spree_api 3.1.14 → 3.2.0.rc1

data/spec/shared_examples/protect_product_actions.rb

@@ -0,0 +1,17 @@
+shared_examples "modifying product actions are restricted" do
+  it "cannot create a new product if not an admin" do
+    api_post :create, product: { name: "Brand new product!" }
+    assert_unauthorized!
+  end
+
+  it "cannot update a product" do
+    api_put :update, id: product.to_param, product: { name: "I hacked your store!" }
+    assert_unauthorized!
+  end
+
+  it "cannot delete a product" do
+    api_delete :destroy, id: product.to_param
+    assert_unauthorized!
+  end
+end
+

data/spec/spec_helper.rb

@@ -0,0 +1,60 @@
+if ENV["COVERAGE"]
+  # Run Coverage report
+  require 'simplecov'
+  SimpleCov.start do
+    add_group 'Controllers', 'app/controllers'
+    add_group 'Helpers', 'app/helpers'
+    add_group 'Mailers', 'app/mailers'
+    add_group 'Models', 'app/models'
+    add_group 'Views', 'app/views'
+    add_group 'Libraries', 'lib'
+  end
+end
+
+# This file is copied to spec/ when you run 'rails generate rspec:install'
+ENV["RAILS_ENV"] ||= 'test'
+
+begin
+  require File.expand_path("../dummy/config/environment", __FILE__)
+rescue LoadError
+  puts "Could not load dummy application. Please ensure you have run `bundle exec rake test_app`"
+  exit
+end
+
+require 'rspec/rails'
+require 'ffaker'
+
+# Requires supporting ruby files with custom matchers and macros, etc,
+# in spec/support/ and its subdirectories.
+Dir[File.dirname(__FILE__) + "/support/**/*.rb"].each {|f| require f}
+
+require 'spree/testing_support/factories'
+require 'spree/testing_support/preferences'
+
+require 'spree/api/testing_support/caching'
+require 'spree/api/testing_support/helpers'
+require 'spree/api/testing_support/setup'
+require 'spree/testing_support/shoulda_matcher_configuration'
+
+RSpec.configure do |config|
+  config.backtrace_exclusion_patterns = [/gems\/activesupport/, /gems\/actionpack/, /gems\/rspec/]
+  config.color = true
+  config.fail_fast = ENV['FAIL_FAST'] || false
+  config.infer_spec_type_from_file_location!
+  config.raise_errors_for_deprecations!
+  config.use_transactional_fixtures = true
+
+  config.include FactoryGirl::Syntax::Methods
+  config.include Spree::Api::TestingSupport::Helpers, type: :controller
+  config.extend Spree::Api::TestingSupport::Setup, type: :controller
+  config.include Spree::TestingSupport::Preferences, type: :controller
+
+  config.before do
+    Spree::Api::Config[:requires_authentication] = true
+  end
+
+  config.include VersionCake::TestHelpers, type: :controller
+  config.before(:each, type: :controller) do
+    set_request_version('', 1)
+  end
+end

data/spec/support/controller_hacks.rb

@@ -0,0 +1,40 @@
+require 'active_support/all'
+module ControllerHacks
+  extend ActiveSupport::Concern
+
+  included do
+    routes { Spree::Core::Engine.routes }
+  end
+
+  def api_get(action, params={}, session=nil, flash=nil)
+    api_process(action, params, session, flash, "GET")
+  end
+
+  def api_post(action, params={}, session=nil, flash=nil)
+    api_process(action, params, session, flash, "POST")
+  end
+
+  def api_put(action, params={}, session=nil, flash=nil)
+    api_process(action, params, session, flash, "PUT")
+  end
+
+  def api_delete(action, params={}, session=nil, flash=nil)
+    api_process(action, params, session, flash, "DELETE")
+  end
+
+  def api_process(action, params={}, session=nil, flash=nil, method="get")
+    scoping = respond_to?(:resource_scoping) ? resource_scoping : {}
+    process(
+      action,
+      method: method,
+      params: params.merge(scoping),
+      session: session,
+      flash: flash,
+      format: :json
+    )
+  end
+end
+
+RSpec.configure do |config|
+  config.include ControllerHacks, type: :controller
+end

data/spec/support/database_cleaner.rb

@@ -0,0 +1,14 @@
+RSpec.configure do |config|
+  config.before(:suite) do
+    DatabaseCleaner.strategy = :transaction
+    DatabaseCleaner.clean_with(:truncation)
+  end
+
+  config.before(:each) do
+    DatabaseCleaner.start
+  end
+
+  config.after(:each) do
+    DatabaseCleaner.clean
+  end
+end

data/spec/support/have_attributes_matcher.rb

@@ -0,0 +1,13 @@
+
+
+
+
+RSpec::Matchers.define :have_attributes do |expected_attributes|
+  match do |actual|
+    # actual is a Hash object representing an object, like this:
+    # { "name" => "Product #1" }
+    actual_attributes = actual.keys.map(&:to_sym)
+    expected_attributes.map(&:to_sym).all? { |attr| actual_attributes.include?(attr) }
+  end
+end
+

data/spree_api.gemspec

@@ -7,15 +7,18 @@ Gem::Specification.new do |s|
   s.description   = %q{Spree's API}
   s.summary       = %q{Spree's API}
   s.homepage      = 'https://spreecommerce.com'
-  s.license       = 'BSD-3'
+  s.license       = 'BSD-3-Clause'
 
