rad_core 0.2.6 → 0.2.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- data/Rakefile +2 -2
- data/bin/rad +20 -25
- data/lib/components/config.rb +1 -1
- data/lib/components/configurators.rb +2 -2
- data/lib/components/controller.rb +2 -2
- data/lib/components/conveyors.rb +2 -2
- data/lib/components/environment.rb +1 -1
- data/lib/components/environment.yml +28 -28
- data/lib/components/flash.rb +1 -1
- data/lib/components/html.rb +1 -1
- data/lib/components/http.rb +1 -1
- data/lib/components/http.yml +1 -1
- data/lib/components/logger.rb +2 -2
- data/lib/components/mailer.rb +2 -2
- data/lib/components/remote.rb +1 -1
- data/lib/components/router.rb +3 -3
- data/lib/components/template.rb +2 -2
- data/lib/components/web.rb +3 -3
- data/lib/rad.rb +1 -1
- data/lib/rad/_support/active_support.rb +7 -7
- data/lib/rad/_support/active_support/locales/ru/actionview.yml +8 -8
- data/lib/rad/_support/active_support/locales/ru/activesupport.yml +4 -4
- data/lib/rad/_support/active_support/locales/ru/datetime.yml +5 -5
- data/lib/rad/_support/active_support/time.rb +2 -2
- data/lib/rad/_support/addressable.rb +6 -6
- data/lib/rad/_support/class_loader.rb +1 -1
- data/lib/rad/_support/extensions.rb +5 -5
- data/lib/rad/_support/filters.rb +13 -13
- data/lib/rad/_support/hacks_and_fixes.rb +5 -5
- data/lib/rad/_support/mime.rb +4 -4
- data/lib/rad/_support/module.rb +11 -11
- data/lib/rad/_support/require.rb +5 -5
- data/lib/rad/_support/rson.rb +4 -4
- data/lib/rad/_support/string.rb +9 -9
- data/lib/rad/cli/helper.rb +5 -5
- data/lib/rad/configurators/_require.rb +2 -2
- data/lib/rad/configurators/abstract.rb +5 -5
- data/lib/rad/configurators/web.rb +8 -8
- data/lib/rad/controller/_abstract.rb +15 -14
- data/lib/rad/controller/_abstract/miscellaneous.rb +5 -5
- data/lib/rad/controller/_abstract/render.rb +40 -40
- data/lib/rad/controller/_abstract/responder.rb +1 -1
- data/lib/rad/controller/_context.rb +1 -1
- data/lib/rad/controller/_http.rb +11 -11
- data/lib/rad/controller/_require.rb +6 -6
- data/lib/rad/controller/processors/controller_caller.rb +3 -3
- data/lib/rad/controller/processors/controller_error_handling.rb +14 -14
- data/lib/rad/controller/processors/controller_logger.rb +1 -1
- data/lib/rad/conveyors/_conveyor.rb +9 -9
- data/lib/rad/conveyors/_conveyors.rb +4 -4
- data/lib/rad/conveyors/_params.rb +5 -5
- data/lib/rad/conveyors/_processor.rb +2 -2
- data/lib/rad/conveyors/_workspace.rb +5 -5
- data/lib/rad/conveyors/processors/conveyor_logger.rb +3 -3
- data/lib/rad/environment/_config.rb +4 -4
- data/lib/rad/environment/_environment.rb +10 -10
- data/lib/rad/environment/_files_helper.rb +5 -5
- data/lib/rad/environment/_logger.rb +9 -9
- data/lib/rad/environment/_require.rb +4 -4
- data/lib/rad/gems.rb +14 -14
- data/lib/rad/html/_flash.rb +5 -5
- data/lib/rad/html/_helpers/basic_html_helper.rb +12 -12
- data/lib/rad/html/_helpers/form_helper.rb +19 -19
- data/lib/rad/html/_helpers/javascript_helper.rb +6 -6
- data/lib/rad/html/_helpers/model_helper.rb +17 -17
- data/lib/rad/html/_require.rb +1 -1
- data/lib/rad/html/processors/prepare_flash.rb +3 -3
