RubyGems - n_base_rails - Versions diffs - 0.1.1 - Mend

n_base_rails 0.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (139) hide show

checksums.yaml +7 -0
data/.ruby-version +1 -0
data/CHANGELOG.md +5 -0
data/CODE_OF_CONDUCT.md +84 -0
data/Gemfile +8 -0
data/LICENSE.txt +21 -0
data/README.md +49 -0
data/Rakefile +4 -0
data/bin/console +15 -0
data/bin/setup +8 -0
data/lib/.env +4 -0
data/lib/.rspec +1 -0
data/lib/.rubocop.yml +288 -0
data/lib/.rubocop_disabled.yml +31 -0
data/lib/.rubocop_enabled.yml +0 -0
data/lib/Capfile +46 -0
data/lib/Gemfile +51 -0
data/lib/config/database.yml +24 -0
data/lib/config/deploy/development.rb +85 -0
data/lib/config/deploy/production.rb +63 -0
data/lib/config/deploy/staging.rb +56 -0
data/lib/config/deploy.rb +7 -0
data/lib/config/initializers/devise.rb +315 -0
data/lib/config/locales/devise.en.yml +65 -0
data/lib/config/locales/en.yml +33 -0
data/lib/config/locales/errors.en.yml +57 -0
data/lib/config/routes.rb +26 -0
data/lib/config/settings.yml +22 -0
data/lib/controllers/api/admin/base_controller.rb +5 -0
data/lib/controllers/api/admin/sessions_controller.rb +39 -0
data/lib/controllers/api/admin/users_controller.rb +9 -0
data/lib/controllers/api/v1/base_controller.rb +5 -0
data/lib/controllers/api/v1/sessions_controller.rb +39 -0
data/lib/controllers/api/v1/users_controller.rb +7 -0
data/lib/controllers/application_controller.rb +30 -0
data/lib/controllers/concerns/.DS_Store +0 -0
data/lib/controllers/concerns/.keep +0 -0
data/lib/controllers/concerns/base_concern.rb +9 -0
data/lib/controllers/concerns/json_renderer.rb +76 -0
data/lib/controllers/concerns/pagination.rb +32 -0
data/lib/controllers/concerns/rescue_exception.rb +73 -0
data/lib/db/migrate/20220721091426_devise_create_users.rb +46 -0
data/lib/db/migrate/20230113072522_create_devices.rb +13 -0
data/lib/db/migrate/20230227135020_create_posts.rb +15 -0
data/lib/db/migrate/20230303165318_devise_create_admins.rb +46 -0
data/lib/db/schema.rb +62 -0
data/lib/db/seeds.rb +7 -0
data/lib/generators/n_base_rails/install_generator.rb +42 -0
data/lib/lib/.DS_Store +0 -0
data/lib/lib/active_record_validation/error.rb +33 -0
data/lib/lib/api/error.rb +63 -0
data/lib/lib/json_web_token.rb +13 -0
data/lib/log/.keep +0 -0
data/lib/log/capistrano.log +28367 -0
data/lib/log/development.log +30201 -0
data/lib/log/test.log +11768 -0
data/lib/models/admin.rb +10 -0
data/lib/models/application_record.rb +5 -0
data/lib/models/concerns/.keep +0 -0
data/lib/models/device.rb +11 -0
data/lib/models/post.rb +5 -0
data/lib/models/user.rb +9 -0
data/lib/n_base_rails/version.rb +5 -0
data/lib/n_base_rails.rb +9 -0
data/lib/public/404.html +67 -0
data/lib/public/422.html +67 -0
data/lib/public/500.html +66 -0
data/lib/public/apple-touch-icon-precomposed.png +0 -0
data/lib/public/apple-touch-icon.png +0 -0
data/lib/public/docs/api/admin/definitions/users.yaml +15 -0
data/lib/public/docs/api/admin/paths/index.yaml +29 -0
data/lib/public/docs/api/admin/paths/sessions.yaml +121 -0
data/lib/public/docs/api/admin/paths/users.yaml +39 -0
data/lib/public/docs/api/shared/meta_infos.yaml +41 -0
data/lib/public/docs/api/shared/unauthorized_response.yaml +31 -0
data/lib/public/docs/api/v1/definitions/users.yaml +13 -0
data/lib/public/docs/api/v1/paths/example.yaml +431 -0
