rails_api_auth 0.0.2
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +7 -0
- data/LICENSE +22 -0
- data/README.md +3 -0
- data/Rakefile +20 -0
- data/app/controllers/oauth2_controller.rb +54 -0
- data/app/controllers/rails_api_auth/application_controller.rb +7 -0
- data/app/lib/login_not_found.rb +9 -0
- data/app/models/login.rb +47 -0
- data/app/services/facebook_authenticator.rb +64 -0
- data/config/initializers/facebook.rb +6 -0
- data/config/routes.rb +4 -0
- data/db/migrate/20150709221755_create_logins.rb +16 -0
- data/lib/rails_api_auth.rb +5 -0
- data/lib/rails_api_auth/authentication.rb +32 -0
- data/lib/rails_api_auth/engine.rb +19 -0
- data/lib/rails_api_auth/version.rb +5 -0
- data/lib/tasks/rails_api_auth_tasks.rake +4 -0
- data/spec/dummy/README.rdoc +28 -0
- data/spec/dummy/Rakefile +6 -0
- data/spec/dummy/app/assets/javascripts/application.js +13 -0
- data/spec/dummy/app/assets/stylesheets/application.css +15 -0
- data/spec/dummy/app/controllers/application_controller.rb +7 -0
- data/spec/dummy/app/controllers/authenticated_controller.rb +13 -0
- data/spec/dummy/bin/bundle +3 -0
- data/spec/dummy/bin/rails +4 -0
- data/spec/dummy/bin/rake +4 -0
- data/spec/dummy/bin/setup +29 -0
- data/spec/dummy/config.ru +4 -0
- data/spec/dummy/config/application.rb +18 -0
- data/spec/dummy/config/boot.rb +5 -0
- data/spec/dummy/config/database.yml +25 -0
- data/spec/dummy/config/environment.rb +5 -0
- data/spec/dummy/config/environments/development.rb +38 -0
- data/spec/dummy/config/environments/production.rb +79 -0
- data/spec/dummy/config/environments/test.rb +37 -0
- data/spec/dummy/config/initializers/assets.rb +11 -0
- data/spec/dummy/config/initializers/backtrace_silencers.rb +7 -0
- data/spec/dummy/config/initializers/cookies_serializer.rb +3 -0
- data/spec/dummy/config/initializers/filter_parameter_logging.rb +4 -0
- data/spec/dummy/config/initializers/inflections.rb +16 -0
- data/spec/dummy/config/initializers/mime_types.rb +4 -0
- data/spec/dummy/config/initializers/session_store.rb +3 -0
- data/spec/dummy/config/initializers/wrap_parameters.rb +14 -0
- data/spec/dummy/config/locales/en.yml +23 -0
- data/spec/dummy/config/routes.rb +3 -0
- data/spec/dummy/config/secrets.yml +22 -0
- data/spec/dummy/db/development.sqlite3 +0 -0
- data/spec/dummy/db/migrate/20150709221900_create_users.rb +11 -0
- data/spec/dummy/db/production.sqlite3 +0 -0
- data/spec/dummy/db/schema.rb +34 -0
- data/spec/dummy/db/test.sqlite3 +0 -0
- data/spec/dummy/log/development.log +16 -0
- data/spec/dummy/log/test.log +8350 -0
- data/spec/dummy/public/404.html +67 -0
- data/spec/dummy/public/422.html +67 -0
- data/spec/dummy/public/500.html +66 -0
- data/spec/dummy/public/favicon.ico +0 -0
- data/spec/factories/logins.rb +11 -0
- data/spec/models/login_spec.rb +69 -0
