doorkeeper 4.4.3 → 5.0.3

data/spec/spec_helper_integration.rb

@@ -1,74 +1,2 @@
-if ENV['TRAVIS']
-  require 'coveralls'
-
-  Coveralls.wear!('rails') do
-    add_filter('/spec/')
-    add_filter('/lib/generators/doorkeeper/templates/')
-  end
-else
-  require 'simplecov'
-
-  SimpleCov.start do
-    add_filter('/spec/')
-    add_filter('/lib/generators/doorkeeper/templates/')
-  end
-end
-
-ENV['RAILS_ENV'] ||= 'test'
-TABLE_NAME_PREFIX = ENV['table_name_prefix'] || nil
-TABLE_NAME_SUFFIX = ENV['table_name_suffix'] || nil
-
-orm = (ENV['BUNDLE_GEMFILE'] || '').match(/Gemfile\.(.+)\.rb/)
-DOORKEEPER_ORM = (orm && orm[1] || :active_record).to_sym
-
-$LOAD_PATH.unshift File.dirname(__FILE__)
-
-require 'capybara/rspec'
-require 'dummy/config/environment'
-require 'rspec/rails'
-require 'generator_spec/test_case'
-require 'database_cleaner'
-
-# Load JRuby SQLite3 if in that platform
-begin
-  require 'jdbc/sqlite3'
-  Jdbc::SQLite3.load_driver
-rescue LoadError
-end
-
-Rails.logger.info "====> Doorkeeper.orm = #{Doorkeeper.configuration.orm}"
-if Doorkeeper.configuration.orm == :active_record
-  Rails.logger.info "======> active_record.table_name_prefix = #{Rails.configuration.active_record.table_name_prefix}"
-  Rails.logger.info "======> active_record.table_name_suffix = #{Rails.configuration.active_record.table_name_suffix}"
-end
-Rails.logger.info "====> Rails version: #{Rails.version}"
-Rails.logger.info "====> Ruby version: #{RUBY_VERSION}"
-
-require "support/orm/#{DOORKEEPER_ORM}"
-
-ENGINE_RAILS_ROOT = File.join(File.dirname(__FILE__), '../')
-
-Dir["#{File.dirname(__FILE__)}/support/{dependencies,helpers,shared}/*.rb"].each { |f| require f }
-
-# Remove after dropping support of Rails 4.2
-require "#{File.dirname(__FILE__)}/support/http_method_shim.rb"
-
-RSpec.configure do |config|
-  config.infer_spec_type_from_file_location!
-  config.mock_with :rspec
-
-  config.infer_base_class_for_anonymous_controllers = false
-
-  config.include RSpec::Rails::RequestExampleGroup, type: :request
-
-  config.before do
-    DatabaseCleaner.start
-    Doorkeeper.configure { orm DOORKEEPER_ORM }
-  end
-
-  config.after do
-    DatabaseCleaner.clean
-  end
-
-  config.order = 'random'
-end
+# For compatibility only
+require 'spec_helper'

data/spec/support/doorkeeper_rspec.rb

@@ -0,0 +1,20 @@
+module Doorkeeper
+  class RSpec
+    # Print's useful information about env: Ruby / Rails versions,
+    # Doorkeeper configuration, etc.
+    def self.print_configuration_info
+      puts <<-INFO.strip_heredoc
+        ====> Doorkeeper ORM: '#{Doorkeeper.configuration.orm}'
+        ====> Doorkeeper version: #{Doorkeeper.gem_version}
+        ====> Rails version: #{::Rails.version}
+        ====> Ruby version: #{RUBY_VERSION} on #{RUBY_PLATFORM}
+      INFO
+    end
+
+    # Tries to find ORM from the Gemfile used to run test suite
+    def self.detect_orm
+      orm = (ENV['BUNDLE_GEMFILE'] || '').match(/Gemfile\.(.+)\.rb/)
+      (orm && orm[1] || :active_record).to_sym
+    end
+  end
+end

data/spec/support/helpers/authorization_request_helper.rb

@@ -28,13 +28,13 @@ module AuthorizationRequestHelper
     expect(client.redirect_uri).to eq("#{current_uri.scheme}://#{current_uri.host}#{current_uri.path}")
   end
 
