leifcr-refile 0.6.3

data/spec/refile/features/normal_upload_spec.rb

@@ -0,0 +1,144 @@
+require "refile/test_app"
+
+feature "Normal HTTP Post file uploads" do
+  scenario "Successfully upload a file" do
+    visit "/normal/posts/new"
+    fill_in "Title", with: "A cool post"
+    attach_file "Document", path("hello.txt")
+    click_button "Create"
+
+    expect(page).to have_selector("h1", text: "A cool post")
+    expect(page).to have_selector(".content-type", text: "text/plain")
+    expect(page).to have_selector(".size", text: "6")
+    expect(page).to have_selector(".filename", text: "hello.txt")
+    expect(download_link("Document")).to eq("hello")
+  end
+
+  scenario "Fail to upload a file that is too large" do
+    visit "/normal/posts/new"
+    fill_in "Title", with: "A cool post"
+    attach_file "Document", path("large.txt")
+    click_button "Create"
+
+    expect(page).to have_selector(".field_with_errors")
+    expect(page).to have_content("Document is too large")
+  end
+
+  scenario "Fail to upload a file that has the wrong format" do
+    visit "/normal/posts/new"
+    fill_in "Title", with: "A cool post"
+    attach_file "Image", path("hello.txt")
+    click_button "Create"
+
+    expect(page).to have_selector(".field_with_errors")
+    expect(page).to have_content("You are not allowed to upload text/plain file format. Allowed types: image/jpeg, image/gif, and image/png.")
+  end
+
+  scenario "Fail to upload a file that has the wrong format then submit" do
+    visit "/normal/posts/new"
+    fill_in "Title", with: "A cool post"
+    attach_file "Image", path("hello.txt")
+    click_button "Create"
+
+    expect(page).to have_selector(".field_with_errors")
+    expect(page).to have_content("You are not allowed to upload text/plain file format. Allowed types: image/jpeg, image/gif, and image/png.")
+    click_button "Create"
+    expect(page).to have_selector("h1", text: "A cool post")
+    expect(page).not_to have_link("Document")
+  end
+
+  scenario "Successfully update a record with an attached file" do
+    visit "/normal/posts/new"
+    fill_in "Title", with: "A cool post"
+    attach_file "Image", path("image.jpg")
+    click_button "Create"
+
+    expect(page).to have_selector("h1", text: "A cool post")
+    click_link("Edit")
+
+    fill_in "Title", with: "A very cool post"
+
+    click_button "Update"
+    expect(page).to have_selector("h1", text: "A very cool post")
+  end
+
+  # FIXME: the only reason this is js:true is because the rack_test driver
+  # doesn't submit file+metadata correctly.
+  scenario "Upload a file via form redisplay", js: true do
+    visit "/normal/posts/new"
+    attach_file "Document", path("hello.txt")
+    click_button "Create"
+    fill_in "Title", with: "A cool post"
+    click_button "Create"
+
+    expect(page).to have_selector("h1", text: "A cool post")
+    expect(page).to have_selector(".content-type", text: "text/plain")
+    expect(page).to have_selector(".size", text: "6")
+    expect(page).to have_selector(".filename", text: "hello.txt")
+    expect(download_link("Document")).to eq("hello")
+  end
+
+  scenario "Format conversion" do
+    visit "/normal/posts/new"
+    fill_in "Title", with: "A cool post"
+    attach_file "Document", path("hello.txt")
+    click_button "Create"
+
+    expect(page).to have_selector("h1", text: "A cool post")
+    expect(download_link("Convert to Upper")).to eq("HELLO")
+  end
+
+  scenario "Successfully remove an uploaded file" do
+    visit "/normal/posts/new"
+    fill_in "Title", with: "A cool post"
+    attach_file "Document", path("hello.txt")
+    click_button "Create"
+
+    expect(page).to have_selector("h1", text: "A cool post")
+    expect(page).to have_selector(:link, "Document")
+    click_link("Edit")
+
+    check "Remove document"
+    click_button "Update"
+    expect(page).to have_selector("h1", text: "A cool post")
+    expect(page).not_to have_selector(:link, "Document")
+    expect(page).not_to have_selector(".content-type", text: "text/plain")
+    expect(page).not_to have_selector(".size", text: "6")
+    expect(page).not_to have_selector(".filename", text: "hello.txt")
+  end
+
+  scenario "Successfully remove a record with an uploaded file" do
+    visit "/normal/posts/new"
+    fill_in "Title", with: "A cool post about to be deleted"
+    attach_file "Document", path("hello.txt")
+    click_button "Create"
+
+    expect(page).to have_selector("h1", text: "A cool post about to be deleted")
+    click_link("Delete")
+    expect(page).to_not have_content("A cool post about to be deleted")
+  end
+
+  scenario "Upload a file from a remote URL" do
+    url = "http://www.example.com/foo/bar/some_file.png?some-query-string=true"
+
+    stub_request(:get, url).to_return(
+      status: 200,
+      body: "abc",
+      headers: {
+        "Content-Length" => 3,
+        "Content-Type" => "image/png"
+      }
+    )
+
+    visit "/normal/posts/new"
+    fill_in "Title", with: "A cool post"
+    fill_in "Remote document url", with: url
+    click_button "Create"
+
+    expect(page).to have_selector("h1", text: "A cool post")
+    expect(download_link("Document")).to eq("abc")
+    expect(page).to have_selector(".content-type", text: "image/png")
+    expect(page).to have_selector(".size", text: "3")
+    expect(page).to have_selector(".filename", text: "some_file.png", exact: true)
+  end
+end

