lockbox_middleware 1.2.0 → 1.2.1

data/spec/controllers/home_controller_spec.rb

@@ -0,0 +1,15 @@
+require 'spec_helper'
+
+describe HomeController do
+
+  context "Show" do
+    subject do
+      get :show
+      response
+    end
+    
+    it { should be_success }
+    it { should render_template(:show) }
+  end
+
+end

data/spec/controllers/partner_sessions_controller_spec.rb

@@ -0,0 +1,84 @@
+require 'spec_helper'
+
+describe PartnerSessionsController do
+  include HelperMethods
+
+  context "Show" do
+    subject do
+      get :new
+      response
+    end
+    
+    it { should be_success }
+  end
+  
+  context "Create" do
+    let(:partner) { Factory(:partner) }
+
+    context "Valid" do
+      subject do
+        post :create, :partner_session => { :email => partner.email, 
+                                         :password => partner.password }
+        response.stubs(:response).returns(response)
+        response
+      end
+      
+      it { should redirect_to partners_path }
+      it { should set_the_flash.to "You have been signed in" }
+    end
+    
+    context "Does not exist" do
+      subject do
+        post :create, :partner_session => { :email => "x_#{partner.email}",
+                                         :password => partner.password }
+        response.stubs(:response).returns(response)
+        response
+      end
+      
+      it { should render_template :new }
+      it { should set_the_flash.to "Email doesn't exist or bad Pasword" }
+    end
+
+    context "Bad Password" do
+      subject do
+        post :create, :partner_session => { :email => partner.email, 
+                                         :password => "x_#{partner.password}" }
+        response.stubs(:response).returns(response)
+        response
+      end
+      
+      it { should render_template :new }
+      it { should set_the_flash.to "Email doesn't exist or bad Pasword" }
+    end
+
+  end
+  
+  context "Destroy" do
+    let(:current_partner_session) { mock("partner_session") }
+
+    before do
+      activate_authlogic
+      partner = Factory(:partner)
+      current_partner_session.stubs(:record => partner)
+      current_partner_session.stubs(:destroy => true)
+      PartnerSession.stubs(:find => current_partner_session)
+      session_for(partner)
+    end
+    
+    it "should set the flash" do
+      delete :destroy
+      should set_the_flash.to "You have been logged out"
+    end
+    
+    it "should redirect to /" do
+      delete :destroy
+      response.should redirect_to root_path
+    end
+    
+    it "should destory the session" do
+      current_partner_session.expects(:destroy)
+      delete :destroy
+    end
+  end
+
+end