-  def allowing_forgery_protection(&block)
-    _original_value = ActionController::Base.allow_forgery_protection
+  def allowing_forgery_protection(&_block)
+    original_value = ActionController::Base.allow_forgery_protection
     ActionController::Base.allow_forgery_protection = true
 
-    block.call
+    yield
   ensure
-    ActionController::Base.allow_forgery_protection = _original_value
+    ActionController::Base.allow_forgery_protection = original_value
   end
 end
 

data/spec/support/helpers/model_helper.rb

@@ -11,11 +11,15 @@ module ModelHelper
     @authorization = FactoryBot.create(:access_grant, options)
   end
 
+  def access_token_exists(options = {})
+    @access_token = FactoryBot.create(:access_token, options)
+  end
+
   def access_grant_should_exist_for(client, resource_owner)
     grant = Doorkeeper::AccessGrant.first
 
-    expect(grant.application).to have_attributes(id: client.id).
-      and(be_instance_of(Doorkeeper::Application))
+    expect(grant.application).to have_attributes(id: client.id)
+      .and(be_instance_of(Doorkeeper::Application))
 
     expect(grant.resource_owner_id).to eq(resource_owner.id)
   end
@@ -23,8 +27,8 @@ module ModelHelper
   def access_token_should_exist_for(client, resource_owner)
     token = Doorkeeper::AccessToken.first
 
-    expect(token.application).to have_attributes(id: client.id).
-      and(be_instance_of(Doorkeeper::Application))
+    expect(token.application).to have_attributes(id: client.id)
+      .and(be_instance_of(Doorkeeper::Application))
 
     expect(token.resource_owner_id).to eq(resource_owner.id)
   end

data/spec/support/helpers/request_spec_helper.rb

@@ -1,4 +1,8 @@
 module RequestSpecHelper
+  def i_am_logged_in
+    allow(Doorkeeper.configuration).to receive(:authenticate_admin).and_return(->(*) {})
+  end
+
   def i_should_see(content)
     expect(page).to have_content(content)
   end
@@ -39,6 +43,10 @@ module RequestSpecHelper
     expect(headers[header]).to eq(value)
   end
 
+  def should_have_status(status)
+    expect(page.driver.response.status).to eq(status)
+  end
+
   def with_access_token_header(token)
     with_header 'Authorization', "Bearer #{token}"
   end
@@ -68,8 +76,8 @@ module RequestSpecHelper
     click_on 'Sign in'
   end
 
-  def create_access_token(authorization_code, client)
-    page.driver.post token_endpoint_url(code: authorization_code, client: client)
+  def create_access_token(authorization_code, client, code_verifier = nil)
+    page.driver.post token_endpoint_url(code: authorization_code, client: client, code_verifier: code_verifier)
   end
 
   def i_should_see_translated_error_message(key)

data/spec/support/helpers/url_helper.rb

@@ -2,21 +2,23 @@ module UrlHelper
   def token_endpoint_url(options = {})
     parameters = {
       code: options[:code],
-      client_id: options[:client_id] || (options[:client] ? options[:client].uid : nil),
-      client_secret: options[:client_secret] || (options[:client] ? options[:client].secret : nil),
-      redirect_uri: options[:redirect_uri]  || (options[:client] ? options[:client].redirect_uri : nil),
-      grant_type: options[:grant_type] || 'authorization_code'
-    }
+      client_id: options[:client_id] || options[:client].try(:uid),
+      client_secret: options[:client_secret] || options[:client].try(:secret),
+      redirect_uri: options[:redirect_uri] || options[:client].try(:redirect_uri),
+      grant_type: options[:grant_type] || 'authorization_code',
+      code_verifier: options[:code_verifier],
+      code_challenge_method: options[:code_challenge_method]
+    }.reject { |_, v| v.blank? }
     "/oauth/token?#{build_query(parameters)}"
   end
 