- data/lib/rad/html/processors/scoped_params.rb +4 -4
- data/lib/rad/http/_http.rb +4 -4
- data/lib/rad/http/_http_adapter.rb +5 -5
- data/lib/rad/http/_request.rb +11 -11
- data/lib/rad/http/_require.rb +8 -8
- data/lib/rad/http/_response.rb +5 -5
- data/lib/rad/http/_support/rack/fixes.rb +3 -3
- data/lib/rad/http/_support/rack/rack_adapter.rb +5 -5
- data/lib/rad/http/processors/evaluate_format.rb +4 -4
- data/lib/rad/http/processors/http_logger.rb +3 -3
- data/lib/rad/http/processors/http_writer.rb +7 -7
- data/lib/rad/http/processors/prepare_params.rb +5 -5
- data/lib/rad/mailer/_letter.rb +1 -1
- data/lib/rad/mailer/_mailer.rb +1 -1
- data/lib/rad/mailer/_mailer_controller.rb +6 -6
- data/lib/rad/mailer/_require.rb +1 -1
- data/lib/rad/mailer/processors/letter_builder.rb +6 -6
- data/lib/rad/profiles/mailer.rb +2 -2
- data/lib/rad/profiles/web.rb +13 -13
- data/lib/rad/remote/processors/remote_caller.rb +10 -10
- data/lib/rad/remote/processors/remote_logger.rb +1 -1
- data/lib/rad/router/_abstract_router.rb +9 -9
- data/lib/rad/router/_alias_router.rb +34 -34
- data/lib/rad/router/_basic_router.rb +12 -12
- data/lib/rad/router/_configurator.rb +6 -6
- data/lib/rad/router/_core_routing_helper.rb +4 -4
- data/lib/rad/router/_object_router.rb +45 -45
- data/lib/rad/router/_require.rb +8 -8
- data/lib/rad/router/_restful_router.rb +25 -25
- data/lib/rad/router/_router.rb +78 -78
- data/lib/rad/router/_simple_router.rb +5 -5
- data/lib/rad/router/processors/router.rb +6 -6
- data/lib/rad/spec/controller.rb +9 -9
- data/lib/rad/spec/environment.rb +7 -7
- data/lib/rad/spec/http.rb +2 -2
- data/lib/rad/spec/http_controller.rb +22 -22
- data/lib/rad/spec/mailer.rb +4 -4
- data/lib/rad/spec/remote.rb +1 -1
- data/lib/rad/spec/router.rb +4 -4
- data/lib/rad/spec/template.rb +2 -2
- data/lib/rad/tasks.rb +2 -2
- data/lib/rad/template/_context.rb +15 -15
- data/lib/rad/template/_relative_path_resolver.rb +1 -1
- data/lib/rad/template/_support/tilt.rb +17 -17
- data/lib/rad/template/_support/tilt_fixes.rb +3 -3
- data/lib/rad/template/_template.rb +47 -47
- data/lib/rad/web/_ajax_helper.rb +4 -4
- data/lib/rad/web/_controller_miscellaneous_helper.rb +5 -5
- data/lib/rad/web/_ensure_no_www.rb +5 -5
- data/lib/rad/web/_protect_from_forgery.rb +18 -18
- data/lib/rad/web/_require.rb +7 -7
- data/lib/rad/web/_router/abstract_routing_helper.rb +4 -4
- data/lib/rad/web/_router/controller_routing_helper.rb +15 -15
- data/lib/rad/web/_router/view_routing_helper.rb +12 -12
- data/readme.md +5 -5
- data/spec/controller/abstract_spec.rb +29 -29
- data/spec/controller/context_spec.rb +32 -32
- data/spec/controller/error_handling_spec.rb +31 -31
- data/spec/controller/helper_spec.rb +13 -13
- data/spec/controller/http_spec.rb +32 -32
- data/spec/controller/render_spec.rb +59 -59
- data/spec/conveyors/conveyors_spec.rb +32 -32
- data/spec/environment/config_spec.rb +6 -6
- data/spec/environment/environment_spec.rb +7 -7
- data/spec/environment/minimal_app_spec.rb +4 -4
- data/spec/environment/standard_app_spec.rb +10 -10
- data/spec/html/basic_html_helper_spec.rb +6 -6
- data/spec/html/form_helper_spec.rb +5 -5