-  s.files         = `git ls-files`.split($\).reject { |f| f.match(/^spec/) && !f.match(/^spec\/fixtures/) }
+  s.required_ruby_version = '>= 2.2.2'
+
+  s.files         = `git ls-files`.split($\)
   s.executables   = s.files.grep(%r{^bin/}).map{ |f| File.basename(f) }
+  s.test_files    = s.files.grep(%r{^(test|spec|features)/})
   s.name          = "spree_api"
   s.require_paths = ["lib"]
   s.version       = Spree.version
 
   s.add_dependency 'spree_core', s.version
-  s.add_dependency 'rabl', '~> 0.12.0'
-  s.add_dependency 'versioncake', '~> 2.3.1'
+  s.add_dependency 'rabl', '~> 0.13.1'
+  s.add_dependency 'versioncake', '~> 3.1.0'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: spree_api
 version: !ruby/object:Gem::Version
-  version: 3.1.14
+  version: 3.2.0.rc1
 platform: ruby
 authors:
 - Ryan Bigg
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-01-24 00:00:00.000000000 Z
+date: 2016-12-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: spree_core
@@ -16,42 +16,42 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.1.14
+        version: 3.2.0.rc1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.1.14
+        version: 3.2.0.rc1
 - !ruby/object:Gem::Dependency
   name: rabl
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.12.0
+        version: 0.13.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.12.0
+        version: 0.13.1
 - !ruby/object:Gem::Dependency
   name: versioncake
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 2.3.1
+        version: 3.1.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 2.3.1
+        version: 3.1.0
 description: Spree's API
 email:
 - ryan@spreecommerce.com
@@ -87,6 +87,7 @@ files:
 - app/controllers/spree/api/v1/stock_locations_controller.rb
 - app/controllers/spree/api/v1/stock_movements_controller.rb
 - app/controllers/spree/api/v1/stores_controller.rb
+- app/controllers/spree/api/v1/tags_controller.rb
 - app/controllers/spree/api/v1/taxonomies_controller.rb
 - app/controllers/spree/api/v1/taxons_controller.rb
 - app/controllers/spree/api/v1/users_controller.rb
@@ -169,6 +170,7 @@ files:
 - app/views/spree/api/v1/stock_movements/show.v1.rabl
 - app/views/spree/api/v1/stores/index.v1.rabl
 - app/views/spree/api/v1/stores/show.v1.rabl
+- app/views/spree/api/v1/tags/index.v1.rabl
 - app/views/spree/api/v1/taxonomies/index.v1.rabl
 - app/views/spree/api/v1/taxonomies/jstree.rabl
 - app/views/spree/api/v1/taxonomies/nested.v1.rabl
@@ -206,11 +208,52 @@ files:
 - lib/spree/api/testing_support/setup.rb
 - lib/spree_api.rb
 - script/rails
+- spec/controllers/spree/api/base_controller_spec.rb
+- spec/controllers/spree/api/v1/addresses_controller_spec.rb
+- spec/controllers/spree/api/v1/checkouts_controller_spec.rb
+- spec/controllers/spree/api/v1/classifications_controller_spec.rb
+- spec/controllers/spree/api/v1/countries_controller_spec.rb
+- spec/controllers/spree/api/v1/credit_cards_controller_spec.rb
+- spec/controllers/spree/api/v1/images_controller_spec.rb
+- spec/controllers/spree/api/v1/inventory_units_controller_spec.rb
+- spec/controllers/spree/api/v1/line_items_controller_spec.rb
+- spec/controllers/spree/api/v1/option_types_controller_spec.rb
+- spec/controllers/spree/api/v1/option_values_controller_spec.rb
+- spec/controllers/spree/api/v1/orders_controller_spec.rb
+- spec/controllers/spree/api/v1/payments_controller_spec.rb
+- spec/controllers/spree/api/v1/product_properties_controller_spec.rb
+- spec/controllers/spree/api/v1/products_controller_spec.rb
+- spec/controllers/spree/api/v1/promotion_application_spec.rb
+- spec/controllers/spree/api/v1/promotions_controller_spec.rb
+- spec/controllers/spree/api/v1/properties_controller_spec.rb
+- spec/controllers/spree/api/v1/return_authorizations_controller_spec.rb
+- spec/controllers/spree/api/v1/shipments_controller_spec.rb
+- spec/controllers/spree/api/v1/states_controller_spec.rb
+- spec/controllers/spree/api/v1/stock_items_controller_spec.rb
