duodealer_api 1.0.0

data/test/product_publication_test.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+require 'test_helper'
+
+class ProductPublicationTest < Test::Unit::TestCase
+  def test_get_all_product_publications
+    fake 'publications/55650051/product_publications', body: load_fixture('product_publications')
+    product_publications = DuodealerAPI::ProductPublication.find(:all, params: { publication_id: 55650051 })
+
+    assert_equal 647162527768, product_publications.first.id
+    assert_equal 55650051, product_publications.first.publication_id
+  end
+
+  def test_get_product_publication
+    fake 'publications/55650051/product_publications/647162527768', body: load_fixture('product_publication')
+    product_publication = DuodealerAPI::ProductPublication.find(647162527768, params: { publication_id: 55650051 })
+
+    assert_equal 647162527768, product_publication.id
+    assert_equal 55650051, product_publication.publication_id
+  end
+
+  def test_create_product_publication
+    fake 'publications/55650051/product_publications', method: :post, body: load_fixture('product_publication')
+    DuodealerAPI::ProductPublication.create(
+      publication_id: 55650051,
+      published_at: "2018-01-29T14:06:08-05:00",
+      published: true,
+      product_id: 8267093571
+    )
+
+    expected_body = {
+      product_publication: {
+        published_at: "2018-01-29T14:06:08-05:00",
+        published: true,
+        product_id: 8267093571,
+      },
+    }.to_json
+
+    assert_equal expected_body, WebMock.last_request.body
+  end
+end

data/test/product_test.rb

@@ -0,0 +1,60 @@
+require 'test_helper'
+
+class ProductTest < Test::Unit::TestCase
+  def setup
+    super
+
+    fake "products/632910392", :body => load_fixture('product')
+    @product = DuodealerAPI::Product.find(632910392)
+  end
+
+  def test_add_metafields_to_product
+    fake "products/632910392/metafields", :method => :post, :status => 201, :body => load_fixture('metafield')
+
+    field = @product.add_metafield(DuodealerAPI::Metafield.new(:namespace => "contact", :key => "email", :value => "123@example.com", :value_type => "string"))
+    assert_equal ActiveSupport::JSON.decode('{"metafield":{"namespace":"contact","key":"email","value":"123@example.com","value_type":"string"}}'), ActiveSupport::JSON.decode(WebMock.last_request.body)
+    assert !field.new_record?
+    assert_equal "contact", field.namespace
+    assert_equal "email", field.key
+    assert_equal "123@example.com", field.value
+  end
+
+  def test_get_all_metafields_for_product
+    fake "products/632910392/metafields", :body => load_fixture('metafields')
+
+    metafields = @product.metafields
+
+    assert_equal 3, metafields.length
+    assert metafields.all?{ |m| m.is_a? DuodealerAPI::Metafield }
+  end
+
+  def test_get_2_metafields_for_product
+    body = ActiveSupport::JSON.decode load_fixture 'metafields'
+    body['metafields'].slice! 2, 1
+
+    fake 'products/632910392/metafields.json?limit=2', body: body.to_json, extension: false
+
+    metafields = @product.metafields limit: 2
+
+    assert_equal 2, metafields.length
+    assert metafields.all?{ |m| m.is_a? DuodealerAPI::Metafield }
+  end
+
+  def test_update_loaded_variant
+    fake "products/632910392/variants/808950810", :method => :put, :status => 200, :body => load_fixture('variant')
+
+    variant = @product.variants.first
+    variant.price = "0.50"
+    variant.save
+  end
+
+  def test_price_range
+    assert_equal('199.00', @product.price_range)
+  end
+
+  def test_price_range_when_has_different_price
+    @product.variants[0].price = '100.00'
+
+    assert_equal('100.00 - 199.00', @product.price_range)
+  end
+end

data/test/publication_test.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+require 'test_helper'
+
+class PublicationTest < Test::Unit::TestCase
+  def test_find_all_publications
+    fake 'publications'
+    publications = DuodealerAPI::Publication.find(:all)
+
+    assert_equal 55650051, publications.first.id
+    assert_equal "Buy Button", publications.first.name
+  end
+end