- data/spec/html/javascript_helper_spec.rb +4 -4
- data/spec/html/model_helper_spec.rb +12 -12
- data/spec/html/scoped_params_spec.rb +2 -2
- data/spec/html/spec_helper.rb +3 -3
- data/spec/http/http_spec.rb +9 -9
- data/spec/http/miscellaneous_spec.rb +2 -2
- data/spec/mailer/mail_controller_spec.rb +23 -23
- data/spec/remote/remote_spec.rb +26 -26
- data/spec/router/alias_router_spec.rb +22 -22
- data/spec/router/basic_router_spec.rb +8 -8
- data/spec/router/configurator_spec.rb +4 -4
- data/spec/router/integration_spec.rb +17 -17
- data/spec/router/object_router_spec.rb +47 -47
- data/spec/router/persistent_params_spec.rb +18 -18
- data/spec/router/restful_router_spec.rb +39 -39
- data/spec/router/router_spec.rb +37 -37
- data/spec/router/routing_helper_spec.rb +18 -18
- data/spec/support/filters_spec.rb +11 -13
- data/spec/template/template_spec.rb +43 -45
- data/spec/template/template_spec/views/layout/content_for/content.erb +3 -1
- data/spec/template/template_spec/views/layout/content_for/layout.erb +1 -1
- data/spec/template/tilt_spec.rb +24 -24
- data/spec/web/basic_spec.rb +25 -25
- data/spec/web/controller_routing_helper_spec.rb +26 -26
- data/spec/web/flash_spec.rb +31 -31
- data/spec/web/protect_from_forgery_spec.rb +44 -44
- data/spec/web/spec_helper_spec.rb +16 -16
- data/spec/web/view_routing_helper_spec.rb +31 -31
- metadata +46 -49
- data/lib/rad/_support/callbacks.rb +0 -166
- data/lib/rad/_support/ruby_ext_with_active_support.rb +0 -4
- data/spec/support/callbacks_spec.rb +0 -157
|
@@ -2,83 +2,83 @@ require 'spec_helper'
|
|
|
2
2
|
|
|
3
3
|
describe "UrlHelper" do
|
|
4
4
|
isolate :conveyors, :router, before: :all
|
|
5
|
-
|
|
5
|
+
|
|
6
6
|
before :all do
|
|
7
7
|
rad.web
|
|
8
|
-
|
|
8
|
+
|
|
9
9
|
class ControllerStub
|
|
10
10
|
inherit Rad::ControllerRoutingHelper, Rad::ControllerMiscellaneousHelper
|
|
11
|
-
|
|
11
|
+
|
|
12
12
|
def url_for *args
|
|
13
13
|
args.first
|
|
14
|
-
end
|
|
14
|
+
end
|
|
15
15
|
end
|
|
16
16
|
end
|
|
17
|
-
|
|
17
|
+
|
|
18
18
|
after :all do
|
|
19
19
|
remove_constants :ControllerStub
|
|
20
20
|
end
|
|
21
|
-
|
|
22
|
-
before do
|
|
21
|
+
|
|
22
|
+
before do
|
|
23
23
|
@c = ControllerStub.new
|
|
24
24
|
end
|
|
25
|
-
|
|
25
|
+
|
|
26
26
|
def stub_workspace
|
|
27
27
|
@response = Rad::Http::Response.new
|
|
28
28
|
@params = Rad::Conveyors::Params.new
|
|
29
|
-
|
|
30
|
-
@workspace = Object.new
|
|
29
|
+
|
|
30
|
+
@workspace = Object.new
|
|
31
31
|
@workspace.stub(:params).and_return(@params)
|
|
32
32
|
@workspace.stub(:response).and_return(@response)
|
|
33
|
-
|
|
33
|
+
|
|
34
34
|
@c.stub(:workspace).and_return(@workspace)
|
|
35
35
|
end
|
|
36
|
-
|
|
36
|
+
|
|
37
37
|
def within_request &block
|
|
38
38
|
@response.body = catch(:halt){block.call}
|
|
39
39
|
end
|
|
40
|
-
|
|
40
|
+
|
|
41
41
|
describe "redirect_to" do
|
|
42
42
|
before do
|
|
43
43
|
stub_workspace
|
|
44
44
|
end
|
|
45
|
-
|
|
46
|
-
it "html format" do
|
|
45
|
+
|
|
46
|
+
it "html format" do
|
|
47
47
|
@params.format = 'html'
|
|
48
|
-
|
|
48
|
+
|
|
49
49
|
within_request{@c.redirect_to('/some_book')}
|
|
50
50
|
@response.status.should == 302
