railsware-authlogic 2.1.6.1
Sign up to get free protection for your applications and to get access to all the features.
- data/.gitignore +9 -0
- data/CHANGELOG.rdoc +345 -0
- data/LICENSE +20 -0
- data/README.rdoc +246 -0
- data/Rakefile +41 -0
- data/VERSION.yml +5 -0
- data/authlogic.gemspec +216 -0
- data/generators/session/session_generator.rb +9 -0
- data/generators/session/templates/session.rb +2 -0
- data/init.rb +1 -0
- data/lib/authlogic.rb +64 -0
- data/lib/authlogic/acts_as_authentic/base.rb +107 -0
- data/lib/authlogic/acts_as_authentic/email.rb +110 -0
- data/lib/authlogic/acts_as_authentic/logged_in_status.rb +65 -0
- data/lib/authlogic/acts_as_authentic/login.rb +141 -0
- data/lib/authlogic/acts_as_authentic/magic_columns.rb +24 -0
- data/lib/authlogic/acts_as_authentic/password.rb +355 -0
- data/lib/authlogic/acts_as_authentic/perishable_token.rb +105 -0
- data/lib/authlogic/acts_as_authentic/persistence_token.rb +68 -0
- data/lib/authlogic/acts_as_authentic/restful_authentication.rb +61 -0
- data/lib/authlogic/acts_as_authentic/session_maintenance.rb +139 -0
- data/lib/authlogic/acts_as_authentic/single_access_token.rb +65 -0
- data/lib/authlogic/acts_as_authentic/validations_scope.rb +32 -0
- data/lib/authlogic/authenticates_many/association.rb +42 -0
- data/lib/authlogic/authenticates_many/base.rb +55 -0
- data/lib/authlogic/controller_adapters/abstract_adapter.rb +67 -0
- data/lib/authlogic/controller_adapters/merb_adapter.rb +30 -0
- data/lib/authlogic/controller_adapters/rails_adapter.rb +48 -0
- data/lib/authlogic/controller_adapters/sinatra_adapter.rb +61 -0
- data/lib/authlogic/crypto_providers/aes256.rb +43 -0
- data/lib/authlogic/crypto_providers/bcrypt.rb +90 -0
- data/lib/authlogic/crypto_providers/md5.rb +34 -0
- data/lib/authlogic/crypto_providers/sha1.rb +35 -0
- data/lib/authlogic/crypto_providers/sha256.rb +50 -0
- data/lib/authlogic/crypto_providers/sha512.rb +50 -0
- data/lib/authlogic/crypto_providers/wordpress.rb +43 -0
- data/lib/authlogic/i18n.rb +83 -0
- data/lib/authlogic/i18n/translator.rb +15 -0
- data/lib/authlogic/random.rb +33 -0
- data/lib/authlogic/regex.rb +25 -0
- data/lib/authlogic/session/activation.rb +58 -0
- data/lib/authlogic/session/active_record_trickery.rb +64 -0
- data/lib/authlogic/session/base.rb +37 -0
- data/lib/authlogic/session/brute_force_protection.rb +96 -0
- data/lib/authlogic/session/callbacks.rb +99 -0
- data/lib/authlogic/session/cookies.rb +130 -0
- data/lib/authlogic/session/existence.rb +93 -0
- data/lib/authlogic/session/foundation.rb +71 -0
- data/lib/authlogic/session/http_auth.rb +58 -0
- data/lib/authlogic/session/id.rb +41 -0
- data/lib/authlogic/session/klass.rb +78 -0
- data/lib/authlogic/session/magic_columns.rb +95 -0
- data/lib/authlogic/session/magic_states.rb +59 -0
- data/lib/authlogic/session/params.rb +101 -0
- data/lib/authlogic/session/password.rb +240 -0
- data/lib/authlogic/session/perishable_token.rb +18 -0
- data/lib/authlogic/session/persistence.rb +70 -0
