solidus_api 1.0.0.pre

data/spec/controllers/spree/api/store_credit_events_controller_spec.rb

@@ -0,0 +1,68 @@
+require 'spec_helper'
+
+describe Spree::Api::StoreCreditEventsController, type: :controller do
+  render_views
+
+  let(:api_user) { create(:user) }
+
+  before do
+    allow(controller).to receive(:load_user)
+    controller.instance_variable_set(:@current_api_user, api_user)
+  end
+
+  describe "GET mine" do
+
+    subject { api_get :mine, { format: :json } }
+
+    before { allow(controller).to receive_messages(current_api_user: current_api_user) }
+
+    context "no current api user" do
+      let(:current_api_user) { nil }
+
+      before { subject }
+
+      it "returns a 401" do
+        expect(response.status).to eq 401
+      end
+    end
+
+    context "the current api user is authenticated" do
+      let(:current_api_user) { order.user }
+      let(:order) { create(:order, line_items: [line_item]) }
+
+      context "the user doesn't have store credit" do
+        let(:current_api_user) { create(:user) }
+
+        before { subject }
+
+        it "should set the events variable to empty list" do
+          expect(assigns(:store_credit_events)).to eq []
+        end
+
+        it "returns a 200" do
+          expect(subject.status).to eq 200
+        end
+      end
+
+      context "the user has store credit" do
+        let(:store_credit)     { create(:store_credit, user: api_user) }
+        let(:current_api_user) { store_credit.user }
+
+        before { subject }
+
+        it "should contain one store credit event" do
+          expect(assigns(:store_credit_events).size).to eq 1
+        end
+
+        it "should contain the store credit allocation event" do
+          expect(assigns(:store_credit_events).first).to eq store_credit.store_credit_events.first
+        end
+
+        it "returns a 200" do
+          expect(subject.status).to eq 200
+        end
+      end
+    end
+  end
+end
+

data/spec/controllers/spree/api/stores_controller_spec.rb

@@ -0,0 +1,133 @@
+require "spec_helper"
+
+module Spree
+  describe Api::StoresController, type: :controller do
+    render_views
+
+    let!(:store) do
+      create(:store, name: "My Spree Store", url: "spreestore.example.com")
+    end
+
+    before do
+      stub_authentication!
+    end
+
+    context "as an admin" do
+      sign_in_as_admin!
+
+      let!(:non_default_store) do
+        create(:store,
+          name: "Extra Store",
+          url: "spreestore-5.example.com",
+          default: false
+        )
+      end
+
+      it "I can list the available stores" do
+        api_get :index
+        expect(json_response["stores"]).to eq([
+          {
+            "id" => store.id,
+            "name" => "My Spree Store",
+            "url" => "spreestore.example.com",
+            "meta_description" => nil,
+            "meta_keywords" => nil,
+            "seo_title" => nil,
+            "mail_from_address" => "spree@example.org",
+            "default_currency" => nil,
+            "code" => store.code,
+            "default" => true
+          },
+          {
+            "id" => non_default_store.id,
+            "name" => "Extra Store",
+            "url" => "spreestore-5.example.com",
+            "meta_description" => nil,
+            "meta_keywords" => nil,
+            "seo_title" => nil,
+            "mail_from_address" => "spree@example.org",
+            "default_currency" => nil,
+            "code" => non_default_store.code,
+            "default" => false
+          }
+        ])
+      end
+
+      it "I can get the store details" do
+        api_get :show, id: store.id
+        expect(json_response).to eq(
+          "id" => store.id,
+          "name" => "My Spree Store",
+          "url" => "spreestore.example.com",
+          "meta_description" => nil,
+          "meta_keywords" => nil,
+          "seo_title" => nil,
+          "mail_from_address" => "spree@example.org",
+          "default_currency" => nil,
+          "code" => store.code,
+          "default" => true
+        )
+      end
+
+      it "I can create a new store" do
+        store_hash = {
+          code: "spree123",
+          name: "Hack0rz",
+          url: "spree123.example.com",
+          mail_from_address: "me@example.com"
+        }
+        api_post :create, store: store_hash
+        expect(response.status).to eq(201)
+      end
+
+      it "I can update an existing store" do
+        store_hash = {
+          url: "spree123.example.com",
+          mail_from_address: "me@example.com"
+        }
+        api_put :update, id: store.id, store: store_hash
+        expect(response.status).to eq(200)
+        expect(store.reload.url).to eql "spree123.example.com"
+        expect(store.reload.mail_from_address).to eql "me@example.com"
+      end
+
+      context "deleting a store" do
+        it "will fail if it's the default Store" do
+          api_delete :destroy, id: store.id
+          expect(response.status).to eq(422)
+          expect(json_response["errors"]["base"]).to eql(
+          ["Cannot destroy the default Store."]
+          )
+        end
+
+        it "will destroy the store" do
+          api_delete :destroy, id: non_default_store.id
+          expect(response.status).to eq(204)
+        end
+      end
+    end
+
+    context "as an user" do
+
+      it "I cannot list all the stores" do
+        api_get :index
+        expect(response.status).to eq(401)
+      end
+
+      it "I cannot get the store details" do
+        api_get :show, id: store.id
+        expect(response.status).to eq(401)
+      end
+
+      it "I cannot create a new store" do
+        api_post :create, store: {}
+        expect(response.status).to eq(401)
+      end
+
+      it "I cannot update an existing store" do
+        api_put :update, id: store.id, store: {}
+        expect(response.status).to eq(401)
+      end
+    end
+  end
+end