|
|
51
51
|
@response.headers['Location'].should == "/some_book"
|
|
52
52
|
@response.body.should =~ /You are being/
|
|
53
53
|
end
|
|
54
|
-
|
|
55
|
-
it "full url, special case (from error)" do
|
|
54
|
+
|
|
55
|
+
it "full url, special case (from error)" do
|
|
56
56
|
@params.format = 'html'
|
|
57
|
-
|
|
57
|
+
|
|
58
58
|
within_request{@c.redirect_to('http://localhost/some_book')}
|
|
59
59
|
@response.status.should == 302
|
|
60
60
|
@response.headers['Location'].should == "http://localhost/some_book"
|
|
61
61
|
@response.body.should =~ /You are being/
|
|
62
62
|
end
|
|
63
|
-
|
|
63
|
+
|
|
64
64
|
it "js format" do
|
|
65
65
|
@params.format = 'js'
|
|
66
|
-
|
|
66
|
+
|
|
67
67
|
within_request{@c.redirect_to('/some_book')}
|
|
68
68
|
@response.status.should == 200
|
|
69
69
|
@response.headers['Location'].should be_blank
|
|
70
70
|
@response.body_as_string.should == "window.location = '/some_book';"
|
|
71
71
|
end
|
|
72
|
-
end
|
|
73
|
-
|
|
72
|
+
end
|
|
73
|
+
|
|
74
74
|
describe "reload_page" do
|
|
75
75
|
before do
|
|
76
76
|
stub_workspace
|
|
77
77
|
end
|
|
78
|
-
|
|
79
|
-
it "basic" do
|
|
78
|
+
|
|
79
|
+
it "basic" do
|
|
80
80
|
@params.format = 'js'
|
|
81
|
-
|
|
81
|
+
|
|
82
82
|
within_request{@c.reload_page}
|
|
83
83
|
@response.status.should == 200
|
|
84
84
|
@response.body_as_string.should =~ /reload/
|
data/spec/web/flash_spec.rb
CHANGED
|
@@ -3,13 +3,13 @@ require 'html/spec_helper'
|
|
|
3
3
|
|
|
4
4
|
describe "Flash" do
|
|
5
5
|
with_prepare_params
|
|
6
|
-
|
|
6
|
+
|
|
7
7
|
isolate :conveyors, :router, before: :all
|
|
8
|
-
|
|
8
|
+
|
|
9
9
|
before :all do
|
|
10
10
|
rad.mode = :development, true
|
|
11
11
|
rad.web
|
|
12
|
-
|
|
12
|
+
|
|
13
13
|
class MockFlashContext < Rad::MockTemplateContext
|
|
14
14
|
include Rad::Html::FlashHelper, Rad::ControllerRoutingHelper
|
|
15
15
|
|
|
@@ -23,7 +23,7 @@ describe "Flash" do
|
|
|
23
23
|
block = workspace.check_flash.request
|
|
24
24
|
catch :halt do
|
|
25
25
|
block.call context if block
|
|
26
|
-
end
|
|
26
|
+
end
|
|
27
27
|
workspace.request_done = true
|
|
28
28
|
|
|
29
29
|
next_processor.call
|
|
@@ -40,11 +40,11 @@ describe "Flash" do
|
|
|
40
40
|
|
|
41
41
|
block = workspace.check_flash.after_request
|
|
42
42
|
block.call workspace if block
|
|
43
|
-
workspace.after_request_done = true
|
|
43
|
+
workspace.after_request_done = true
|
|
44
44
|
end
|
|
45
45
|
end
|
|
46
|
-
|
|
47
|
-
|
|
46
|
+
|
|
47
|
+
|
|
48
48
|
rad.conveyors.web do |web|
|
|
49
49
|
web.use Rad::Http::Processors::PrepareParams
|
|
50
50
|
web.use FlashTestHelper
|
|
@@ -52,19 +52,19 @@ describe "Flash" do
|
|
|
52
52
|
web.use FlashTestRenderCaller
|
|
53
53
|
end
|
|
54
54
|
end
|
|
55
|
-
|
|
55
|
+
|
|
56
56
|
after :all do
|
|
57
57
|
rad.mode = :test, true
|
|
58
|
-
|
|
58
|
+
|
|
59
59
|
remove_constants %w(
|
|
60
60
|
MockFlashContext
|
|
61
61
|
FlashTestRenderCaller
|
|
62
62
|
FlashTestHelper
|
|
63
63
|
)
|
|
64
64
|
end
|
|
65
|
-
|
|
66
|
-
def check_flash opt
|
|
67
|
-
workspace = nil
|
|
65
|
+
|
|
66
|
+
def check_flash opt
|
|
67
|
+
workspace = nil
|
|
68
