Merge remote-tracking branch 'upstream/pull/4565'

[rails.git] / test / abilities / api_capability_test.rb

diff --git a/test/abilities/api_capability_test.rb b/test/abilities/api_capability_test.rb
index 8a98f29e0e6274c6c871e57bbc9b697a1aa6666a..bcfcaf74e4d809ad0a8aba72af5c0837f8af062d 100644 (file)
--- a/test/abilities/api_capability_test.rb
+++ b/test/abilities/api_capability_test.rb
@@ -2,19 +2,9 @@
 
 require "test_helper"
 
 
 require "test_helper"
 

-class ApiCapabilityTest < ActiveSupport::TestCase
-  def tokens(*toks)
-    AccessToken.new do |token|
-      toks.each do |t|
-        token.public_send("#{t}=", true)
-      end
-    end
-  end
-end
-
-class ChangesetCommentApiCapabilityTest < ApiCapabilityTest
+class ChangesetCommentApiCapabilityTest < ActiveSupport::TestCase

   test "as a normal user with permissionless token" do
   test "as a normal user with permissionless token" do

-    token = create(:access_token)
+    token = create(:oauth_access_token)

     capability = ApiCapability.new token
 
     [:create, :destroy, :restore].each do |action|
     capability = ApiCapability.new token
 
     [:create, :destroy, :restore].each do |action|


@@ -22,8 +12,8 @@ class ChangesetCommentApiCapabilityTest < ApiCapabilityTest
     end
   end
 
     end
   end
 

-  test "as a normal user with allow_write_api token" do
-    token = create(:access_token, :allow_write_api => true)
+  test "as a normal user with write_api token" do
+    token = create(:oauth_access_token, :scopes => %w[write_api])

     capability = ApiCapability.new token
 
     [:destroy, :restore].each do |action|
     capability = ApiCapability.new token
 
     [:destroy, :restore].each do |action|


@@ -36,7 +26,7 @@ class ChangesetCommentApiCapabilityTest < ApiCapabilityTest
   end
 
   test "as a moderator with permissionless token" do
   end
 
   test "as a moderator with permissionless token" do

-    token = create(:access_token, :user => create(:moderator_user))
+    token = create(:oauth_access_token, :resource_owner_id => create(:moderator_user).id)

     capability = ApiCapability.new token
 
     [:create, :destroy, :restore].each do |action|
     capability = ApiCapability.new token
 
     [:create, :destroy, :restore].each do |action|


@@ -44,8 +34,8 @@ class ChangesetCommentApiCapabilityTest < ApiCapabilityTest
     end
   end
 
     end
   end
 

-  test "as a moderator with allow_write_api token" do
-    token = create(:access_token, :user => create(:moderator_user), :allow_write_api => true)
+  test "as a moderator with write_api token" do
+    token = create(:oauth_access_token, :resource_owner_id => create(:moderator_user).id, :scopes => %w[write_api])

     capability = ApiCapability.new token
 
     [:create, :destroy, :restore].each do |action|
     capability = ApiCapability.new token
 
     [:create, :destroy, :restore].each do |action|


@@ -54,9 +44,9 @@ class ChangesetCommentApiCapabilityTest < ApiCapabilityTest
   end
 end
 
   end
 end
 

-class NoteApiCapabilityTest < ApiCapabilityTest
+class NoteApiCapabilityTest < ActiveSupport::TestCase

   test "as a normal user with permissionless token" do
   test "as a normal user with permissionless token" do

-    token = create(:access_token)
+    token = create(:oauth_access_token)

     capability = ApiCapability.new token
 
     [:create, :comment, :close, :reopen, :destroy].each do |action|
     capability = ApiCapability.new token
 
     [:create, :comment, :close, :reopen, :destroy].each do |action|


@@ -64,8 +54,8 @@ class NoteApiCapabilityTest < ApiCapabilityTest
     end
   end
 
     end
   end
 

-  test "as a normal user with allow_write_notes token" do
-    token = create(:access_token, :allow_write_notes => true)
+  test "as a normal user with write_notes token" do
+    token = create(:oauth_access_token, :scopes => %w[write_notes])

     capability = ApiCapability.new token
 
     [:destroy].each do |action|
     capability = ApiCapability.new token
 
     [:destroy].each do |action|


@@ -78,7 +68,7 @@ class NoteApiCapabilityTest < ApiCapabilityTest
   end
 
   test "as a moderator with permissionless token" do
   end
 
   test "as a moderator with permissionless token" do

-    token = create(:access_token, :user => create(:moderator_user))
+    token = create(:oauth_access_token, :resource_owner_id => create(:moderator_user).id)

     capability = ApiCapability.new token
 
     [:destroy].each do |action|
     capability = ApiCapability.new token
 
     [:destroy].each do |action|


@@ -86,8 +76,8 @@ class NoteApiCapabilityTest < ApiCapabilityTest
     end
   end
 
     end
   end
 

-  test "as a moderator with allow_write_notes token" do
-    token = create(:access_token, :user => create(:moderator_user), :allow_write_notes => true)
+  test "as a moderator with write_notes token" do
+    token = create(:oauth_access_token, :resource_owner_id => create(:moderator_user).id, :scopes => %w[write_notes])

     capability = ApiCapability.new token
 
     [:destroy].each do |action|
     capability = ApiCapability.new token
 
     [:destroy].each do |action|


@@ -96,7 +86,7 @@ class NoteApiCapabilityTest < ApiCapabilityTest
   end
 end
 
   end
 end
 

-class UserApiCapabilityTest < ApiCapabilityTest
+class UserApiCapabilityTest < ActiveSupport::TestCase

   test "user preferences" do
     # a user with no tokens
     capability = ApiCapability.new nil
   test "user preferences" do
     # a user with no tokens
     capability = ApiCapability.new nil


@@ -105,13 +95,15 @@ class UserApiCapabilityTest < ApiCapabilityTest
     end
 
     # A user with empty tokens
     end
 
     # A user with empty tokens

-    capability = ApiCapability.new tokens
+    token = create(:oauth_access_token)
+    capability = ApiCapability.new token

 
     [:index, :show, :update_all, :update, :destroy].each do |act|
       assert capability.cannot? act, UserPreference
     end
 
 
     [:index, :show, :update_all, :update, :destroy].each do |act|
       assert capability.cannot? act, UserPreference
     end
 

-    capability = ApiCapability.new tokens(:allow_read_prefs)
+    token = create(:oauth_access_token, :scopes => %w[read_prefs])
+    capability = ApiCapability.new token

 
     [:update_all, :update, :destroy].each do |act|
       assert capability.cannot? act, UserPreference
 
     [:update_all, :update, :destroy].each do |act|
       assert capability.cannot? act, UserPreference


@@ -121,7 +113,9 @@ class UserApiCapabilityTest < ApiCapabilityTest
       assert capability.can? act, UserPreference
     end
 
       assert capability.can? act, UserPreference
     end
 

-    capability = ApiCapability.new tokens(:allow_write_prefs)
+    token = create(:oauth_access_token, :scopes => %w[write_prefs])
+    capability = ApiCapability.new token
+

     [:index, :show].each do |act|
       assert capability.cannot? act, UserPreference
     end
     [:index, :show].each do |act|
       assert capability.cannot? act, UserPreference
     end