data/lib/public/docs/api/v1/paths/index.yaml +28 -0
data/lib/public/docs/api/v1/paths/sessions.yaml +121 -0
data/lib/public/docs/api/v1/paths/users.yaml +24 -0
data/lib/public/favicon.ico +0 -0
data/lib/public/robots.txt +1 -0
data/lib/public/swagger/admin/admin-swagger-initializer.js +24 -0
data/lib/public/swagger/admin/admin.html +19 -0
data/lib/public/swagger/favicon-16x16.png +0 -0
data/lib/public/swagger/favicon-32x32.png +0 -0
data/lib/public/swagger/index.css +16 -0
data/lib/public/swagger/oauth2-redirect.html +79 -0
data/lib/public/swagger/swagger-ui-bundle.js +3 -0
data/lib/public/swagger/swagger-ui-bundle.js.map +1 -0
data/lib/public/swagger/swagger-ui-es-bundle-core.js +2 -0
data/lib/public/swagger/swagger-ui-es-bundle-core.js.map +1 -0
data/lib/public/swagger/swagger-ui-es-bundle.js +3 -0
data/lib/public/swagger/swagger-ui-es-bundle.js.map +1 -0
data/lib/public/swagger/swagger-ui-standalone-preset.js +3 -0
data/lib/public/swagger/swagger-ui-standalone-preset.js.map +1 -0
data/lib/public/swagger/swagger-ui.css +4 -0
data/lib/public/swagger/swagger-ui.css.map +1 -0
data/lib/public/swagger/swagger-ui.js +2 -0
data/lib/public/swagger/swagger-ui.js.map +1 -0
data/lib/public/swagger/v1/app.html +19 -0
data/lib/public/swagger/v1/swagger-initializer.js +25 -0
data/lib/serializers/.DS_Store +0 -0
data/lib/serializers/action_not_allowed_serializer.rb +18 -0
data/lib/serializers/api/.DS_Store +0 -0
data/lib/serializers/api/admin/base_serializer.rb +14 -0
data/lib/serializers/api/admin/hash_serializer.rb +22 -0
data/lib/serializers/api/admin/user_serializer.rb +9 -0
data/lib/serializers/api/v1/base_serializer.rb +14 -0
data/lib/serializers/api/v1/hash_serializer.rb +22 -0
data/lib/serializers/api/v1/user_serializer.rb +9 -0
data/lib/serializers/record_not_found_serializer.rb +28 -0
data/lib/serializers/validation_error_serializer.rb +45 -0
data/lib/services/api/admin/generate_access_token_service.rb +34 -0
data/lib/services/api/admin/generate_refresh_token_service.rb +24 -0
data/lib/services/api/authorize_request_service.rb +35 -0
data/lib/services/api/v1/generate_access_token_service.rb +34 -0
data/lib/services/api/v1/generate_refresh_token_service.rb +24 -0
data/lib/spec/controllers/api/admin/sessions_controller_spec.rb +125 -0
data/lib/spec/controllers/api/admin/users_controller_spec.rb +35 -0
data/lib/spec/controllers/api/v1/sessions_controller_spec.rb +125 -0
data/lib/spec/controllers/api/v1/users_controller_spec.rb +23 -0
data/lib/spec/factories/admins.rb +8 -0
data/lib/spec/factories/devices.rb +7 -0
data/lib/spec/factories/posts.rb +6 -0
data/lib/spec/factories/users.rb +8 -0
data/lib/spec/helpers/request_helpers.rb +7 -0
data/lib/spec/models/admin_spec.rb +9 -0
data/lib/spec/models/device_spec.rb +13 -0
data/lib/spec/models/post_spec.rb +6 -0
data/lib/spec/models/user_spec.rb +9 -0
data/lib/spec/rails_helper.rb +66 -0
data/lib/spec/serializers/api/admin/user_serializer.rb +20 -0
data/lib/spec/serializers/api/v1/user_serializer.rb +20 -0
data/lib/spec/spec_helper.rb +94 -0
data/lib/spec/supports/shared_context.rb +19 -0
data/lib/spec/supports/shared_example/admin_authentication.rb +47 -0
data/lib/spec/supports/shared_example/user_authentication.rb +47 -0
metadata +181 -0