- data/spec/requests/authenticated_spec.rb +47 -0
- data/spec/requests/oauth2_spec.rb +187 -0
- data/spec/services/facebook_authenticator_spec.rb +54 -0
- data/spec/spec_helper.rb +19 -0
- data/spec/support/factory_girl.rb +3 -0
- metadata +233 -0
|
@@ -0,0 +1,67 @@
|
|
|
1
|
+
<!DOCTYPE html>
|
|
2
|
+
<html>
|
|
3
|
+
<head>
|
|
4
|
+
<title>The page you were looking for doesn't exist (404)</title>
|
|
5
|
+
<meta name="viewport" content="width=device-width,initial-scale=1">
|
|
6
|
+
<style>
|
|
7
|
+
body {
|
|
8
|
+
background-color: #EFEFEF;
|
|
9
|
+
color: #2E2F30;
|
|
10
|
+
text-align: center;
|
|
11
|
+
font-family: arial, sans-serif;
|
|
12
|
+
margin: 0;
|
|
13
|
+
}
|
|
14
|
+
|
|
15
|
+
div.dialog {
|
|
16
|
+
width: 95%;
|
|
17
|
+
max-width: 33em;
|
|
18
|
+
margin: 4em auto 0;
|
|
19
|
+
}
|
|
20
|
+
|
|
21
|
+
div.dialog > div {
|
|
22
|
+
border: 1px solid #CCC;
|
|
23
|
+
border-right-color: #999;
|
|
24
|
+
border-left-color: #999;
|
|
25
|
+
border-bottom-color: #BBB;
|
|
26
|
+
border-top: #B00100 solid 4px;
|
|
27
|
+
border-top-left-radius: 9px;
|
|
28
|
+
border-top-right-radius: 9px;
|
|
29
|
+
background-color: white;
|
|
30
|
+
padding: 7px 12% 0;
|
|
31
|
+
box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
|
|
32
|
+
}
|
|
33
|
+
|
|
34
|
+
h1 {
|
|
35
|
+
font-size: 100%;
|
|
36
|
+
color: #730E15;
|
|
37
|
+
line-height: 1.5em;
|
|
38
|
+
}
|
|
39
|
+
|
|
40
|
+
div.dialog > p {
|
|
41
|
+
margin: 0 0 1em;
|
|
42
|
+
padding: 1em;
|
|
43
|
+
background-color: #F7F7F7;
|
|
44
|
+
border: 1px solid #CCC;
|
|
45
|
+
border-right-color: #999;
|
|
46
|
+
border-left-color: #999;
|
|
47
|
+
border-bottom-color: #999;
|
|
48
|
+
border-bottom-left-radius: 4px;
|
|
49
|
+
border-bottom-right-radius: 4px;
|
|
50
|
+
border-top-color: #DADADA;
|
|
51
|
+
color: #666;
|
|
52
|
+
box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
|
|
53
|
+
}
|
|
54
|
+
</style>
|
|
55
|
+
</head>
|
|
56
|
+
|
|
57
|
+
<body>
|
|
58
|
+
<!-- This file lives in public/404.html -->
|
|
59
|
+
<div class="dialog">
|
|
60
|
+
<div>
|
|
61
|
+
<h1>The page you were looking for doesn't exist.</h1>
|
|
62
|
+
<p>You may have mistyped the address or the page may have moved.</p>
|
|
63
|
+
</div>
|
|
64
|
+
<p>If you are the application owner check the logs for more information.</p>
|
|
65
|
+
</div>
|
|
66
|
+
</body>
|
|
67
|
+
</html>
|
|
@@ -0,0 +1,67 @@
|
|
|
1
|
+
<!DOCTYPE html>
|
|
2
|
+
<html>
|
|
3
|
+
<head>
|
|
4
|
+
<title>The change you wanted was rejected (422)</title>
|
|
5
|
+
<meta name="viewport" content="width=device-width,initial-scale=1">
|
|
6
|
+
<style>
|
|
7
|
+
body {
|
|
8
|
+
background-color: #EFEFEF;
|
|
9
|
+
color: #2E2F30;
|
|
10
|
+
text-align: center;
|
|
11
|
+
font-family: arial, sans-serif;
|
|
12
|
+
margin: 0;
|
|
13
|
+
}
