oauth-plugin 0.3.14 → 0.4.0.pre1

data/lib/generators/rspec/templates/controller_spec_helper.rb

@@ -0,0 +1,66 @@
+require 'oauth/client/action_controller_request'
+module OAuthControllerSpecHelper
+
+  def current_user
+    @user||=users(:aaron)
+  end
+
+  def current_client_application
+    @client_application||=client_applications(:one)
+  end
+
+  def access_token
+    @access_token||=AccessToken.create :user=>current_user,:client_application=>current_client_application
+  end
+
+  def request_token
+    @request_token||=RequestToken.create :client_application=>current_client_application, :callback_url=>"http://application/callback"
+  end
+
+  def consumer_request_token
+    OAuth::RequestToken.new current_consumer,request_token.token,request_token.secret
+  end
+
+  def consumer_access_token
+    OAuth::AccessToken.new current_consumer,access_token.token,access_token.secret
+  end
+
+  if defined?(Devise)
+    include Devise::TestHelpers
+    def login
+      sign_in :user, current_user
+    end
+  else
+    def login
+      controller.stub!(:current_user).and_return(current_user)
+    end
+  end
+
+  def login_as_application_owner
+    @user = users(:quentin)
+    login
+  end
+
+  def current_consumer
+    @consumer ||= OAuth::Consumer.new(current_client_application.key,current_client_application.secret,{:site => "http://test.host"})
+  end
+
+  def setup_oauth_for_user
+    login
+  end
+
+  def sign_request_with_oauth(token=nil,options={})
+    ActionController::TestRequest.use_oauth=true
+    @request.configure_oauth(current_consumer,token,options)
+  end
+
+  def two_legged_sign_request_with_oauth(consumer=nil,options={})
+    ActionController::TestRequest.use_oauth=true
+    @request.configure_oauth(consumer,nil,options)
+  end
+
+  def add_oauth2_token_header(token,options={})
+    request.env['HTTP_AUTHORIZATION'] = "OAuth #{token.token}"
+  end
+
+end

data/lib/generators/rspec/templates/oauth2_token_spec.rb

@@ -0,0 +1,29 @@
+require File.dirname(__FILE__) + '/../spec_helper'
+
+describe Oauth2Token do
+  fixtures :client_applications, :users, :oauth_tokens
+  before(:each) do
+    @token = Oauth2Token.create :client_application => client_applications(:one), :user=>users(:aaron)
+  end
+
+  it "should be valid" do
+    @token.should be_valid
+  end
+
+  it "should have a token" do
+    @token.token.should_not be_nil
+  end
+
+  it "should have a secret" do
+    @token.secret.should_not be_nil
+  end
+
+  it "should be authorized" do
+    @token.should be_authorized
+  end
+
+  it "should not be invalidated" do
+    @token.should_not be_invalidated
+  end
+
+end

data/lib/generators/rspec/templates/oauth2_verifier_spec.rb

@@ -0,0 +1,54 @@
+require File.dirname(__FILE__) + '/../spec_helper'
+
+describe Oauth2Verifier do
+  fixtures :client_applications, :users, :oauth_tokens
+  before(:each) do
+    @verifier = Oauth2Verifier.create :client_application => client_applications(:one), :user=>users(:aaron)
+  end
+
+  it "should be valid" do
+    @verifier.should be_valid
+  end
+
+  it "should have a code" do
+    @verifier.code.should_not be_nil
+  end
+
+  it "should not have a secret" do
+    @verifier.secret.should be_nil
+  end
+
+  it "should be authorized" do
+    @verifier.should be_authorized
+  end
+
+  it "should not be invalidated" do
+    @verifier.should_not be_invalidated
+  end
+
+  describe "exchange for oauth2 token" do
+    before(:each) do
+      @token = @verifier.exchange!
+    end
+
+    it "should invalidate verifier" do
+      @verifier.should be_invalidated
+    end
+
+    it "should set user on token" do
+      @token.user.should==@verifier.user
+    end
+
+    it "should set client application on token" do
+      @token.client_application.should == @verifier.client_application
+    end
+
+    it "should be authorized" do
+      @token.should be_authorized
+    end
+
+    it "should not be invalidated" do
+      @token.should_not be_invalidated
+    end
+  end
+end