data/lib/public/swagger/v1/app.html ADDED Viewed

@@ -0,0 +1,19 @@
+<!-- HTML for static distribution bundle build -->
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8">
+    <title>Swagger UI</title>
+    <link rel="stylesheet" type="text/css" href="../swagger-ui.css" />
+    <link rel="stylesheet" type="text/css" href="../index.css" />
+    <link rel="icon" type="image/png" href="../favicon-32x32.png" sizes="32x32" />
+    <link rel="icon" type="image/png" href="../favicon-16x16.png" sizes="16x16" />
+  </head>
+  <body>
+    <div id="swagger-ui"></div>
+    <script src="../swagger-ui-bundle.js" charset="UTF-8"> </script>
+    <script src="../swagger-ui-standalone-preset.js" charset="UTF-8"> </script>
+    <script src="./swagger-initializer.js" charset="UTF-8"> </script>
+  </body>
+</html>

data/lib/public/swagger/v1/swagger-initializer.js ADDED Viewed

@@ -0,0 +1,25 @@
+window.onload = function() {
+  //<editor-fold desc="Changeable Configuration Block">
+  // the following lines will be replaced by docker/configurator, when it runs in a docker-container
+  window.ui = SwaggerUIBundle({
+    url: "/docs/api/v1/paths/index.yaml",
+    dom_id: '#swagger-ui',
+    deepLinking: true,
+    presets: [
+      SwaggerUIBundle.presets.apis,
+      SwaggerUIStandalonePreset
+    ],
+    plugins: [
+      SwaggerUIBundle.plugins.DownloadUrl
+    ],
+    layout: "StandaloneLayout",
+    requestInterceptor: (req) => {
+      req.headers["Authorization"] = "Bearer " + req.headers["Authorization"]
+      return req
+    }
+  });
+  //</editor-fold>
+};

data/lib/serializers/.DS_Store ADDED Viewed

Binary file

data/lib/serializers/action_not_allowed_serializer.rb ADDED Viewed

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+class ActionNotAllowedSerializer
+  def initialize(error)
+    @error = error
+  end
+  def serialize
+    {
+      success: false,
+      errors: [I18n.t(:not_allowed, scope: %i[errors action])]
+    }
+  end
+  private
+  attr_reader :error
+end

data/lib/serializers/api/.DS_Store ADDED Viewed

Binary file

data/lib/serializers/api/admin/base_serializer.rb ADDED Viewed

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+class Api::Admin::BaseSerializer < ActiveModel::Serializer
+  def initialize(object, options = {})
+    @type = options[:type]
+    super(object, options)
+  end
+  def attributes(*args)
+    field_custom = "Api::Admin::#{object.class}Serializer".constantize::FIELD_CUSTOM
+    super.slice(*field_custom[@type] || super.keys)
+  end
+end

data/lib/serializers/api/admin/hash_serializer.rb ADDED Viewed

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+class Api::Admin::HashSerializer
+  attr_reader :object, :root
+  def initialize(object, args = {})
+    @object = object
+    @root = args[:root]
+  end
+  def to_hash
+    root ? {root_key => object.to_h} : object.to_h
+  end
+  private
+  def root_key
+    return :data if root == true
+    root.to_sym if root.is_a?(String) || root.is_a?(Symbol)
+  end
+end

