    sign_in_as_user
-    assert warden.authenticated?(:user)
-    assert_not warden.authenticated?(:admin)
-    get private_path
-    assert_redirected_to new_admin_session_path
-  end
-
-  test 'signed in as admin should be able to access private route restricted to admins (authenticate accepted)' do
-    sign_in_as_admin
-    assert warden.authenticated?(:admin)
-    assert_not warden.authenticated?(:user)
-
-    get private_path
-
-    assert_response :success
-    assert_template 'home/private'
-    assert_contain 'Private!'
-  end
-
-  test 'signed in as inactive admin should not be able to access private/active route restricted to active admins (authenticate denied)' do
-    sign_in_as_admin(active: false)
-    assert warden.authenticated?(:admin)
-    assert_not warden.authenticated?(:user)
-
-    assert_raises ActionController::RoutingError do
-      get "/private/active"
-    end
-  end
-
-  test 'signed in as active admin should be able to access private/active route restricted to active admins (authenticate accepted)' do
-    sign_in_as_admin(active: true)
-    assert warden.authenticated?(:admin)
-    assert_not warden.authenticated?(:user)
-
-    get private_active_path
-
-    assert_response :success
-    assert_template 'home/private'
-    assert_contain 'Private!'
-  end
-
-  test 'signed in as admin should get admin dashboard (authenticated accepted)' do
-    sign_in_as_admin
-    assert warden.authenticated?(:admin)
-    assert_not warden.authenticated?(:user)
-
-    get dashboard_path
-
-    assert_response :success
-    assert_template 'home/admin_dashboard'
-    assert_contain 'Admin dashboard'
-  end
-
-  test 'signed in as user should get user dashboard (authenticated accepted)' do
-    sign_in_as_user
-    assert warden.authenticated?(:user)
-    assert_not warden.authenticated?(:admin)
-
-    get dashboard_path
-
-    assert_response :success
-    assert_template 'home/user_dashboard'
-    assert_contain 'User dashboard'
-  end
-
-  test 'not signed in should get no dashboard (authenticated denied)' do
-    assert_raises ActionController::RoutingError do
-      get dashboard_path
-    end
-  end
-
-  test 'signed in as inactive admin should not be able to access dashboard/active route restricted to active admins (authenticated denied)' do
-    sign_in_as_admin(active: false)
-    assert warden.authenticated?(:admin)
-    assert_not warden.authenticated?(:user)
-
-    assert_raises ActionController::RoutingError do
-      get "/dashboard/active"
-    end
-  end
-
-  test 'signed in as active admin should be able to access dashboard/active route restricted to active admins (authenticated accepted)' do
-    sign_in_as_admin(active: true)
-    assert warden.authenticated?(:admin)
-    assert_not warden.authenticated?(:user)
-
-    get dashboard_active_path
-
-    assert_response :success
-    assert_template 'home/admin_dashboard'
-    assert_contain 'Admin dashboard'
-  end
-
-  test 'signed in user should not see unauthenticated page (unauthenticated denied)' do
-    sign_in_as_user
-    assert warden.authenticated?(:user)
-    assert_not warden.authenticated?(:admin)
-
-    assert_raises ActionController::RoutingError do
-      get join_path
-    end
-  end
-
-  test 'not signed in users should see unautheticated page (unauthenticated accepted)' do
-    get join_path
-
-    assert_response :success
-    assert_template 'home/join'
-    assert_contain 'Join'
-  end
-end
-
-class AuthenticationRedirectTest < ActionDispatch::IntegrationTest
-  test 'redirect from warden shows sign in or sign up message' do
-    get admins_path
-
-    warden_path = new_admin_session_path
-    assert_redirected_to warden_path
-
-    get warden_path
-    assert_contain 'You need to sign in or sign up before continuing.'
-  end
-
-  test 'redirect to default url if no other was configured' do
-    sign_in_as_user
-    assert_template 'home/index'
-    assert_nil session[:"user_return_to"]
-  end
-
-  test 'redirect to requested url after sign in' do
-    get users_path
-    assert_redirected_to new_user_session_path
-    assert_equal users_path, session[:"user_return_to"]
-
-    follow_redirect!
-    sign_in_as_user visit: false
-
-    assert_current_url '/users'
-    assert_nil session[:"user_return_to"]
-  end
-
-  test 'redirect to last requested url overwriting the stored return_to option' do
-    get expire_user_path(create_user)
-    assert_redirected_to new_user_session_path
-    assert_equal expire_user_path(create_user), session[:"user_return_to"]
-
-    get users_path
-    assert_redirected_to new_user_session_path
-    assert_equal users_path, session[:"user_return_to"]
-
-    follow_redirect!