- data/lib/authlogic/session/priority_record.rb +34 -0
- data/lib/authlogic/session/scopes.rb +101 -0
- data/lib/authlogic/session/session.rb +62 -0
- data/lib/authlogic/session/timeout.rb +82 -0
- data/lib/authlogic/session/unauthorized_record.rb +50 -0
- data/lib/authlogic/session/validation.rb +82 -0
- data/lib/authlogic/test_case.rb +120 -0
- data/lib/authlogic/test_case/mock_controller.rb +45 -0
- data/lib/authlogic/test_case/mock_cookie_jar.rb +14 -0
- data/lib/authlogic/test_case/mock_logger.rb +10 -0
- data/lib/authlogic/test_case/mock_request.rb +19 -0
- data/lib/authlogic/test_case/rails_request_adapter.rb +30 -0
- data/rails/init.rb +1 -0
- data/shoulda_macros/authlogic.rb +69 -0
- data/test/acts_as_authentic_test/base_test.rb +18 -0
- data/test/acts_as_authentic_test/email_test.rb +101 -0
- data/test/acts_as_authentic_test/logged_in_status_test.rb +36 -0
- data/test/acts_as_authentic_test/login_test.rb +109 -0
- data/test/acts_as_authentic_test/magic_columns_test.rb +27 -0
- data/test/acts_as_authentic_test/password_test.rb +236 -0
- data/test/acts_as_authentic_test/perishable_token_test.rb +90 -0
- data/test/acts_as_authentic_test/persistence_token_test.rb +55 -0
- data/test/acts_as_authentic_test/restful_authentication_test.rb +40 -0
- data/test/acts_as_authentic_test/session_maintenance_test.rb +84 -0
- data/test/acts_as_authentic_test/single_access_test.rb +44 -0
- data/test/authenticates_many_test.rb +16 -0
- data/test/crypto_provider_test/aes256_test.rb +14 -0
- data/test/crypto_provider_test/bcrypt_test.rb +14 -0
- data/test/crypto_provider_test/sha1_test.rb +23 -0
- data/test/crypto_provider_test/sha256_test.rb +14 -0
- data/test/crypto_provider_test/sha512_test.rb +14 -0
- data/test/fixtures/companies.yml +5 -0
- data/test/fixtures/employees.yml +17 -0
- data/test/fixtures/projects.yml +3 -0
- data/test/fixtures/users.yml +24 -0
- data/test/i18n_test.rb +33 -0
- data/test/libs/affiliate.rb +7 -0
- data/test/libs/company.rb +6 -0
- data/test/libs/employee.rb +7 -0
- data/test/libs/employee_session.rb +2 -0
- data/test/libs/ldaper.rb +3 -0
- data/test/libs/ordered_hash.rb +9 -0
- data/test/libs/project.rb +3 -0
- data/test/libs/user.rb +5 -0
- data/test/libs/user_session.rb +6 -0
- data/test/random_test.rb +42 -0
- data/test/session_test/activation_test.rb +43 -0
- data/test/session_test/active_record_trickery_test.rb +36 -0
- data/test/session_test/brute_force_protection_test.rb +101 -0
- data/test/session_test/callbacks_test.rb +6 -0
- data/test/session_test/cookies_test.rb +112 -0
- data/test/session_test/credentials_test.rb +0 -0
- data/test/session_test/existence_test.rb +64 -0
- data/test/session_test/http_auth_test.rb +28 -0
- data/test/session_test/id_test.rb +17 -0
- data/test/session_test/klass_test.rb +40 -0
- data/test/session_test/magic_columns_test.rb +62 -0
- data/test/session_test/magic_states_test.rb +60 -0
- data/test/session_test/params_test.rb +53 -0
- data/test/session_test/password_test.rb +106 -0
- data/test/session_test/perishability_test.rb +15 -0