68
|
result = rad.http.call(Rad::Http::Request.stub_environment, check_flash: opt.to_openobject) do |c|
|
|
69
69
|
c.call
|
|
70
70
|
workspace = rad.workspace
|
|
@@ -72,14 +72,14 @@ describe "Flash" do
|
|
|
72
72
|
|
|
73
73
|
workspace.before_request_done.should be_true
|
|
74
74
|
workspace.request_done.should be_true
|
|
75
|
-
workspace.after_request_done.should be_true
|
|
75
|
+
workspace.after_request_done.should be_true
|
|
76
76
|
workspace
|
|
77
77
|
end
|
|
78
|
-
|
|
78
|
+
|
|
79
79
|
it "flash should be extracted from session if there's any" do
|
|
80
80
|
check_flash(
|
|
81
|
-
before_request: lambda{|workspace|
|
|
82
|
-
workspace.params.format = 'html'
|
|
81
|
+
before_request: lambda{|workspace|
|
|
82
|
+
workspace.params.format = 'html'
|
|
83
83
|
workspace.request.session['flash'] = {info: 'Ok'}.to_json
|
|
84
84
|
},
|
|
85
85
|
request: lambda{|context|
|
|
@@ -89,7 +89,7 @@ describe "Flash" do
|
|
|
89
89
|
workspace.request.session['flash'].should be_nil
|
|
90
90
|
}
|
|
91
91
|
)
|
|
92
|
-
|
|
92
|
+
|
|
93
93
|
check_flash(
|
|
94
94
|
before_request: lambda{|workspace|
|
|
95
95
|
workspace.params.format = 'html'
|
|
@@ -99,7 +99,7 @@ describe "Flash" do
|
|
|
99
99
|
}
|
|
100
100
|
)
|
|
101
101
|
end
|
|
102
|
-
|
|
102
|
+
|
|
103
103
|
it "flash should be seen in the same request" do
|
|
104
104
|
check_flash(
|
|
105
105
|
before_request: lambda{|workspace|
|
|
@@ -114,7 +114,7 @@ describe "Flash" do
|
|
|
114
114
|
}
|
|
115
115
|
)
|
|
116
116
|
end
|
|
117
|
-
|
|
117
|
+
|
|
118
118
|
it "flash with :redirect should be saved for next request in session" do
|
|
119
119
|
check_flash(
|
|
120
120
|
before_request: lambda{|workspace|
|
|
@@ -131,12 +131,12 @@ describe "Flash" do
|
|
|
131
131
|
}
|
|
132
132
|
)
|
|
133
133
|
end
|
|
134
|
-
|
|
134
|
+
|
|
135
135
|
it "AJAX ('js' format) flash should be displayed in the same request" do
|
|
136
136
|
check_flash(
|
|
137
137
|
before_request: lambda{|workspace|
|
|
138
138
|
workspace.params.format = 'js'
|
|
139
|
-
},
|
|
139
|
+
},
|
|
140
140
|
request: lambda{|context|
|
|
141
141
|
context.flash.info = "Ok"
|
|
142
142
|
context.flash.info.should == "Ok"
|
|
@@ -146,12 +146,12 @@ describe "Flash" do
|
|
|
146
146
|
}
|
|
147
147
|
)
|
|
148
148
|
end
|
|
149
|
-
|
|
149
|
+
|
|
150
150
|
it "flash with AJAX redirect ('js' format) should be saved for next request in session" do
|
|
151
151
|
check_flash(
|
|
152
152
|
before_request: lambda{|workspace|
|
|
153
153
|
workspace.params.format = 'js'
|
|
154
|
-
},
|
|
154
|
+
},
|
|
155
155
|
request: lambda{|context|
|
|
156
156
|
context.flash.info = "Ok"
|
|
157
157
|
context.flash.info.should == "Ok"
|
|
@@ -163,7 +163,7 @@ describe "Flash" do
|
|
|
163
163
|
}
|
|
164
164
|
)
|
|
165
165
|
end
|
|
166
|
-
|
|
166
|
+
|
|
167
167
|
it "multiple messages with non-AJAX request" do
|
|
168
168
|
check_flash(
|
|
169
169
|
before_request: lambda{|workspace|
|
|
@@ -172,14 +172,14 @@ describe "Flash" do
|
|
|
172
172
|
request: lambda{|context|
|
|
173
173
|
context.flash.error = "Error"
|
|
174
174
|
context.flash.error.should == "Error"
|
|
