gds-sso 3.0.4 → 3.0.5

data/app/controllers/api/user_controller.rb

@@ -11,7 +11,7 @@ class Api::UserController < ApplicationController
 
   def reauth
     user = GDS::SSO::Config.user_klass.find_by_uid(params[:uid])
-    if user.set_remotely_signed_out!
+    if user.nil? || user.set_remotely_signed_out!
       head :ok
     else
       head 500

data/lib/gds-sso/version.rb

@@ -1,5 +1,5 @@
 module GDS
   module SSO
-    VERSION = "3.0.4"
+    VERSION = "3.0.5"
   end
 end

data/spec/controller/api_user_controller_spec.rb

@@ -69,6 +69,17 @@ describe Api::UserController, type: :controller do
       assert_equal 403, response.status
     end
 
+    it "should return success if user record doesn't exist" do
+      request.env['warden'] = mock("mock warden")
+      request.env['warden'].expects(:authenticate!).at_least_once.returns(true)
+      request.env['warden'].expects(:authenticated?).at_least_once.returns(true)
+      request.env['warden'].expects(:user).at_least_once.returns(GDS::SSO::ApiUser.new)
+
+      post :reauth, uid: "nonexistent-user"
+
+      assert_equal 200, response.status
+    end
+
     it "should set remotely_signed_out to true on the user" do
       # Test that it authenticates
       request.env['warden'] = mock("mock warden")