devise_jwt_auth 0.1.4 → 0.2.0

data/test/controllers/demo_mang_controller_test.rb

@@ -14,86 +14,36 @@ class DemoMangControllerTest < ActionDispatch::IntegrationTest
       before do
         @resource = create(:mang_user, :confirmed)
         @auth_headers = @resource.create_named_token_pair
-
-        # @token     = @auth_headers['access-token']
-        # @client_id = @auth_headers['client']
-        # @expiry    = @auth_headers['expiry']
       end
 
       describe 'successful request' do
         before do
-          # ensure that request is not treated as batch request
-          # age_token(@resource, @client_id)
-
           get '/demo/members_only_mang',
               params: {},
               headers: @auth_headers
-
-          # @resp_token       = response.headers['access-token']
-          # @resp_client_id   = response.headers['client']
-          # @resp_expiry      = response.headers['expiry']
-          # @resp_uid         = response.headers['uid']
         end
 
         describe 'devise mappings' do
           it 'should define current_mang' do
             assert_equal @resource, @controller.current_mang
           end
-          
+
           it 'should define mang_signed_in?' do
             assert @controller.mang_signed_in?
           end
-          
+
           it 'should not define current_user' do
             refute_equal @resource, @controller.current_user
           end
-          
+
           it 'should define render_authenticate_error' do
             assert @controller.methods.include?(:render_authenticate_error)
           end
         end
-        
+
         it 'should return success status' do
           assert_equal 200, response.status
         end
-        
-=begin
-        it 'should receive new token after successful request' do
-          refute_equal @token, @resp_token
-        end
-
-        it 'should preserve the client id from the first request' do
-          assert_equal @client_id, @resp_client_id
-        end
-
-        it "should return the user's uid in the auth header" do
-          assert_equal @resource.uid, @resp_uid
-        end
-
-        it 'should not treat this request as a batch request' do
-          refute assigns(:is_batch_request)
-        end
-        
-        describe 'subsequent requests' do
-          before do
-            @resource.reload
-            # ensure that request is not treated as batch request
-            # age_token(@resource, @client_id)
-            
-            get '/demo/members_only_mang',
-            params: {},
-            headers: @auth_headers.merge('access-token' => @resp_token)
-          end
-          
-          it 'should not treat this request as a batch request' do
-            refute assigns(:is_batch_request)
-          end
-          
-          it 'should allow a new request to be made using new token' do
-            assert_equal 200, response.status
-          end
-        end
-=end
       end
 
       describe 'failed request' do
@@ -111,176 +61,6 @@ class DemoMangControllerTest < ActionDispatch::IntegrationTest
           assert_equal 401, response.status
         end
       end
-
-=begin
-      describe 'disable change_headers_on_each_request' do
-        before do
-          DeviseJwtAuth.change_headers_on_each_request = false
-          @resource.reload
-          # age_token(@resource, @client_id)
-
-          get '/demo/members_only_mang',
-              params: {},
-              headers: @auth_headers
-
-          @first_is_batch_request = assigns(:is_batch_request)
-          @first_user = assigns(:resource).dup
-          @first_access_token = response.headers['access-token']
-          @first_response_status = response.status
-
-          @resource.reload
-          # age_token(@resource, @client_id)
-
-          # use expired auth header
-          get '/demo/members_only_mang',
-              params: {},
-              headers: @auth_headers
-
-          @second_is_batch_request = assigns(:is_batch_request)
-          @second_user = assigns(:resource).dup
-          @second_access_token = response.headers['access-token']
-          @second_response_status = response.status
-        end
-
-        after do
-          DeviseJwtAuth.change_headers_on_each_request = true
-        end
-
-        it 'should allow the first request through' do
-          assert_equal 200, @first_response_status
-        end
-
-        it 'should allow the second request through' do
-          assert_equal 200, @second_response_status
-        end
-
-        it 'should return auth headers from the first request' do
-          assert @first_access_token
-        end
-
-        it 'should not treat either requests as batch requests' do
-          refute @first_is_batch_request
-          refute @second_is_batch_request
-        end
-
-        it 'should return auth headers from the second request' do
-          assert @second_access_token
-        end
-
-        it 'should define user during first request' do
-          assert @first_user
-        end
-
-        it 'should define user during second request' do
-          assert @second_user
-        end
-      end
-
-      describe 'batch requests' do
-        describe 'success' do
-          before do
-            # age_token(@resource, @client_id)
-
-            get '/demo/members_only_mang',
-                params: {},
-                headers: @auth_headers
-
-            @first_is_batch_request = assigns(:is_batch_request)
-            @first_user = assigns(:resource)
-            @first_access_token = response.headers['access-token']
-
-            get '/demo/members_only_mang',
-                params: {},
-                headers: @auth_headers
-
-            @second_is_batch_request = assigns(:is_batch_request)
-            @second_user = assigns(:resource)
-            @second_access_token = response.headers['access-token']
-          end
-
-          it 'should allow both requests through' do
-            assert_equal 200, response.status
-          end
-
-          it 'should not treat the first request as a batch request' do
-            refute @first_is_batch_request
-          end
-
-          it 'should treat the second request as a batch request' do
-            assert @second_is_batch_request
-          end
-
-          it 'should return access token for first (non-batch) request' do
-            assert @first_access_token
-          end
-
-          it 'should not return auth headers for second (batched) requests' do
-            assert_equal ' ', @second_access_token
-          end
-        end
-
-        describe 'time out' do
-          before do
-            @resource.reload
-            # age_token(@resource, @client_id)
-
-            get '/demo/members_only_mang',
-                params: {},
-                headers: @auth_headers
-
-            @first_is_batch_request = assigns(:is_batch_request)
-            @first_user = assigns(:resource).dup
-            @first_access_token = response.headers['access-token']
-            @first_response_status = response.status
-
-            @resource.reload
-            # age_token(@resource, @client_id)
-
-            # use expired auth header
-            get '/demo/members_only_mang',
-                params: {},
-                headers: @auth_headers
-
-            @second_is_batch_request = assigns(:is_batch_request)
-            @second_user = assigns(:resource)
-            @second_access_token = response.headers['access-token']
-            @second_response_status = response.status
-          end
-
-          it 'should allow the first request through' do
-            assert_equal 200, @first_response_status
-          end
-
-          it 'should not allow the second request through' do
-            assert_equal 401, @second_response_status
-          end
-
-          it 'should not treat first request as batch request' do
-            refute @second_is_batch_request
-          end
-
-          it 'should return auth headers from the first request' do
-            assert @first_access_token
-          end
-
-          it 'should not treat second request as batch request' do
-            refute @second_is_batch_request
-          end
-
-          it 'should not return auth headers from the second request' do
-            refute @second_access_token
-          end
-
-          it 'should define user during first request' do
-            assert @first_user
-          end
-
-          it 'should not define user during second request' do
-            refute @second_user
-          end
-        end
-      end
-=end
     end
   end
 end