data/test/recurring_application_charge_test.rb

@@ -0,0 +1,142 @@
+require 'test_helper'
+
+class RecurringApplicationChargeTest < Test::Unit::TestCase
+
+  def test_recurring_application_charges_create
+    fake "recurring_application_charges", method: :post, status: 201, body: load_fixture('recurring_application_charge')
+
+    charge = DuodealerAPI::RecurringApplicationCharge.create(
+      name: "Default Plan",
+      price: 10.0,
+      return_url: "http://test.com/confirm"
+    )
+
+    assert_equal 'http://apple.duodealer.com/admin/charges/654381177/confirm_recurring_application_charge?signature=BAhpBHkQASc%3D--419fc7424f8c290ac2b21b9004ed223e35b52164', charge.confirmation_url
+  end
+
+  def test_get_recurring_application_charges
+    fake "recurring_application_charges/654381177", method: :get, status: 201, body: load_fixture('recurring_application_charge')
+
+    charge = DuodealerAPI::RecurringApplicationCharge.find(654381177)
+
+    assert_equal "Super Duper Plan", charge.name
+  end
+
+  def test_list_recurring_application_charges
+    fake "recurring_application_charges", method: :get, status: 201, body: load_fixture('recurring_application_charges')
+
+    charge = DuodealerAPI::RecurringApplicationCharge.find(:all)
+
+    assert_equal "Super Mega Plan", charge.last.name
+  end
+
+  def test_list_since_recurring_application_charges
+    fake "recurring_application_charges.json?since_id=64512345",extension: false, method: :get, status: 201, body: load_fixture('recurring_application_charges')
+
+    charge = DuodealerAPI::RecurringApplicationCharge.find(:all, params: { since_id: '64512345' })
+
+    assert_equal "Super Mega Plan", charge.last.name
+  end
+
+  def test_list_fields_recurring_application_charges
+    fake "recurring_application_charges.json?fields=name",extension: false, method: :get, status: 201, body: load_fixture('recurring_application_charges')
+
+    charge = DuodealerAPI::RecurringApplicationCharge.find(:all, params: { fields: 'name' })
+
+    assert_equal "Super Mega Plan", charge.last.name
+  end
+
+  def test_pending_recurring_application_charge
+    fake "recurring_application_charges", method: :get, status: 201, body: load_fixture('recurring_application_charges')
+
+    charge = DuodealerAPI::RecurringApplicationCharge.pending
+
+    assert_equal "Super Mega Plan2", charge.last.name
+  end
+
+  def test_cancelled_recurring_application_charge
+    fake "recurring_application_charges", method: :get, status: 201, body: load_fixture('recurring_application_charges')
+
+    charge = DuodealerAPI::RecurringApplicationCharge.cancelled
+
+    assert_equal "Super Mega Plan3", charge.last.name
+  end
+
+  def test_accepted_recurring_application_charge
+    fake "recurring_application_charges", method: :get, status: 201, body: load_fixture('recurring_application_charges')
+
+    charge = DuodealerAPI::RecurringApplicationCharge.accepted
+
+    assert_equal "Super Mega Plan4", charge.first.name
+    assert_equal "Super Mega Plan", charge.last.name
+  end
+
+  def test_declined_recurring_application_charge
+    fake "recurring_application_charges", method: :get, status: 201, body: load_fixture('recurring_application_charges')
+
+    charge = DuodealerAPI::RecurringApplicationCharge.declined
+
+    assert_equal "Super Mega Plan5", charge.last.name
+  end
+
+  def test_activate_recurring_application_charge
+    fake "recurring_application_charges", method: :get, status: 201, body: load_fixture('recurring_application_charges')
+    fake "recurring_application_charges/455696199/activate", method: :post, status: 200, body: "{}"
+
+    charge = DuodealerAPI::RecurringApplicationCharge.accepted
+
+    assert charge.last.activate
+  end
+
+  def test_adjust_recurring_application_charge
+    fake "recurring_application_charges/654381177", method: :get, status: 201, body: load_fixture('recurring_application_charge')
+    fake "recurring_application_charges/654381177/customize.json?recurring_application_charge%5Bcapped_amount%5D=200", method: :put, body: load_fixture('recurring_application_charge_adjustment'), extension: false
+
+    charge = DuodealerAPI::RecurringApplicationCharge.find(654381177)
+
+    assert charge.customize(capped_amount: 200)
+  end
+
+  def test_cancel_recurring_application_charge
+    fake "recurring_application_charges", method: :get, status: 201, body: load_fixture('recurring_application_charges')
+    fake "recurring_application_charges/455696194", method: :delete, status: 200, body: "{}"
+
+    charge = DuodealerAPI::RecurringApplicationCharge.current
+    assert charge.cancel
+  end
+
+  def test_usage_charges_recurring_application_charge_found
+    fake "recurring_application_charges/654381177", method: :get, status: 201, body: load_fixture('recurring_application_charge')
+    fake "recurring_application_charges/654381177/usage_charges", method: :get, status: 201, body: load_fixture('usage_charges')
+
+    charge = DuodealerAPI::RecurringApplicationCharge.find(654381177)
+    usage_charges = charge.usage_charges
+
+    assert_equal 2, usage_charges.length
+  end
+
+  def test_usage_charges_recurring_application_charge_not_found
+    fake "recurring_application_charges/654381177", method: :get, status: 201, body: load_fixture('recurring_application_charge')
+    fake "recurring_application_charges/654381177/usage_charges", method: :get, status: 201, body: "[]"
+
+    charge = DuodealerAPI::RecurringApplicationCharge.find(654381177)
+    usage_charges = charge.usage_charges
+
+    assert_equal 0, usage_charges.length
+  end
+
+  def test_no_recurring_application_charge_found
+    fake "recurring_application_charges", body: {recurring_application_charges: []}.to_json
+
+    assert_equal 0, DuodealerAPI::RecurringApplicationCharge.all.count
+    assert_nil DuodealerAPI::RecurringApplicationCharge.current
+    assert_equal [], DuodealerAPI::RecurringApplicationCharge.pending
+  end
+
+  def test_recurring_application_charge_not_found_error
+    fake "recurring_application_charges", body: '{"errors":"Not Found"}', status: 404
+    assert_nil DuodealerAPI::RecurringApplicationCharge.all
+    assert_nil DuodealerAPI::RecurringApplicationCharge.current
+    assert_equal([], DuodealerAPI::RecurringApplicationCharge.pending)
+  end
+end