-    sign_in_as_user visit: false
-
-    assert_current_url '/users'
-    assert_nil session[:"user_return_to"]
-  end
-
-  test 'xml http requests does not store urls for redirect' do
-    get users_path, {}, 'HTTP_X_REQUESTED_WITH' => 'XMLHttpRequest'
-    assert_equal 401, response.status
-    assert_nil session[:"user_return_to"]
-  end
-
-  test 'redirect to configured home path for a given scope after sign in' do
-    sign_in_as_admin
-    assert_equal "/admin_area/home", @request.path
-  end
-
-  test 'require_no_authentication should set the already_authenticated flash message' do
-    sign_in_as_user
-    visit new_user_session_path
-    assert_equal flash[:alert], I18n.t("devise.failure.already_authenticated")
-  end
-end
-
-class AuthenticationSessionTest < ActionDispatch::IntegrationTest
-  test 'destroyed account is signed out' do
-    sign_in_as_user
-    get '/users'
-
-    User.destroy_all
-    get '/users'
-    assert_redirected_to new_user_session_path
-  end
-
-  test 'refreshes _csrf_token' do
-    ApplicationController.allow_forgery_protection = true
-
-    begin
-      get new_user_session_path
-      token = request.session[:_csrf_token]
-
-      sign_in_as_user
-      assert_not_equal request.session[:_csrf_token], token
-    ensure
-      ApplicationController.allow_forgery_protection = false
-    end
-  end
-
-  test 'allows session to be set for a given scope' do
-    sign_in_as_user
-    get '/users'
-    assert_equal "Cart", @controller.user_session[:cart]
-  end
-
-  test 'does not explode when class name is still stored in session' do
-    # In order to test that old sessions do not break with the new scoped
-    # deserialization, we need to serialize the session the old way. This is
-    # done by removing the newly used scoped serialization method
-    # (#user_serialize) and bringing back the old uncsoped #serialize method
-    # that includes the record's class name in the serialization.
-    begin
-      Warden::SessionSerializer.class_eval do
-        alias_method :original_serialize, :serialize
-        alias_method :original_user_serialize, :user_serialize
-        remove_method :user_serialize
-
-        def serialize(record)
-          klass = record.class
-          array = klass.serialize_into_session(record)
-          array.unshift(klass.name)
-        end
-      end
-
-      sign_in_as_user
-      assert warden.authenticated?(:user)
-    ensure
-      Warden::SessionSerializer.class_eval do
-        alias_method :serialize, :original_serialize
-        remove_method :original_serialize
-        alias_method :user_serialize, :original_user_serialize
-        remove_method :original_user_serialize
-      end
-    end
-  end
-
-  test 'session id is changed on sign in' do
-    get '/users'
-    session_id = request.session["session_id"]
-
-    get '/users'
-    assert_equal session_id, request.session["session_id"]
-
-    sign_in_as_user
-    assert_not_equal session_id, request.session["session_id"]
-  end
-end
-
-class AuthenticationWithScopedViewsTest < ActionDispatch::IntegrationTest
-  test 'renders the scoped view if turned on and view is available' do
-    swap Devise, scoped_views: true do
-      assert_raise Webrat::NotFoundError do
-        sign_in_as_user
-      end
-      assert_match /Special user view/, response.body
-    end
-  end
-
-  test 'renders the scoped view if turned on in an specific controller' do
-    begin
-      Devise::SessionsController.scoped_views = true
-      assert_raise Webrat::NotFoundError do
-        sign_in_as_user
-      end
-
-      assert_match /Special user view/, response.body
-      assert !Devise::PasswordsController.scoped_views?
-    ensure
-      Devise::SessionsController.send :remove_instance_variable, :@scoped_views
-    end
-  end
-
-  test 'does not render the scoped view if turned off' do
-    swap Devise, scoped_views: false do
-      assert_nothing_raised do
-        sign_in_as_user
-      end
-    end
-  end
-
-  test 'does not render the scoped view if not available' do
-    swap Devise, scoped_views: true do
-      assert_nothing_raised do
-        sign_in_as_admin
-      end
-    end
-  end
-end
-
-class AuthenticationOthersTest < ActionDispatch::IntegrationTest
-  test 'handles unverified requests gets rid of caches' do
-    swap ApplicationController, allow_forgery_protection: true do
-      post exhibit_user_url(1)
-      assert_not warden.authenticated?(:user)
-
-      sign_in_as_user
-      assert warden.authenticated?(:user)
-
-      post exhibit_user_url(1)
-      assert_not warden.authenticated?(:user)
-      assert_equal "User is not authenticated", response.body
-    end
-  end
-
-  test 'uses the custom controller with the custom controller view' do
-    get '/admin_area/sign_in'
-    assert_contain 'Log in'
-    assert_contain 'Welcome to "admins/sessions" controller!'
-    assert_contain 'Welcome to "sessions/new" view!'
