unsakini 0.0.0

data/spec/requests/api/board/post/api_board_post_comments_spec.rb

@@ -0,0 +1,370 @@
+require 'rails_helper'
+
+RSpec.describe "Api::Board::Post::Comments", type: :request do
+
+  before(:all) do
+    user_has_shared_board_with_posts_scenario
+  end
+
+  let(:valid_attributes) {
+    {content: Faker::Hacker.say_something_smart}
+  }
+
+  let(:invalid_attributes) {
+    {content: nil}
+  }
+
+  context "Private board" do
+
+    context "Comments on my post" do
+
+      it "returns http unauthorized" do
+        get api_board_post_comments_path(@board, @post)
+        expect(response).to have_http_status(:unauthorized)
+      end
+
+      it "returns http unauthorized" do
+        put api_board_post_comment_path(@board, @post, @comment), params: valid_attributes, as: :json
+        expect(response).to have_http_status(:unauthorized)
+      end
+
+
+      describe "Get all comments on my post" do
+        describe "As a post owner" do
+          it "returns all comments" do
+            get api_board_post_comments_path(@board, @post), headers: auth_headers(@user)
+            expect(response).to have_http_status(:ok)
+            expect(body_to_json('0')).to match_json_schema(:comment)
+            expect(body_to_json.count).to eq @post.comments.count
+          end
+        end
+
+        describe "As another user" do
+          it "returns http forbidden" do
+            get api_board_post_comments_path(@board, @post), headers: auth_headers(@user_2)
+            expect(response).to have_http_status(:forbidden)
+          end
+
+          it "returns http forbidden" do
+            get api_board_post_comments_path(@shared_board, @post), headers: auth_headers(@user_2)
+            expect(response).to have_http_status(:forbidden)
+          end
+        end
+
+      end
+
+      describe "Creating comment to my post" do
+
+        describe "As post owner" do
+
+          it "returns http unauthorized" do
+            post api_board_post_comments_path(@board, @post), as: :json, params: valid_attributes
+            expect(response).to have_http_status(:unauthorized)
+          end
+
+          it "returns http unprocessable_entity" do
+            post(
+              api_board_post_comments_path(@board, @post),
+              headers:  auth_headers(@user),
+              params:   invalid_attributes,
+              as:       :json
+            )
+            expect(response).to have_http_status(:unprocessable_entity)
+            #todo: assert errors
+          end
+
+          it "creates a new comment" do
+            comment_count = @post.comments.count
+            post(
+              api_board_post_comments_path(@board, @post),
+              headers:    auth_headers(@user),
+              params:     valid_attributes,
+              as:         :json
+            )
+            expect(response).to have_http_status(:ok)
+            expect(response.body).to match_json_schema(:comment)
+            expect(body_to_json('id')).to eq @post.comments.last.id
+            expect(body_to_json('user/id')).to eq @user.id
+            expect(Comment.find_by_id(body_to_json('id'))).to eq @post.comments.last
+            expect(@post.comments.count).to eq(comment_count+1)
+          end
+        end
+
+        describe "As another user" do
+
+          it "returns http unauthorized" do
+            post api_board_post_comments_path(@board, @post), as: :json, params: valid_attributes
+            expect(response).to have_http_status(:unauthorized)
+          end
+
+          it "returns http forbidden" do
+            post(
+              api_board_post_comments_path(@board, @post),
+              headers:  auth_headers(@user_2),
+              params:   valid_attributes,
+              as:       :json
+            )
+            expect(response).to have_http_status(:forbidden)
+          end
+
+        end
+
+      end
+
+      describe "Updating my comment on my post" do
+
+        describe "As comment owner" do
+
+          it "updates my comment if user is me" do
+            put(
+              api_board_post_comment_path(@board, @post, @comment),
+              params:   valid_attributes,
+              headers:  auth_headers(@user),
+              as:       :json
+            )
+            expect(response).to have_http_status(:ok)
+            expect(response.body).to match_json_schema(:comment)
+            expect(body_to_json('content')).to eq @comment.reload.content
+            expect(@comment.content).to eq(valid_attributes[:content])
+          end
+        end
+
+        describe "As another user" do
+
+          it "returns http forbidden if not comment owner" do
+            put(
+              api_board_post_comment_path(@board, @post, @comment),
+              params:   valid_attributes,
+              headers:  auth_headers(@user_2),
+              as:       :json
+            )
+            expect(response).to have_http_status(:forbidden)
+          end
+
+        end
+
+      end
+
+      describe "Deleting my comment on my post" do
+
+        describe "As comment owner" do
+
+          it "Deletes my comment if user is me" do
+            prev_comment_count = @post.comments.count
+            delete(
+              api_board_post_comment_path(@board, @post, @comment),
+              headers:  auth_headers(@user),
+            )
+            expect(response).to have_http_status(:ok)
+            expect(@post.comments.count).to eq(prev_comment_count-1)
+            expect(Comment.find_by_id(@comment.id)).to be_nil
+          end
+
+        end
+
+        describe "As another user" do
+
+          it "returns http forbidden if not comment owner" do
+            prev_comment_count = @post.comments.count
+            delete(
+              api_board_post_comment_path(@board, @post, @comment),
+              headers:  auth_headers(@user_2),
+            )
+            expect(response).to have_http_status(:forbidden)
+            expect(@post.comments.count).to eq(prev_comment_count)
+            expect(Comment.find_by_id(@comment.id)).not_to be_nil
+          end
+
+          it "Deletes my comment if user is me" do
+            prev_comment_count = @post.comments.count
+            delete(
+              api_board_post_comment_path(@board, @post, @comment),
+              headers:  auth_headers(@user),
+            )
+            expect(response).to have_http_status(:ok)
+            expect(@post.comments.count).to eq(prev_comment_count-1)