data/spec/controllers/spree/api/taxonomies_controller_spec.rb

@@ -0,0 +1,114 @@
+require 'spec_helper'
+
+module Spree
+  describe Api::TaxonomiesController, :type => :controller do
+    render_views
+
+    let(:taxonomy) { create(:taxonomy) }
+    let(:taxon) { create(:taxon, :name => "Ruby", :taxonomy => taxonomy) }
+    let(:taxon2) { create(:taxon, :name => "Rails", :taxonomy => taxonomy) }
+    let(:attributes) { [:id, :name] }
+
+    before do
+      stub_authentication!
+      taxon2.children << create(:taxon, :name => "3.2.2", :taxonomy => taxonomy)
+      taxon.children << taxon2
+      taxonomy.root.children << taxon
+    end
+
+    context "as a normal user" do
+      it "gets all taxonomies" do
+        api_get :index
+
+        expect(json_response["taxonomies"].first['name']).to eq taxonomy.name
+        expect(json_response["taxonomies"].first['root']['taxons'].count).to eq 1
+      end
+
+      it 'can control the page size through a parameter' do
+        create(:taxonomy)
+        api_get :index, :per_page => 1
+        expect(json_response['count']).to eq(1)
+        expect(json_response['current_page']).to eq(1)
+        expect(json_response['pages']).to eq(2)
+      end
+
+      it 'can query the results through a paramter' do
+        expected_result = create(:taxonomy, :name => 'Style')
+        api_get :index, :q => { :name_cont => 'style' }
+        expect(json_response['count']).to eq(1)
+        expect(json_response['taxonomies'].first['name']).to eq expected_result.name
+      end
+
+      it "gets a single taxonomy" do
+        api_get :show, :id => taxonomy.id
+
+        expect(json_response['name']).to eq taxonomy.name
+
+        children = json_response['root']['taxons']
+        expect(children.count).to eq 1
+        expect(children.first['name']).to eq taxon.name
+        expect(children.first.key?('taxons')).to be false
+      end
+
+      it "gets a single taxonomy with set=nested" do
+        api_get :show, :id => taxonomy.id, :set => 'nested'
+
+        expect(json_response['name']).to eq taxonomy.name
+
+        children = json_response['root']['taxons']
+        expect(children.first.key?('taxons')).to be true
+      end
+
+      it "gets the jstree-friendly version of a taxonomy" do
+        api_get :jstree, :id => taxonomy.id
+        expect(json_response["data"]).to eq(taxonomy.root.name)
+        expect(json_response["attr"]).to eq({ "id" => taxonomy.root.id, "name" => taxonomy.root.name})
+        expect(json_response["state"]).to eq("closed")
+      end
+
+      it "can learn how to create a new taxonomy" do
+        api_get :new
+        expect(json_response["attributes"]).to eq(attributes.map(&:to_s))
+        required_attributes = json_response["required_attributes"]
+        expect(required_attributes).to include("name")
+      end
+
+      it "cannot create a new taxonomy if not an admin" do
+        api_post :create, :taxonomy => { :name => "Location" }
+        assert_unauthorized!
+      end
+
+      it "cannot update a taxonomy" do
+        api_put :update, :id => taxonomy.id, :taxonomy => { :name => "I hacked your store!" }
+        assert_unauthorized!
+      end
+
+      it "cannot delete a taxonomy" do
+        api_delete :destroy, :id => taxonomy.id
+        assert_unauthorized!
+      end
+    end
+
+    context "as an admin" do
+      sign_in_as_admin!
+
+      it "can create" do
+        api_post :create, :taxonomy => { :name => "Colors"}
+        expect(json_response).to have_attributes(attributes)
+        expect(response.status).to eq(201)
+      end
+
+      it "cannot create a new taxonomy with invalid attributes" do
+        api_post :create, :taxonomy => {}
+        expect(response.status).to eq(422)
+        expect(json_response["error"]).to eq("Invalid resource. Please fix errors and try again.")
+        errors = json_response["errors"]
+      end
+
+      it "can destroy" do
+        api_delete :destroy, :id => taxonomy.id
+        expect(response.status).to eq(204)
+      end
+    end
+  end
+end