data/spec/controllers/partners_controller_spec.rb

@@ -0,0 +1,132 @@
+require 'spec_helper'
+
+describe PartnersController do
+  include HelperMethods
+  
+  context "Index" do
+    before do
+      stubbed_session_for(:partner)
+      get :index
+    end
+    
+    it { should redirect_to partner_path(@partner.api_key) }
+
+  end
+
+  context "Create" do
+    before do
+      @partner = Factory(:partner)
+      @partner.stubs(:id).returns(1)
+      PartnerMailer.stubs(:deliver_confirmation)
+    end
+    
+    context "Valid" do
+      before do
+        @partner.stubs(:save).returns(true)
+        Partner.stubs(:new).returns(@partner)
+        post :create, :partner => Factory.attributes_for(:partner)
+      end
+      
+      it { should redirect_to partner_path(@partner.api_key) }
+      
+      it "should deliver the confirmation mail" do
+        assert_received(PartnerMailer, :deliver_confirmation) { |expect| expect.with(@partner) }
+      end
+    end
+    
+    context "Invalid" do
+      before do
+        @partner.stubs(:save).returns(false)
+        Partner.stubs(:new).returns(@partner)
+        post :create, :partner => { }
+      end
+    
+      it { should render_template :new }
+      
+      it "should not deliver the confirmation mail" do
+        assert_not_received(PartnerMailer, :deliver_confirmation)
+      end
+    end
+    
+  end
+
+  context "New" do
+    before do
+      get :new
+    end
+    
+    it { should respond_with :success }
+    it { should assign_to :partner }
+  end
+  
+  context "Show" do
+    before do
+      stubbed_session_for(:partner)
+      get :show,  :id => @partner.api_key
+    end
+    
+    it { should respond_with :success }
+    it { should assign_to :partner }
+  end
+
+  context "API Show" do
+    before do
+      stubbed_session_for(:partner)
+    end
+    context "json" do
+      before do
+        get :show,  :id => @partner.api_key, :format => 'json'
+      end
+
+      it { should respond_with :success }
+      it { should assign_to :partner }
+    end
+
+    context "jsonp" do
+      before do
+        get :show,  :id => @partner.api_key, :format => 'jsonp', :variable => 'foo', :callback => 'bar'
+      end
+
+      it { should respond_with :success }
+      it { should assign_to :partner }
+    end
+
+  end
+  
+  context "Edit" do
+    before do
+      stubbed_session_for(:partner)
+      get :edit, :id => @partner.api_key      
+    end
+    
+    it { should respond_with :success }
+    it { should assign_to :partner }
+  end
+  
+  context "Update" do
+    context "Valid" do
+      let(:partner) { Factory(:partner) }
+      
+      before do
+        partner.stubs(:save).returns(true)
+        stubbed_session_for(partner)
+        put :update, :partner => { }, :id => partner.api_key
+      end
+      
+      it { should redirect_to partner_path(partner.api_key) }
+    end
+    
+    context "Invalid" do
+      let(:partner) { Factory(:partner) }
+      
+      before do
+        partner.stubs(:save).returns(false)
+        stubbed_session_for(partner)
+        Partner.stubs(:find_by_api_key).returns(partner)
+        put :update, :partner => { }, :id => partner.api_key 
+      end
+      
+      it { should render_template :edit }
+    end
+  end
+end

data/spec/factories/partners.rb

@@ -0,0 +1,14 @@
+Factory.define :partner do |p|
+  p.name                  { "George Washington"}
+  p.organization          { "Cherry Tree Cutters"}
+  p.email                 { Factory.next(:email) }
+  p.phone_number          { "1112223333"}
+  p.max_requests          { 100 }
+  p.password              { "password" }
+  p.password_confirmation { "password" }
+  p.confirmed             { true }
+end
+
+Factory.sequence(:email) do |n|
+  "george_#{n}@ctc.com"
+end

data/spec/models/partner_mailer_spec.rb

@@ -0,0 +1,47 @@
+require 'spec_helper'
+
+describe PartnerMailer do
+
+  context "Confirmation Email" do
+    let(:partner) { Factory.build(:partner) }
+    
+    subject do
+      partner.stubs(:perishable_token).returns("1234")
+      PartnerMailer.create_confirmation(partner)
+    end
+    
+    it "should deliver to the partner email" do
+      subject.to.first.should == partner.email
+    end
+    
+    it "should be sent from out account" do
+      subject.from.first.should == "test@foo.org"
+    end
+    
+    its(:subject) { should == "Partner Account Confirmation" }
+    
+    its(:body) { should =~ /#{partner.perishable_token}/ }
+  end
+
+  context "Fetch Password Email" do
+    let(:partner) { Factory.build(:partner) }
+    
+    subject do
+      partner.stubs(:perishable_token).returns("1234")
+      PartnerMailer.create_fetch_password(partner)
+    end
+
+    it "should deliver to the partner email" do
+      subject.to.first.should == partner.email
+    end
+
+    it "should be sent from out account" do
+      subject.from.first.should == "test@foo.org"
+    end
+
+    its(:subject) { should == "Fetch Password" }
+
+    its(:body) { should =~ /#{partner.perishable_token}/ }
+  end
+
+end

