spree_api 2.3.7 → 2.3.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: c86642ea05d6a5350541464b82b8b774febe3532
-  data.tar.gz: 91018c99f686869bda68dd2739a3b7c12bca104a
+  metadata.gz: a470389ba42cc2784f2674b4314aae172289e33a
+  data.tar.gz: 5337359568da0e0eea4f7bed4ee290fdfb3250f5
 SHA512:
-  metadata.gz: 06c52b89378e523abd9afb3b70d062db5e5c470f7cf0f6b29bfe34183404ad5b6b110d6e4b89e54fc1885fddf7e93fc10c4290cfcc83958c9fd5b9dac35cf58b
-  data.tar.gz: 293b54a13a576887073affb535b710c96f46101a38f5da1748733ec88a56d22041ad8c487bfc6fae48d0611fe0f7443ebc58b2986701382c6fa99534336a1985
+  metadata.gz: 647eccbe632e19c45bd23103cc8e0cf089cd037983b0b175acf7fd418820761f3858e52dfabb4a08cc3a0e3fbfbdb5f4a5d16c6d26463d6ba5af6912a4fa8971
+  data.tar.gz: 70c8168c225c5891b62bf63f7ea0fcfb4b9348f1638f4612e2f5ab8279e8097ea31669f4a7c3160f2f0ebd9e863392d04c99f9d95dea1856446ceb68fff07c7e

data/app/controllers/spree/api/base_controller.rb

@@ -65,7 +65,7 @@ module Spree
       end
 
       def load_user
-        @current_api_user = (try_spree_current_user || Spree.user_class.find_by(spree_api_key: api_key.to_s))
+        @current_api_user = Spree.user_class.find_by(spree_api_key: api_key.to_s)
       end
 
       def authenticate_user

data/lib/spree/api/testing_support/helpers.rb

@@ -22,7 +22,7 @@ module Spree
         end
 
         def stub_authentication!
-          allow(Spree::LegacyUser).to receive(:find_by).with(hash_including(:spree_api_key)) { current_api_user }
+          allow(Spree.user_class).to receive(:find_by).with(hash_including(:spree_api_key)) { current_api_user }
         end
 
         # This method can be overriden (with a let block) inside a context

data/spec/controllers/spree/api/base_controller_spec.rb

@@ -8,17 +8,9 @@ describe Spree::Api::BaseController, :type => :controller do
     end
   end
 
-  context "signed in as a user using an authentication extension" do
-    before do
-      user = double(:email => "spree@example.com")
-      allow(user).to receive_message_chain :spree_roles, pluck: []
-      allow(controller).to receive_messages :try_spree_current_user => user
-    end
-
-    it "can make a request" do
-      api_get :index
-      expect(json_response).to eq({ "products" => [] })
-      expect(response.status).to eq(200)
+  before do
+    @routes = ActionDispatch::Routing::RouteSet.new.tap do |r|
+      r.draw { get 'index', to: 'spree/api/base#index' }
     end
   end
 

data/spec/controllers/spree/api/line_items_controller_spec.rb

@@ -10,8 +10,11 @@ module Spree
     let(:attributes) { [:id, :quantity, :price, :variant, :total, :display_amount, :single_display_amount] }
     let(:resource_scoping) { { :order_id => order.to_param } }
 
+    before do
+      stub_authentication!
+    end
+
     it "can learn how to create a new line item" do
-      allow(controller).to receive_messages :try_spree_current_user => current_api_user
       api_get :new
       expect(json_response["attributes"]).to eq(["quantity", "price", "variant_id"])
       required_attributes = json_response["required_attributes"]
@@ -37,7 +40,6 @@ module Spree
 
     context "as the order owner" do
       before do
-        allow(controller).to receive_messages :try_spree_current_user => current_api_user
         allow_any_instance_of(Order).to receive_messages :user => current_api_user
       end
 