data/spec/controllers/spree/api/taxons_controller_spec.rb

@@ -0,0 +1,177 @@
+require 'spec_helper'
+
+module Spree
+  describe Api::TaxonsController, :type => :controller do
+    render_views
+
+    let(:taxonomy) { create(:taxonomy) }
+    let(:taxon) { create(:taxon, :name => "Ruby", :taxonomy => taxonomy) }
+    let(:taxon2) { create(:taxon, :name => "Rails", :taxonomy => taxonomy) }
+    let(:attributes) { ["id", "name", "pretty_name", "permalink", "parent_id", "taxonomy_id"] }
+
+    before do
+      stub_authentication!
+      taxon2.children << create(:taxon, :name => "3.2.2", :taxonomy => taxonomy)
+      taxon.children << taxon2
+      taxonomy.root.children << taxon
+    end
+
+    context "as a normal user" do
+      it "gets all taxons for a taxonomy" do
+        api_get :index, :taxonomy_id => taxonomy.id
+
+        expect(json_response['taxons'].first['name']).to eq taxon.name
+        children = json_response['taxons'].first['taxons']
+        expect(children.count).to eq 1
+        expect(children.first['name']).to eq taxon2.name
+        expect(children.first['taxons'].count).to eq 1
+      end
+
+      # Regression test for #4112
+      it "does not include children when asked not to" do
+        api_get :index, :taxonomy_id => taxonomy.id, :without_children => 1
+
+        expect(json_response['taxons'].first['name']).to eq(taxon.name)
+        expect(json_response['taxons'].first['taxons']).to be_nil
+      end
+
+      it "paginates through taxons" do
+        new_taxon = create(:taxon, :name => "Go", :taxonomy => taxonomy)
+        taxonomy.root.children << new_taxon
+        expect(taxonomy.root.children.count).to eql(2)
+        api_get :index, :taxonomy_id => taxonomy.id, :page => 1, :per_page => 1
+        expect(json_response["count"]).to eql(1)
+        expect(json_response["total_count"]).to eql(2)
+        expect(json_response["current_page"]).to eql(1)
+        expect(json_response["per_page"]).to eql(1)
+        expect(json_response["pages"]).to eql(2)
+      end
+
+      describe 'searching' do
+        context 'with a name' do
+          before do
+            api_get :index, :q => { :name_cont => name }
+          end
+
+          context 'with one result' do
+            let(:name) { "Ruby" }
+
+            it "returns an array including the matching taxon" do
+              expect(json_response['taxons'].count).to eq(1)
+              expect(json_response['taxons'].first['name']).to eq "Ruby"
+            end
+          end
+
+          context 'with no results' do
+            let(:name) { "Imaginary" }
+
+            it 'returns an empty array of taxons' do
+              expect(json_response.keys).to include('taxons')
+              expect(json_response['taxons'].count).to eq(0)
+            end
+          end
+        end
+
+        context 'with no filters' do
+          it "gets all taxons" do
+            api_get :index
+
+            expect(json_response['taxons'].first['name']).to eq taxonomy.root.name
+            children = json_response['taxons'].first['taxons']
+            expect(children.count).to eq 1
+            expect(children.first['name']).to eq taxon.name
+            expect(children.first['taxons'].count).to eq 1
+          end
+        end
+      end
+
+      it "gets a single taxon" do
+        api_get :show, :id => taxon.id, :taxonomy_id => taxonomy.id
+