175
|
-
|
|
175
|
+
|
|
176
176
|
context.flash.info.should == 'Ok'
|
|
177
177
|
},
|
|
178
178
|
after_request: lambda{|workspace|
|
|
179
179
|
workspace.request.session['flash'].should be_nil
|
|
180
180
|
}
|
|
181
181
|
)
|
|
182
|
-
|
|
182
|
+
|
|
183
183
|
check_flash(
|
|
184
184
|
before_request: lambda{|workspace|
|
|
185
185
|
workspace.params.format = 'js'
|
|
@@ -190,7 +190,7 @@ describe "Flash" do
|
|
|
190
190
|
context.flash.error.should == "Error"
|
|
191
191
|
context.redirect_to '/'
|
|
192
192
|
context.flash.error.should be_nil
|
|
193
|
-
|
|
193
|
+
|
|
194
194
|
context.flash.info.should == 'Ok'
|
|
195
195
|
},
|
|
196
196
|
after_request: lambda{|workspace|
|
|
@@ -198,17 +198,17 @@ describe "Flash" do
|
|
|
198
198
|
}
|
|
199
199
|
)
|
|
200
200
|
end
|
|
201
|
-
|
|
201
|
+
|
|
202
202
|
it "multiple messages with AJAX request" do
|
|
203
203
|
check_flash(
|
|
204
204
|
before_request: lambda{|workspace|
|
|
205
205
|
workspace.params.format = 'js'
|
|
206
|
-
workspace.request.session['flash'] = {info: 'Ok'}.to_json
|
|
206
|
+
workspace.request.session['flash'] = {info: 'Ok'}.to_json
|
|
207
207
|
},
|
|
208
208
|
request: lambda{|context|
|
|
209
209
|
context.flash.error = "Error"
|
|
210
210
|
context.flash.error.should == "Error"
|
|
211
|
-
|
|
211
|
+
|
|
212
212
|
context.flash.info.should == 'Ok'
|
|
213
213
|
},
|
|
214
214
|
after_request: lambda{|workspace|
|
|
@@ -216,5 +216,5 @@ describe "Flash" do
|
|
|
216
216
|
}
|
|
217
217
|
)
|
|
218
218
|
end
|
|
219
|
-
|
|
219
|
+
|
|
220
220
|
end
|
|
@@ -1,13 +1,13 @@
|
|
|
1
1
|
require "spec_helper"
|
|
2
2
|
|
|
3
|
-
describe "Forgery protection" do
|
|
3
|
+
describe "Forgery protection" do
|
|
4
4
|
with_prepare_params
|
|
5
|
-
|
|
5
|
+
|
|
6
6
|
isolate :conveyors, :router, before: :all
|
|
7
7
|
|
|
8
8
|
before :all do
|
|
9
9
|
rad.web
|
|
10
|
-
|
|
10
|
+
|
|
11
11
|
class ForgerySpecHelper < Rad::Conveyors::Processor
|
|
12
12
|
def call
|
|
13
13
|
block = workspace.check_forgery.before_request
|
|
@@ -18,34 +18,34 @@ describe "Forgery protection" do
|
|
|
18
18
|
|
|
19
19
|
block = workspace.check_forgery.after_request
|
|
20
20
|
block.call workspace if block
|
|
21
|
-
workspace.after_request_done = true
|
|
21
|
+
workspace.after_request_done = true
|
|
22
22
|
end
|
|
23
|
-
end
|
|
23
|
+
end
|
|
24
24
|
|
|
25
25
|
class ::TheController
|
|
26
26
|
inherit Rad::Controller::Http
|
|
27
|
-
|
|
27
|
+
|
|
28
28
|
protect_from_forgery_without_test only: :protected_method
|
|
29
|
-
|
|
29
|
+
|
|
30
30
|
def protected_method
|
|
31
31
|
render inline: 'protected result'
|
|
32
32
|
end
|
|
33
|
-
|
|
33
|
+
|
|
34
34
|
def method_without_protection
|
|
35
35
|
render inline: 'result'
|
|
36
36
|
end
|
|
37
|
-
|
|
37
|
+
|
|
38
38
|
def dumb_method; end
|
|
39
39
|
end
|
|
40
40
|
end
|
|
41
|
-
|
|
42
|
-
after :all do
|
|
41
|
+
|
|
42
|
+
after :all do
|
|
43
43
|
remove_constants %w(TheController ForgerySpecHelper)
|
|
44
44
|
end
|
|
45
|
-
|
|
45
|
+
|
|
46
46
|
before do
|
|
47
47
|
rad.http.stub(:session).and_return({'key' => 'session_id'})
|
|
48
|
-
|
|
48
|
+
|
|
49
49