data/spec/refile/features/presigned_upload_spec.rb

@@ -0,0 +1,31 @@
+require "refile/test_app"
+
+feature "Direct HTTP post file uploads", :js do
+  scenario "Successfully upload a file" do
+    visit "/presigned/posts/new"
+    fill_in "Title", with: "A cool post"
+    attach_file "Document", path("hello.txt")
+
+    expect(page).to have_content("Presign start")
+    expect(page).to have_content("Presign complete")
+    expect(page).to have_content("Upload started")
+    expect(page).to have_content("Upload complete token accepted")
+    expect(page).to have_content("Upload success token accepted")
+
+    click_button "Create"
+
+    expect(page).to have_selector("h1", text: "A cool post")
+    expect(download_link("Document")).to eq("hello")
+  end
+
+  scenario "Fail to upload a file that is too large" do
+    visit "/presigned/posts/new"
+    fill_in "Title", with: "A cool post"
+    attach_file "Document", path("large.txt")
+
+    expect(page).to have_content("Presign start")
+    expect(page).to have_content("Presign complete")
+    expect(page).to have_content("Upload started")
+    expect(page).to have_content("Upload failure too large")
+  end
+end

data/spec/refile/features/simple_form_spec.rb

@@ -0,0 +1,8 @@
+require "refile/test_app"
+
+feature "simple form upload" do
+  scenario "renders a normal input" do
+    visit "/simple_form/posts/new"
+    attach_file "Document", path("hello.txt")
+  end
+end