data/test/redirect_test.rb

@@ -0,0 +1,9 @@
+require 'test_helper'
+
+class RedirectTest < Test::Unit::TestCase
+  test "#create should create a redirect" do
+    fake "redirects", :method => :post, :status => 201, :body => load_fixture('redirect')
+    redirect = DuodealerAPI::Redirect.create(:path => "/ipod", :target => "/pages/itunes")
+    assert_equal 979034150, redirect.id
+  end
+end

data/test/refund_test.rb

@@ -0,0 +1,32 @@
+require 'test_helper'
+
+class RefundTest < Test::Unit::TestCase
+
+  test '#create should create a refund' do
+    fake "orders/450789469/refunds", :method => :post, :status => 201, :body => load_fixture('refund')
+    refund = DuodealerAPI::Refund.create(
+      :order_id => 450789469,
+      :restock => true,
+      :note => "wrong size",
+      :shipping => { :full_refund => true },
+      :refund_line_items => [{ :line_item_id => 518995019, :quantity => 1 }]
+    )
+    assert_equal 703073504, refund.refund_line_items.first.line_item_id
+  end
+
+  test '#find should return a refund' do
+    fake "orders/450789469/refunds/509562969.json?order_id=450789469", :extension => false, :method => :get, :body => load_fixture('refund')
+    fake "orders/450789469/refunds/509562969", :method => :get, :body => load_fixture('refund')
+    refund = DuodealerAPI::Refund.find(509562969, :params => {:order_id => 450789469})
+    assert_equal 509562969, refund.id
+  end
+
+  test '#calculate a refund' do
+    fake "orders/450789469/refunds/calculate", :method => :post, :body => load_fixture('refund')
+    data = { :shipping => { :amount => 0 } }
+
+    refund = DuodealerAPI::Refund.calculate(data, :params => {:order_id => 450789469})
+    assert_equal 2, refund.refund_line_items.count
+    assert_equal 703073504, refund.refund_line_items.first.line_item_id
+  end
+end