   def password_token_endpoint_url(options = {})
     parameters = {
       code: options[:code],
-      client_id: options[:client_id] || (options[:client] ? options[:client].uid : nil),
-      client_secret: options[:client_secret] || (options[:client] ? options[:client].secret : nil),
-      username: options[:resource_owner_username] || (options[:resource_owner] ? options[:resource_owner].name : nil),
-      password: options[:resource_owner_password] || (options[:resource_owner] ? options[:resource_owner].password : nil),
+      client_id: options[:client_id] || options[:client].try(:uid),
+      client_secret: options[:client_secret] || options[:client].try(:secret),
+      username: options[:resource_owner_username] || options[:resource_owner].try(:name),
+      password: options[:resource_owner_password] || options[:resource_owner].try(:password),
       scope: options[:scope],
       grant_type: 'password'
     }
@@ -25,11 +27,13 @@ module UrlHelper
 
   def authorization_endpoint_url(options = {})
     parameters = {
-      client_id: options[:client_id] || options[:client].uid,
-      redirect_uri: options[:redirect_uri] || options[:client].redirect_uri,
+      client_id: options[:client_id] || options[:client].try(:uid),
+      redirect_uri: options[:redirect_uri] || options[:client].try(:redirect_uri),
       response_type: options[:response_type] || 'code',
       scope: options[:scope],
-      state: options[:state]
+      state: options[:state],
+      code_challenge: options[:code_challenge],
+      code_challenge_method: options[:code_challenge_method]
     }.reject { |_, v| v.blank? }
     "/oauth/authorize?#{build_query(parameters)}"
   end
@@ -37,8 +41,8 @@ module UrlHelper
   def refresh_token_endpoint_url(options = {})
     parameters = {
       refresh_token: options[:refresh_token],
-      client_id: options[:client_id] || options[:client].uid,
-      client_secret: options[:client_secret] || options[:client].secret,
+      client_id: options[:client_id] || options[:client].try(:uid),
+      client_secret: options[:client_secret] || options[:client].try(:secret),
       grant_type: options[:grant_type] || 'refresh_token'
     }
     "/oauth/token?#{build_query(parameters)}"

data/spec/support/http_method_shim.rb

@@ -3,34 +3,30 @@
 # supported in Rails 5+. Since we support back to 4, we need some sort of shim
 # to avoid super noisy deprecations when running tests.
 module RoutingHTTPMethodShim
-  def get(path, params = {}, headers = nil)
-    super(path, params: params, headers: headers)
+  def get(path, **args)
+    super(path, args[:params], args[:headers])
   end
 
-  def post(path, params = {}, headers = nil)
-    super(path, params: params, headers: headers)
+  def post(path, **args)
+    super(path, args[:params], args[:headers])
   end
 
-  def put(path, params = {}, headers = nil)
-    super(path, params: params, headers: headers)
+  def put(path, **args)
+    super(path, args[:params], args[:headers])
   end
 end
 
 module ControllerHTTPMethodShim
-  def get(path, params = {})
-    super(path, params: params)
-  end
-
-  def post(path, params = {})
-    super(path, params: params)
-  end
+  def process(action, http_method = 'GET', **args)
+    if (as = args.delete(:as))
+      @request.headers['Content-Type'] = Mime[as].to_s
+    end
 
-  def put(path, params = {})
-    super(path, params: params)
+    super(action, http_method, args[:params], args[:session], args[:flash])
   end
 end
 
