glib-web 5.0.6 → 5.0.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2e9d0b6eb1a02d147f08a0166a4d67075ebbf903af3601e78ab592c5f9a11808
-  data.tar.gz: ee0d8980dfa1158fa65126b8d29dad29e2b788f1b51e4fb062a2de306a1d789a
+  metadata.gz: 6885a1b150291881895f5b3cdfda3c2424961e5fd953e7faebd2d421242d930c
+  data.tar.gz: 2c9b74ee8ac40b6b887d3b14a06915b98b0562a207d578d63b955a12b7e235f9
 SHA512:
-  metadata.gz: 21960f43365ee50457f2ad2856d5bf5e6cf6c1a5014332006e9fe43e7f2e6cec9633a35cb5678a34388310d88e69222ab4641d1267125e87e01d822d00fb7e4f
-  data.tar.gz: cf920f5f56177c092fc2bd84bacf4b096d1b41ae4364b47bcfe3beba1b58bb8afa76883a33210a9f9ad709085c7dc33644933128cddbe93b4ff2251e6f2367b5
+  metadata.gz: 67e1d34169a5cea5970378da912372ff6b0c5b1e0b7793c9e05fc50347cd1e118f55d0b9b63a328a60fdff810c913ba94575198eee0cd147d161feb8272c6c27
+  data.tar.gz: dadf602d4b72f9c2c2ef4434182c94eb6690f05e1ec934226de01d8c24cef88719f29cba394d12c5e13df93e82144f46ae8425443b4318807780bcde5381d761

data/lib/glib/test_helpers.rb

@@ -134,8 +134,7 @@ module Glib
     #   submit_form(response.body, { chat: { message_body: 'Hello' } })
     #
     def submit_form(page_payload, data, url: nil, method: nil)
-      json = JSON.parse(page_payload)
-      form = __find_form(json)
+      form = find_form(page_payload)
 
       raise 'No form found in page. Ensure the form is rendered properly.' unless form
 
@@ -173,6 +172,23 @@ module Glib
       assert_response :success
     end
 
+    # Locates the form in a rendered page payload without submitting it -- useful for
+    # asserting on a form's attributes (e.g. its HTTP method) in a test. Returns the form
+    # Hash, or nil when the page renders no form. When several forms are present it returns
+    # the one with the most childViews, the same selection submit_form uses internally.
+    #
+    # @param page_payload [String, Hash] The JSON response body, or an already-parsed Hash
+    # @return [Hash, nil] The located form view, or nil if none is rendered
+    #
+    # @example
+    #   get new_chat_url(checklist_id: checklist.id), params: json_params
+    #   assert_equal 'post', find_form(response.body)['method']
+    #
+    def find_form(page_payload)
+      json = page_payload.is_a?(String) ? JSON.parse(page_payload) : page_payload
+      __find_form(json)
+    end
+
     def glib_travel(*args, &block)
       Timecop.travel(*args, &block)
     end
@@ -207,6 +223,11 @@ module Glib
 
       def __build_form_params(form, data)
         params = {}
+
+        # Skip ALL hidden fields under the same model prefix, not just exact key matches.
+        # Hidden fields use flat bracket notation (e.g. "submission[task_id]") while data uses
+        # nested hashes (e.g. { submission: { signature_submission_attributes: { ... } } }).
+        # Mixing both in params makes Rails misparse them, resulting in 403 Forbidden errors.
         data_prefixes = data.keys.map { |k| "#{k}[" }
 
         __extract_form_fields(form).each do |field|

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: glib-web
 version: !ruby/object:Gem::Version
-  version: 5.0.6
+  version: 5.0.7
 platform: ruby
 authors:
 - ''