data/spec/refile/fixtures/hello.txt

@@ -0,0 +1 @@
+hello

data/spec/refile/fixtures/large.txt

@@ -0,0 +1,44 @@
+Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec massa arcu,
+convallis a tellus vitae, placerat rhoncus nisi. Nullam molestie volutpat
+turpis vitae viverra. Integer nulla nisl, dictum et rutrum quis, auctor ut dui.
+Nulla imperdiet ante a lorem molestie tempor. Suspendisse pharetra in mauris
+mollis dapibus. Nullam pretium fringilla justo, faucibus condimentum elit
+rutrum ac. Vivamus sem justo, congue id lobortis nec, viverra ac lacus. Donec
+eu vestibulum risus, at efficitur nisl. Maecenas sed elit a dui malesuada
+ultricies at eget est. Duis lobortis tincidunt pellentesque.
+
+Quisque in nisl felis. Quisque a neque nec diam posuere mattis. Donec a nibh
+cursus, tempus est iaculis, gravida odio. Pellentesque eleifend enim eget
+placerat dignissim. Cum sociis natoque penatibus et magnis dis parturient
+montes, nascetur ridiculus mus. In non ex in augue feugiat convallis. Duis
+varius at sapien vitae molestie. Suspendisse sit amet aliquet quam, quis
+condimentum nibh.
+
+Donec a quam quis ipsum imperdiet semper. In ac scelerisque elit, non fermentum
+nisl. Nulla dapibus velit eget ullamcorper blandit. Maecenas justo diam,
+porttitor eget nunc dictum, sollicitudin lacinia lectus. Pellentesque non augue
+urna. In felis ipsum, posuere vitae sapien non, aliquet maximus nibh.
+Suspendisse potenti. Aenean venenatis euismod congue. Praesent quis ullamcorper
+sapien. In hac habitasse platea dictumst. Morbi semper augue dapibus, posuere
+justo sit amet, convallis felis. Vivamus condimentum elementum ex, quis rhoncus
+purus pulvinar et. Nunc vel risus sem. Suspendisse porttitor convallis massa,
+molestie sollicitudin metus semper a. Donec ac cursus tortor. Nam felis nulla,
+pretium eu tempus at, euismod eu erat.
+
+Donec vel tempus augue. Pellentesque sit amet ante in odio malesuada facilisis
+nec sit amet turpis. Donec vitae iaculis mauris. Aenean venenatis interdum
+quam, nec tincidunt mauris aliquam vel. Nunc ultrices arcu euismod velit
+ultricies, id laoreet arcu venenatis. Donec euismod scelerisque magna, nec
+interdum lorem ornare nec. Morbi blandit volutpat velit, consequat maximus
+justo mattis non. In pellentesque malesuada consectetur. Cras convallis mi ut
+nibh rutrum ullamcorper. Nam finibus consequat erat a feugiat. Donec laoreet
+risus eget enim interdum dictum. Duis orci lectus, scelerisque tempus volutpat
+eget, ullamcorper eu felis. Aliquam tempor in dui sit amet dapibus. Nulla sed
+metus vestibulum, dignissim odio et, dapibus eros. Praesent semper arcu ut
+augue suscipit, ac ornare tortor auctor. Suspendisse a velit dui.
+
+Etiam nec est ut ex laoreet iaculis vel id enim. Vivamus ac hendrerit leo.
+Vestibulum auctor nibh nec arcu rhoncus, a condimentum quam accumsan. Ut justo
+augue, laoreet at bibendum vel, aliquet vitae est. Aliquam accumsan ac diam nec
+pretium. Nulla dictum velit nec elementum mollis. Interdum et malesuada fames
+ac ante ipsum primis in faucibus.