+            expect(Comment.find_by_id(@comment.id)).to be_nil
+          end
+
+        end
+
+      end
+
+    end
+
+  end
+
+  context "Shared Board" do
+
+    context "Comments on My Post" do
+
+      describe "Get all comments on my post" do
+
+        describe "As a post owner" do
+
+          it "returns all comments" do
+            get api_board_post_comments_path(@shared_board, @shared_post), headers: auth_headers(@user)
+            expect(response).to have_http_status(:ok)
+            expect(body_to_json('0')).to match_json_schema(:comment)
+            expect(body_to_json.count).to eq @shared_post.comments.count
+          end
+
+        end
+
+        describe "As another user" do
+          it "returns all comments" do
+            get api_board_post_comments_path(@shared_board, @shared_post), headers: auth_headers(@user_2)
+            expect(response).to have_http_status(:ok)
+            expect(body_to_json('0')).to match_json_schema(:comment)
+            expect(body_to_json.count).to eq @shared_post.comments.count
+          end
+        end
+
+      end
+
+      describe "Creating comment to my post" do
+
+        context "As post owner" do
+
+          it "returns http unprocessable_entity" do
+            post(
+              api_board_post_comments_path(@shared_board, @shared_post),
+              headers:  auth_headers(@user),
+              params:   invalid_attributes,
+              as:       :json
+            )
+            expect(response).to have_http_status(:unprocessable_entity)
+            #todo: assert errors
+          end
+
+          it "creates a new comment" do
+            comment_count = @shared_post.comments.count
+            post(
+              api_board_post_comments_path(@shared_board, @shared_post),
+              headers:    auth_headers(@user),
+              params:     valid_attributes,
+              as:         :json
+            )
+            expect(response).to have_http_status(:ok)
+            expect(response.body).to match_json_schema(:comment)
+            expect(body_to_json('content')).to eq valid_attributes[:content]
+            expect(body_to_json('user/id')).to eq @user.id
+            expect(Comment.find_by_id(body_to_json('id'))).to eq @shared_post.comments.last
+            expect(@shared_post.comments.count).to eq(comment_count+1)
+          end
+
+        end
+
+        context "As another user" do
+
+          it "returns http unprocessable_entity" do
+            post(
+              api_board_post_comments_path(@shared_board, @shared_post),
+              headers:  auth_headers(@user_2),
+              params:   invalid_attributes,
+              as:       :json
+            )
+            expect(response).to have_http_status(:unprocessable_entity)
+            # todo: assert errors
+          end
+
+          it "creates a new comment" do
+            comment_count = @shared_post.comments.count
+            post(
+              api_board_post_comments_path(@shared_board, @shared_post),
+              headers:    auth_headers(@user_2),
+              params:     valid_attributes,
+              as:         :json
+            )
+            expect(response).to have_http_status(:ok)
+            expect(response.body).to match_json_schema(:comment)
+            expect(body_to_json('content')).to eq valid_attributes[:content]
+            expect(body_to_json('user/id')).to eq @user_2.id
+            expect(Comment.find_by_id(body_to_json('id'))).to eq @shared_post.comments.last
+            expect(@shared_post.comments.count).to eq(comment_count+1)
+          end
+
+        end
+
+      end
+
+      describe "Updating my comment" do
+
+        context "As comment owner" do
+          it "updates my comment if user is me" do
+            put(
+              api_board_post_comment_path(@shared_board, @shared_post, @shared_comment),
+              params:   valid_attributes,
+              headers:  auth_headers(@user),
+              as:       :json
+            )
+            expect(response).to have_http_status(:ok)
+            expect(body_to_json('content')).to eq(valid_attributes[:content])
+            expect(@shared_comment.reload.content).to eq valid_attributes[:content]
+          end
+        end
+
+        context "As another user" do
+
+          it "returns http forbidden if not comment owner" do
+            put(
+              api_board_post_comment_path(@shared_board, @shared_post, @shared_comment),
+              params:   valid_attributes,
+              headers:  auth_headers(@user_2),
+              as:       :json
+            )
+            expect(response).to have_http_status(:forbidden)
+          end
+        end
+      end
+
+      describe "Deleting my comment on my post" do
+
+        context "As comment owner" do
+
+          it "Deletes my comment if user is me" do
+            prev_comment_count = @shared_post.comments.count
+            delete(
+              api_board_post_comment_path(@shared_board, @shared_post, @shared_comment),
+              headers:  auth_headers(@user),
+            )
+            expect(response).to have_http_status(:ok)
+            expect(@shared_post.comments.count).to eq(prev_comment_count-1)
+            expect(Comment.find_by_id(@shared_comment.id)).to be_nil
+          end
+
+        end
+
+        context "As another user" do
+
+          it "returns http forbidden if not comment owner" do
+            prev_comment_count = @shared_post.comments.count
+            delete(
+              api_board_post_comment_path(@shared_board, @shared_post, @shared_comment),
+              headers:  auth_headers(@user_2),
+            )
+            expect(response).to have_http_status(:forbidden)
+            expect(@shared_post.comments.count).to eq(prev_comment_count)
+            expect(Comment.find_by_id(@shared_comment.id)).not_to be_nil
+          end
+
+          it "Deletes my comment if user is me" do
+            prev_comment_count = @shared_post.comments.count
+            delete(
+              api_board_post_comment_path(@shared_board, @shared_post, @shared_comment),
+              headers:  auth_headers(@user),
+            )
+            expect(response).to have_http_status(:ok)
+            expect(@shared_post.comments.count).to eq(prev_comment_count-1)
+            expect(Comment.find_by_id(@shared_comment.id)).to be_nil
+          end
+
+        end
+
+      end
+
+    end
+
+  end
+
+end