+- spec/controllers/spree/api/v1/stock_locations_controller_spec.rb
+- spec/controllers/spree/api/v1/stock_movements_controller_spec.rb
+- spec/controllers/spree/api/v1/stores_controller_spec.rb
+- spec/controllers/spree/api/v1/tags_controller_spec.rb
+- spec/controllers/spree/api/v1/taxonomies_controller_spec.rb
+- spec/controllers/spree/api/v1/taxons_controller_spec.rb
+- spec/controllers/spree/api/v1/unauthenticated_products_controller_spec.rb
+- spec/controllers/spree/api/v1/users_controller_spec.rb
+- spec/controllers/spree/api/v1/variants_controller_spec.rb
+- spec/controllers/spree/api/v1/zones_controller_spec.rb
 - spec/fixtures/thinking-cat.jpg
+- spec/models/spree/legacy_user_spec.rb
+- spec/requests/rabl_cache_spec.rb
+- spec/requests/ransackable_attributes_spec.rb
+- spec/requests/version_spec.rb
+- spec/shared_examples/protect_product_actions.rb
+- spec/spec_helper.rb
+- spec/support/controller_hacks.rb
+- spec/support/database_cleaner.rb
+- spec/support/have_attributes_matcher.rb
 - spree_api.gemspec
 homepage: https://spreecommerce.com
 licenses:
-- BSD-3
+- BSD-3-Clause
 metadata: {}
 post_install_message: 
 rdoc_options: []
@@ -220,16 +263,58 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 2.2.2
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - ">"
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 1.3.1
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.6.10
+rubygems_version: 2.5.1
 signing_key: 
 specification_version: 4
 summary: Spree's API
-test_files: []
+test_files:
+- spec/controllers/spree/api/base_controller_spec.rb
+- spec/controllers/spree/api/v1/addresses_controller_spec.rb
+- spec/controllers/spree/api/v1/checkouts_controller_spec.rb
+- spec/controllers/spree/api/v1/classifications_controller_spec.rb
+- spec/controllers/spree/api/v1/countries_controller_spec.rb
+- spec/controllers/spree/api/v1/credit_cards_controller_spec.rb
+- spec/controllers/spree/api/v1/images_controller_spec.rb
+- spec/controllers/spree/api/v1/inventory_units_controller_spec.rb
+- spec/controllers/spree/api/v1/line_items_controller_spec.rb
+- spec/controllers/spree/api/v1/option_types_controller_spec.rb
+- spec/controllers/spree/api/v1/option_values_controller_spec.rb
+- spec/controllers/spree/api/v1/orders_controller_spec.rb
+- spec/controllers/spree/api/v1/payments_controller_spec.rb
+- spec/controllers/spree/api/v1/product_properties_controller_spec.rb
+- spec/controllers/spree/api/v1/products_controller_spec.rb
+- spec/controllers/spree/api/v1/promotion_application_spec.rb
+- spec/controllers/spree/api/v1/promotions_controller_spec.rb
+- spec/controllers/spree/api/v1/properties_controller_spec.rb
+- spec/controllers/spree/api/v1/return_authorizations_controller_spec.rb
+- spec/controllers/spree/api/v1/shipments_controller_spec.rb
+- spec/controllers/spree/api/v1/states_controller_spec.rb
+- spec/controllers/spree/api/v1/stock_items_controller_spec.rb
+- spec/controllers/spree/api/v1/stock_locations_controller_spec.rb
+- spec/controllers/spree/api/v1/stock_movements_controller_spec.rb
+- spec/controllers/spree/api/v1/stores_controller_spec.rb
+- spec/controllers/spree/api/v1/tags_controller_spec.rb
+- spec/controllers/spree/api/v1/taxonomies_controller_spec.rb
+- spec/controllers/spree/api/v1/taxons_controller_spec.rb
+- spec/controllers/spree/api/v1/unauthenticated_products_controller_spec.rb
+- spec/controllers/spree/api/v1/users_controller_spec.rb
+- spec/controllers/spree/api/v1/variants_controller_spec.rb
+- spec/controllers/spree/api/v1/zones_controller_spec.rb
+- spec/fixtures/thinking-cat.jpg
+- spec/models/spree/legacy_user_spec.rb
+- spec/requests/rabl_cache_spec.rb
+- spec/requests/ransackable_attributes_spec.rb
+- spec/requests/version_spec.rb
+- spec/shared_examples/protect_product_actions.rb
+- spec/spec_helper.rb
+- spec/support/controller_hacks.rb
+- spec/support/database_cleaner.rb
+- spec/support/have_attributes_matcher.rb