data/spec/refile/fixtures/monkey.txt

@@ -0,0 +1 @@
+monkey

data/spec/refile/fixtures/world.txt

@@ -0,0 +1 @@
+world

data/spec/refile/spec_helper.rb

@@ -0,0 +1,72 @@
+ENV["RACK_ENV"] = "test"
+
+require "refile"
+require "refile/backend_examples"
+require "webmock/rspec"
+require "refile/file_double"
+
+tmp_path = Dir.mktmpdir
+
+WebMock.disable_net_connect!(allow_localhost: true)
+
+at_exit do
+  FileUtils.remove_entry_secure(tmp_path)
+end
+
+Refile.store = Refile::Backend::FileSystem.new(File.expand_path("default_store", tmp_path))
+Refile.cache = Refile::Backend::FileSystem.new(File.expand_path("default_cache", tmp_path))
+
+class FakePresignBackend < Refile::Backend::FileSystem
+  def presign
+    id = Refile::RandomHasher.new.hash
+    Refile::Signature.new(as: "file", id: id, url: "/presigned/posts/upload", fields: { id: id, token: "xyz123" })
+  end
+end
+
+Refile.secret_key = "144c82de680afe5e8e91fc7cf13c22b2f8d2d4b1a4a0e92531979b12e2fa8b6dd6239c65be28517f27f442bfba11572a8bef80acf44a11f465ba85dde85488d5"
+
+Refile.backends["limited_cache"] = FakePresignBackend.new(File.expand_path("default_cache", tmp_path), max_size: 100)
+
+Refile.allow_uploads_to = %w[cache limited_cache]
+
+Refile.allow_origin = "*"
+
+Refile.app_host = "http://localhost:56120"
+
+Refile.processor(:reverse) do |file|
+  StringIO.new(file.read.reverse)
+end
+
+Refile.processor(:upcase, proc { |file| StringIO.new(file.read.upcase) })
+
+Refile.logger = Logger.new(nil)
+
+Refile.processor(:concat) do |file, *words|
+  tempfile = Tempfile.new("concat")
+  tempfile.write(file.read)
+  words.each do |word|
+    tempfile.write(word)
+  end
+  tempfile.close
+  File.open(tempfile.path, "r")
+end
+
+Refile.processor(:convert_case) do |file, options = {}|
+  case options[:format]
+    when "up" then StringIO.new(file.read.upcase)
+    when "down" then StringIO.new(file.read.downcase)
+    else file
+  end
+end
+
+module PathHelper
+  def path(filename)
+    File.expand_path(File.join("fixtures", filename), File.dirname(__FILE__))
+  end
+end
+
+RSpec.configure do |config|
+  config.include PathHelper
+end
+
+RSpec::Expectations.configuration.warn_about_potential_false_positives = false

