def oauth10_without_callback(client)
token = get_request_token(client)
+ get "/oauth/authorize", :oauth_token => token.token
+ assert_response :success
+ assert_template :authorize
+
post "/oauth/authorize",
:oauth_token => token.token,
:allow_read_prefs => true, :allow_write_prefs => true
def oauth10_refused(client)
token = get_request_token(client)
+ get "/oauth/authorize", :oauth_token => token.token
+ assert_response :success
+ assert_template :authorize
+
post "/oauth/authorize", :oauth_token => token.token
assert_response :success
assert_template :authorize_failure
assert_nil token.authorized_at
assert_not_nil token.invalidated_at
+ get "/oauth/authorize", :oauth_token => token.token
+ assert_response :success
+ assert_template :authorize_failure
+ assert_select "p", "The authorization token is not valid."
+ token.reload
+ assert_nil token.authorized_at
+ assert_not_nil token.invalidated_at
+
post "/oauth/authorize", :oauth_token => token.token
assert_response :success
assert_template :authorize_failure
def oauth10_with_callback(client, callback_url)
token = get_request_token(client)
+ get "/oauth/authorize", :oauth_token => token.token
+ assert_response :success
+ assert_template :authorize
+
post "/oauth/authorize",
:oauth_token => token.token, :oauth_callback => callback_url,
:allow_write_api => true, :allow_read_gpx => true
def oauth10a_without_callback(client)
token = get_request_token(client, :oauth_callback => "oob")
+ get "/oauth/authorize", :oauth_token => token.token
+ assert_response :success
+ assert_template :authorize
+
post "/oauth/authorize",
:oauth_token => token.token,
:allow_read_prefs => true, :allow_write_prefs => true
def oauth10a_with_callback(client, callback_url)
token = get_request_token(client, :oauth_callback => callback_url)
+ get "/oauth/authorize", :oauth_token => token.token
+ assert_response :success
+ assert_template :authorize
+
post "/oauth/authorize",
:oauth_token => token.token,
:allow_write_api => true, :allow_read_gpx => true
def oauth10a_refused(client)
token = get_request_token(client, :oauth_callback => "oob")
+ get "/oauth/authorize", :oauth_token => token.token
+ assert_response :success
+ assert_template :authorize
+
post "/oauth/authorize", :oauth_token => token.token
assert_response :success
assert_template :authorize_failure
assert_nil token.authorized_at
assert_not_nil token.invalidated_at
+ get "/oauth/authorize", :oauth_token => token.token
+ assert_response :success
+ assert_template :authorize_failure
+ assert_select "p", "The authorization token is not valid."
+ token.reload
+ assert_nil token.authorized_at
+ assert_not_nil token.invalidated_at
+
post "/oauth/authorize", :oauth_token => token.token
assert_response :success
assert_template :authorize_failure
assert_not_nil token.created_at
assert_nil token.authorized_at
assert_nil token.invalidated_at
+ assert_equal options[:oauth_callback], token.callback_url
assert_allowed token, client.permissions
token