data/test/report_test.rb

@@ -0,0 +1,35 @@
+require 'test_helper'
+
+class ReportTest < Test::Unit::TestCase
+  test 'get should get a report' do
+    fake 'reports/987', method: :get, status: 200, body: load_fixture('report')
+
+    report = DuodealerAPI::Report.find(987)
+    assert_equal 987, report.id
+  end
+
+  test 'get all should get all reports' do
+    fake 'reports', method: :get, status: 200, body: load_fixture('reports')
+
+    reports = DuodealerAPI::Report.all
+    assert_equal 'custom_app_reports', reports.first.category
+  end
+
+  test 'create should create a report' do
+    fake 'reports', method: :post, status: 201, body: load_fixture('report')
+
+    report = DuodealerAPI::Report.create(
+      name: 'Custom App Report',
+      duodealer_ql: 'SHOW quantity_count, total_sales BY product_type, vendor, product_title FROM products SINCE -1m UNTIL -0m ORDER BY total_sales DESC'
+    )
+    assert_equal 'custom_app_reports', report.category
+  end
+
+  test 'delete should delete report' do
+    fake 'reports/987', method: :get, status: 200, body: load_fixture('report')
+    fake 'reports/987', method: :delete, status: 200, body: '[]'
+
+    report = DuodealerAPI::Report.find(987)
+    assert report.destroy
+  end
+end

data/test/resource_feedback_test.rb

@@ -0,0 +1,42 @@
+class ResourceFeedbackTest < Test::Unit::TestCase
+  def test_get_resource_feedback
+    body = { resource_feedback: [ { resource_type: 'Shop' } ] }.to_json
+    fake 'resource_feedback', method: :get, body: body
+    resource_feedback = DuodealerAPI::ResourceFeedback.find(:all)
+    assert_equal 'Shop', resource_feedback.first.resource_type
+  end
+
+  def test_save_with_resource_feedback_endpoint
+    body = { resource_feedback: {} }.to_json
+    fake 'resource_feedback', method: :post, body: body
+    DuodealerAPI::ResourceFeedback.new.save
+    assert_request_body body
+  end
+
+  def test_get_resource_feedback_with_product_id
+    body = { resource_feedback: [ { resource_type: 'Product' } ] }.to_json
+    fake 'products/42/resource_feedback', method: :get, body: body
+    resource_feedback = DuodealerAPI::ResourceFeedback.find(:all, params: { product_id: 42 })
+    assert_equal 'Product', resource_feedback.first.resource_type
+  end
+
+  def test_save_with_product_id_resource_feedback_endpoint
+    body = { resource_feedback: {} }.to_json
+    fake 'products/42/resource_feedback', method: :post, body: body
+    DuodealerAPI::ResourceFeedback.new(product_id: 42).save
+    assert_request_body body
+  end
+
+  def test_save_raises_exception_when_already_persisted
+    body = { resource_feedback: {} }.to_json
+    fake 'resource_feedback', method: :post, body: body
+    resource_feedback = DuodealerAPI::ResourceFeedback.new
+    resource_feedback.save
+    assert_request_body body
+
+    DuodealerAPI::ResourceFeedback.any_instance.expects(:persisted?).returns(true)
+    assert_raises DuodealerAPI::ResourceFeedback::ExistingFeedbackSaved do
+      resource_feedback.save
+    end
+  end
+end

