Remove :edit abilities implied by :update abilities

[rails.git] / test / test_helper.rb

diff --git a/test/test_helper.rb b/test/test_helper.rb
index c45c7346541aa420dd760e7d86627a2b5e442d55..171028f4bbabbb376a356137fdb737ede028316d 100644 (file)
--- a/test/test_helper.rb
+++ b/test/test_helper.rb
@@ -133,15 +133,16 @@ module ActiveSupport
       assert_equal a.tags, b.tags, "tags on node #{a.id}"
     end
 
       assert_equal a.tags, b.tags, "tags on node #{a.id}"
     end
 

-    ##
-    # return request header for HTTP Basic Authorization
-    def basic_authorization_header(user, pass)
-      { "Authorization" => format("Basic %<auth>s", :auth => Base64.encode64("#{user}:#{pass}")) }
-    end
-

     ##
     # return request header for HTTP Bearer Authorization
     ##
     # return request header for HTTP Bearer Authorization

-    def bearer_authorization_header(token)
+    def bearer_authorization_header(token_or_user = nil, scopes: Oauth::SCOPES)
+      token = case token_or_user
+              when nil then create(:oauth_access_token, :scopes => scopes).token
+              when User then create(:oauth_access_token, :resource_owner_id => token_or_user.id, :scopes => scopes).token
+              when Doorkeeper::AccessToken then token_or_user.token
+              when String then token_or_user
+              end
+

       { "Authorization" => "Bearer #{token}" }
     end
 
       { "Authorization" => "Bearer #{token}" }
     end
 


@@ -168,7 +169,7 @@ module ActiveSupport
     ##
     # Not sure this is the best response we could give
     def assert_inactive_user(msg = "an inactive user shouldn't be able to access the API")
     ##
     # Not sure this is the best response we could give
     def assert_inactive_user(msg = "an inactive user shouldn't be able to access the API")

-      assert_response :unauthorized, msg
+      assert_response :forbidden, msg

       # assert_equal @response.headers['Error'], ""
     end
 
       # assert_equal @response.headers['Error'], ""
     end