data/spec/refile_spec.rb

@@ -0,0 +1,355 @@
+require "refile"
+
+RSpec.describe Refile do
+  before do
+    allow(Refile).to receive(:token).and_return("token")
+    allow(Refile).to receive(:app_host).and_return(nil)
+    allow(Refile).to receive(:mount_point).and_return(nil)
+  end
+
+  let(:klass) do
+    Class.new do
+      extend Refile::Attachment
+      attr_accessor :document_id
+      attachment :document
+    end
+  end
+  let(:instance) { klass.new }
+
+  describe ".extract_filename" do
+    it "extracts filename from original_filename" do
+      name = Refile.extract_filename(double(original_filename: "/foo/bar/baz.png"))
+      expect(name).to eq("baz.png")
+    end
+
+    it "extracts filename from path" do
+      name = Refile.extract_filename(double(path: "/foo/bar/baz.png"))
+      expect(name).to eq("baz.png")
+    end
+
+    it "returns nil if it can't determine filename" do
+      name = Refile.extract_filename(double)
+      expect(name).to be_nil
+    end
+  end
+
+  describe ".extract_content_type" do
+    it "extracts content type" do
+      name = Refile.extract_content_type(double(content_type: "image/jpeg"))
+      expect(name).to eq("image/jpeg")
+    end
+
+    it "extracts content type from extension" do
+      name = Refile.extract_content_type(double(original_filename: "test.png"))
+      expect(name).to eq("image/png")
+    end
+
+    it "returns nil if it can't determine content type" do
+      name = Refile.extract_filename(double)
+      expect(name).to be_nil
+    end
+
+    it "returns nil if it has an unknown content type" do
+      name = Refile.extract_content_type(double(original_filename: "foo.blah"))
+      expect(name).to be_nil
+    end
+  end
+
+  describe ".app_url" do
+    it "generates a root url when all options unset" do
+      expect(Refile.app_url).to eq("/")
+    end
+
+    it "uses supplied host option" do
+      expect(Refile.app_url(host: "http://example.org")).to eq("http://example.org/")
+    end
+
+    it "falls back to Refile.app_host" do
+      allow(Refile).to receive(:app_host).and_return("http://elabs.se")
+
+      expect(Refile.app_url).to eq("http://elabs.se/")
+    end
+
+    it "adds a prefix" do
+      expect(Refile.app_url(prefix: "/moo")).to eq("/moo")
+    end
+
+    it "takes prefix from Refile.mount_point" do
+      allow(Refile).to receive(:mount_point).and_return("/attachments")
+      expect(Refile.app_url).to eq("/attachments")
+    end
+  end
+
+  describe ".file_url" do
+    let(:file) { Refile.cache.upload(Refile::FileDouble.new("hello")) }
+    let(:id) { file.id }
+
+    it "generates a url from an attachment" do
+      expect(Refile.file_url(file, filename: "document")).to eq("/token/cache/#{id}/document")
+    end
+
+    it "uses supplied host option" do
+      expect(Refile.file_url(file, host: "http://example.org", filename: "document")).to eq("http://example.org/token/cache/#{id}/document")
+    end
+
+    it "falls back to Refile.app_host" do
+      allow(Refile).to receive(:app_host).and_return("http://elabs.se")
+
+      expect(Refile.file_url(file, filename: "document")).to eq("http://elabs.se/token/cache/#{id}/document")
+    end
+
+    it "falls back to Refile.cdn_host" do
+      allow(Refile).to receive(:cdn_host).and_return("http://foo.cloudfront.com")
+      allow(Refile).to receive(:app_host).and_return("http://elabs.se")
+
+      expect(Refile.file_url(file, filename: "document")).to eq("http://foo.cloudfront.com/token/cache/#{id}/document")
+    end
+
+    it "adds a prefix" do
+      expect(Refile.file_url(file, prefix: "/moo", filename: "document")).to eq("/moo/token/cache/#{id}/document")
+    end
+
+    it "takes prefix from Refile.mount_point" do
+      allow(Refile).to receive(:mount_point).and_return("/attachments")
+      expect(Refile.file_url(file, filename: "document")).to eq("/attachments/token/cache/#{id}/document")
+    end
+
+    it "adds an escaped filename" do
+      expect(Refile.file_url(file, filename: "test.png")).to eq("/token/cache/#{id}/test.png")
+      expect(Refile.file_url(file, filename: "tes/t.png")).to eq("/token/cache/#{id}/tes%2Ft.png")
+    end
+
+    it "adds a format" do
+      expect(Refile.file_url(file, format: "png", filename: "document")).to eq("/token/cache/#{id}/document.png")
