panjiva-oauth-plugin 0.4.1

data/lib/generators/rspec/templates/oauth2_token_spec.rb

@@ -0,0 +1,52 @@
+require File.dirname(__FILE__) + '/../spec_helper'
+
+describe Oauth2Token do
+  fixtures :client_applications, :users, :oauth_tokens
+  before(:each) do
+    @token = Oauth2Token.create :client_application => client_applications(:one), :user=>users(:aaron)
+  end
+
+  it "should be valid" do
+    @token.should be_valid
+  end
+
+  it "should have a token" do
+    @token.token.should_not be_nil
+  end
+
+  it "should have a secret" do
+    @token.secret.should_not be_nil
+  end
+
+  it "should be authorized" do
+    @token.should be_authorized
+  end
+
+  it "should not be invalidated" do
+    @token.should_not be_invalidated
+  end
+
+  it "should generate correct json and query strong" do
+    @token.as_json.should == {:access_token => @token.token, :token_type => 'bearer'}
+    @token.to_query.should == "access_token=#{@token.token}&token_type=bearer"
+  end
+
+  it "should generate correct json and query string and include state in query if present" do
+    @token.state = 'bb bb'
+    @token.as_json.should == {:access_token => @token.token, :token_type => 'bearer'}
+    @token.to_query.should == "access_token=#{@token.token}&token_type=bearer&state=bb%20bb"
+  end
+
+  it "should generate correct json and query string and include scope in query if present" do
+    @token.scope = 'bbbb aaaa'
+    @token.as_json.should == {:access_token => @token.token, :token_type => 'bearer'}
+    @token.to_query.should == "access_token=#{@token.token}&token_type=bearer&scope=bbbb%20aaaa"
+  end
+
+  it "should generate correct json and include expires_in if present" do
+    @token.expires_at = 1.hour.from_now
+    @token.as_json.should == { :access_token => @token.token, :token_type => 'bearer', :expires_in => 3600 }
+    @token.to_query.should == "access_token=#{@token.token}&token_type=bearer&expires_in=3600"
+  end
+
+end

data/lib/generators/rspec/templates/oauth2_verifier_spec.rb

@@ -0,0 +1,44 @@
+require File.dirname(__FILE__) + '/../spec_helper'
+
+describe Oauth2Verifier do
+  fixtures :client_applications, :users, :oauth_tokens
+  before(:each) do
+    @verifier = Oauth2Verifier.create :client_application => client_applications(:one), :user=>users(:aaron), :scope => "bbbb aaaa"
+  end
+
+  it "should be valid" do
+    @verifier.should be_valid
+  end
+
+  it "should have a code" do
+    @verifier.code.should_not be_nil
+  end
+
+  it "should not have a secret" do
+    @verifier.secret.should be_nil
+  end
+
+  it "should be authorized" do
+    @verifier.should be_authorized
+  end
+
+  it "should not be invalidated" do
+    @verifier.should_not be_invalidated
+  end
+
+  it "should generate query string" do
+    @verifier.to_query.should == "code=#{@verifier.code}"
+    @verifier.state="bbbb aaaa"
+    @verifier.to_query.should == "code=#{@verifier.code}&state=bbbb%20aaaa"
+  end
+
+  it "should properly exchange for token" do
+    @token = @verifier.exchange!
+    @verifier.should be_invalidated
+    @token.user.should==@verifier.user
+    @token.client_application.should == @verifier.client_application
+    @token.should be_authorized
+    @token.should_not be_invalidated
+    @token.scope.should == @verifier.scope
+  end
+end

data/lib/generators/rspec/templates/oauth_nonce_spec.rb

@@ -0,0 +1,24 @@
+require File.dirname(__FILE__) + '/../spec_helper'
+require 'oauth/helper'
+describe OauthNonce do
+  include OAuth::Helper
+  before(:each) do
+    @oauth_nonce = OauthNonce.remember(generate_key, Time.now.to_i)
+  end
+
+  it "should be valid" do
+    @oauth_nonce.should be_valid
+  end
+
+  it "should not have errors" do
+    @oauth_nonce.errors.full_messages.should == []
+  end
+
+  it "should not be a new record" do
+    @oauth_nonce.should_not be_new_record
+  end
+
+  it "should not allow a second one with the same values" do
+    OauthNonce.remember(@oauth_nonce.nonce,@oauth_nonce.timestamp).should == false
+  end
+end