data/test/script_tag_test.rb

@@ -0,0 +1,30 @@
+require 'test_helper'
+
+class ScriptTagTest < Test::Unit::TestCase
+  test "get all should get all script tags" do
+    fake 'script_tags', :method => :get, :status => 200, :body => load_fixture('script_tags')
+    script_tags = DuodealerAPI::ScriptTag.all
+    assert_equal "http://js-aplenty.com/bar.js", script_tags.first.src
+  end
+
+  test "get should get a script tag" do
+    fake 'script_tags/421379493', :method => :get, :status => 200, :body => load_fixture('script_tag')
+    script_tag = DuodealerAPI::ScriptTag.find(421379493)
+    assert_equal "http://js-aplenty.com/bar.js", script_tag.src
+  end
+
+  test "create should create a new script tag" do
+    fake 'script_tags', :method => :post, :status => 201, :body => load_fixture('script_tag')
+    script_tag = DuodealerAPI::ScriptTag.create(event: "onload", src: "http://js-aplenty.com/bar.js")
+    assert_equal "http://js-aplenty.com/bar.js", script_tag.src
+  end
+
+  test "editing script tag should update script tag" do
+    fake 'script_tags/421379493', :method => :get, :status => 200, :body => load_fixture('script_tag')
+    script_tag = DuodealerAPI::ScriptTag.find(421379493)
+    script_tag.src = "http://js-aplenty.com/bar.js"
+    fake 'script_tags/421379493', :method => :put, :status => 200, :body => load_fixture('script_tag')
+    script_tag.save
+    assert_equal "http://js-aplenty.com/bar.js", script_tag.src
+  end
+end