|
|
14
|
+
|
|
15
|
+
div.dialog {
|
|
16
|
+
width: 95%;
|
|
17
|
+
max-width: 33em;
|
|
18
|
+
margin: 4em auto 0;
|
|
19
|
+
}
|
|
20
|
+
|
|
21
|
+
div.dialog > div {
|
|
22
|
+
border: 1px solid #CCC;
|
|
23
|
+
border-right-color: #999;
|
|
24
|
+
border-left-color: #999;
|
|
25
|
+
border-bottom-color: #BBB;
|
|
26
|
+
border-top: #B00100 solid 4px;
|
|
27
|
+
border-top-left-radius: 9px;
|
|
28
|
+
border-top-right-radius: 9px;
|
|
29
|
+
background-color: white;
|
|
30
|
+
padding: 7px 12% 0;
|
|
31
|
+
box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
|
|
32
|
+
}
|
|
33
|
+
|
|
34
|
+
h1 {
|
|
35
|
+
font-size: 100%;
|
|
36
|
+
color: #730E15;
|
|
37
|
+
line-height: 1.5em;
|
|
38
|
+
}
|
|
39
|
+
|
|
40
|
+
div.dialog > p {
|
|
41
|
+
margin: 0 0 1em;
|
|
42
|
+
padding: 1em;
|
|
43
|
+
background-color: #F7F7F7;
|
|
44
|
+
border: 1px solid #CCC;
|
|
45
|
+
border-right-color: #999;
|
|
46
|
+
border-left-color: #999;
|
|
47
|
+
border-bottom-color: #999;
|
|
48
|
+
border-bottom-left-radius: 4px;
|
|
49
|
+
border-bottom-right-radius: 4px;
|
|
50
|
+
border-top-color: #DADADA;
|
|
51
|
+
color: #666;
|
|
52
|
+
box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
|
|
53
|
+
}
|
|
54
|
+
</style>
|
|
55
|
+
</head>
|
|
56
|
+
|
|
57
|
+
<body>
|
|
58
|
+
<!-- This file lives in public/422.html -->
|
|
59
|
+
<div class="dialog">
|
|
60
|
+
<div>
|
|
61
|
+
<h1>The change you wanted was rejected.</h1>
|
|
62
|
+
<p>Maybe you tried to change something you didn't have access to.</p>
|
|
63
|
+
</div>
|
|
64
|
+
<p>If you are the application owner check the logs for more information.</p>
|
|
65
|
+
</div>
|
|
66
|
+
</body>
|
|
67
|
+
</html>
|
|
@@ -0,0 +1,66 @@
|
|
|
1
|
+
<!DOCTYPE html>
|
|
2
|
+
<html>
|
|
3
|
+
<head>
|
|
4
|
+
<title>We're sorry, but something went wrong (500)</title>
|
|
5
|
+
<meta name="viewport" content="width=device-width,initial-scale=1">
|
|
6
|
+
<style>
|
|
7
|
+
body {
|
|
8
|
+
background-color: #EFEFEF;
|
|
9
|
+
color: #2E2F30;
|
|
10
|
+
text-align: center;
|
|
11
|
+
font-family: arial, sans-serif;
|
|
12
|
+
margin: 0;
|
|
13
|
+
}
|
|
14
|
+
|
|
15
|
+
div.dialog {
|
|
16
|
+
width: 95%;
|
|
17
|
+
max-width: 33em;
|
|
18
|
+
margin: 4em auto 0;
|
|
19
|
+
}
|
|
20
|
+
|
|
21
|
+
div.dialog > div {
|
|
22
|
+
border: 1px solid #CCC;
|
|
23
|
+
border-right-color: #999;
|
|
24
|
+
border-left-color: #999;
|
|
25
|
+
border-bottom-color: #BBB;
|
|
26
|
+
border-top: #B00100 solid 4px;
|
|
27
|
+
border-top-left-radius: 9px;
|
|
28
|
+
border-top-right-radius: 9px;
|
|
29
|
+
background-color: white;
|
|
30
|
+
padding: 7px 12% 0;
|
|
31
|
+
box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
|
|
32
|
+
}
|
|
33
|
+
|
|
34
|
+
h1 {
|
|
35
|
+
font-size: 100%;
|
|
36
|
+
color: #730E15;
|
|
37
|
+
