spree_api 2.3.3 → 2.3.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 5752a91942e0ac29588a3ebb480984ae1e8a4833
-  data.tar.gz: f7a88ac18005ccce8cb89b0e95201174e39404e0
+  metadata.gz: 67164eec95e8c7df0bd09088a07ccf352031bcf5
+  data.tar.gz: fd296233701f4684bde99697a8e009b107e6d2e2
 SHA512:
-  metadata.gz: fe932da355fa5f4289aef12236e5054ea5489152e82d0e9bf1c22d8343c1d96891da9d132477fd6eece63df8f019f5656eeca7e49a825bb5046563a7fe85773a
-  data.tar.gz: 3e6d70b9faa3d422a88f7b30aadc53bffebfc9754121c39cab70ade338e6c81adb3641c00b4fb5fcea70e329db558f20c5e4f2a1f7a4d836648688ac4cdd0798
+  metadata.gz: e6a47aa15c09115f6b8aeb8677c5bc3cac9dd035ac799cd2b3454102b8ec5f2dcaf1a9deadad156dd7ee33168a0e88154e6f7f816af87e5831d5790f4fd12c62
+  data.tar.gz: 01f1be77baf5bd64995358b732ef6003e20cedf4d951fc799a51505bb3d1fe42a5503f2cdb64c457e666e9a1cf69f82d0f3f646d83cc2ad4e6fa653b52cded7f

data/app/controllers/spree/api/payments_controller.rb

@@ -67,7 +67,7 @@ module Spree
 
         def find_order
           @order = Spree::Order.find_by(number: order_id)
-          authorize! :read, @order
+          authorize! :read, @order, order_token
         end
 
         def find_payment

data/spec/controllers/spree/api/orders_controller_spec.rb

@@ -180,7 +180,7 @@ module Spree
       Order.should_receive(:create!).and_return(order = Spree::Order.new)
       order.stub(:associate_user!)
       order.stub_chain(:contents, :add).and_return(line_item = double('LineItem'))
-      line_item.should_receive(:update_attributes).with("special" => true)
+      line_item.should_receive(:update_attributes!).with("special" => true)
 
       controller.stub(permitted_line_item_attributes: [:id, :variant_id, :quantity, :special])
       api_post :create, :order => {

data/spec/controllers/spree/api/payments_controller_spec.rb

@@ -64,6 +64,11 @@ module Spree
           api_get :index, :order_id => order.to_param
           assert_unauthorized!
         end
+
+        it "can view the payments for an order given the order token" do
+          api_get :index, :order_id => order.to_param, :order_token => order.guest_token
+          json_response["payments"].first.should have_attributes(attributes)
+        end
       end
     end
 

data/spec/controllers/spree/api/stock_items_controller_spec.rb

@@ -55,7 +55,7 @@ module Spree
       it 'cannot list of stock items' do
         api_get :index, stock_location_id: stock_location.to_param
         json_response['stock_items'].first.should have_attributes(attributes)
-        json_response['stock_items'].first['variant']['sku'].should include 'ABC'
+        json_response['stock_items'].first['variant']['sku'].should include 'SKU'
       end
 
       it 'requires a stock_location_id to be passed as a parameter' do

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: spree_api
 version: !ruby/object:Gem::Version
-  version: 2.3.3
+  version: 2.3.4
 platform: ruby
 authors:
 - Ryan Bigg
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-09-19 00:00:00.000000000 Z
+date: 2014-10-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: spree_core
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.3.3
+        version: 2.3.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.3.3
+        version: 2.3.4
 - !ruby/object:Gem::Dependency
   name: rabl
   requirement: !ruby/object:Gem::Requirement