|
rad.delete :conveyors
|
|
50
50
|
rad.conveyors.web do |web|
|
|
51
51
|
web.use Rad::Http::Processors::PrepareParams
|
|
@@ -55,24 +55,24 @@ describe "Forgery protection" do
|
|
|
55
55
|
web.use Rad::Controller::Processors::ControllerCaller
|
|
56
56
|
end
|
|
57
57
|
end
|
|
58
|
-
|
|
59
|
-
def check_forgery opt
|
|
60
|
-
workspace = nil
|
|
61
|
-
|
|
58
|
+
|
|
59
|
+
def check_forgery opt
|
|
60
|
+
workspace = nil
|
|
61
|
+
|
|
62
62
|
result = rad.http.call(Rad::Http::Request.stub_environment, check_forgery: opt.to_openobject) do |c|
|
|
63
63
|
c.call
|
|
64
64
|
workspace = rad[:workspace]
|
|
65
65
|
end
|
|
66
|
-
|
|
66
|
+
|
|
67
67
|
workspace.before_request_done.should be_true
|
|
68
68
|
workspace.after_request_done.should be_true
|
|
69
69
|
workspace
|
|
70
70
|
end
|
|
71
|
-
|
|
71
|
+
|
|
72
72
|
it "should set :authenticity_token only for :get and 'html' request" do
|
|
73
73
|
check_forgery(
|
|
74
74
|
before_request: lambda{|workspace|
|
|
75
|
-
workspace.env['REQUEST_METHOD'] = 'GET'
|
|
75
|
+
workspace.env['REQUEST_METHOD'] = 'GET'
|
|
76
76
|
workspace.env['CONTENT_TYPE'] = 'text/html'
|
|
77
77
|
workspace.class = TheController
|
|
78
78
|
workspace.method_name = :dumb_method
|
|
@@ -81,11 +81,11 @@ describe "Forgery protection" do
|
|
|
81
81
|
workspace.request.session['authenticity_token'].should_not be_blank
|
|
82
82
|
}
|
|
83
83
|
)
|
|
84
|
-
|
|
84
|
+
|
|
85
85
|
# post
|
|
86
86
|
check_forgery(
|
|
87
|
-
before_request: lambda{|workspace|
|
|
88
|
-
workspace.env['REQUEST_METHOD'] = 'POST'
|
|
87
|
+
before_request: lambda{|workspace|
|
|
88
|
+
workspace.env['REQUEST_METHOD'] = 'POST'
|
|
89
89
|
workspace.env['CONTENT_TYPE'] = 'text/html'
|
|
90
90
|
workspace.class = TheController
|
|
91
91
|
workspace.method_name = :dumb_method
|
|
@@ -95,88 +95,88 @@ describe "Forgery protection" do
|
|
|
95
95
|
}
|
|
96
96
|
)
|
|
97
97
|
end
|
|
98
|
-
|
|
98
|
+
|
|
99
99
|
it "should check any non :get request with browser's formats for :authenticity_token" do
|
|
100
100
|
lambda{
|
|
101
101
|
check_forgery(
|
|
102
|
-
before_request: lambda{|workspace|
|
|
103
|
-
workspace.env['REQUEST_METHOD'] = 'POST'
|
|
102
|
+
before_request: lambda{|workspace|
|
|
103
|
+
workspace.env['REQUEST_METHOD'] = 'POST'
|
|
104
104
|
workspace.env['CONTENT_TYPE'] = 'text/html'
|
|
105
105
|
workspace.class = TheController
|
|
106
|
-
workspace.method_name =
|
|
106
|
+
workspace.method_name = :protected_method
|
|
107
107
|
}
|
|
108
108
|
)
|
|
109
109
|
}.should raise_error(/invalid authenticity token/)
|
|
110
110
|
end
|
|
111
|
-
|
|
111
|
+
|
|
112
112
|
it "should pass request with correct authenticity_token" do
|
|
113
113
|
check_forgery(
|
|
114
114
|
before_request: lambda{|workspace|
|
|
115
|
-
workspace.env['REQUEST_METHOD'] = 'POST'
|
|
115
|
+
workspace.env['REQUEST_METHOD'] = 'POST'
|
|
116
116
|
workspace.env['CONTENT_TYPE'] = 'text/html'
|
|
117
117
|
workspace.request.session['authenticity_token'] = 'secure token'
|
|
118
118
|
workspace.params['authenticity_token'] = 'secure token'
|
|
119
119
|
workspace.class = TheController
|
|
120
|
-