data/lib/serializers/api/admin/user_serializer.rb ADDED Viewed

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+class Api::Admin::UserSerializer < Api::Admin::BaseSerializer
+  attributes :id, :email, :created_at
+  FIELD_CUSTOM = {
+    user_list: %i[id email]
+  }.freeze
+end

data/lib/serializers/api/v1/base_serializer.rb ADDED Viewed

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+class Api::V1::BaseSerializer < ActiveModel::Serializer
+  def initialize(object, options = {})
+    @type = options[:type]
+    super(object, options)
+  end
+  def attributes(*args)
+    field_custom = "Api::V1::#{object.class}Serializer".constantize::FIELD_CUSTOM
+    super.slice(*field_custom[@type] || super.keys)
+  end
+end

data/lib/serializers/api/v1/hash_serializer.rb ADDED Viewed

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+class Api::V1::HashSerializer
+  attr_reader :object, :root
+  def initialize(object, args = {})
+    @object = object
+    @root = args[:root]
+  end
+  def to_hash
+    root ? {root_key => object.to_h} : object.to_h
+  end
+  private
+  def root_key
+    return :data if root == true
+    root.to_sym if root.is_a?(String) || root.is_a?(Symbol)
+  end
+end

data/lib/serializers/api/v1/user_serializer.rb ADDED Viewed

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+class Api::V1::UserSerializer < Api::V1::BaseSerializer
+  attributes :id, :email, :created_at
+  FIELD_CUSTOM = {
+    user_details: %i[id email]
+  }.freeze
+end

data/lib/serializers/record_not_found_serializer.rb ADDED Viewed

@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+class RecordNotFoundSerializer
+  def initialize(error)
+    @error = error
+    @resource = error.model.underscore
+  end
+  def serialize
+    {
+      success: false,
+      errors: [
+        {
+          resource: resource,
+          field: nil
+        }.merge(details)
+      ]
+    }
+  end
+  private
+  attr_reader :error, :resource
+  def details
+    I18n.t :not_found, scope: %i[errors active_record]
+  end
+end

data/lib/serializers/validation_error_serializer.rb ADDED Viewed

@@ -0,0 +1,45 @@
+# frozen_string_literal: true
+class ValidationErrorSerializer
+  def initialize(record, field, details, message)
+    @record = record
+    @field = field
+    @details = details
+    @message = message
+  end
+  def serialize
+    {
+      resource: resource,
+      field: field,
+      code: code,
+      message: message
+    }
+  end
+  private
+  attr_reader :record, :message
+  def resource
+    I18n.t underscored_resource_name,
+           scope: %i[errors resources],
+           default: underscored_resource_name
+  end
+  def field
+    I18n.t @field,
+           scope: [:errors, :fields, underscored_resource_name],
+           default: @field.to_s
+  end
+  def code
+    I18n.t @details[:error],
+           scope: %i[errors code],
+           default: @details[:error].to_s
+  end
+  def underscored_resource_name
+    record.class.to_s.gsub("::", "").underscore
+  end
+end

data/lib/services/api/admin/generate_access_token_service.rb ADDED Viewed

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+class Api::Admin::GenerateAccessTokenService
+  def initialize(args)
+    @resource = args[:resource]
+    @refresh_token = args[:refresh_token]
+    @device_id = args[:device_id]
+  end
+  def execute
+    {
+      access_token: JsonWebToken.encode(payload),
+      refresh_token: refresh_token,
+      "#{resource.class.name.downcase}": {
+        id: resource.id,
+        email: resource.email
+      }
+    }
+  end
+  private
+  attr_reader :resource, :refresh_token, :device_id
+  def payload
+    {
+      id: resource.id,
+      email: resource.email,
+      resource_type: resource.class.name,
+      device_id: device_id,
+      exp: (Time.current + Settings.admin.authenticate.access_token.exp.hours).to_i
+    }
+  end
+end