data/test/session_test.rb

@@ -0,0 +1,366 @@
+require 'test_helper'
+require 'timecop'
+
+class SessionTest < Test::Unit::TestCase
+
+  def setup
+    super
+    DuodealerAPI::Session.secret = 'secret'
+  end
+
+  test "not be valid without a url" do
+    session = DuodealerAPI::Session.new(domain: nil, token: "any-token", api_version: any_api_version)
+    assert_not session.valid?
+  end
+
+  test "not be valid without token" do
+    session = DuodealerAPI::Session.new(domain: "testshop.duodealer.com", token: nil, api_version: any_api_version)
+    assert_not session.valid?
+  end
+
+  test "not be valid without an api version" do
+    session = DuodealerAPI::Session.new(domain: "testshop.duodealer.com", token: "any-token", api_version: nil)
+    assert_not session.valid?
+
+    session = DuodealerAPI::Session.new(domain: "testshop.duodealer.com", token: "any-token", api_version: DuodealerAPI::ApiVersion::NullVersion)
+    assert_not session.valid?
+  end
+
+  test "be valid with any token, any url and version" do
+    session = DuodealerAPI::Session.new(
+      domain: "testshop.duodealer.com",
+      token: "any-token",
+      api_version: any_api_version
+    )
+    assert session.valid?
+  end
+
+  test "not raise error without params" do
+    assert_nothing_raised do
+      DuodealerAPI::Session.new(domain: "testshop.duodealer.com", token: "any-token", api_version: any_api_version)
+    end
+  end
+
+  test "ignore everything but the subdomain in the shop" do
+    assert_equal(
+      "https://testshop.duodealer.com",
+      DuodealerAPI::Session.new(
+        domain: "http://user:pass@testshop.notduodealer.net/path",
+        token: "any-token",
+        api_version: any_api_version
+      ).site
+    )
+  end
+
+  test "append the duodealer domain if not given" do
+    assert_equal(
+      "https://testshop.duodealer.com",
+      DuodealerAPI::Session.new(domain: "testshop", token: "any-token", api_version: any_api_version).site
+    )
+  end
+
+  test "not raise error without params" do
+    assert_nothing_raised do
+      DuodealerAPI::Session.new(domain: "testshop.duodealer.com", token: "any-token", api_version: any_api_version)
+    end
+  end
+
+  test "raise error if params passed but signature omitted" do
+    assert_raises(DuodealerAPI::ValidationException) do
+      session = DuodealerAPI::Session.new(domain: "testshop.duodealer.com", token: nil, api_version: any_api_version)
+      session.request_token({'code' => 'any-code'})
+    end
+  end
+
+  test "setup api_key and secret for all sessions" do
+    DuodealerAPI::Session.setup(:api_key => "My test key", :secret => "My test secret")
+    assert_equal "My test key", DuodealerAPI::Session.api_key
+    assert_equal "My test secret", DuodealerAPI::Session.secret
+  end
+
+  test "#temp reset DuodealerAPI::Base.site to original value" do
+    session1 = DuodealerAPI::Session.new(domain: 'fakeshop.duodealer.com', token: 'token1', api_version: '2019-01')
+    DuodealerAPI::Base.activate_session(session1)
+
+    DuodealerAPI::Session.temp(domain: "testshop.duodealer.com", token: "any-token", api_version: :unstable) do
+      @assigned_site = DuodealerAPI::Base.site
+      @assigned_version = DuodealerAPI::Base.api_version
+    end
+
+    assert_equal('https://testshop.duodealer.com', @assigned_site.to_s)
+    assert_equal('https://fakeshop.duodealer.com', DuodealerAPI::Base.site.to_s)
+
+    assert_equal(DuodealerAPI::ApiVersion.new(handle: :unstable), @assigned_version)
+    assert_equal(DuodealerAPI::ApiVersion.new(handle: '2019-01'), DuodealerAPI::Base.api_version)
+  end
+
+  test "#with_session activates the session for the duration of the block" do
+    session1 = DuodealerAPI::Session.new(domain: 'fakeshop.duodealer.com', token: 'token1', api_version: '2019-01')
+    DuodealerAPI::Base.activate_session(session1)
+
+    other_session = DuodealerAPI::Session.new(
+      domain: "testshop.duodealer.com",
+      token: "any-token",
+      api_version: :unstable
+    )
+
+    DuodealerAPI::Session.with_session(other_session) do
+      @assigned_site = DuodealerAPI::Base.site
+      @assigned_version = DuodealerAPI::Base.api_version
+    end
+
+    assert_equal('https://testshop.duodealer.com', @assigned_site.to_s)
+    assert_equal('https://fakeshop.duodealer.com', DuodealerAPI::Base.site.to_s)
+
+    assert_equal(DuodealerAPI::ApiVersion.new(handle: :unstable), @assigned_version)
+    assert_equal(DuodealerAPI::ApiVersion.new(handle: '2019-01'), DuodealerAPI::Base.api_version)
+  end
+
+  test "#with_session resets the activated session even if there an exception during the block" do
+    session1 = DuodealerAPI::Session.new(domain: 'fakeshop.duodealer.com', token: 'token1', api_version: '2019-01')
+    DuodealerAPI::Base.activate_session(session1)
+
+    other_session = DuodealerAPI::Session.new(
+      domain: "testshop.duodealer.com",
+      token: "any-token",
+      api_version: :unstable
