doorkeeper 5.0.2 → 5.1.0

data/spec/requests/applications/authorized_applications_spec.rb

@@ -1,30 +1,32 @@
-require 'spec_helper'
+# frozen_string_literal: true
 
-feature 'Authorized applications' do
+require "spec_helper"
+
+feature "Authorized applications" do
   background do
-    @user   = User.create!(name: 'Joe', password: 'sekret')
-    @client = client_exists(name: 'Amazing Client App')
+    @user   = User.create!(name: "Joe", password: "sekret")
+    @client = client_exists(name: "Amazing Client App")
     resource_owner_is_authenticated @user
     client_is_authorized @client, @user
   end
 
-  scenario 'display user\'s authorized applications' do
-    visit '/oauth/authorized_applications'
-    i_should_see 'Amazing Client App'
+  scenario "display user's authorized applications" do
+    visit "/oauth/authorized_applications"
+    i_should_see "Amazing Client App"
   end
 
-  scenario 'do not display other user\'s authorized applications' do
-    client = client_exists(name: 'Another Client App')
-    client_is_authorized client, User.create!(name: 'Joe', password: 'sekret')
-    visit '/oauth/authorized_applications'
-    i_should_not_see 'Another Client App'
+  scenario "do not display other user's authorized applications" do
+    client = client_exists(name: "Another Client App")
+    client_is_authorized client, User.create!(name: "Joe", password: "sekret")
+    visit "/oauth/authorized_applications"
+    i_should_not_see "Another Client App"
   end
 
-  scenario 'user revoke access to application' do
-    visit '/oauth/authorized_applications'
-    i_should_see 'Amazing Client App'
-    click_on 'Revoke'
-    i_should_see 'Application revoked'
-    i_should_not_see 'Amazing Client App'
+  scenario "user revoke access to application" do
+    visit "/oauth/authorized_applications"
+    i_should_see "Amazing Client App"
+    click_on "Revoke"
+    i_should_see "Application revoked"
+    i_should_not_see "Amazing Client App"
   end
 end

data/spec/requests/endpoints/authorization_spec.rb

@@ -1,69 +1,71 @@
-require 'spec_helper'
+# frozen_string_literal: true
 
-feature 'Authorization endpoint' do
+require "spec_helper"
+
+feature "Authorization endpoint" do
   background do
-    config_is_set(:authenticate_resource_owner) { User.first || redirect_to('/sign_in') }
-    client_exists(name: 'MyApp')
+    config_is_set(:authenticate_resource_owner) { User.first || redirect_to("/sign_in") }
+    client_exists(name: "MyApp")
   end
 
-  scenario 'requires resource owner to be authenticated' do
+  scenario "requires resource owner to be authenticated" do
     visit authorization_endpoint_url(client: @client)
-    i_should_see 'Sign in'
-    i_should_be_on '/'
+    i_should_see "Sign in"
+    i_should_be_on "/"
   end
 
-  context 'with authenticated resource owner' do
+  context "with authenticated resource owner" do
     background do
       create_resource_owner
       sign_in
     end
 
-    scenario 'displays the authorization form' do
+    scenario "displays the authorization form" do
       visit authorization_endpoint_url(client: @client)
-      i_should_see 'Authorize MyApp to use your account?'
+      i_should_see "Authorize MyApp to use your account?"
     end
 
-    scenario 'displays all requested scopes' do
+    scenario "displays all requested scopes" do
       default_scopes_exist :public
       optional_scopes_exist :write
-      visit authorization_endpoint_url(client: @client, scope: 'public write')
-      i_should_see 'Access your public data'
-      i_should_see 'Update your data'
+      visit authorization_endpoint_url(client: @client, scope: "public write")
+      i_should_see "Access your public data"
+      i_should_see "Update your data"
     end
   end
 
-  context 'with a invalid request' do
+  context "with a invalid request" do
     background do
       create_resource_owner
       sign_in
     end
 
-    scenario 'displays the related error' do
-      visit authorization_endpoint_url(client: @client, response_type: '')
-      i_should_not_see 'Authorize'
+    scenario "displays the related error" do
+      visit authorization_endpoint_url(client: @client, response_type: "")
+      i_should_not_see "Authorize"
       i_should_see_translated_error_message :unsupported_response_type
     end
 
     scenario "displays unsupported_response_type error when using a disabled response type" do
-      config_is_set(:grant_flows, ['implicit'])
-      visit authorization_endpoint_url(client: @client, response_type: 'code')
+      config_is_set(:grant_flows, ["implicit"])
+      visit authorization_endpoint_url(client: @client, response_type: "code")
       i_should_not_see "Authorize"
       i_should_see_translated_error_message :unsupported_response_type
     end
   end
 