data/lib/services/api/admin/generate_refresh_token_service.rb ADDED Viewed

@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+class Api::Admin::GenerateRefreshTokenService
+  def initialize(device)
+    @device = device
+  end
+  def execute
+    device.refresh_token = Device.digest_token
+    device.save!
+    JsonWebToken.encode(payload)
+  end
+  private
+  attr_reader :device
+  def payload
+    {
+      refresh_token: device.refresh_token,
+      exp: (Time.current + Settings.admin.authenticate.refresh_token.exp.days).to_i
+    }
+  end
+end

data/lib/services/api/authorize_request_service.rb ADDED Viewed

@@ -0,0 +1,35 @@
+# frozen_string_literal: true
+class Api::AuthorizeRequestService
+  def initialize(args)
+    @authorization_header = args[:authorization_header]
+    @resource_class = args[:resource_type].to_s.classify
+  end
+  def perform
+    authorize_request!
+    verify_author_resource
+    author_resource
+  end
+  private
+  attr_reader :authorization_header, :resource_class, :decoded_access_token, :author_resource
+  def authorize_request!
+    access_token = authorization_header.split.last
+    @decoded_access_token = JsonWebToken.decode(access_token)
+    raise JWT::DecodeError unless decoded_access_token[:resource_type] == resource_class
+  end
+  def verify_author_resource
+    @author_resource = Class.const_get(resource_class).find_by id: decoded_access_token[:id]
+    raise JWT::DecodeError unless author_resource
+    raise JWT::DecodeError unless valid_device?
+  end
+  def valid_device?
+    author_resource.devices.find_by(id: decoded_access_token[:device_id])
+  end
+end

data/lib/services/api/v1/generate_access_token_service.rb ADDED Viewed

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+class Api::V1::GenerateAccessTokenService
+  def initialize(args)
+    @resource = args[:resource]
+    @refresh_token = args[:refresh_token]
+    @device_id = args[:device_id]
+  end
+  def execute
+    {
+      access_token: JsonWebToken.encode(payload),
+      refresh_token: refresh_token,
+      "#{resource.class.name.downcase}": {
+        id: resource.id,
+        email: resource.email
+      }
+    }
+  end
+  private
+  attr_reader :resource, :refresh_token, :device_id
+  def payload
+    {
+      id: resource.id,
+      email: resource.email,
+      resource_type: resource.class.name,
+      device_id: device_id,
+      exp: (Time.current + Settings.user.authenticate.access_token.exp.hours).to_i
+    }
+  end
+end

data/lib/services/api/v1/generate_refresh_token_service.rb ADDED Viewed

@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+class Api::V1::GenerateRefreshTokenService
+  def initialize(device)
+    @device = device
+  end
+  def execute
+    device.refresh_token = Device.digest_token
+    device.save!
+    JsonWebToken.encode(payload)
+  end
+  private
+  attr_reader :device
+  def payload
+    {
+      refresh_token: device.refresh_token,
+      exp: (Time.current + Settings.user.authenticate.refresh_token.exp.days).to_i
+    }
+  end
+end