+    )
+
+    assert_raises StandardError do
+      DuodealerAPI::Session.with_session(other_session) { raise StandardError, "" }
+    end
+
+    assert_equal('https://fakeshop.duodealer.com', DuodealerAPI::Base.site.to_s)
+    assert_equal(DuodealerAPI::ApiVersion.new(handle: '2019-01'), DuodealerAPI::Base.api_version)
+  end
+
+  test "#with_version will adjust the actvated api version for the duration of the block" do
+    session1 = DuodealerAPI::Session.new(domain: 'fakeshop.duodealer.com', token: 'token1', api_version: '2019-01')
+    DuodealerAPI::Base.activate_session(session1)
+
+    DuodealerAPI::Session.with_version(:unstable) do
+      @assigned_site = DuodealerAPI::Base.site
+      @assigned_version = DuodealerAPI::Base.api_version
+    end
+
+    assert_equal('https://fakeshop.duodealer.com', @assigned_site.to_s)
+    assert_equal('https://fakeshop.duodealer.com', DuodealerAPI::Base.site.to_s)
+
+    assert_equal(DuodealerAPI::ApiVersion.new(handle: :unstable), @assigned_version)
+    assert_equal(DuodealerAPI::ApiVersion.new(handle: '2019-01'), DuodealerAPI::Base.api_version)
+  end
+
+  test "create_permission_url requires redirect_uri" do
+    DuodealerAPI::Session.setup(api_key: "My_test_key", secret: "My test secret")
+    session = DuodealerAPI::Session.new(
+      domain: 'http://localhost.duodealer.com',
+      token: 'any-token',
+      api_version: any_api_version
+    )
+    scope = ["write_products"]
+    assert_raises(ArgumentError) do
+      session.create_permission_url(scope)
+    end
+  end
+
+  test "create_permission_url returns correct url with single scope and redirect uri" do
+    DuodealerAPI::Session.setup(api_key: "My_test_key", secret: "My test secret")
+    session = DuodealerAPI::Session.new(
+      domain: 'http://localhost.duodealer.com',
+      token: 'any-token',
+      api_version: any_api_version
+    )
+    scope = ["write_products"]
+    permission_url = session.create_permission_url(scope, "http://my_redirect_uri.com")
+    assert_equal "https://localhost.duodealer.com/admin/oauth/authorize?client_id=My_test_key&scope=write_products&redirect_uri=http://my_redirect_uri.com", permission_url
+  end
+
+  test "create_permission_url returns correct url with dual scope" do
+    DuodealerAPI::Session.setup(api_key: "My_test_key", secret: "My test secret")
+    session = DuodealerAPI::Session.new(
+      domain: 'http://localhost.duodealer.com',
+      token: 'any-token',
+      api_version: any_api_version
+    )
+    scope = ["write_products","write_customers"]
+    permission_url = session.create_permission_url(scope, "http://my_redirect_uri.com")
+    assert_equal "https://localhost.duodealer.com/admin/oauth/authorize?client_id=My_test_key&scope=write_products,write_customers&redirect_uri=http://my_redirect_uri.com", permission_url
+  end
+
+  test "create_permission_url returns correct url with no scope" do
+    DuodealerAPI::Session.setup(api_key: "My_test_key", secret: "My test secret")
+    session = DuodealerAPI::Session.new(
+      domain: 'http://localhost.duodealer.com',
+      token: 'any-token',
+      api_version: any_api_version
+    )
+    scope = []
+    permission_url = session.create_permission_url(scope, "http://my_redirect_uri.com")
+    assert_equal "https://localhost.duodealer.com/admin/oauth/authorize?client_id=My_test_key&scope=&redirect_uri=http://my_redirect_uri.com", permission_url
+  end
+
+  test "create_permission_url returns correct url with state" do
+    DuodealerAPI::Session.setup(api_key: "My_test_key", secret: "My test secret")
+    session = DuodealerAPI::Session.new(
+      domain: 'http://localhost.duodealer.com',
+      token: 'any-token',
+      api_version: any_api_version
+    )
+    scope = []
+    permission_url = session.create_permission_url(scope, "http://my_redirect_uri.com", state: "My nonce")
+    assert_equal "https://localhost.duodealer.com/admin/oauth/authorize?client_id=My_test_key&scope=&redirect_uri=http://my_redirect_uri.com&state=My%20nonce", permission_url
+  end
+
+  test "raise exception if code invalid in request token" do
+    DuodealerAPI::Session.setup(:api_key => "My test key", :secret => "My test secret")
+    session = DuodealerAPI::Session.new(
+      domain: 'http://localhost.duodealer.com',
+      token: nil,
+      api_version: any_api_version
+    )
+    fake(
+      nil,
+      url: 'https://localhost.duodealer.com/admin/oauth/access_token',
+      method: :post,
+      status: 404,
+      body: '{"error" : "invalid_request"}'
+    )
+    assert_raises(DuodealerAPI::ValidationException) do
+      session.request_token(code: "bad-code")
+    end
+    assert_equal false, session.valid?
+  end
+
+  test "return site for session" do
+    session = DuodealerAPI::Session.new(
+      domain: "testshop.duodealer.com",
+      token: "any-token",
+      api_version: any_api_version
+    )
+    assert_equal "https://testshop.duodealer.com", session.site