data/spec/requests/render_app_index_spec.rb

@@ -0,0 +1,19 @@
+require 'rails_helper'
+
+RSpec.describe "WebBaseController", type: :request do
+
+  describe 'catch html5 pushState routes' do
+
+    def self.visit_app_urls(urls)
+      urls.each do |url|
+        it "renders app/index.html when visiting #{url}" do
+          get "/#{url}"
+          expect(response.body).to match File.read(Rails.public_path.join("app","index.html"))
+        end
+      end
+    end
+
+    visit_app_urls(['/app', 'app/', 'app/*anything'])
+
+  end
+end

data/spec/schema/board.json

@@ -0,0 +1,39 @@
+{
+  "type": "object",
+  "required": [
+    "board",
+    "id",
+    "is_admin",
+    "encrypted_password",
+    "created_at",
+    "updated_at"
+  ],
+  "properties": {
+    "board": {
+      "type": "object",
+      "required": [
+        "name"
+      ],
+      "properties": {
+        "name": {
+          "type": "string"
+        }
+      }
+    },
+    "id": {
+      "type": "integer"
+    },
+    "is_admin": {
+      "type": "boolean"
+    },
+    "encrypted_password": {
+      "type": "string|nil"
+    },
+    "created_at": {
+      "type": "string"
+    },
+    "updated_at": {
+      "type": "string"
+    }
+  }
+}

data/spec/schema/comment.json

@@ -0,0 +1,51 @@
+{
+  "type": "object",
+  "required": [
+    "id",
+    "content",
+    "user",
+    "created_at",
+    "updated_at"
+  ],
+  "properties": {
+    "id": {
+      "type": "integer"
+    },
+    "content": {
+      "type": "string"
+    },
+    "created_at": {
+      "type": "string"
+    },
+    "updated_at": {
+      "type": "string"
+    },
+    "user": {
+      "type": "object",
+      "requires": [
+        "id",
+        "name",
+        "email",
+        "created_at",
+        "updated_at"
+      ],
+      "properties": {
+        "id": {
+          "type": "integer"
+        },
+        "name": {
+          "type": "string"
+        },
+        "email": {
+          "type": "string"
+        },
+        "created_at": {
+          "type": "string"
+        },
+        "updated_at": {
+          "type": "string"
+        }
+      }
+    }
+  }
+}