data/lib/spec/controllers/api/admin/sessions_controller_spec.rb ADDED Viewed

@@ -0,0 +1,125 @@
+# frozen_string_literal: true
+require "rails_helper"
+RSpec.describe Api::Admin::SessionsController, type: :request do
+  describe "POST #create" do
+    let!(:admin) {create :admin, email: "emailtest@gmail.com", password: "Aa@123456"}
+    let(:params) do
+      {
+        admin: {
+          email: "emailtest@gmail.com",
+          password: "Aa@123456"
+        }
+      }
+    end
+    before do
+      post api_admin_sign_in_path, params: params
+    end
+    context "when login success" do
+      it "should return status 200" do
+        expect(response.status).to eq 200
+        expect(json_response["success"]).to eq true
+        expect(json_response["data"]["access_token"].present?).to eq true
+        expect(json_response["data"]["refresh_token"].present?).to eq true
+        expect(json_response["data"]["admin"]["id"]).to eq admin.id
+        expect(json_response["data"]["admin"]["email"]).to eq "emailtest@gmail.com"
+        expect(admin.reload.devices.present?).to eq true
+      end
+    end
+    context "when invalid email or password" do
+      let(:params) do
+        {
+          admin: {
+            email: "emailtest@gmail.com",
+            password: "Aa@123456bb"
+          }
+        }
+      end
+      it "should return status 400" do
+        expect(response.status).to eq 400
+        expect(json_response["success"]).to eq false
+        expect(json_response["errors"][0]["code"]).to eq 1203
+        expect(json_response["errors"][0]["message"]).to eq "Invalid email or password"
+      end
+    end
+  end
+  describe "POST #refresh" do
+    let(:admin) {create :admin}
+    let!(:device) {create :device, resourceable: admin}
+    let(:params) do
+      {
+        refresh_token: Api::V1::GenerateRefreshTokenService.new(device).execute
+      }
+    end
+    before do
+      post api_admin_refresh_path, params: params
+    end
+    context "when refresh token success" do
+      it "should return status 200" do
+        expect(response.status).to eq 200
+        expect(json_response["success"]).to eq true
+        expect(json_response["data"]["access_token"].present?).to eq true
+        expect(json_response["data"]["refresh_token"].present?).to eq true
+        expect(json_response["data"]["admin"]["id"]).to eq admin.id
+        expect(json_response["data"]["admin"]["email"]).to eq admin.email
+      end
+    end
+    context "when refresh token not correct" do
+      let(:params) do
+        {
+          refresh_token: JsonWebToken.encode({refresh_token: "not_correct"})
+        }
+      end
+      it "should return status 401" do
+        expect(response.status).to eq 401
+        expect(json_response["success"]).to eq false
+        expect(json_response["errors"][0]["code"]).to eq 1204
+        expect(json_response["errors"][0]["message"]).to eq "Invalid Token"
+      end
+    end
+    context "when refresh token expired" do
+      let(:params) do
+        {
+          refresh_token: JsonWebToken.encode({exp: (Time.current - 1.hour).to_i})
+        }
+      end
+      it "should return status 401" do
+        expect(response.status).to eq 401
+        expect(json_response["success"]).to eq false
+        expect(json_response["errors"][0]["code"]).to eq 1205
+        expect(json_response["errors"][0]["message"]).to eq "Token Expired"
+      end
+    end
+  end
+  describe "POST #destroy" do
+    include_context "admin_logged_in"
+    before do
+      delete api_admin_logout_path, headers: headers
+    end
+    context "when logged out success" do
+      it "should return status 200" do
+        expect(response.status).to eq 200
+        expect(json_response["success"]).to eq true
+        expect(admin.devices.blank?).to eq true
+      end
+    end
+    include_examples :admin_authentication
+  end
+end

data/lib/spec/controllers/api/admin/users_controller_spec.rb ADDED Viewed

@@ -0,0 +1,35 @@
+# frozen_string_literal: true
+require "rails_helper"
+RSpec.describe Api::Admin::UsersController, type: :request do
+  describe "GET #index" do
+    include_context "admin_logged_in"
+    let!(:user_1) {create :user}
+    let!(:user_2) {create :user}
+    let!(:user_3) {create :user}
+    let(:params) do
+      {
+        page: 1,
+        items: 2
+      }
+    end
+    before do
+      get api_admin_users_path, headers: headers, params: params
+    end
+    context "when logged out success" do
+      it "should return status 200" do
+        expect(response.status).to eq 200
+        expect(json_response["success"]).to eq true
+        expect(json_response["data"]["users"].size).to eq 2
+        expect(json_response["data"]["users"][0]["id"]).to eq user_1.id
+        expect(json_response["data"]["users"][1]["id"]).to eq user_2.id
+      end
+    end
+    include_examples :admin_authentication
+  end
+end