workspace.method_name =
|
|
120
|
+
workspace.method_name = :protected_method
|
|
121
121
|
},
|
|
122
122
|
after_request: lambda{|workspace|
|
|
123
123
|
workspace.content.should == "protected result"
|
|
124
124
|
}
|
|
125
125
|
)
|
|
126
126
|
end
|
|
127
|
-
|
|
127
|
+
|
|
128
128
|
it "should not check request with non-browser content type" do
|
|
129
129
|
check_forgery(
|
|
130
130
|
before_request: lambda{|workspace|
|
|
131
|
-
workspace.env['REQUEST_METHOD'] = 'POST'
|
|
131
|
+
workspace.env['REQUEST_METHOD'] = 'POST'
|
|
132
132
|
workspace.env['CONTENT_TYPE'] = 'non-browser-format'
|
|
133
133
|
workspace.class = TheController
|
|
134
|
-
workspace.method_name =
|
|
134
|
+
workspace.method_name = :protected_method
|
|
135
135
|
},
|
|
136
136
|
after_request: lambda{|workspace|
|
|
137
137
|
workspace.content.should == "protected result"
|
|
138
138
|
}
|
|
139
139
|
)
|
|
140
140
|
end
|
|
141
|
-
|
|
141
|
+
|
|
142
142
|
# it "should not check request with non-browser format" do
|
|
143
143
|
# check_forgery(
|
|
144
144
|
# before_request: lambda{|workspace|
|
|
145
|
-
# workspace.env['REQUEST_METHOD'] = 'POST'
|
|
145
|
+
# workspace.env['REQUEST_METHOD'] = 'POST'
|
|
146
146
|
# workspace.env['CONTENT_TYPE'] = 'text/html'
|
|
147
147
|
# workspace.params['format'] = 'json'
|
|
148
148
|
# workspace.class = TheController
|
|
149
|
-
# workspace.method_name =
|
|
149
|
+
# workspace.method_name = :protected_method
|
|
150
150
|
# },
|
|
151
151
|
# after_request: lambda{|workspace|
|
|
152
152
|
# workspace.content.should == "protected result"
|
|
153
153
|
# }
|
|
154
154
|
# )
|
|
155
155
|
# end
|
|
156
|
-
|
|
156
|
+
|
|
157
157
|
it "should not protect non protected methods" do
|
|
158
158
|
check_forgery(
|
|
159
|
-
before_request: lambda{|workspace|
|
|
160
|
-
workspace.env['REQUEST_METHOD'] = 'POST'
|
|
159
|
+
before_request: lambda{|workspace|
|
|
160
|
+
workspace.env['REQUEST_METHOD'] = 'POST'
|
|
161
161
|
workspace.env['CONTENT_TYPE'] = 'text/html'
|
|
162
162
|
workspace.class = TheController
|
|
163
|
-
workspace.method_name =
|
|
163
|
+
workspace.method_name = :method_without_protection
|
|
164
164
|
},
|
|
165
165
|
after_request: lambda{|workspace|
|
|
166
166
|
workspace.content.should == "result"
|
|
167
167
|
}
|
|
168
|
-
)
|
|
168
|
+
)
|
|
169
169
|
end
|
|
170
|
-
|
|
170
|
+
|
|
171
171
|
# it "OUTDATED should use :session_authenticity_token from params (for flash support)" do
|
|
172
172
|
# check_forgery(
|
|
173
173
|
# before_request: lambda{|workspace|
|
|
174
|
-
# workspace.env['REQUEST_METHOD'] = 'POST'
|
|
174
|
+
# workspace.env['REQUEST_METHOD'] = 'POST'
|
|
175
175
|
# workspace.params.format = 'text/html'
|
|
176
176
|
# # workspace.params['session_authenticity_token'] = 'secure token'
|
|
177
177
|
# workspace.params['authenticity_token'] = 'secure token'
|
|
178
178
|
# workspace.class = TheController
|
|
179
|
-
# workspace.method_name =
|
|
179
|
+
# workspace.method_name = :protected_method
|
|
180
180
|
# },
|
|
181
181
|
# after_request: lambda{|workspace|
|
|
182
182
|
# workspace.content.should == "protected result"
|