data/lib/generators/rspec/templates/oauth_nonce_spec.rb

@@ -0,0 +1,24 @@
+require File.dirname(__FILE__) + '/../spec_helper'
+require 'oauth/helper'
+describe OauthNonce do
+  include OAuth::Helper
+  before(:each) do
+    @oauth_nonce = OauthNonce.remember(generate_key, Time.now.to_i)
+  end
+
+  it "should be valid" do
+    @oauth_nonce.should be_valid
+  end
+
+  it "should not have errors" do
+    @oauth_nonce.errors.full_messages.should == []
+  end
+
+  it "should not be a new record" do
+    @oauth_nonce.should_not be_new_record
+  end
+
+  it "should not allow a second one with the same values" do
+    OauthNonce.remember(@oauth_nonce.nonce,@oauth_nonce.timestamp).should == false
+  end
+end

data/lib/generators/rspec/templates/oauth_nonces.yml

@@ -0,0 +1,13 @@
+# Read about fixtures at http://ar.rubyonrails.org/classes/Fixtures.html
+one:
+  id: 1
+  nonce: a_nonce
+  timestamp: 1
+  created_at: 2007-11-25 17:27:04
+  updated_at: 2007-11-25 17:27:04
+two:
+  id: 2
+  nonce: b_nonce
+  timestamp: 2
+  created_at: 2007-11-25 17:27:04
+  updated_at: 2007-11-25 17:27:04

