Merge remote-tracking branch 'upstream/pull/2422'

[rails.git] / test / models / oauth_nonce_test.rb

diff --git a/test/models/oauth_nonce_test.rb b/test/models/oauth_nonce_test.rb
index ffbad0af6a4f2dd04c4d66ab849effdb9658c3b5..dd97278c132415ad50040705191d90dd87685161 100644 (file)
--- a/test/models/oauth_nonce_test.rb
+++ b/test/models/oauth_nonce_test.rb
@@ -1,15 +1,13 @@
-require 'test_helper'
+require "test_helper"

 
 class OauthNonceTest < ActiveSupport::TestCase
 
 class OauthNonceTest < ActiveSupport::TestCase

-  api_fixtures
-

   ##
   # the nonce has only one property, that it is a unique pair of
   # string and timestamp.
   def test_nonce_uniqueness
     string = "0123456789ABCDEF"
   ##
   # the nonce has only one property, that it is a unique pair of
   # string and timestamp.
   def test_nonce_uniqueness
     string = "0123456789ABCDEF"

-    timestamp = Time.now
-    
+    timestamp = Time.now.to_i
+

     nonce1 = OauthNonce.remember(string, timestamp)
     assert_not_equal false, nonce1, "First nonce should be unique. Check your test database is empty."
 
     nonce1 = OauthNonce.remember(string, timestamp)
     assert_not_equal false, nonce1, "First nonce should be unique. Check your test database is empty."
 


@@ -17,4 +15,15 @@ class OauthNonceTest < ActiveSupport::TestCase
     assert_equal false, nonce2, "Shouldn't be able to remember the same nonce twice."
   end
 
     assert_equal false, nonce2, "Shouldn't be able to remember the same nonce twice."
   end
 

+  ##
+  # nonces that are not current should be rejected
+  def test_nonce_not_current
+    string = "0123456789ABCDEF"
+
+    nonce1 = OauthNonce.remember(string, Time.now.to_i - 86430)
+    assert_equal false, nonce1, "Nonces over a day in the past should be rejected"
+
+    nonce2 = OauthNonce.remember(string, Time.now.to_i - 86370)
+    assert_not_equal false, nonce2, "Nonces under a day in the past should be rejected"
+  end

 end
 end