+        expect(json_response['name']).to eq taxon.name
+        expect(json_response['taxons'].count).to eq 1
+      end
+
+      it "gets all taxons in JSTree form" do
+        api_get :jstree, :taxonomy_id => taxonomy.id, :id => taxon.id
+        response = json_response.first
+        expect(response["data"]).to eq(taxon2.name)
+        expect(response["attr"]).to eq({ "name" => taxon2.name, "id" => taxon2.id})
+        expect(response["state"]).to eq("closed")
+      end
+
+      it "can learn how to create a new taxon" do
+        api_get :new, :taxonomy_id => taxonomy.id
+        expect(json_response["attributes"]).to eq(attributes.map(&:to_s))
+        required_attributes = json_response["required_attributes"]
+        expect(required_attributes).to include("name")
+      end
+
+      it "cannot create a new taxon if not an admin" do
+        api_post :create, :taxonomy_id => taxonomy.id, :taxon => { :name => "Location" }
+        assert_unauthorized!
+      end
+
+      it "cannot update a taxon" do
+        api_put :update, :taxonomy_id => taxonomy.id, :id => taxon.id, :taxon => { :name => "I hacked your store!" }
+        assert_unauthorized!
+      end
+
+      it "cannot delete a taxon" do
+        api_delete :destroy, :taxonomy_id => taxonomy.id, :id => taxon.id
+        assert_unauthorized!
+      end
+    end
+
+    context "as an admin" do
+      sign_in_as_admin!
+
+      it "can create" do
+        api_post :create, :taxonomy_id => taxonomy.id, :taxon => { :name => "Colors" }
+        expect(json_response).to have_attributes(attributes)
+        expect(response.status).to eq(201)
+
+        expect(taxonomy.reload.root.children.count).to eq 2
+        taxon = Spree::Taxon.where(:name => 'Colors').first
+
+        expect(taxon.parent_id).to eq taxonomy.root.id
+        expect(taxon.taxonomy_id).to eq taxonomy.id
+      end
+
+      it "can update the position in the list" do
+        taxonomy.root.children << taxon2
+        api_put :update, :taxonomy_id => taxonomy.id, :id => taxon.id, :taxon => {:parent_id => taxon.parent_id, :child_index => 2 }
+        expect(response.status).to eq(200)
+        expect(taxonomy.reload.root.children[0]).to eql taxon2
+        expect(taxonomy.reload.root.children[1]).to eql taxon
+      end
+
+      it "cannot create a new taxon with invalid attributes" do
+        api_post :create, :taxonomy_id => taxonomy.id, :taxon => {}
+        expect(response.status).to eq(422)
+        expect(json_response["error"]).to eq("Invalid resource. Please fix errors and try again.")
+        errors = json_response["errors"]
+
+        expect(taxonomy.reload.root.children.count).to eq 1
+      end
+
+      it "cannot create a new taxon with invalid taxonomy_id" do
+        api_post :create, :taxonomy_id => 1000, :taxon => { :name => "Colors" }
+        expect(response.status).to eq(422)
+        expect(json_response["error"]).to eq("Invalid resource. Please fix errors and try again.")
+
+        errors = json_response["errors"]
+        expect(errors["taxonomy_id"]).not_to be_nil
+        expect(errors["taxonomy_id"].first).to eq "Invalid taxonomy id."
+
+        expect(taxonomy.reload.root.children.count).to eq 1
+      end
+
+      it "can destroy" do
+        api_delete :destroy, :taxonomy_id => taxonomy.id, :id => taxon.id
+        expect(response.status).to eq(204)
+      end
+    end
+
+  end
+end