data/spec/models/partner_spec.rb

@@ -0,0 +1,155 @@
+require 'spec_helper'
+
+describe Partner do
+  context "a saved partner object" do
+    subject { Factory(:partner) }
+    
+    context "uniqueness of api key" do
+      before do
+         # don't overwrite the key that they think will be duplicated
+         Partner.any_instance.stubs(:create_api_key).returns(true)
+      end
+    
+      it { should validate_uniqueness_of :api_key }
+    end
+    
+    it "should not authenticate for invalid api key" do
+      Partner.authenticate("randomapikey").authorized.should be_false
+    end
+    
+    it "should not authenticate for blank api key" do
+      Partner.authenticate('').authorized.should be_false
+      Partner.authenticate(nil).authorized.should be_false
+    end
+
+    it "should authenticate if request count is below max requests" do
+      Partner.authenticate(subject.api_key).authorized.should be_true
+    end
+
+    it "should increment api current request count" do
+      count = subject.current_request_count
+      Partner.authenticate(subject.api_key)
+      subject.current_request_count.should == count+1 
+    end
+
+    it "should not authenticate if request count has exceeded max requests" do
+      subject.requests_remaining.times do
+        subject.increment_request_count
+      end
+      subject.requests_remaining.should == 0
+      Partner.authenticate(subject.api_key).authorized.should be_false
+    end
+    
+    it "should maintain remaining requests properly" do
+      subject.requests_remaining.should == 100
+      subject.increment_request_count
+      subject.requests_remaining.should == 99
+      subject.current_request_count.should == 1
+      subject.increment_request_count
+      subject.requests_remaining.should == 98
+      subject.current_request_count.should == 2
+    end
+    
+    context "rate limit reset time" do
+
+      it "should return the next hour as the reset time" do
+        this_hour = Time.parse(Time.now.strftime("%Y-%m-%d %H:00:00"))
+        next_hour_epoch = 1.hour.since(this_hour).to_i
+        subject.max_requests_reset_time.should == next_hour_epoch
+      end
+
+      it "should reset at the reset time" do
+        before_reset = 1.second.until(Time.at(subject.max_requests_reset_time))
+        after_reset = Time.at(subject.max_requests_reset_time)
+        Time.stubs(:now).returns(before_reset)
+        subject.requests_remaining.times do
+          subject.increment_request_count
+        end
+        subject.requests_remaining.should == 0
+        Partner.authenticate(subject.api_key).authorized.should be_false
+        Time.stubs(:now).returns(after_reset)
+        subject.requests_remaining.should == subject.max_requests
+        Partner.authenticate(subject.api_key).authorized.should be_true
+      end
+    end
+  end
+
+  context "an unsaved partner object" do
+    subject { Factory.build(:partner) }
+    
+    it { should validate_presence_of :name }
+    it { should validate_presence_of :organization }
+    it { should validate_presence_of :phone_number }
+    it { should validate_presence_of :email }
+
+    it "should reject bad emails" do
+      bads = ["bad bad", "bad_email_something"]
+      goods = ["good@google.com", "good+email@potato.com"]
+      bads.each do |email|
+        subject.email = email
+        subject.save
+        subject.errors.on(:email).should_not be_empty
+      end
+      goods.each do |email|
+        subject.email = email
+        subject.save
+        subject.errors.on(:email).should be_nil
+      end
+    end
+
+    context "phone Number" do
+      context "Normalization" do
+        it "should remove all non numerics from the phone number" do
+          subject.phone_number = "123-456-7890"
+          subject.attributes["phone_number"].should == "1234567890"
+          subject.phone_number = "123.456.7890"
+          subject.attributes["phone_number"].should == "1234567890"
+          subject.phone_number = "(123) 456-7890"
+          subject.attributes["phone_number"].should == "1234567890"
+        end
+
+        it "should reformat the phone_number into (xxx) xxx-xxxx" do
+          subject.phone_number = 1234567890
+          subject.phone_number.should == "(123) 456-7890"
+        end
+      end
+    end
+
+    context "slug" do
+      before do
+        subject.name = 'Name Foo'
+        subject.organization = nil
+      end
+
+      it "should be the underscored name" do
+        subject.send(:make_slug).should == "name-foo"
+      end
+
+      context "with an organization" do
+        before do
+          subject.organization = 'org foo'
+        end
+
+        it "should be the underscored org name" do
+          subject.send(:make_slug).should == 'org-foo'
+        end
+      end
+    end
+    
+    context "API Key" do
+      it "should generate an API key on create only" do
+        subject.api_key.should be_nil
+        subject.save
+        subject.api_key.should_not be_nil
+      end
+      
+      it "should not change when the object is modified" do
+        subject.save
+        lambda {
+          subject.name ="Foo"
+          subject.save.should be_true
+        }.should_not change(subject, :api_key)
+      end
+    end
+  end
+end