data/spec/schema/post.json

@@ -0,0 +1,87 @@
+{
+  "type": "object",
+  "required": [
+    "id",
+    "title",
+    "content",
+    "user",
+    "board",
+    "created_at",
+    "updated_at"
+  ],
+  "properties": {
+    "id": {
+      "type": "integer"
+    },
+    "title": {
+      "type": "string"
+    },
+    "content": {
+      "type": "string"
+    },
+    "created_at": {
+      "type": "string"
+    },
+    "updated_at": {
+      "type": "string"
+    },
+    "user": {
+      "type": "object",
+      "requires": [
+        "id",
+        "name",
+        "email",
+        "created_at",
+        "updated_at"
+      ],
+      "properties": {
+        "id": {
+          "type": "integer"
+        },
+        "name": {
+          "type": "string"
+        },
+        "email": {
+          "type": "string"
+        },
+        "created_at": {
+          "type": "string"
+        },
+        "updated_at": {
+          "type": "string"
+        }
+      }
+    },
+    "board": {
+      "type": "object",
+      "required": [
+        "id",
+        "is_admin",
+        "name",
+        "encrypted_password",
+        "created_at",
+        "updated_at"
+      ],
+      "properties": {
+        "id": {
+          "type": "integer"
+        },
+        "is_admin": {
+          "type": "boolean"
+        },
+        "name": {
+          "type": "string"
+        },
+        "encrypted_password": {
+          "type": "string|nil"
+        },
+        "created_at": {
+          "type": "string"
+        },
+        "updated_at": {
+          "type": "string"
+        }
+      }
+    }
+  }
+}

data/spec/schema/user.json

@@ -0,0 +1,27 @@
+{
+  "type": "object",
+  "requires": [
+    "id",
+    "name",
+    "email",
+    "created_at",
+    "updated_at"
+  ],
+  "properties": {
+    "id": {
+      "type": "integer"
+    },
+    "name": {
+      "type": "string"
+    },
+    "email": {
+      "type": "string"
+    },
+    "created_at": {
+      "type": "string"
+    },
+    "updated_at": {
+      "type": "string"
+    }
+  }
+}

data/spec/spec_helper.rb

@@ -0,0 +1,67 @@
+ENV['RAILS_ENV'] ||= 'test'
+
+require File.expand_path("../dummy/config/environment.rb", __FILE__)
+require 'rspec/rails'
+# require 'rspec/autorun'
+require 'byebug'
+require 'rb-readline'
+require 'factory_girl_rails'
+require 'json_spec'
+require 'json-schema-rspec'
+require 'faker'
+require 'database_cleaner'
+
+Rails.backtrace_cleaner.remove_silencers!
+
+# Load support files
+Dir["#{File.dirname(__FILE__)}/support/**/*.rb"].each { |f| require f }
+Dir["#{File.dirname(__FILE__)}/concerns/**/*.rb"].each { |f| require f }
+
+RSpec.configure do |config|
+
+  config.mock_with :rspec
+  config.use_transactional_fixtures = true
+  config.infer_base_class_for_anonymous_controllers = false
+  # config.order = "random"
+
+  config.include JsonSpec::Helpers
+  config.include FactoryGirl::Syntax::Methods
+
+
+  RSpec.configure do |config|
+    config.include JSON::SchemaMatchers
+    config.json_schemas[:user] = "spec/schema/user.json"
+    config.json_schemas[:board] = "spec/schema/board.json"
+    config.json_schemas[:post] = "spec/schema/post.json"
+    config.json_schemas[:comment] = "spec/schema/comment.json"
+  end
+
+
+  # http://stackoverflow.com/questions/5608203/rspec-integration-test-not-cleaning-the-database
+  # http://stackoverflow.com/questions/29466868/rspec-how-to-clean-the-database-after-each-test
+
+  RSpec.configure do |config|
+    config.before(:suite) do
+      DatabaseCleaner.clean_with(:truncation)
+    end
+
+    config.before(:each) do
+      DatabaseCleaner.strategy = :transaction
+    end
+
+    # config.before(:each, :js => true) do
+    #   DatabaseCleaner.strategy = :truncation
+    # end
+
+    config.before(:each) do
+      DatabaseCleaner.start
+    end
+
+    config.after(:each) do
+      DatabaseCleaner.clean
+    end
+
+  end
+
+
+end

data/spec/support/auth_helper.rb

@@ -0,0 +1,17 @@
+
+module AuthHelper
+
+  def auth_headers(user)
+  	# debugger
+    token = Knock::AuthToken.new(payload: { sub: user.id }).token
+
+    {
+      'Authorization': "Bearer #{token}"
+    }
+  end
+
+end
+
+RSpec.configure do |config|
+  config.include AuthHelper
+end