- data/test/session_test/persistence_test.rb +21 -0
- data/test/session_test/scopes_test.rb +60 -0
- data/test/session_test/session_test.rb +59 -0
- data/test/session_test/timeout_test.rb +52 -0
- data/test/session_test/unauthorized_record_test.rb +13 -0
- data/test/session_test/validation_test.rb +23 -0
- data/test/test_helper.rb +182 -0
- metadata +255 -0
@@ -0,0 +1,112 @@
|
|
1
|
+
require 'test_helper'
|
2
|
+
|
3
|
+
module SessionTest
|
4
|
+
module CookiesTest
|
5
|
+
class ConfiTest < ActiveSupport::TestCase
|
6
|
+
def test_cookie_key
|
7
|
+
UserSession.cookie_key = "my_cookie_key"
|
8
|
+
assert_equal "my_cookie_key", UserSession.cookie_key
|
9
|
+
|
10
|
+
UserSession.cookie_key "user_credentials"
|
11
|
+
assert_equal "user_credentials", UserSession.cookie_key
|
12
|
+
end
|
13
|
+
|
14
|
+
def test_default_cookie_key
|
15
|
+
assert_equal "user_credentials", UserSession.cookie_key
|
16
|
+
assert_equal "back_office_user_credentials", BackOfficeUserSession.cookie_key
|
17
|
+
end
|
18
|
+
|
19
|
+
def test_remember_me
|
20
|
+
UserSession.remember_me = true
|
21
|
+
assert_equal true, UserSession.remember_me
|
22
|
+
session = UserSession.new
|
23
|
+
assert_equal true, session.remember_me
|
24
|
+
|
25
|
+
UserSession.remember_me false
|
26
|
+
assert_equal false, UserSession.remember_me
|
27
|
+
session = UserSession.new
|
28
|
+
assert_equal false, session.remember_me
|
29
|
+
end
|
30
|
+
|
31
|
+
def test_remember_me_for
|
32
|
+
UserSession.remember_me_for = 3.years
|
33
|
+
assert_equal 3.years, UserSession.remember_me_for
|
34
|
+
session = UserSession.new
|
35
|
+
session.remember_me = true
|
36
|
+
assert_equal 3.years, session.remember_me_for
|
37
|
+
|
38
|
+
UserSession.remember_me_for 3.months
|
39
|
+
assert_equal 3.months, UserSession.remember_me_for
|
40
|
+
session = UserSession.new
|
41
|
+
session.remember_me = true
|
42
|
+
assert_equal 3.months, session.remember_me_for
|
43
|
+
end
|
44
|
+
end
|
45
|
+
|
46
|
+
class InstanceMethodsTest < ActiveSupport::TestCase
|
47
|
+
def test_credentials
|
48
|
+
session = UserSession.new
|
49
|
+
session.credentials = {:remember_me => true}
|
50
|
+
assert_equal true, session.remember_me
|
51
|
+
end
|
52
|
+
|
53
|
+
def test_remember_me
|
54
|
+
session = UserSession.new
|
55
|
+
assert_equal false, session.remember_me
|
56
|
+
assert !session.remember_me?
|
57
|
+
|
58
|
+
session.remember_me = false
|
59
|
+
assert_equal false, session.remember_me
|
60
|
+
assert !session.remember_me?
|
61
|
+
|
62
|
+
session.remember_me = true
|
63
|
+
assert_equal true, session.remember_me
|
64
|
+
assert session.remember_me?
|
65
|
+
|
66
|
+
session.remember_me = nil
|
67
|
+
assert_nil session.remember_me
|
68
|
+
assert !session.remember_me?
|
69
|
+
|
70
|
+
session.remember_me = "1"
|
71
|
+
assert_equal "1", session.remember_me
|
72
|
+
assert session.remember_me?
|
73
|
+
|
74
|
+
session.remember_me = "true"
|
75
|
+
assert_equal "true", session.remember_me
|
76
|
+
assert session.remember_me?