+    end
+
+    it "avoids extension duplication by specifying format" do
+      expect(Refile.file_url(file, format: "png", filename: "document.png")).to eq("/token/cache/#{id}/document.png")
+    end
+
+    context "with no file" do
+      it "returns nil" do
+        expect(Refile.file_url(nil, filename: "document")).to be_nil
+      end
+    end
+  end
+
+  describe ".attachment_url" do
+    let(:id) { instance.document_attacher.cache_id }
+
+    context "with file" do
+      before do
+        instance.document = Refile::FileDouble.new("hello")
+      end
+
+      it "generates a url from an attachment" do
+        expect(Refile.attachment_url(instance, :document)).to eq("/token/cache/#{id}/document")
+      end
+
+      it "uses supplied host option" do
+        expect(Refile.attachment_url(instance, :document, host: "http://example.org")).to eq("http://example.org/token/cache/#{id}/document")
+      end
+
+      it "falls back to Refile.app_host" do
+        allow(Refile).to receive(:app_host).and_return("http://elabs.se")
+
+        expect(Refile.attachment_url(instance, :document)).to eq("http://elabs.se/token/cache/#{id}/document")
+      end
+
+      it "falls back to Refile.cdn_host" do
+        allow(Refile).to receive(:cdn_host).and_return("http://foo.cloudfront.com")
+        allow(Refile).to receive(:app_host).and_return("http://elabs.se")
+
+        expect(Refile.attachment_url(instance, :document)).to eq("http://foo.cloudfront.com/token/cache/#{id}/document")
+      end
+
+      it "adds a prefix" do
+        expect(Refile.attachment_url(instance, :document, prefix: "/moo")).to eq("/moo/token/cache/#{id}/document")
+      end
+
+      it "takes prefix from Refile.mount_point" do
+        allow(Refile).to receive(:mount_point).and_return("/attachments")
+        expect(Refile.attachment_url(instance, :document)).to eq("/attachments/token/cache/#{id}/document")
+      end
+
+      it "adds an escaped filename" do
+        expect(Refile.attachment_url(instance, :document, filename: "test.png")).to eq("/token/cache/#{id}/test.png")
+        expect(Refile.attachment_url(instance, :document, filename: "tes/t.png")).to eq("/token/cache/#{id}/tes%2Ft.png")
+      end
+
+      it "adds a format" do
+        expect(Refile.attachment_url(instance, :document, format: "png")).to eq("/token/cache/#{id}/document.png")
+      end
+    end
+
+    context "with file with content type" do
+      before do
+        instance.document = Refile::FileDouble.new("hello", content_type: "image/png")
+      end
+
+      it "adds format inferred from content type" do
+        expect(Refile.attachment_url(instance, :document)).to eq("/token/cache/#{id}/document.png")
+      end
+    end
+
+    context "with file with filename" do
+      before do
+        instance.document = Refile::FileDouble.new("hello", "hello.html")
+      end
+
+      it "adds filename" do
+        expect(Refile.attachment_url(instance, :document)).to eq("/token/cache/#{id}/hello.html")
+      end
+    end
+
+    context "with no file" do
+      it "returns nil" do
+        expect(Refile.attachment_url(instance, :document)).to be_nil
+      end
+    end
+  end
+
+  describe ".upload_url" do
+    it "generates an upload url" do
+      expect(Refile.upload_url(Refile.cache)).to eq("/cache")
+    end
+
+    it "uses supplied host option" do
+      expect(Refile.upload_url(Refile.cache, host: "http://example.org")).to eq("http://example.org/cache")
+    end
+
+    it "falls back to Refile.app_host" do
+      allow(Refile).to receive(:app_host).and_return("http://elabs.se")
+
+      expect(Refile.upload_url(Refile.cache)).to eq("http://elabs.se/cache")
+    end
+
+    it "does not fall back to Refile.cdn_host" do
+      allow(Refile).to receive(:cdn_host).and_return("http://foo.cloudfront.com")
+
+      expect(Refile.upload_url(Refile.cache)).to eq("/cache")
+    end
+
+    it "adds a prefix" do
+      expect(Refile.upload_url(Refile.cache, prefix: "/moo")).to eq("/moo/cache")
+    end
+
+    it "takes prefix from Refile.mount_point" do
+      allow(Refile).to receive(:mount_point).and_return("/attachments")
+      expect(Refile.upload_url(Refile.cache)).to eq("/attachments/cache")