-if ::Rails::VERSION::MAJOR >= 5
+if ::Rails::VERSION::MAJOR < 5
   RSpec.configure do |config|
     config.include ControllerHTTPMethodShim, type: :controller
     config.include RoutingHTTPMethodShim, type: :request

data/spec/support/shared/controllers_shared_context.rb

@@ -63,3 +63,59 @@ shared_context 'invalid authorization request' do
     allow(controller).to receive(:authorization) { authorization }
   end
 end
+
+shared_context 'expired token', token: :expired do
+  let :token_string do
+    '1A2B3C4DEXP'
+  end
+
+  let :token do
+    double(Doorkeeper::AccessToken,
+           accessible?: false, revoked?: false, expired?: true,
+           includes_scope?: false, acceptable?: false,
+           previous_refresh_token: "", revoke_previous_refresh_token!: true)
+  end
+
+  before :each do
+    allow(
+      Doorkeeper::AccessToken
+    ).to receive(:by_token).with(token_string).and_return(token)
+  end
+end
+
+shared_context 'revoked token', token: :revoked do
+  let :token_string do
+    '1A2B3C4DREV'
+  end
+
+  let :token do
+    double(Doorkeeper::AccessToken,
+           accessible?: false, revoked?: true, expired?: false,
+           includes_scope?: false, acceptable?: false,
+           previous_refresh_token: "", revoke_previous_refresh_token!: true)
+  end
+
+  before :each do
+    allow(
+      Doorkeeper::AccessToken
+    ).to receive(:by_token).with(token_string).and_return(token)
+  end
+end
+
+shared_context 'forbidden token', token: :forbidden do
+  let :token_string do
+    '1A2B3C4DFORB'
+  end
+
+  let :token do
+    double(Doorkeeper::AccessToken,
+           accessible?: true, includes_scope?: true, acceptable?: false,
+           previous_refresh_token: "", revoke_previous_refresh_token!: true)
+  end
+
+  before :each do
+    allow(
+      Doorkeeper::AccessToken
+    ).to receive(:by_token).with(token_string).and_return(token)
+  end
+end

data/spec/validators/redirect_uri_validator_spec.rb

@@ -1,4 +1,4 @@
-require 'spec_helper_integration'
+require 'spec_helper'
 
 describe RedirectUriValidator do
   subject do
@@ -73,8 +73,8 @@ describe RedirectUriValidator do
     it 'accepts a non secured protocol when disabled' do
       subject.redirect_uri = 'http://example.com/callback'
       allow(Doorkeeper.configuration).to receive(
-                                             :force_ssl_in_redirect_uri
-                                         ).and_return(false)
+        :force_ssl_in_redirect_uri
+      ).and_return(false)
       expect(subject).to be_valid
     end
 
@@ -87,8 +87,14 @@ describe RedirectUriValidator do
       application = FactoryBot.build(:application, redirect_uri: 'http://localhost/callback')
       expect(application).to be_valid
 
+      application = FactoryBot.build(:application, redirect_uri: 'https://test.com/callback')
+      expect(application).to be_valid
+
       application = FactoryBot.build(:application, redirect_uri: 'http://localhost2/callback')
       expect(application).not_to be_valid
+
+      application = FactoryBot.build(:application, redirect_uri: 'https://test.com/callback')
+      expect(application).to be_valid
     end
 
     it 'forbids redirect uri if required' do

data/spec/version/version_spec.rb

@@ -1,6 +1,6 @@
-require 'spec_helper_integration'
+require 'spec_helper'
 
-describe 'Doorkeeper version' do
+describe Doorkeeper::VERSION do
   context '#gem_version' do
     it 'returns Gem::Version instance' do
       expect(Doorkeeper.gem_version).to be_an_instance_of(Gem::Version)
@@ -9,7 +9,7 @@ describe 'Doorkeeper version' do
 
   context 'VERSION' do
     it 'returns gem version string' do
-      expect(Doorkeeper::VERSION::STRING).to match(/^\d+\.\d+\.\d+[.\w]?$/)
+      expect(Doorkeeper::VERSION::STRING).to match(/^\d+\.\d+\.\d+(\.\w+)?$/)
     end
   end
 end