line-height: 1.5em;
|
|
38
|
+
}
|
|
39
|
+
|
|
40
|
+
div.dialog > p {
|
|
41
|
+
margin: 0 0 1em;
|
|
42
|
+
padding: 1em;
|
|
43
|
+
background-color: #F7F7F7;
|
|
44
|
+
border: 1px solid #CCC;
|
|
45
|
+
border-right-color: #999;
|
|
46
|
+
border-left-color: #999;
|
|
47
|
+
border-bottom-color: #999;
|
|
48
|
+
border-bottom-left-radius: 4px;
|
|
49
|
+
border-bottom-right-radius: 4px;
|
|
50
|
+
border-top-color: #DADADA;
|
|
51
|
+
color: #666;
|
|
52
|
+
box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
|
|
53
|
+
}
|
|
54
|
+
</style>
|
|
55
|
+
</head>
|
|
56
|
+
|
|
57
|
+
<body>
|
|
58
|
+
<!-- This file lives in public/500.html -->
|
|
59
|
+
<div class="dialog">
|
|
60
|
+
<div>
|
|
61
|
+
<h1>We're sorry, but something went wrong.</h1>
|
|
62
|
+
</div>
|
|
63
|
+
<p>If you are the application owner check the logs for more information.</p>
|
|
64
|
+
</div>
|
|
65
|
+
</body>
|
|
66
|
+
</html>
|
|
File without changes
|
|
@@ -0,0 +1,69 @@
|
|
|
1
|
+
require 'spec_helper'
|
|
2
|
+
|
|
3
|
+
describe Login do
|
|
4
|
+
it { is_expected.to validate_presence_of(:email) }
|
|
5
|
+
it { is_expected.to allow_value('test@example.com').for(:email) }
|
|
6
|
+
it { is_expected.to_not allow_value('test_example.com').for(:email) }
|
|
7
|
+
|
|
8
|
+
it 'validates presence of either password or Facebook UID' do
|
|
9
|
+
login = described_class.new(email: 'test@example.com', oauth2_token: 'token')
|
|
10
|
+
|
|
11
|
+
expect(login).to_not be_valid
|
|
12
|
+
end
|
|
13
|
+
|
|
14
|
+
it "doesn't validate presence of password when Facebook UID is present" do
|
|
15
|
+
login = described_class.new(email: 'test@example.com', oauth2_token: 'token', facebook_uid: '123')
|
|
16
|
+
|
|
17
|
+
expect(login).to be_valid
|
|
18
|
+
end
|
|
19
|
+
|
|
20
|
+
it "doesn't validate presence of Facebook UID when password is present" do
|
|
21
|
+
login = described_class.new(email: 'test@example.com', oauth2_token: 'token', password: '123')
|
|
22
|
+
|
|
23
|
+
expect(login).to be_valid
|
|
24
|
+
end
|
|
25
|
+
|
|
26
|
+
describe '#refresh_oauth2_token!' do
|
|
27
|
+
subject { described_class.new(oauth2_token: 'oldtoken') }
|
|
28
|
+
|
|
29
|
+
before do
|
|
30
|
+
allow(subject).to receive(:save!)
|
|
31
|
+
end
|
|
32
|
+
|
|
33
|
+
it 'force-resets the oauth2 token' do
|
|
34
|
+
expect { subject.refresh_oauth2_token! }.to change(subject, :oauth2_token)
|
|
35
|
+
end
|
|
36
|
+
|
|
37
|
+
it 'saves the model' do
|
|
38
|
+
expect(subject).to receive(:save!)
|
|
39
|
+
|
|
40
|
+
subject.refresh_oauth2_token!
|
|
41
|
+
end
|
|
42
|
+
end
|
|
43
|
+
|
|
44
|
+
describe '#consume_single_use_oauth2_token!' do
|
|
45
|
+
subject { described_class.new(single_use_oauth2_token: 'token') }
|
|
46
|
+
|
|
47
|
+
before do
|
|
48
|
+
allow(subject).to receive(:save!)