|
77
|
+
end
|
78
|
+
|
79
|
+
def test_remember_me_until
|
80
|
+
session = UserSession.new
|
81
|
+
assert_nil session.remember_me_until
|
82
|
+
|
83
|
+
session.remember_me = true
|
84
|
+
assert 3.months.from_now <= session.remember_me_until
|
85
|
+
end
|
86
|
+
|
87
|
+
def test_persist_persist_by_cookie
|
88
|
+
ben = users(:ben)
|
89
|
+
assert !UserSession.find
|
90
|
+
set_cookie_for(ben)
|
91
|
+
assert session = UserSession.find
|
92
|
+
assert_equal ben, session.record
|
93
|
+
end
|
94
|
+
|
95
|
+
def test_after_save_save_cookie
|
96
|
+
ben = users(:ben)
|
97
|
+
session = UserSession.new(ben)
|
98
|
+
assert session.save
|
99
|
+
assert_equal "#{ben.persistence_token}::#{ben.id}", controller.cookies["user_credentials"]
|
100
|
+
end
|
101
|
+
|
102
|
+
def test_after_destroy_destroy_cookie
|
103
|
+
ben = users(:ben)
|
104
|
+
set_cookie_for(ben)
|
105
|
+
session = UserSession.find
|
106
|
+
assert controller.cookies["user_credentials"]
|
107
|
+
assert session.destroy
|
108
|
+
assert !controller.cookies["user_credentials"]
|
109
|
+
end
|
110
|
+
end
|
111
|
+
end
|
112
|
+
end
|
File without changes
|
@@ -0,0 +1,64 @@
|
|
1
|
+
require 'test_helper'
|
2
|
+
|
3
|
+
module SessionTest
|
4
|
+
module ExistenceTest
|
5
|
+
class ClassMethodsTest < ActiveSupport::TestCase
|
6
|
+
def test_create
|
7
|
+
ben = users(:ben)
|
8
|
+
assert UserSession.create(:login => "somelogin", :password => "badpw2").new_session?
|
9
|
+
assert !UserSession.create(:login => ben.login, :password => "benrocks").new_session?
|
10
|
+
assert_raise(Authlogic::Session::Existence::SessionInvalidError) { UserSession.create!(:login => ben.login, :password => "badpw") }
|
11
|
+
assert !UserSession.create!(:login => ben.login, :password => "benrocks").new_session?
|
12
|
+
end
|
13
|
+
end
|
14
|
+
|
15
|
+
class IsntaceMethodsTest < ActiveSupport::TestCase
|
16
|
+
def test_new_session
|
17
|
+
session = UserSession.new
|
18
|
+
assert session.new_session?
|
19
|
+
|
20
|
+
set_session_for(users(:ben))
|
21
|
+
session = UserSession.find
|
22
|
+
assert !session.new_session?
|
23
|
+
end
|
24
|
+
|
25
|
+
def test_save_with_nothing
|
26
|
+
session = UserSession.new
|
27
|
+
assert !session.save
|
28
|
+
assert session.new_session?
|
29
|
+
end
|
30
|
+
|
31
|
+
def test_save_with_block
|
32
|
+
ben = users(:ben)
|
33
|
+
session = UserSession.new
|
34
|
+
block_result = session.save do |result|
|
35
|
+
assert !result
|
36
|
+
end
|
37
|
+
assert !block_result
|
38
|
+
assert session.new_session?
|
39
|
+
end
|
40
|
+
|
41
|
+
def test_save_with_bang
|
42
|
+
session = UserSession.new
|
43
|
+
assert_raise(Authlogic::Session::Existence::SessionInvalidError) { session.save! }
|
44
|
+
|
45
|
+
session.unauthorized_record = users(:ben)
|
46
|
+
assert_nothing_raised { session.save! }
|
47
|
+
end
|
48
|
+
|
49
|
+
def test_destroy
|
50
|
+
ben = users(:ben)
|
51
|
+
session = UserSession.new
|
52
|
+
assert !session.valid?
|
53
|
+
assert !session.errors.empty?
|
54
|
+
assert session.destroy
|
55
|
+
assert session.errors.empty?