data/lib/generators/rspec/templates/oauth_nonces.yml

@@ -0,0 +1,13 @@
+# Read about fixtures at http://ar.rubyonrails.org/classes/Fixtures.html
+one:
+  id: 1
+  nonce: a_nonce
+  timestamp: 1
+  created_at: 2007-11-25 17:27:04
+  updated_at: 2007-11-25 17:27:04
+two:
+  id: 2
+  nonce: b_nonce
+  timestamp: 2
+  created_at: 2007-11-25 17:27:04
+  updated_at: 2007-11-25 17:27:04

data/lib/generators/rspec/templates/oauth_token_spec.rb

@@ -0,0 +1,309 @@
+require File.dirname(__FILE__) + '/../spec_helper'
+
+describe RequestToken do
+  fixtures :client_applications, :users, :oauth_tokens
+  before(:each) do
+    @token = RequestToken.create :client_application => client_applications(:one)
+  end
+
+  it "should be valid" do
+    @token.should be_valid
+  end
+
+  it "should not have errors" do
+    @token.errors.should_not == []
+  end
+
+  it "should have a token" do
+    @token.token.should_not be_nil
+  end
+
+  it "should have a secret" do
+    @token.secret.should_not be_nil
+  end
+
+  it "should not be authorized" do
+    @token.should_not be_authorized
+  end
+
+  it "should not be invalidated" do
+    @token.should_not be_invalidated
+  end
+
+  it "should not have a verifier" do
+    @token.verifier.should be_nil
+  end
+
+  it "should not be oob" do
+    @token.should_not be_oob
+  end
+
+  describe "OAuth 1.0a" do
+
+    describe "with provided callback" do
+      before(:each) do
+        @token.callback_url="http://test.com/callback"
+      end
+
+      it "should not be oauth10" do
+        @token.should_not be_oauth10
+      end
+
+      it "should not be oob" do
+        @token.should_not be_oob
+      end
+
+      describe "authorize request" do
+        before(:each) do
+          @token.authorize!(users(:quentin))
+        end
+
+        it "should be authorized" do
+          @token.should be_authorized
+        end
+
+        it "should have authorized at" do
+          @token.authorized_at.should_not be_nil
+        end
+
+        it "should have user set" do
+          @token.user.should == users(:quentin)
+        end
+
+        it "should have verifier" do
+          @token.verifier.should_not be_nil
+        end
+
+        describe "exchange for access token" do
+
+          before(:each) do
+            @token.provided_oauth_verifier=@token.verifier
+            @access = @token.exchange!
+          end
+
+          it "should be valid" do
+            @access.should be_valid
+          end
+
+          it "should have no error messages" do
+            @access.errors.full_messages.should==[]
+          end
+
+          it "should invalidate request token" do
+            @token.should be_invalidated
+          end
+
+          it "should set user on access token" do
+            @access.user.should == users(:quentin)
+          end
+
+          it "should authorize accesstoken" do
+            @access.should be_authorized
+          end
+        end
+
+        describe "attempt exchange with invalid verifier (OAuth 1.0a)" do
+
+          before(:each) do
+            @value = @token.exchange!
+          end
+
+          it "should return false" do
+            @value.should==false
+          end
+
+          it "should not invalidate request token" do
+            @token.should_not be_invalidated
+          end
+        end
+
+      end
+
+      describe "attempt exchange with out authorization" do
+
+        before(:each) do
+          @value = @token.exchange!
+        end
+
+        it "should return false" do
+          @value.should==false
+        end
+
+        it "should not invalidate request token" do
+          @token.should_not be_invalidated
+        end
+      end
+
+      it "should return 1.0a style to_query" do
+        @token.to_query.should=="oauth_token=#{@token.token}&oauth_token_secret=#{@token.secret}&oauth_callback_confirmed=true"
+      end
+
+    end
+
+    describe "with oob callback" do
+      before(:each) do
+        @token.callback_url='oob'
+      end
+
+      it "should not be oauth10" do
+        @token.should_not be_oauth10
+      end
+
+      it "should be oob" do
+        @token.should be_oob
+      end
+
+      describe "authorize request" do
+        before(:each) do