@@ -126,7 +128,6 @@ module Spree
     context "as just another user" do
       before do
         user = create(:user)
-        allow(controller).to receive_messages :try_spree_current_user => user
       end
 
       it "cannot add a new line item to the order" do

data/spec/controllers/spree/api/orders_controller_spec.rb

@@ -172,7 +172,7 @@ module Spree
         allow(user).to receive_message_chain(:spree_roles, :pluck).and_return(["bar"])
         allow(user).to receive(:has_spree_role?).with('bar').and_return(true)
         allow(user).to receive(:has_spree_role?).with('admin').and_return(false)
-        allow(controller).to receive_messages try_spree_current_user: user
+        allow(Spree.user_class).to receive_messages find_by: user
         api_get :show, :id => order.to_param
         expect(response.status).to eq(200)
       end

data/spec/controllers/spree/api/users_controller_spec.rb

@@ -4,42 +4,40 @@ module Spree
   describe Api::UsersController, :type => :controller do
     render_views
 
-    let(:user) { create(:user) }
+    let(:user) { create(:user, spree_api_key: rand) }
     let(:stranger) { create(:user, :email => 'stranger@example.com') }
     let(:attributes) { [:id, :email, :created_at, :updated_at] }
 
-    before { stub_authentication! }
-
     context "as a normal user" do
-      before do
-        allow(controller).to receive_messages :try_spree_current_user => user
-      end
-
       it "can get own details" do
-        api_get :show, :id => user.id
+        api_get :show, id: user.id, token: user.spree_api_key
 
         expect(json_response['email']).to eq user.email
       end
 
       it "cannot get other users details" do
-        api_get :show, :id => stranger.id
+        api_get :show, id: stranger.id, token: user.spree_api_key
 
         assert_not_found!
       end
 
       it "can learn how to create a new user" do
-        api_get :new
+        api_get :new, token: user.spree_api_key
         expect(json_response["attributes"]).to eq(attributes.map(&:to_s))
       end
 
       it "can create a new user" do
-        api_post :create, :user => { :email => 'new@example.com', :password => 'spree123', :password_confirmation => 'spree123' }
+        user_params = {
+          :email => 'new@example.com', :password => 'spree123', :password_confirmation => 'spree123'
+        }
+
+        api_post :create, :user => user_params, token: user.spree_api_key
         expect(json_response['email']).to eq 'new@example.com'
       end
 
       # there's no validations on LegacyUser?
       xit "cannot create a new user with invalid attributes" do
-        api_post :create, :user => {}
+        api_post :create, :user => {}, token: user.spree_api_key
         expect(response.status).to eq(422)
         expect(json_response["error"]).to eq("Invalid resource. Please fix errors and try again.")
         errors = json_response["errors"]
@@ -47,7 +45,7 @@ module Spree
 
       it "can update own details" do
         country = create(:country)
-        api_put :update, id: user.id, user: {
+        api_put :update, id: user.id, token: user.spree_api_key, user: {
           email: "mine@example.com",
           bill_address_attributes: {
             first_name: 'First',
@@ -76,23 +74,23 @@ module Spree
       end
 
       it "cannot update other users details" do
-        api_put :update, :id => stranger.id, :user => { :email => "mine@example.com" }
+        api_put :update, id: stranger.id, token: user.spree_api_key, user: { :email => "mine@example.com" }
         assert_not_found!
       end
 
       it "can delete itself" do
-        api_delete :destroy, :id => user.id
+        api_delete :destroy, id: user.id, token: user.spree_api_key
         expect(response.status).to eq(204)
       end
 
       it "cannot delete other user" do
-        api_delete :destroy, :id => stranger.id
+        api_delete :destroy, id: stranger.id, token: user.spree_api_key
         assert_not_found!
       end
 
       it "should only get own details on index" do
         2.times { create(:user) }
-        api_get :index
+        api_get :index, token: user.spree_api_key
 
         expect(Spree.user_class.count).to eq 3
         expect(json_response['count']).to eq 1
@@ -101,6 +99,8 @@ module Spree
     end
 
     context "as an admin" do
+      before { stub_authentication! }
+
       sign_in_as_admin!
 
       it "gets all users" do

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: spree_api
 version: !ruby/object:Gem::Version
-  version: 2.3.7
+  version: 2.3.8
 platform: ruby
 authors:
 - Ryan Bigg
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-02-23 00:00:00.000000000 Z
+date: 2015-03-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: spree_core
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.3.7
+        version: 2.3.8
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.3.7
+        version: 2.3.8
 - !ruby/object:Gem::Dependency
   name: rabl
   requirement: !ruby/object:Gem::Requirement