|
56
|
+
session.unauthorized_record = ben
|
57
|
+
assert session.save
|
58
|
+
assert session.record
|
59
|
+
assert session.destroy
|
60
|
+
assert !session.record
|
61
|
+
end
|
62
|
+
end
|
63
|
+
end
|
64
|
+
end
|
@@ -0,0 +1,28 @@
|
|
1
|
+
require 'test_helper'
|
2
|
+
|
3
|
+
module SessionTest
|
4
|
+
class HttpAuthTest < ActiveSupport::TestCase
|
5
|
+
class ConfiTest < ActiveSupport::TestCase
|
6
|
+
def test_allow_http_basic_auth
|
7
|
+
UserSession.allow_http_basic_auth = false
|
8
|
+
assert_equal false, UserSession.allow_http_basic_auth
|
9
|
+
|
10
|
+
UserSession.allow_http_basic_auth true
|
11
|
+
assert_equal true, UserSession.allow_http_basic_auth
|
12
|
+
end
|
13
|
+
end
|
14
|
+
|
15
|
+
class InstanceMethodsTest < ActiveSupport::TestCase
|
16
|
+
def test_persist_persist_by_http_auth
|
17
|
+
ben = users(:ben)
|
18
|
+
http_basic_auth_for { assert !UserSession.find }
|
19
|
+
http_basic_auth_for(ben) do
|
20
|
+
assert session = UserSession.find
|
21
|
+
assert_equal ben, session.record
|
22
|
+
assert_equal ben.login, session.login
|
23
|
+
assert_equal "benrocks", session.send(:protected_password)
|
24
|
+
end
|
25
|
+
end
|
26
|
+
end
|
27
|
+
end
|
28
|
+
end
|
@@ -0,0 +1,17 @@
|
|
1
|
+
require 'test_helper'
|
2
|
+
|
3
|
+
module SessionTest
|
4
|
+
class IdTest < ActiveSupport::TestCase
|
5
|
+
def test_credentials
|
6
|
+
session = UserSession.new
|
7
|
+
session.credentials = [:my_id]
|
8
|
+
assert_equal :my_id, session.id
|
9
|
+
end
|
10
|
+
|
11
|
+
def test_id
|
12
|
+
session = UserSession.new
|
13
|
+
session.id = :my_id
|
14
|
+
assert_equal :my_id, session.id
|
15
|
+
end
|
16
|
+
end
|
17
|
+
end
|
@@ -0,0 +1,40 @@
|
|
1
|
+
require 'test_helper'
|
2
|
+
|
3
|
+
module SessionTest
|
4
|
+
module KlassTest
|
5
|
+
class ConfigTest < ActiveSupport::TestCase
|
6
|
+
def test_authenticate_with
|
7
|
+
UserSession.authenticate_with = Employee
|
8
|
+
assert_equal "Employee", UserSession.klass_name
|
9
|
+
assert_equal Employee, UserSession.klass
|
10
|
+
|
11
|
+
UserSession.authenticate_with User
|
12
|
+
assert_equal "User", UserSession.klass_name
|
13
|
+
assert_equal User, UserSession.klass
|
14
|
+
end
|
15
|
+
|
16
|
+
def test_klass
|
17
|
+
assert_equal User, UserSession.klass
|
18
|
+
end
|
19
|
+
|
20
|
+
def test_klass_name
|
21
|
+
assert_equal "User", UserSession.klass_name
|
22
|
+
end
|
23
|
+
|
24
|
+
def test_guessed_klass_name
|
25
|
+
assert_equal "User", UserSession.guessed_klass_name
|
26
|
+
assert_equal "BackOfficeUser", BackOfficeUserSession.guessed_klass_name
|
27
|
+
end
|
28
|
+
end
|
29
|
+
|
30
|
+
class InstanceMethodsTest < ActiveSupport::TestCase
|
31
|
+
def test_record_method
|
32
|
+
ben = users(:ben)
|
33
|
+
set_session_for(ben)
|
34
|
+
session = UserSession.find
|
35
|
+
assert_equal ben, session.record
|
36
|
+
assert_equal ben, session.user
|
37
|
+
end
|
38
|
+
end
|
39
|
+
end
|
40
|
+
end
|
@@ -0,0 +1,62 @@
|
|
1
|
+
require 'test_helper'
|
2
|
+
|
3
|
+
module SessionTest
|
4
|
+
module MagicColumnsTest
|
5
|
+
class ConfigTest < ActiveSupport::TestCase
|
6
|
+
def test_last_request_at_threshold_config
|
7
|
+
UserSession.last_request_at_threshold = 2.minutes
|
8
|
+
assert_equal 2.minutes, UserSession.last_request_at_threshold
|
9
|
+
|
10
|
+
UserSession.last_request_at_threshold 0
|
11
|
+
assert_equal 0, UserSession.last_request_at_threshold
|
12
|
+
end
|
13
|
+
end
|
14
|
+
|
15
|
+
class InstanceMethodsTest < ActiveSupport::TestCase
|
16
|
+
def test_after_persisting_set_last_request_at
|
17
|
+
ben = users(:ben)
|
18
|
+
assert !UserSession.create(ben).new_session?