+          @token.authorize!(users(:quentin))
+        end
+
+        it "should be authorized" do
+          @token.should be_authorized
+        end
+
+        it "should have authorized at" do
+          @token.authorized_at.should_not be_nil
+        end
+
+        it "should have user set" do
+          @token.user.should == users(:quentin)
+        end
+
+        it "should have verifier" do
+          @token.verifier.should_not be_nil
+        end
+
+        describe "exchange for access token" do
+
+          before(:each) do
+            @token.provided_oauth_verifier=@token.verifier
+            @access = @token.exchange!
+          end
+
+          it "should invalidate request token" do
+            @token.should be_invalidated
+          end
+
+          it "should set user on access token" do
+            @access.user.should == users(:quentin)
+          end
+
+          it "should authorize accesstoken" do
+            @access.should be_authorized
+          end
+        end
+
+        describe "attempt exchange with invalid verifier (OAuth 1.0a)" do
+
+          before(:each) do
+            @value = @token.exchange!
+          end
+
+          it "should return false" do
+            @value.should==false
+          end
+
+          it "should not invalidate request token" do
+            @token.should_not be_invalidated
+          end
+        end
+
+      end
+
+      describe "attempt exchange with out authorization invalid verifier" do
+
+        before(:each) do
+          @value = @token.exchange!
+        end
+
+        it "should return false" do
+          @value.should==false
+        end
+
+        it "should not invalidate request token" do
+          @token.should_not be_invalidated
+        end
+      end
+
+      it "should return 1.0 style to_query" do
+        @token.to_query.should=="oauth_token=#{@token.token}&oauth_token_secret=#{@token.secret}&oauth_callback_confirmed=true"
+      end
+    end
+  end
+
+  if defined? OAUTH_10_SUPPORT && OAUTH_10_SUPPORT
+    describe "OAuth 1.0" do
+
+      it "should be oauth10" do
+        @token.should be_oauth10
+      end
+
+      it "should not be oob" do
+        @token.should_not be_oob
+      end
+
+      describe "authorize request" do
+        before(:each) do
+          @token.authorize!(users(:quentin))
+        end
+
+        it "should be authorized" do
+          @token.should be_authorized
+        end
+
+        it "should have authorized at" do
+          @token.authorized_at.should_not be_nil
+        end
+
+        it "should have user set" do
+          @token.user.should == users(:quentin)
+        end
+
+        it "should not have verifier" do
+          @token.verifier.should be_nil
+        end
+
+        describe "exchange for access token" do
+
+          before(:each) do
+            @access = @token.exchange!
+          end
+
+          it "should invalidate request token" do
+            @token.should be_invalidated
+          end
+
+          it "should set user on access token" do
+            @access.user.should == users(:quentin)
+          end
+
+          it "should authorize accesstoken" do
+            @access.should be_authorized
+          end
+        end
+
+      end
+
+      describe "attempt exchange with out authorization" do
+
+        before(:each) do
+          @value = @token.exchange!
+        end
+
+        it "should return false" do
+          @value.should==false
+        end
+
+        it "should not invalidate request token" do
+          @token.should_not be_invalidated
+        end
+      end
+
+      it "should return 1.0 style to_query" do
+        @token.to_query.should=="oauth_token=#{@token.token}&oauth_token_secret=#{@token.secret}"
+      end
+
+    end
+  end
+end

data/lib/generators/rspec/templates/oauth_tokens.yml

@@ -0,0 +1,17 @@
+# Read about fixtures at http://ar.rubyonrails.org/classes/Fixtures.html
+one:
+  id: 1
+  user_id: 1
+  client_application_id: 1
+  token: one
+  secret: MyString
+  created_at: 2007-11-19 07:31:46
+  updated_at: 2007-11-19 07:31:46
+two:
+  id: 2
+  user_id: 1
+  client_application_id: 1
+  token: two
+  secret: MyString
+  created_at: 2007-11-19 07:31:46
+  updated_at: 2007-11-19 07:31:46