-  context 'forgery protection enabled' do
+  context "forgery protection enabled" do
     background do
       create_resource_owner
       sign_in
     end
 
-    scenario 'raises exception on forged requests' do
+    scenario "raises exception on forged requests" do
       allowing_forgery_protection do
         expect do
           page.driver.post authorization_endpoint_url(client_id: @client.uid,
                                                       redirect_uri: @client.redirect_uri,
-                                                      response_type:  'code')
+                                                      response_type: "code")
         end.to raise_error(ActionController::InvalidAuthenticityToken)
       end
     end

data/spec/requests/endpoints/token_spec.rb

@@ -1,73 +1,75 @@
-require 'spec_helper'
+# frozen_string_literal: true
 
-describe 'Token endpoint' do
+require "spec_helper"
+
+describe "Token endpoint" do
   before do
     client_exists
-    authorization_code_exists application: @client, scopes: 'public'
+    authorization_code_exists application: @client, scopes: "public"
   end
 
-  it 'respond with correct headers' do
+  it "respond with correct headers" do
     post token_endpoint_url(code: @authorization.token, client: @client)
-    should_have_header 'Pragma', 'no-cache'
+    should_have_header "Pragma", "no-cache"
 
     # Rails 5.2 changed headers
     if ::Rails::VERSION::MAJOR >= 5 && ::Rails::VERSION::MINOR >= 2 || ::Rails::VERSION::MAJOR >= 6
-      should_have_header 'Cache-Control', 'private, no-store'
+      should_have_header "Cache-Control", "private, no-store"
     else
-      should_have_header 'Cache-Control', 'no-store'
+      should_have_header "Cache-Control", "no-store"
     end
 
-    should_have_header 'Content-Type', 'application/json; charset=utf-8'
+    should_have_header "Content-Type", "application/json; charset=utf-8"
   end
 
-  it 'accepts client credentials with basic auth header' do
+  it "accepts client credentials with basic auth header" do
     post token_endpoint_url,
          params: {
            code: @authorization.token,
-           redirect_uri: @client.redirect_uri
+           redirect_uri: @client.redirect_uri,
          },
-         headers: { 'HTTP_AUTHORIZATION' => basic_auth_header_for_client(@client) }
+         headers: { "HTTP_AUTHORIZATION" => basic_auth_header_for_client(@client) }
 
-    should_have_json 'access_token', Doorkeeper::AccessToken.first.token
+    should_have_json "access_token", Doorkeeper::AccessToken.first.token
   end
 
-  it 'returns null for expires_in when a permanent token is set' do
+  it "returns null for expires_in when a permanent token is set" do
     config_is_set(:access_token_expires_in, nil)
     post token_endpoint_url(code: @authorization.token, client: @client)
-    should_have_json 'access_token', Doorkeeper::AccessToken.first.token
-    should_not_have_json 'expires_in'
+    should_have_json "access_token", Doorkeeper::AccessToken.first.token
+    should_not_have_json "expires_in"
   end
 
-  it 'returns unsupported_grant_type for invalid grant_type param' do
-    post token_endpoint_url(code: @authorization.token, client: @client, grant_type: 'nothing')
+  it "returns unsupported_grant_type for invalid grant_type param" do
+    post token_endpoint_url(code: @authorization.token, client: @client, grant_type: "nothing")
 
-    should_not_have_json 'access_token'
-    should_have_json 'error', 'unsupported_grant_type'
-    should_have_json 'error_description', translated_error_message('unsupported_grant_type')
+    should_not_have_json "access_token"
+    should_have_json "error", "unsupported_grant_type"
+    should_have_json "error_description", translated_error_message("unsupported_grant_type")
   end
 
-  it 'returns unsupported_grant_type for disabled grant flows' do
-    config_is_set(:grant_flows, ['implicit'])
-    post token_endpoint_url(code: @authorization.token, client: @client, grant_type: 'authorization_code')
+  it "returns unsupported_grant_type for disabled grant flows" do
+    config_is_set(:grant_flows, ["implicit"])
+    post token_endpoint_url(code: @authorization.token, client: @client, grant_type: "authorization_code")
 
-    should_not_have_json 'access_token'
-    should_have_json 'error', 'unsupported_grant_type'
-    should_have_json 'error_description', translated_error_message('unsupported_grant_type')
+    should_not_have_json "access_token"
+    should_have_json "error", "unsupported_grant_type"
+    should_have_json "error_description", translated_error_message("unsupported_grant_type")
   end
 