|
19
|
+
|
20
|
+
set_cookie_for(ben)
|
21
|
+
old_last_request_at = ben.last_request_at
|
22
|
+
assert UserSession.find
|
23
|
+
ben.reload
|
24
|
+
assert ben.last_request_at != old_last_request_at
|
25
|
+
end
|
26
|
+
|
27
|
+
def test_valid_increase_failed_login_count
|
28
|
+
ben = users(:ben)
|
29
|
+
old_failed_login_count = ben.failed_login_count
|
30
|
+
assert UserSession.create(:login => ben.login, :password => "wrong").new_session?
|
31
|
+
ben.reload
|
32
|
+
assert_equal old_failed_login_count + 1, ben.failed_login_count
|
33
|
+
end
|
34
|
+
|
35
|
+
def test_before_save_update_info
|
36
|
+
ben = users(:ben)
|
37
|
+
|
38
|
+
# increase failed login count
|
39
|
+
assert UserSession.create(:login => ben.login, :password => "wrong").new_session?
|
40
|
+
ben.reload
|
41
|
+
|
42
|
+
# grab old values
|
43
|
+
old_login_count = ben.login_count
|
44
|
+
old_failed_login_count = ben.failed_login_count
|
45
|
+
old_last_login_at = ben.last_login_at
|
46
|
+
old_current_login_at = ben.current_login_at
|
47
|
+
old_last_login_ip = ben.last_login_ip
|
48
|
+
old_current_login_ip = ben.current_login_ip
|
49
|
+
|
50
|
+
assert !UserSession.create(:login => ben.login, :password => "benrocks").new_session?
|
51
|
+
|
52
|
+
ben.reload
|
53
|
+
assert_equal old_login_count + 1, ben.login_count
|
54
|
+
assert_equal 0, ben.failed_login_count
|
55
|
+
assert_equal old_current_login_at, ben.last_login_at
|
56
|
+
assert ben.current_login_at != old_current_login_at
|
57
|
+
assert_equal old_current_login_ip, ben.last_login_ip
|
58
|
+
assert_equal "1.1.1.1", ben.current_login_ip
|
59
|
+
end
|
60
|
+
end
|
61
|
+
end
|
62
|
+
end
|
@@ -0,0 +1,60 @@
|
|
1
|
+
require 'test_helper'
|
2
|
+
|
3
|
+
module SessionTest
|
4
|
+
module SessionTest
|
5
|
+
class ConfigTest < ActiveSupport::TestCase
|
6
|
+
def test_disable_magic_states_config
|
7
|
+
UserSession.disable_magic_states = true
|
8
|
+
assert_equal true, UserSession.disable_magic_states
|
9
|
+
|
10
|
+
UserSession.disable_magic_states false
|
11
|
+
assert_equal false, UserSession.disable_magic_states
|
12
|
+
end
|
13
|
+
end
|
14
|
+
|
15
|
+
class InstanceMethodsTest < ActiveSupport::TestCase
|
16
|
+
def test_disabling_magic_states
|
17
|
+
UserSession.disable_magic_states = true
|
18
|
+
|
19
|
+
ben = users(:ben)
|
20
|
+
ben.update_attribute(:active, false)
|
21
|
+
assert UserSession.create(ben)
|
22
|
+
|
23
|
+
UserSession.disable_magic_states = false
|
24
|
+
end
|
25
|
+
|
26
|
+
def test_validate_validate_magic_states_active
|
27
|
+
session = UserSession.new
|
28
|
+
ben = users(:ben)
|
29
|
+
session.unauthorized_record = ben
|
30
|
+
assert session.valid?