data/lib/generators/rspec/templates/oauth_token_spec.rb

@@ -0,0 +1,309 @@
+require File.dirname(__FILE__) + '/../spec_helper'
+
+describe RequestToken do
+  fixtures :client_applications, :users, :oauth_tokens
+  before(:each) do
+    @token = RequestToken.create :client_application => client_applications(:one)
+  end
+
+  it "should be valid" do
+    @token.should be_valid
+  end
+
+  it "should not have errors" do
+    @token.errors.should_not == []
+  end
+
+  it "should have a token" do
+    @token.token.should_not be_nil
+  end
+
+  it "should have a secret" do
+    @token.secret.should_not be_nil
+  end
+
+  it "should not be authorized" do
+    @token.should_not be_authorized
+  end
+
+  it "should not be invalidated" do
+    @token.should_not be_invalidated
+  end
+
+  it "should not have a verifier" do
+    @token.verifier.should be_nil
+  end
+
+  it "should not be oob" do
+    @token.should_not be_oob
+  end
+
+  describe "OAuth 1.0a" do
+
+    describe "with provided callback" do
+      before(:each) do
+        @token.callback_url="http://test.com/callback"
+      end
+
+      it "should not be oauth10" do
+        @token.should_not be_oauth10
+      end
+
+      it "should not be oob" do
+        @token.should_not be_oob
+      end
+
+      describe "authorize request" do
+        before(:each) do
+          @token.authorize!(users(:quentin))
+        end
+
+        it "should be authorized" do
+          @token.should be_authorized
+        end
+
+        it "should have authorized at" do
+          @token.authorized_at.should_not be_nil
+        end
+
+        it "should have user set" do
+          @token.user.should == users(:quentin)
+        end
+
+        it "should have verifier" do
+          @token.verifier.should_not be_nil
+        end
+
+        describe "exchange for access token" do
+
+          before(:each) do
+            @token.provided_oauth_verifier=@token.verifier
+            @access = @token.exchange!
+          end
+
+          it "should be valid" do
+            @access.should be_valid
+          end
+
+          it "should have no error messages" do
+            @access.errors.full_messages.should==[]
+          end
+
+          it "should invalidate request token" do
+            @token.should be_invalidated
+          end
+
+          it "should set user on access token" do
+            @access.user.should == users(:quentin)
+          end
+
+          it "should authorize accesstoken" do
+            @access.should be_authorized
+          end
+        end
+
+        describe "attempt exchange with invalid verifier (OAuth 1.0a)" do
+
+          before(:each) do
+            @value = @token.exchange!
+          end
+
+          it "should return false" do
+            @value.should==false
+          end
+
+          it "should not invalidate request token" do
+            @token.should_not be_invalidated
+          end
+        end
+
+      end
+
+      describe "attempt exchange with out authorization" do
+
+        before(:each) do
+          @value = @token.exchange!
+        end
+
+        it "should return false" do
+          @value.should==false
+        end
+
+        it "should not invalidate request token" do
+          @token.should_not be_invalidated
+        end
+      end
+
+      it "should return 1.0a style to_query" do
+        @token.to_query.should=="oauth_token=#{@token.token}&oauth_token_secret=#{@token.secret}&oauth_callback_confirmed=true"
+      end
+
+    end
+
+    describe "with oob callback" do
+      before(:each) do
+        @token.callback_url='oob'
+      end
+
+      it "should not be oauth10" do
+        @token.should_not be_oauth10
+      end
+
+      it "should be oob" do
+        @token.should be_oob
+      end
+
+      describe "authorize request" do
+        before(:each) do
+          @token.authorize!(users(:quentin))
+        end
+
+        it "should be authorized" do
+          @token.should be_authorized
+        end
+
+        it "should have authorized at" do
+          @token.authorized_at.should_not be_nil
+        end
+
+        it "should have user set" do
+          @token.user.should == users(:quentin)
+        end
+
+        it "should have verifier" do
+          @token.verifier.should_not be_nil
+        end
+
+        describe "exchange for access token" do
+
+          before(:each) do
+            @token.provided_oauth_verifier=@token.verifier
+            @access = @token.exchange!
+          end
+
+          it "should invalidate request token" do
+            @token.should be_invalidated
+          end
+
+          it "should set user on access token" do
+            @access.user.should == users(:quentin)
+          end
+
+          it "should authorize accesstoken" do
+            @access.should be_authorized
+          end
+        end
+
+        describe "attempt exchange with invalid verifier (OAuth 1.0a)" do
+
+          before(:each) do
+            @value = @token.exchange!
+          end
+
+          it "should return false" do
+            @value.should==false
+          end
+
+          it "should not invalidate request token" do
+            @token.should_not be_invalidated
+          end
+        end
+
+      end
+
+      describe "attempt exchange with out authorization invalid verifier" do
+
+        before(:each) do
+          @value = @token.exchange!
+        end
+
+        it "should return false" do
+          @value.should==false
+        end
+
+        it "should not invalidate request token" do
+          @token.should_not be_invalidated
+        end
+      end
+
+      it "should return 1.0 style to_query" do
+        @token.to_query.should=="oauth_token=#{@token.token}&oauth_token_secret=#{@token.secret}&oauth_callback_confirmed=true"
+      end
+    end
+  end
+
+  if defined? OAUTH_10_SUPPORT && OAUTH_10_SUPPORT
+    describe "OAuth 1.0" do
+
+      it "should be oauth10" do
+        @token.should be_oauth10
+      end
+
+      it "should not be oob" do
+        @token.should_not be_oob
+      end
+
+      describe "authorize request" do
+        before(:each) do
+          @token.authorize!(users(:quentin))
+        end
+
+        it "should be authorized" do
+          @token.should be_authorized
+        end
+
+        it "should have authorized at" do
+          @token.authorized_at.should_not be_nil
+        end
+
+        it "should have user set" do
+          @token.user.should == users(:quentin)
+        end
+
+        it "should not have verifier" do
+          @token.verifier.should be_nil
+        end
+
+        describe "exchange for access token" do
+
+          before(:each) do
+            @access = @token.exchange!
+          end
+
+          it "should invalidate request token" do
+            @token.should be_invalidated
+          end
+
+          it "should set user on access token" do
+            @access.user.should == users(:quentin)
+          end
+
+          it "should authorize accesstoken" do
+            @access.should be_authorized
+          end
+        end
+
+      end
+
+      describe "attempt exchange with out authorization" do
+
+        before(:each) do
+          @value = @token.exchange!
+        end
+
+        it "should return false" do
+          @value.should==false
+        end
+
+        it "should not invalidate request token" do
+          @token.should_not be_invalidated
+        end
+      end
+
+      it "should return 1.0 style to_query" do
+        @token.to_query.should=="oauth_token=#{@token.token}&oauth_token_secret=#{@token.secret}"
+      end
+
+    end
+  end
+end