-  end
-
-  test 'render 404 on roles without routes' do
-    assert_raise ActionController::RoutingError do
-      get '/admin_area/password/new'
-    end
-  end
-
-  test 'does not intercept Rails 401 responses' do
-    get '/unauthenticated'
-    assert_equal 401, response.status
-  end
-
-  test 'render 404 on roles without mapping' do
-    assert_raise AbstractController::ActionNotFound do
-      get '/sign_in'
-    end
-  end
-
-  test 'sign in with script name' do
-    assert_nothing_raised do
-      get new_user_session_path, {}, "SCRIPT_NAME" => "/omg"
-      fill_in "email", with: "user@test.com"
-    end
-  end
-
-  test 'sign in stub in xml format' do
-    get new_user_session_path(format: 'xml')
-    assert_match '<?xml version="1.0" encoding="UTF-8"?>', response.body
-    assert_match /<user>.*<\/user>/m, response.body
-    assert_match '<email></email>', response.body
-    assert_match '<password nil="true"', response.body
-  end
-
-  test 'sign in stub in json format' do
-    get new_user_session_path(format: 'json')
-    assert_match '{"user":{', response.body
-    assert_match '"email":""', response.body
-    assert_match '"password":null', response.body
-  end
-
-  test 'sign in stub in json with non attribute key' do
-    swap Devise, authentication_keys: [:other_key] do
-      get new_user_session_path(format: 'json')
-      assert_match '{"user":{', response.body
-      assert_match '"other_key":null', response.body
-      assert_match '"password":null', response.body
-    end
-  end
-
-  test 'uses the mapping from router' do
-    sign_in_as_user visit: "/as/sign_in"
-    assert warden.authenticated?(:user)
-    assert_not warden.authenticated?(:admin)
-  end
-
-  test 'sign in with xml format returns xml response' do
-    create_user
-    post user_session_path(format: 'xml'), user: {email: "user@test.com", password: '12345678'}
-    assert_response :success
-    assert response.body.include? %(<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<user>)
-  end
-
-  test 'sign in with xml format is idempotent' do
-    get new_user_session_path(format: 'xml')
-    assert_response :success
-
-    create_user
-    post user_session_path(format: 'xml'), user: {email: "user@test.com", password: '12345678'}
-    assert_response :success
-
-    get new_user_session_path(format: 'xml')
-    assert_response :success
-
-    post user_session_path(format: 'xml'), user: {email: "user@test.com", password: '12345678'}
-    assert_response :success
-    assert response.body.include? %(<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<user>)
-  end
-
-  test 'sign out with html redirects' do
-    sign_in_as_user
-    get destroy_user_session_path
-    assert_response :redirect
-    assert_current_url '/'
-
-    sign_in_as_user
-    get destroy_user_session_path(format: 'html')
-    assert_response :redirect
-    assert_current_url '/'
-  end
-
-  test 'sign out with xml format returns no content' do
-    sign_in_as_user
-    get destroy_user_session_path(format: 'xml')
-    assert_response :no_content
-    assert_not warden.authenticated?(:user)
-  end
-
-  test 'sign out with json format returns no content' do
-    sign_in_as_user
-    get destroy_user_session_path(format: 'json')
-    assert_response :no_content
-    assert_not warden.authenticated?(:user)
-  end
-
-  test 'sign out with non-navigational format via XHR does not redirect' do
-    swap Devise, navigational_formats: ['*/*', :html] do
-      sign_in_as_user
-      xml_http_request :get, destroy_user_session_path, {}, { "HTTP_ACCEPT" => "application/json,text/javascript,*/*" } # NOTE: Bug is triggered by combination of XHR and */*.
-      assert_response :no_content
-      assert_not warden.authenticated?(:user)
-    end
-  end
-
-  # Belt and braces ... Perhaps this test is not necessary?
-  test 'sign out with navigational format via XHR does redirect' do
-    swap Devise, navigational_formats: ['*/*', :html] do
-      sign_in_as_user
-      xml_http_request :get, destroy_user_session_path, {}, { "HTTP_ACCEPT" => "text/html,*/*" }
-      assert_response :redirect
-      assert_not warden.authenticated?(:user)
-    end
-  end
-end
-
-class AuthenticationKeysTest < ActionDispatch::IntegrationTest
-  test 'missing authentication keys cause authentication to abort' do
-    swap Devise, authentication_keys: [:subdomain] do
-      sign_in_as_user
-      assert_contain "Invalid subdomain or password."