+  end
+
+  test "return_token_if_signature_is_valid" do
+    api_version = any_api_version
+    fake nil,
+      url: "https://testshop.duodealer.com/admin/oauth/access_token",
+      method: :post,
+      body: '{"access_token":"any-token"}'
+    session = DuodealerAPI::Session.new(domain: "testshop.duodealer.com", token: nil, api_version: api_version)
+
+    params = { code: 'any-code', timestamp: Time.now }
+    token = session.request_token(params.merge(hmac: generate_signature(params)))
+
+    assert_equal "any-token", token
+    assert_equal "any-token", session.token
+  end
+
+  test "extra parameters are stored in session" do
+    api_version = DuodealerAPI::ApiVersion.new(handle: :unstable)
+    fake nil,
+      url: "https://testshop.duodealer.com/admin/oauth/access_token",
+      method: :post,
+      body: '{"access_token":"any-token","foo":"example"}'
+    session = DuodealerAPI::Session.new(domain: "testshop.duodealer.com", token: nil, api_version: api_version)
+
+    params = { code: 'any-code', timestamp: Time.now }
+    assert session.request_token(params.merge(hmac: generate_signature(params)))
+
+    assert_equal ({ "foo" => "example" }), session.extra
+  end
+
+  test "expires_in is automatically converted in expires_at" do
+    api_version = any_api_version
+    fake nil,
+      url: "https://testshop.duodealer.com/admin/oauth/access_token",
+      method: :post,
+      body: '{"access_token":"any-token","expires_in":86393}'
+    session = DuodealerAPI::Session.new(domain: "testshop.duodealer.com", token: nil, api_version: api_version)
+
+    Timecop.freeze do
+      params = { code: 'any-code', timestamp: Time.now }
+      assert session.request_token(params.merge(hmac: generate_signature(params)))
+
+      expires_at = Time.now.utc + 86393
+      assert_equal ({ "expires_at" => expires_at.to_i }), session.extra
+      assert session.expires_at.is_a?(Time)
+      assert_equal expires_at.to_i, session.expires_at.to_i
+      assert_equal 86393, session.expires_in
+      assert_equal false, session.expired?
+
+      Timecop.travel(session.expires_at) do
+        assert_equal true, session.expired?
+      end
+    end
+  end
+
+  test "raise error if signature does not match expected" do
+    params = {:code => "any-code", :timestamp => Time.now}
+    signature = generate_signature(params)
+    params[:foo] = 'world'
+    assert_raises(DuodealerAPI::ValidationException) do
+      session = DuodealerAPI::Session.new(domain: "testshop.duodealer.com", token: nil, api_version: any_api_version)
+      session.request_token(params.merge(:hmac => signature))
+    end
+  end
+
+  test "raise error if timestamp is too old" do
+    params = {:code => "any-code", :timestamp => Time.now - 2.days}
+    signature = generate_signature(params)
+    params[:foo] = 'world'
+    assert_raises(DuodealerAPI::ValidationException) do
+      session = DuodealerAPI::Session.new(domain: "testshop.duodealer.com", token: nil, api_version: any_api_version)
+      session.request_token(params.merge(:hmac => signature))
+    end
+  end
+
+  test "return true when the signature is valid and the keys of params are strings" do
+    params = { 'code' => 'any-code', 'timestamp' => Time.now }
+    params[:hmac] = generate_signature(params)
+    assert_equal true, DuodealerAPI::Session.validate_signature(params)
+  end
+
+  test "return true when validating signature of params with ampersand and equal sign characters" do
+    DuodealerAPI::Session.secret = 'secret'
+    params = { 'a' => '1&b=2', 'c=3&d' => '4' }
+    to_sign = 'a=1%26b=2&c%3D3%26d=4'
+    params[:hmac] = generate_signature(to_sign)
+    assert_equal true, DuodealerAPI::Session.validate_signature(params)
+  end
+
+  test "return true when validating signature of params with percent sign characters" do
+    DuodealerAPI::Session.secret = 'secret'
+    params = { 'a%3D1%26b' => '2%26c%3D3' }
+    to_sign = 'a%253D1%2526b=2%2526c%253D3'
+    params[:hmac] = generate_signature(to_sign)
+    assert_equal true, DuodealerAPI::Session.validate_signature(params)
+  end
+
+  test "url is aliased to domain to minimize the upgrade changes" do
+    session = DuodealerAPI::Session.new(
+      domain: "http://testshop.duodealer.com",
+      token: "any-token",
+      api_version: any_api_version
+    )
+
+    assert_equal('testshop.duodealer.com', session.url)
+  end
+
+  private
+
+  def make_sorted_params(params)
+    params.with_indifferent_access.except(
+      :signature, :hmac, :action, :controller
+    ).collect { |k, v| "#{k}=#{v}" }.sort.join('&')
+  end
+
+  def generate_signature(params)
+    params = make_sorted_params(params) if params.is_a?(Hash)
+    OpenSSL::HMAC.hexdigest(OpenSSL::Digest::SHA256.new, DuodealerAPI::Session.secret, params)
+  end
+
+  def any_api_version
+    version_name = ['2019-01', :unstable].sample(1).first
+    DuodealerAPI::ApiVersion.find_version(version_name)
+  end
+end