data/spec/controllers/spree/api/transfer_items_controller_spec.rb

@@ -0,0 +1,152 @@
+require 'spec_helper'
+
+module Spree
+  describe Api::TransferItemsController do
+    render_views
+
+    let!(:stock_transfer) { create(:stock_transfer_with_items) }
+    let(:transfer_item)   { stock_transfer.transfer_items.first }
+
+    before do
+      stub_authentication!
+    end
+
+    context "as a normal user" do
+      describe "#create" do
+        it "cannot create a transfer item" do
+          api_post :create, stock_transfer_id: stock_transfer.to_param
+          expect(response.status).to eq 401
+        end
+      end
+
+      describe "#update" do
+        it "cannot update a transfer item" do
+          api_put :update, stock_transfer_id: stock_transfer.to_param, id: transfer_item.to_param
+          expect(response.status).to eq 401
+        end
+      end
+
+      describe "#destroy" do
+        it "cannot delete a transfer item" do
+          api_delete :destroy, stock_transfer_id: stock_transfer.to_param, id: transfer_item.to_param
+          expect(response.status).to eq 401
+        end
+      end
+    end
+
+    context "as an admin" do
+      sign_in_as_admin!
+
+      describe "#create" do
+        subject do
+          create_params = {
+            stock_transfer_id: stock_transfer.to_param,
+            transfer_item: {
+              variant_id: variant_id,
+              expected_quantity: 1
+            }
+          }
+          api_post :create, create_params
+        end
+
+        context "valid parameters" do
+          let(:variant)           { create(:variant) }
+          let(:variant_id)        { variant.id }
+
+          context "variant is available" do
+            before do
+              variant.stock_items.update_all(count_on_hand: 1)
+            end
+
+            it "can create a transfer item" do
+              subject
+              expect(response.status).to eq 201
+            end
+
+            it "creates a transfer item" do
+              expect { subject }.to change { Spree::TransferItem.count }.by(1)
+            end
+          end
+
+          context "variant is not available" do
+            before do
+              variant.stock_items.update_all(count_on_hand: 0)
+            end
+
+            it "returns an error status" do
+              subject
+              expect(response.status).to eq 422
+            end
+
+            it "does not create a transfer item" do
+              expect { subject }.to_not change { Spree::TransferItem.count }
+            end
+          end
+        end
+      end
+
+      describe "#update" do
+        subject do
+          update_params = { id: transfer_item.to_param, stock_transfer_id: stock_transfer.to_param, transfer_item: { received_quantity: received_quantity } }
+          api_put :update, update_params
+        end
+
+        context "valid parameters" do
+          let(:received_quantity) { 2 }
+
+          it "can update a transfer item" do
+            subject
+            expect(response.status).to eq 200
+          end
+
+          it "updates the transfer item" do
+            expect { subject }.to change { transfer_item.reload.received_quantity }.to(2)
+          end
+        end
+
+        context "invalid parameters" do
+          let(:received_quantity) { -5 }
+
+          it "returns a 422" do
+            subject
+            expect(response.status).to eq 422
+          end
+
+          it "does not update the transfer item" do
+            expect { subject }.to_not change { transfer_item.reload.received_quantity }
+          end
+        end
+      end
+
+      describe "#destroy" do
+        subject { api_delete :destroy, id: transfer_item.to_param, stock_transfer_id: stock_transfer.to_param }
+
+        context "hasn't been finalized" do
+          it "can delete a transfer item" do
+            subject
+            expect(response.status).to eq 200
+          end
+
+          it "deletes the transfer item" do
+            expect { subject }.to change { Spree::TransferItem.count }.by(-1)
+          end
+        end
+
+        context "has been finalized" do
+          before do
+            stock_transfer.update_attributes(finalized_at: Time.now)
+          end
+
+          it "returns an error status code" do
+            subject
+            expect(response.status).to eq 422
+          end
+
+          it "does not delete the transfer item" do
+            expect { subject }.to_not change { Spree::TransferItem.count }
+          end
+        end
+      end
+    end
+  end
+end

data/spec/controllers/spree/api/unauthenticated_products_controller_spec.rb

@@ -0,0 +1,26 @@
+require 'shared_examples/protect_product_actions'
+require 'spec_helper'
+
+module Spree
+  describe Spree::Api::ProductsController, :type => :controller do
+    render_views
+
+    let!(:product) { create(:product) }
+    let(:attributes) { [:id, :name, :description, :price, :available_on, :slug, :meta_description, :meta_keywords, :taxon_ids] }
+
+    context "without authentication" do
+      before { Spree::Api::Config[:requires_authentication] = false }
+
+      it "retrieves a list of products" do
+        api_get :index
+        expect(json_response["products"].first).to have_attributes(attributes)
+        expect(json_response["count"]).to eq(1)
+        expect(json_response["current_page"]).to eq(1)
+        expect(json_response["pages"]).to eq(1)
+      end
+
+      it_behaves_like "modifying product actions are restricted"
+    end
+  end
+end
+