-      assert_not warden.authenticated?(:user)
-    end
-  end
-
-  test 'missing authentication keys cause authentication to abort unless marked as not required' do
-    swap Devise, authentication_keys: { email: true, subdomain: false } do
-      sign_in_as_user
-      assert warden.authenticated?(:user)
-    end
-  end
-end
-
-class AuthenticationRequestKeysTest < ActionDispatch::IntegrationTest
-  test 'request keys are used on authentication' do
-    host! 'foo.bar.baz'
-
-    swap Devise, request_keys: [:subdomain] do
-      User.expects(:find_for_authentication).with(subdomain: 'foo', email: 'user@test.com').returns(create_user)
-      sign_in_as_user
-      assert warden.authenticated?(:user)
-    end
-  end
-
-  test 'invalid request keys raises NoMethodError' do
-    swap Devise, request_keys: [:unknown_method] do
-      assert_raise NoMethodError do
-        sign_in_as_user
-      end
-
-      assert_not warden.authenticated?(:user)
-    end
-  end
-
-  test 'blank request keys cause authentication to abort' do
-    host! 'test.com'
-
-    swap Devise, request_keys: [:subdomain] do
-      sign_in_as_user
-      assert_contain "Invalid email or password."
-      assert_not warden.authenticated?(:user)
-    end
-  end
-
-  test 'blank request keys cause authentication to abort unless if marked as not required' do
-    host! 'test.com'
-
-    swap Devise, request_keys: { subdomain: false } do
-      sign_in_as_user
-      assert warden.authenticated?(:user)
-    end
-  end
-end
-
-class AuthenticationSignOutViaTest < ActionDispatch::IntegrationTest
-  def sign_in!(scope)
-    sign_in_as_admin(visit: send("new_#{scope}_session_path"))
-    assert warden.authenticated?(scope)
-  end
-
-  test 'allow sign out via delete when sign_out_via provides only delete' do
-    sign_in!(:sign_out_via_delete)
-    delete destroy_sign_out_via_delete_session_path
-    assert_not warden.authenticated?(:sign_out_via_delete)
-  end
-
-  test 'do not allow sign out via get when sign_out_via provides only delete' do
-    sign_in!(:sign_out_via_delete)
-    assert_raise ActionController::RoutingError do
-      get destroy_sign_out_via_delete_session_path
-    end
-    assert warden.authenticated?(:sign_out_via_delete)
-  end
-
-  test 'allow sign out via post when sign_out_via provides only post' do
-    sign_in!(:sign_out_via_post)
-    post destroy_sign_out_via_post_session_path
-    assert_not warden.authenticated?(:sign_out_via_post)
-  end
-
-  test 'do not allow sign out via get when sign_out_via provides only post' do
-    sign_in!(:sign_out_via_post)
-    assert_raise ActionController::RoutingError do
-      get destroy_sign_out_via_delete_session_path
-    end
-    assert warden.authenticated?(:sign_out_via_post)
-  end
-
-  test 'allow sign out via delete when sign_out_via provides delete and post' do
-    sign_in!(:sign_out_via_delete_or_post)
-    delete destroy_sign_out_via_delete_or_post_session_path
-    assert_not warden.authenticated?(:sign_out_via_delete_or_post)
-  end
-
-  test 'allow sign out via post when sign_out_via provides delete and post' do
-    sign_in!(:sign_out_via_delete_or_post)
-    post destroy_sign_out_via_delete_or_post_session_path
-    assert_not warden.authenticated?(:sign_out_via_delete_or_post)
-  end
-
-  test 'do not allow sign out via get when sign_out_via provides delete and post' do
-    sign_in!(:sign_out_via_delete_or_post)
-    assert_raise ActionController::RoutingError do
-      get destroy_sign_out_via_delete_or_post_session_path
-    end
-    assert warden.authenticated?(:sign_out_via_delete_or_post)
-  end
-end
-
-class DoubleAuthenticationRedirectTest < ActionDispatch::IntegrationTest
-  test 'signed in as user redirects when visiting user sign in page' do
-    sign_in_as_user
-    get new_user_session_path(format: :html)
-    assert_redirected_to '/'
-  end
-
-  test 'signed in as admin redirects when visiting admin sign in page' do
-    sign_in_as_admin
-    get new_admin_session_path(format: :html)
-    assert_redirected_to '/admin_area/home'
-  end
-
-  test 'signed in as both user and admin redirects when visiting admin sign in page' do
-    sign_in_as_user
-    sign_in_as_admin
-    get new_user_session_path(format: :html)
-    assert_redirected_to '/'
-    get new_admin_session_path(format: :html)
-    assert_redirected_to '/admin_area/home'
-  end
-end
-
-class DoubleSignOutRedirectTest < ActionDispatch::IntegrationTest
-  test 'sign out after already having signed out redirects to sign in' do
-    sign_in_as_user
-
-    post destroy_sign_out_via_delete_or_post_session_path
-
-    get root_path
-    assert_contain 'Signed out successfully.'
-
-    post destroy_sign_out_via_delete_or_post_session_path
-
-    get root_path
-    assert_contain 'Signed out successfully.'
-  end
-end