data/lib/generators/rspec/templates/oauth_tokens.yml

@@ -0,0 +1,17 @@
+# Read about fixtures at http://ar.rubyonrails.org/classes/Fixtures.html
+one:
+  id: 1
+  user_id: 1
+  client_application_id: 1
+  token: one
+  secret: MyString
+  created_at: 2007-11-19 07:31:46
+  updated_at: 2007-11-19 07:31:46
+two:
+  id: 2
+  user_id: 1
+  client_application_id: 1
+  token: two
+  secret: MyString
+  created_at: 2007-11-19 07:31:46
+  updated_at: 2007-11-19 07:31:46

data/lib/generators/test_unit/oauth_provider_generator.rb

@@ -0,0 +1,37 @@
+require 'rails/generators/test_unit'
+
+module TestUnit
+  module Generators
+    class OauthProviderGenerator < Base
+      source_root File.expand_path('../templates', __FILE__)
+
+      argument :name, :type => :string, :default => 'Oauth'
+      class_option :fixture, :type => :boolean
+
+      def copy_controller_test_files
+        template 'controller_test_helper.rb',
+                 File.join('test', class_path, "#{file_name}_controller_test_helper.rb")
+        template 'controller_test.rb',
+                 File.join('test/functional', class_path, "#{file_name}_controller_test.rb")
+        template 'clients_controller_test.rb',
+                 File.join('test/functional', class_path, "#{file_name}_clients_controller_test.rb")
+      end
+
+      def copy_models_test_files
+        template 'client_application_test.rb',  File.join('test/unit', 'client_application_test.rb')
+        template 'oauth_token_test.rb',         File.join('test/unit', 'oauth_token_test.rb')
+        template 'oauth_nonce_test.rb',         File.join('test/unit', 'oauth_nonce_test.rb')
+      end
+
+      hook_for :fixture_replacement
+
+      def create_fixture_file
+        if options[:fixtures] && options[:fixture_replacement].nil?
+          template 'client_applications.yml',   File.join('test/fixtures', 'client_applications.yml')
+          template 'oauth_tokens.yml',          File.join('test/fixtures', 'oauth_tokens.yml')
+          template 'oauth_nonces.yml',          File.join('test/fixtures', 'oauth_nonces.yml')
+        end
+      end
+    end
+  end
+end

data/lib/generators/test_unit/templates/client_application_test.rb

@@ -0,0 +1,42 @@
+require File.dirname(__FILE__) + '/../test_helper'
+module OAuthHelpers
+
+  def create_consumer
+    @consumer=OAuth::Consumer.new(@application.key,@application.secret,
+      {
+        :site=>@application.oauth_server.base_url
+      })
+  end
+
+end
+
+class ClientApplicationTest < ActiveSupport::TestCase
+  include OAuthHelpers
+  fixtures :users,:client_applications,:oauth_tokens
+
+  def setup
+    @application = ClientApplication.create :name=>"Agree2",:url=>"http://agree2.com",:user=>users(:quentin)
+    create_consumer
+  end
+
+  def test_should_be_valid
+    assert @application.valid?
+  end
+
+
+  def test_should_not_have_errors
+    assert_equal [], @application.errors.full_messages
+  end
+
+  def test_should_have_key_and_secret
+    assert_not_nil @application.key
+    assert_not_nil @application.secret
+  end
+
+  def test_should_have_credentials
+    assert_not_nil @application.credentials
+    assert_equal @application.key, @application.credentials.key
+    assert_equal @application.secret, @application.credentials.secret
+  end
+
+end

data/lib/generators/test_unit/templates/client_applications.yml

@@ -0,0 +1,23 @@
+# Read about fixtures at http://ar.rubyonrails.org/classes/Fixtures.html
+one:
+  id: 1
+  name: MyString
+  url: http://test.com
+  support_url: http://test.com/support
+  callback_url: http://test.com/callback
+  key: one_key
+  secret: MyString
+  user_id: 1
+  created_at: 2007-11-17 16:56:51
+  updated_at: 2007-11-17 16:56:51
+two:
+  id: 2
+  name: MyString
+  url: http://test.com
+  support_url: http://test.com/support
+  callback_url: http://test.com/callback
+  key: two_key
+  secret: MyString
+  user_id: 1
+  created_at: 2007-11-17 16:56:51
+  updated_at: 2007-11-17 16:56:51