|
|
49
|
+
end
|
|
50
|
+
|
|
51
|
+
context 'when the supplied token is valid' do
|
|
52
|
+
it 'resets the single use oauth2 token' do
|
|
53
|
+
expect { subject.consume_single_use_oauth2_token!(subject.single_use_oauth2_token) }.to change(subject, :single_use_oauth2_token)
|
|
54
|
+
end
|
|
55
|
+
|
|
56
|
+
it 'saves the model' do
|
|
57
|
+
expect(subject).to receive(:save!)
|
|
58
|
+
|
|
59
|
+
subject.refresh_oauth2_token!
|
|
60
|
+
end
|
|
61
|
+
end
|
|
62
|
+
|
|
63
|
+
context 'when the supplied token is invalid' do
|
|
64
|
+
it 'raises an InvalidSingleUseOAuth2Token' do
|
|
65
|
+
expect { subject.consume_single_use_oauth2_token!('invalid token') }.to raise_error(Login::InvalidSingleUseOAuth2Token)
|
|
66
|
+
end
|
|
67
|
+
end
|
|
68
|
+
end
|
|
69
|
+
end
|
|
@@ -0,0 +1,47 @@
|
|
|
1
|
+
require 'spec_helper'
|
|
2
|
+
|
|
3
|
+
describe 'Authenticated route' do
|
|
4
|
+
let!(:login) { create(:login) }
|
|
5
|
+
let(:headers) do
|
|
6
|
+
{
|
|
7
|
+
'Authorization': "Bearer #{login.oauth2_token}"
|
|
8
|
+
}
|
|
9
|
+
end
|
|
10
|
+
|
|
11
|
+
subject { get '/authenticated', {}, headers }
|
|
12
|
+
|
|
13
|
+
it 'assigns login found to @current_login' do
|
|
14
|
+
subject
|
|
15
|
+
|
|
16
|
+
assigns[:current_login] = login
|
|
17
|
+
end
|
|
18
|
+
|
|
19
|
+
it '200' do
|
|
20
|
+
subject
|
|
21
|
+
|
|
22
|
+
expect(response.status).to eq 200
|
|
23
|
+
end
|
|
24
|
+
|
|
25
|
+
it 'lets the action get rendered' do
|
|
26
|
+
subject
|
|
27
|
+
|
|
28
|
+
expect(response.body).to eql 'zuper content'
|
|
29
|
+
end
|
|
30
|
+
|
|
31
|
+
context 'no token' do
|
|
32
|
+
|
|
33
|
+
subject { get '/authenticated' }
|
|
34
|
+
|
|
35
|
+
it '401' do
|
|
36
|
+
subject
|
|
37
|
+
|
|
38
|
+
expect(response.status).to eq 401
|
|
39
|
+
end
|
|
40
|
+
|
|
41
|
+
it 'responds with an empty body' do
|
|
42
|
+
subject
|
|
43
|
+
|
|
44
|
+
expect(response.body).to be_empty
|
|
45
|
+
end
|
|
46
|
+
end
|
|
47
|
+
end
|
|
@@ -0,0 +1,187 @@
|
|
|
1
|
+
require 'spec_helper'
|
|
2
|
+
|
|
3
|
+
describe 'Oauth2 API' do
|
|
4
|
+
|
|
5
|
+
let!(:login) { create(:login) }
|
|
6
|
+
|
|
7
|
+
describe 'POST /token' do
|
|
8
|
+
let(:params) { { grant_type: 'password', username: login.email, password: login.password } }
|
|
9
|
+
|
|
10
|
+
subject { post '/token', params }
|
|
11
|
+
|
|
12
|
+
context 'for grant_type "password"' do
|
|
13
|
+
context 'with valid login credentials' do
|
|
14
|
+
it 'succeeds' do
|
|
15
|
+
subject
|
|
16
|
+
|
|
17
|
+
expect(response).to have_http_status(200)
|
|
18
|
+
end
|
|
19
|
+
|
|
20
|
+
it 'responds with an access token' do
|
|
21
|
+
subject
|
|
22
|
+
|
|
23
|
+