-  it 'returns unsupported_grant_type when refresh_token is not in use' do
-    post token_endpoint_url(code: @authorization.token, client: @client, grant_type: 'refresh_token')
+  it "returns unsupported_grant_type when refresh_token is not in use" do
+    post token_endpoint_url(code: @authorization.token, client: @client, grant_type: "refresh_token")
 
-    should_not_have_json 'access_token'
-    should_have_json 'error', 'unsupported_grant_type'
-    should_have_json 'error_description', translated_error_message('unsupported_grant_type')
+    should_not_have_json "access_token"
+    should_have_json "error", "unsupported_grant_type"
+    should_have_json "error_description", translated_error_message("unsupported_grant_type")
   end
 
-  it 'returns invalid_request if grant_type is missing' do
-    post token_endpoint_url(code: @authorization.token, client: @client, grant_type: '')
+  it "returns invalid_request if grant_type is missing" do
+    post token_endpoint_url(code: @authorization.token, client: @client, grant_type: "")
 
-    should_not_have_json 'access_token'
-    should_have_json 'error', 'invalid_request'
-    should_have_json 'error_description', translated_error_message('invalid_request')
+    should_not_have_json "access_token"
+    should_have_json "error", "invalid_request"
+    should_have_json "error_description", translated_error_message("invalid_request")
   end
 end

data/spec/requests/flows/authorization_code_errors_spec.rb

@@ -1,9 +1,11 @@
-require 'spec_helper'
+# frozen_string_literal: true
 
-feature 'Authorization Code Flow Errors' do
+require "spec_helper"
+
+feature "Authorization Code Flow Errors" do
   let(:client_params) { {} }
   background do
-    config_is_set(:authenticate_resource_owner) { User.first || redirect_to('/sign_in') }
+    config_is_set(:authenticate_resource_owner) { User.first || redirect_to("/sign_in") }
     client_exists client_params
     create_resource_owner
     sign_in
@@ -22,35 +24,35 @@ feature 'Authorization Code Flow Errors' do
     end
   end
 
-  context 'when access was denied' do
-    scenario 'redirects with error' do
+  context "when access was denied" do
+    scenario "redirects with error" do
       visit authorization_endpoint_url(client: @client)
-      click_on 'Deny'
+      click_on "Deny"
 
       i_should_be_on_client_callback @client
-      url_should_not_have_param 'code'
-      url_should_have_param 'error', 'access_denied'
-      url_should_have_param 'error_description', translated_error_message(:access_denied)
+      url_should_not_have_param "code"
+      url_should_have_param "error", "access_denied"
+      url_should_have_param "error_description", translated_error_message(:access_denied)
     end
 
-    scenario 'redirects with state parameter' do
-      visit authorization_endpoint_url(client: @client, state: 'return-this')
-      click_on 'Deny'
+    scenario "redirects with state parameter" do
+      visit authorization_endpoint_url(client: @client, state: "return-this")
+      click_on "Deny"
 
       i_should_be_on_client_callback @client
-      url_should_not_have_param 'code'
-      url_should_have_param 'state', 'return-this'
+      url_should_not_have_param "code"
+      url_should_have_param "state", "return-this"
     end
   end
 end
 
-describe 'Authorization Code Flow Errors', 'after authorization' do
+describe "Authorization Code Flow Errors", "after authorization" do
   before do
     client_exists
     authorization_code_exists application: @client
   end
 
-  it 'returns :invalid_grant error when posting an already revoked grant code' do
+  it "returns :invalid_grant error when posting an already revoked grant code" do
     # First successful request
     post token_endpoint_url(code: @authorization.token, client: @client)
 
@@ -59,18 +61,18 @@ describe 'Authorization Code Flow Errors', 'after authorization' do
       post token_endpoint_url(code: @authorization.token, client: @client)
     end.to_not(change { Doorkeeper::AccessToken.count })
 
-    should_not_have_json 'access_token'
-    should_have_json 'error', 'invalid_grant'
-    should_have_json 'error_description', translated_error_message('invalid_grant')
+    should_not_have_json "access_token"
+    should_have_json "error", "invalid_grant"
+    should_have_json "error_description", translated_error_message("invalid_grant")
   end
 
-  it 'returns :invalid_grant error for invalid grant code' do
-    post token_endpoint_url(code: 'invalid', client: @client)
+  it "returns :invalid_grant error for invalid grant code" do
+    post token_endpoint_url(code: "invalid", client: @client)
 
     access_token_should_not_exist
 
-    should_not_have_json 'access_token'
-    should_have_json 'error', 'invalid_grant'
-    should_have_json 'error_description', translated_error_message('invalid_grant')
+    should_not_have_json "access_token"
+    should_have_json "error", "invalid_grant"
+    should_have_json "error_description", translated_error_message("invalid_grant")
   end
 end