rolemodel-rails 1.1.0 → 2.0.1

data/lib/generators/rolemodel/mcp/templates/spec/requests/mcp_controller_spec.rb

@@ -1,84 +0,0 @@
-# frozen_string_literal: true
-
-require 'rails_helper'
-
-RSpec.describe 'MCPController', type: :request do
-  let(:user) { create(:user, name: 'Jane Smith', active: true, employee: true) }
-  let(:application) do
-    Doorkeeper::Application.create!(
-      name: 'MCP Test Client',
-      redirect_uri: 'https://example.com/callback',
-      scopes: 'mcp',
-    )
-  end
-
-  describe 'POST /mcp' do
-    let(:token) do
-      Doorkeeper::AccessToken.create!(
-        application: application,
-        resource_owner_id: user.id,
-        scopes: 'mcp',
-        expires_in: 2.hours.to_i,
-      )
-    end
-
-    let(:initialize_request) do
-      {
-        jsonrpc: '2.0',
-        id: 1,
-        method: 'initialize',
-        params: {
-          protocolVersion: '2025-11-25',
-          capabilities: {},
-          clientInfo: {
-            name: 'rspec',
-            version: '1.0',
-          },
-        },
-      }
-    end
-
-    let(:headers) do
-      {
-        'CONTENT_TYPE' => 'application/json',
-        'ACCEPT' => 'application/json, text/event-stream',
-      }
-    end
-
-    let(:authorized_headers) do
-      headers.merge('Authorization' => "Bearer #{token.token}")
-    end
-
-    it 'returns unauthorized when no bearer token is provided' do
-      post '/mcp', params: initialize_request.to_json, headers: headers
-
-      expect(response).to have_http_status(:unauthorized)
-      expect(response.headers['WWW-Authenticate']).to include('resource_metadata=')
-    end
-
-    it 'returns forbidden when token does not include mcp scope' do
-      token = Doorkeeper::AccessToken.create!(
-        application: application,
-        resource_owner_id: user.id,
-        scopes: 'other',
-        expires_in: 2.hours.to_i,
-      )
-
-      post '/mcp',
-        params: initialize_request.to_json,
-        headers: headers.merge('Authorization' => "Bearer #{token.token}")
-
-      expect(response).to have_http_status(:forbidden)
-    end
-
-    it 'returns initialize response for a valid bearer token' do
-      post '/mcp',
-        params: initialize_request.to_json,
-        headers: authorized_headers
-
-      expect(response).to have_http_status(:ok)
-      expect(response.parsed_body['result']).to be_present
-      expect(response.parsed_body['result']['capabilities']).to include('tools')
-    end
-  end
-end

data/lib/generators/rolemodel/mcp/templates/spec/requests/oauth_registrations_controller_spec.rb

@@ -1,62 +0,0 @@
-# frozen_string_literal: true
-
-require 'rails_helper'
-
-RSpec.describe 'OauthRegistrationsController', type: :request do
-  describe 'POST /oauth/register' do
-    let(:params) do
-      {
-        client_name: 'GitHub Copilot',
-        redirect_uris: ['http://localhost:12345/callback'],
-        grant_types: ['authorization_code'],
-        response_types: ['code'],
-        token_endpoint_auth_method: 'none',
-        scope: 'mcp',
-      }
-    end
-
-    it 'creates an OAuth application and returns client_id' do
-      expect { post '/oauth/register', params: params, as: :json }
-        .to change(Doorkeeper::Application, :count).by(1)
-
-      expect(response).to have_http_status(:created)
-      body = response.parsed_body
-      expect(body['client_id']).to be_present
-      expect(body['client_name']).to eq('GitHub Copilot')
-      expect(body['redirect_uris']).to eq(['http://localhost:12345/callback'])
-      expect(body['token_endpoint_auth_method']).to eq('none')
-      expect(body).not_to have_key('client_secret')
-
-      app = Doorkeeper::Application.last
-      expect(app.name).to eq('GitHub Copilot')
-      expect(app.redirect_uri).to eq('http://localhost:12345/callback')
-      expect(app.scopes).to contain_exactly('mcp')
-      expect(app).not_to be_confidential
-    end
-
-    it 'returns bad_request when redirect_uris is missing' do
-      post '/oauth/register', params: { client_name: 'Test' }, as: :json
-
-      expect(response).to have_http_status(:bad_request)
-      expect(response.parsed_body['error']).to eq('invalid_client_metadata')
-    end
-
-    it 'creates a confidential client when token_endpoint_auth_method is not none' do
-      params[:token_endpoint_auth_method] = 'client_secret_basic'
-      post '/oauth/register', params: params, as: :json
-
-      expect(response).to have_http_status(:created)
-      body = response.parsed_body
-      expect(body['client_secret']).to be_present
-      expect(body['token_endpoint_auth_method']).to eq('client_secret_basic')
-    end
-
-    it 'allows loopback redirect URIs for native clients' do
-      params[:redirect_uris] = ['http://127.0.0.1:33418/']
-      post '/oauth/register', params: params, as: :json
-
-      expect(response).to have_http_status(:created)
-      expect(response.parsed_body['redirect_uris']).to eq(['http://127.0.0.1:33418/'])
-    end
-  end
-end

data/lib/generators/rolemodel/mcp/templates/spec/requests/well_known_controller_spec.rb

@@ -1,30 +0,0 @@
-# frozen_string_literal: true
-
-require 'rails_helper'
-
-RSpec.describe 'WellKnownController', type: :request do
-  describe 'GET /.well-known/oauth-protected-resource' do
-    it 'returns the MCP resource and authorization server' do
-      get '/.well-known/oauth-protected-resource'
-
-      expect(response).to have_http_status(:ok)
-      body = response.parsed_body
-      expect(body['resource']).to end_with('/mcp')
-      expect(body['authorization_servers']).to be_an(Array)
-    end
-  end
-
-  describe 'GET /.well-known/oauth-authorization-server' do
-    it 'returns authorization server metadata with registration_endpoint' do
-      get '/.well-known/oauth-authorization-server'
-
-      expect(response).to have_http_status(:ok)
-      body = response.parsed_body
-      expect(body['registration_endpoint']).to end_with('/oauth/register')
-      expect(body['authorization_endpoint']).to end_with('/oauth/authorize')
-      expect(body['token_endpoint']).to end_with('/oauth/token')
-      expect(body['code_challenge_methods_supported']).to include('S256')
-      expect(body['scopes_supported']).to include('mcp')
-    end
-  end
-end

data/lib/generators/rolemodel/testing/rspec/templates/support/capybara_testid.rb

@@ -1,5 +0,0 @@
-# frozen_string_literal: true
-
-Capybara.configure do |config|
-  config.test_id = 'data-testid'
-end