expect(response.body).to be_json_eql({ access_token: login.oauth2_token }.to_json)
|
|
24
|
+
end
|
|
25
|
+
end
|
|
26
|
+
|
|
27
|
+
context 'with invalid login credentials' do
|
|
28
|
+
let(:params) { { grant_type: 'password', username: 'bad@email.com', password: 'badpassword' } }
|
|
29
|
+
|
|
30
|
+
it 'responds with status 400' do
|
|
31
|
+
subject
|
|
32
|
+
|
|
33
|
+
expect(response).to have_http_status(400)
|
|
34
|
+
end
|
|
35
|
+
|
|
36
|
+
it 'responds with an invalid grant error' do
|
|
37
|
+
subject
|
|
38
|
+
|
|
39
|
+
expect(response.body).to be_json_eql({ error: 'invalid_grant' }.to_json)
|
|
40
|
+
end
|
|
41
|
+
end
|
|
42
|
+
end
|
|
43
|
+
|
|
44
|
+
context 'for grant_type "facebook_auth_code"' do
|
|
45
|
+
let(:secret) { described_class::FB_APP_SECRET }
|
|
46
|
+
let(:params) { { grant_type: 'facebook_auth_code', auth_code: 'fb auth code' } }
|
|
47
|
+
let(:facebook_email) { login.email }
|
|
48
|
+
let(:facebook_data) do
|
|
49
|
+
{
|
|
50
|
+
id: '1238190321',
|
|
51
|
+
email: facebook_email
|
|
52
|
+
}
|
|
53
|
+
end
|
|
54
|
+
|
|
55
|
+
before do
|
|
56
|
+
stub_request(:get, %r{https://graph.facebook.com/v2.3/oauth/access_token}).to_return(body: '{ "access_token": "access_token" }')
|
|
57
|
+
stub_request(:get, %r{https://graph.facebook.com/v2.3/me}).to_return(body: JSON.generate(facebook_data), headers: { 'Content-Type' => 'application/json' })
|
|
58
|
+
end
|
|
59
|
+
|
|
60
|
+
context 'when a login with the posted Facebook email exists' do
|
|
61
|
+
it 'connects the login to the Facebook account' do
|
|
62
|
+
subject
|
|
63
|
+
|
|
64
|
+
expect(login.reload.facebook_uid).to eq(facebook_data[:id])
|
|
65
|
+
end
|
|
66
|
+
|
|
67
|
+
it 'succeeds' do
|
|
68
|
+
subject
|
|
69
|
+
|
|
70
|
+
expect(response).to have_http_status(200)
|
|
71
|
+
end
|
|
72
|
+
|
|
73
|
+
it 'responds with an oauth2 token' do
|
|
74
|
+
subject
|
|
75
|
+
|
|
76
|
+
expect(response.body).to be_json_eql({ access_token: login.oauth2_token }.to_json)
|
|
77
|
+
end
|
|
78
|
+
end
|
|
79
|
+
|
|
80
|
+
context 'when no login with the posted Facebook email exists' do
|
|
81
|
+
let(:facebook_email) { Faker::Internet.email }
|
|
82
|
+
|
|
83
|
+
it 'succeeds' do
|
|
84
|
+
subject
|
|
85
|
+
|
|
86
|
+
expect(response).to have_http_status(200)
|
|
87
|
+
end
|
|
88
|
+
|
|
89
|
+
it 'creates a login with it' do
|
|
90
|
+
expect { subject }.to change { Login.where(email: facebook_email).count }.by(1)
|
|
91
|
+
end
|
|
92
|
+
|
|
93
|
+
it 'responds with an oauth2 token' do
|
|
94
|
+
subject
|
|
95
|
+
login = Login.find_by(email: facebook_email)
|
|
96
|
+
|
|
97
|
+
expect(response.body).to be_json_eql({ access_token: login.oauth2_token }.to_json)
|
|
98
|
+
end
|