+    end
+  end
+
+  describe ".presign_url" do
+    it "generates an upload url" do
+      expect(Refile.presign_url(Refile.cache)).to eq("/cache/presign")
+    end
+
+    it "uses supplied host option" do
+      expect(Refile.presign_url(Refile.cache, host: "http://example.org")).to eq("http://example.org/cache/presign")
+    end
+
+    it "falls back to Refile.app_host" do
+      allow(Refile).to receive(:app_host).and_return("http://elabs.se")
+
+      expect(Refile.presign_url(Refile.cache)).to eq("http://elabs.se/cache/presign")
+    end
+
+    it "does not fall back to Refile.cdn_host" do
+      allow(Refile).to receive(:cdn_host).and_return("http://foo.cloudfront.com")
+
+      expect(Refile.presign_url(Refile.cache)).to eq("/cache/presign")
+    end
+
+    it "adds a prefix" do
+      expect(Refile.presign_url(Refile.cache, prefix: "/moo")).to eq("/moo/cache/presign")
+    end
+
+    it "takes prefix from Refile.mount_point" do
+      allow(Refile).to receive(:mount_point).and_return("/attachments")
+      expect(Refile.presign_url(Refile.cache)).to eq("/attachments/cache/presign")
+    end
+  end
+
+  describe ".attachment_upload_url" do
+    it "generates an upload url" do
+      expect(Refile.attachment_upload_url(instance, :document)).to eq("/cache")
+    end
+
+    it "uses supplied host option" do
+      expect(Refile.attachment_upload_url(instance, :document, host: "http://example.org")).to eq("http://example.org/cache")
+    end
+
+    it "falls back to Refile.app_host" do
+      allow(Refile).to receive(:app_host).and_return("http://elabs.se")
+
+      expect(Refile.attachment_upload_url(instance, :document)).to eq("http://elabs.se/cache")
+    end
+
+    it "does not fall back to Refile.cdn_host" do
+      allow(Refile).to receive(:cdn_host).and_return("http://foo.cloudfront.com")
+
+      expect(Refile.attachment_upload_url(instance, :document)).to eq("/cache")
+    end
+
+    it "adds a prefix" do
+      expect(Refile.attachment_upload_url(instance, :document, prefix: "/moo")).to eq("/moo/cache")
+    end
+
+    it "takes prefix from Refile.mount_point" do
+      allow(Refile).to receive(:mount_point).and_return("/attachments")
+      expect(Refile.attachment_upload_url(instance, :document)).to eq("/attachments/cache")
+    end
+  end
+
+  describe ".attachment_presign_url" do
+    it "generates an upload url" do
+      expect(Refile.attachment_presign_url(instance, :document)).to eq("/cache/presign")
+    end
+
+    it "uses supplied host option" do
+      expect(Refile.attachment_presign_url(instance, :document, host: "http://example.org")).to eq("http://example.org/cache/presign")
+    end
+
+    it "falls back to Refile.app_host" do
+      allow(Refile).to receive(:app_host).and_return("http://elabs.se")
+
+      expect(Refile.attachment_presign_url(instance, :document)).to eq("http://elabs.se/cache/presign")
+    end
+
+    it "does not fall back to Refile.cdn_host" do
+      allow(Refile).to receive(:cdn_host).and_return("http://foo.cloudfront.com")
+
+      expect(Refile.attachment_presign_url(instance, :document)).to eq("/cache/presign")
+    end
+
+    it "adds a prefix" do
+      expect(Refile.attachment_presign_url(instance, :document, prefix: "/moo")).to eq("/moo/cache/presign")
+    end
+
+    it "takes prefix from Refile.mount_point" do
+      allow(Refile).to receive(:mount_point).and_return("/attachments")
+      expect(Refile.attachment_presign_url(instance, :document)).to eq("/attachments/cache/presign")
+    end
+  end
+
+  describe ".token" do
+    before do
+      allow(Refile).to receive(:token).and_call_original
+    end
+
+    it "returns digest of given path and secret token" do
+      allow(Refile).to receive(:secret_key).and_return("abcd1234")
+
+      path = "/store/f5f2e4/document.pdf"
+      token = OpenSSL::HMAC.hexdigest(OpenSSL::Digest.new("sha1"), "abcd1234", path)
+      expect(Refile.token(path)).to eq(token)
+    end
+
+    it "returns raise error when secret token is nil" do
+      allow(Refile).to receive(:secret_key).and_return(nil)
+
+      expect { Refile.token("/store/f5f2e4/document.pdf") }.to raise_error(RuntimeError, /Refile\.secret_key was not set/)
+    end
+  end
+end