data/lib/spec/controllers/api/v1/sessions_controller_spec.rb ADDED Viewed

@@ -0,0 +1,125 @@
+# frozen_string_literal: true
+require "rails_helper"
+RSpec.describe Api::V1::SessionsController, type: :request do
+  describe "POST #create" do
+    let!(:user) {create :user, email: "emailtest@gmail.com", password: "Aa@123456"}
+    let(:params) do
+      {
+        user: {
+          email: "emailtest@gmail.com",
+          password: "Aa@123456"
+        }
+      }
+    end
+    before do
+      post api_v1_sign_in_path, params: params
+    end
+    context "when login success" do
+      it "should return status 200" do
+        expect(response.status).to eq 200
+        expect(json_response["success"]).to eq true
+        expect(json_response["data"]["access_token"].present?).to eq true
+        expect(json_response["data"]["refresh_token"].present?).to eq true
+        expect(json_response["data"]["user"]["id"]).to eq user.id
+        expect(json_response["data"]["user"]["email"]).to eq "emailtest@gmail.com"
+        expect(user.reload.devices.present?).to eq true
+      end
+    end
+    context "when invalid email or password" do
+      let(:params) do
+        {
+          user: {
+            email: "emailtest@gmail.com",
+            password: "Aa@123456bb"
+          }
+        }
+      end
+      it "should return status 400" do
+        expect(response.status).to eq 400
+        expect(json_response["success"]).to eq false
+        expect(json_response["errors"][0]["code"]).to eq 1203
+        expect(json_response["errors"][0]["message"]).to eq "Invalid email or password"
+      end
+    end
+  end
+  describe "POST #refresh" do
+    let(:user) {create :user}
+    let!(:device) {create :device, resourceable: user}
+    let(:params) do
+      {
+        refresh_token: Api::V1::GenerateRefreshTokenService.new(device).execute
+      }
+    end
+    before do
+      post api_v1_refresh_path, params: params
+    end
+    context "when refresh token success" do
+      it "should return status 200" do
+        expect(response.status).to eq 200
+        expect(json_response["success"]).to eq true
+        expect(json_response["data"]["access_token"].present?).to eq true
+        expect(json_response["data"]["refresh_token"].present?).to eq true
+        expect(json_response["data"]["user"]["id"]).to eq user.id
+        expect(json_response["data"]["user"]["email"]).to eq user.email
+      end
+    end
+    context "when refresh token not correct" do
+      let(:params) do
+        {
+          refresh_token: JsonWebToken.encode({refresh_token: "not_correct"})
+        }
+      end
+      it "should return status 401" do
+        expect(response.status).to eq 401
+        expect(json_response["success"]).to eq false
+        expect(json_response["errors"][0]["code"]).to eq 1204
+        expect(json_response["errors"][0]["message"]).to eq "Invalid Token"
+      end
+    end
+    context "when refresh token expired" do
+      let(:params) do
+        {
+          refresh_token: JsonWebToken.encode({exp: (Time.current - 1.hour).to_i})
+        }
+      end
+      it "should return status 401" do
+        expect(response.status).to eq 401
+        expect(json_response["success"]).to eq false
+        expect(json_response["errors"][0]["code"]).to eq 1205
+        expect(json_response["errors"][0]["message"]).to eq "Token Expired"
+      end
+    end
+  end
+  describe "POST #destroy" do
+    include_context "user_logged_in"
+    before do
+      delete api_v1_logout_path, headers: headers
+    end
+    context "when logged out success" do
+      it "should return status 200" do
+        expect(response.status).to eq 200
+        expect(json_response["success"]).to eq true
+        expect(user.devices.blank?).to eq true
+      end
+    end
+    include_examples :user_authentication
+  end
+end