|
99
|
+
end
|
|
100
|
+
|
|
101
|
+
context 'when no facebook code is sent' do
|
|
102
|
+
let(:params) { { grant_type: 'facebook_auth_code' } }
|
|
103
|
+
|
|
104
|
+
it 'responds with status 400' do
|
|
105
|
+
subject
|
|
106
|
+
|
|
107
|
+
expect(response).to have_http_status(400)
|
|
108
|
+
end
|
|
109
|
+
|
|
110
|
+
it 'responds with a no authorization code error' do
|
|
111
|
+
subject
|
|
112
|
+
|
|
113
|
+
expect(response.body).to be_json_eql({ error: 'no_authorization_code' }.to_json)
|
|
114
|
+
end
|
|
115
|
+
end
|
|
116
|
+
|
|
117
|
+
context 'when Facebook responds with an error' do
|
|
118
|
+
before do
|
|
119
|
+
stub_request(:get, %r{https://graph.facebook.com/v2.3/oauth/access_token}).to_return(status: 422)
|
|
120
|
+
end
|
|
121
|
+
|
|
122
|
+
it 'responds with status 500' do
|
|
123
|
+
subject
|
|
124
|
+
|
|
125
|
+
expect(response).to have_http_status(500)
|
|
126
|
+
end
|
|
127
|
+
|
|
128
|
+
it 'responds with an empty response body' do
|
|
129
|
+
subject
|
|
130
|
+
|
|
131
|
+
expect(response.body).to eql('')
|
|
132
|
+
end
|
|
133
|
+
end
|
|
134
|
+
end
|
|
135
|
+
|
|
136
|
+
context 'for an unknown grant type' do
|
|
137
|
+
let(:params) { { grant_type: 'UNKNOWN' } }
|
|
138
|
+
|
|
139
|
+
it 'responds with status 400' do
|
|
140
|
+
subject
|
|
141
|
+
|
|
142
|
+
expect(response).to have_http_status(400)
|
|
143
|
+
end
|
|
144
|
+
|
|
145
|
+
it 'responds with an invalid grant error' do
|
|
146
|
+
subject
|
|
147
|
+
|
|
148
|
+
expect(response.body).to be_json_eql({ error: 'unsupported_grant_type' }.to_json)
|
|
149
|
+
end
|
|
150
|
+
end
|
|
151
|
+
end
|
|
152
|
+
|
|
153
|
+
describe 'POST #destroy' do
|
|
154
|
+
let(:params) { { token_type_hint: 'access_token', token: login.oauth2_token } }
|
|
155
|
+
|
|
156
|
+
subject { post '/revoke', params }
|
|
157
|
+
|
|
158
|
+
it 'succeeds' do
|
|
159
|
+
subject
|
|
160
|
+
|
|
161
|
+
expect(response).to have_http_status(200)
|
|
162
|
+
end
|
|
163
|
+
|
|
164
|
+
it 'resets login token' do
|
|
165
|
+
expect { subject }.to change { login.reload.oauth2_token }
|
|
166
|
+
|
|
167
|
+
subject
|
|
168
|
+
end
|
|
169
|
+
|
|
170
|
+
context 'for an unknown (or stale) token' do
|
|
171
|
+
let(:params) { { token_type_hint: 'access_token', token: 'badtoken' } }
|
|
172
|
+
|
|
173
|
+
it 'succeeds' do
|
|
174
|
+
subject
|
|
175
|
+
|
|
176
|
+
expect(response).to have_http_status(200)
|
|
177
|
+
end
|
|
178
|
+
|
|
179
|
+
it "doesn't reset any logins' token" do
|
|
180
|
+
|
|
181
|
+
expect_any_instance_of(LoginNotFound).to receive(:refresh_oauth2_token!)
|
|
182
|
+
|
|
183
|
+
subject
|
|
184
|
+
end
|
|
185
|
+
end
|
|
186
|
+
end
|
|
187
|
+
end
|