|
31
|
+
|
32
|
+
ben.update_attribute(:active, false)
|
33
|
+
assert !session.valid?
|
34
|
+
assert session.errors[:base].size > 0
|
35
|
+
end
|
36
|
+
|
37
|
+
def test_validate_validate_magic_states_approved
|
38
|
+
session = UserSession.new
|
39
|
+
ben = users(:ben)
|
40
|
+
session.unauthorized_record = ben
|
41
|
+
assert session.valid?
|
42
|
+
|
43
|
+
ben.update_attribute(:approved, false)
|
44
|
+
assert !session.valid?
|
45
|
+
assert session.errors[:base].size > 0
|
46
|
+
end
|
47
|
+
|
48
|
+
def test_validate_validate_magic_states_confirmed
|
49
|
+
session = UserSession.new
|
50
|
+
ben = users(:ben)
|
51
|
+
session.unauthorized_record = ben
|
52
|
+
assert session.valid?
|
53
|
+
|
54
|
+
ben.update_attribute(:confirmed, false)
|
55
|
+
assert !session.valid?
|
56
|
+
assert session.errors[:base].size > 0
|
57
|
+
end
|
58
|
+
end
|
59
|
+
end
|
60
|
+
end
|
@@ -0,0 +1,53 @@
|
|
1
|
+
require 'test_helper'
|
2
|
+
|
3
|
+
module SessionTest
|
4
|
+
module ParamsTest
|
5
|
+
class ConfigTest < ActiveSupport::TestCase
|
6
|
+
def test_params_key
|
7
|
+
UserSession.params_key = "my_params_key"
|
8
|
+
assert_equal "my_params_key", UserSession.params_key
|
9
|
+
|
10
|
+
UserSession.params_key "user_credentials"
|
11
|
+
assert_equal "user_credentials", UserSession.params_key
|
12
|
+
end
|
13
|
+
|
14
|
+
def test_single_access_allowed_request_types
|
15
|
+
UserSession.single_access_allowed_request_types = ["my request type"]
|
16
|
+
assert_equal ["my request type"], UserSession.single_access_allowed_request_types
|
17
|
+
|
18
|
+
UserSession.single_access_allowed_request_types ["application/rss+xml", "application/atom+xml"]
|
19
|
+
assert_equal ["application/rss+xml", "application/atom+xml"], UserSession.single_access_allowed_request_types
|
20
|
+
end
|
21
|
+
end
|
22
|
+
|
23
|
+
class InstanceMethodsTest < ActiveSupport::TestCase
|
24
|
+
def test_persist_persist_by_params
|
25
|
+
ben = users(:ben)
|
26
|
+
session = UserSession.new
|
27
|
+
|
28
|
+
assert !session.persisting?
|
29
|
+
set_params_for(ben)
|
30
|
+
|
31
|
+
assert !session.persisting?
|
32
|
+
assert !session.unauthorized_record
|
33
|
+
assert !session.record
|
34
|
+
assert_nil controller.session["user_credentials"]
|
35
|
+
|
36
|
+
set_request_content_type("text/plain")
|
37
|
+
assert !session.persisting?
|
38
|
+
assert !session.unauthorized_record
|
39
|
+
assert_nil controller.session["user_credentials"]
|
40
|
+
|
41
|
+
set_request_content_type("application/atom+xml")
|
42
|
+
assert session.persisting?
|
43
|
+
assert_equal ben, session.record
|
44
|
+
assert_nil controller.session["user_credentials"] # should not persist since this is single access
|
45
|
+
|
46
|
+
set_request_content_type("application/rss+xml")
|
47
|
+
assert session.persisting?
|
48
|
+
assert_equal ben, session.unauthorized_record
|
49
|
+
assert_nil controller.session["user_credentials"]
|
50
|
+
end
|
51
|
+
end
|
52
|
+
end
|
53
|
+
end
|