X-Git-Url: https://git.openstreetmap.org./rails.git/blobdiff_plain/51a2d85053b67b2bc842fa45ac8eb998f8585add..84a0c76ab2a09a05e10b9057c9087a342db5f7e2:/test/controllers/api/changeset_comments_controller_test.rb diff --git a/test/controllers/api/changeset_comments_controller_test.rb b/test/controllers/api/changeset_comments_controller_test.rb index 72463ed67..b16ea4502 100644 --- a/test/controllers/api/changeset_comments_controller_test.rb +++ b/test/controllers/api/changeset_comments_controller_test.rb @@ -15,27 +15,11 @@ module Api ) assert_routing( { :path => "/api/0.6/changeset/1/comment", :method => :post }, - { :controller => "api/changeset_comments", :action => "create", :id => "1" } + { :controller => "api/changeset_comments", :action => "create", :changeset_id => "1" } ) assert_routing( { :path => "/api/0.6/changeset/1/comment.json", :method => :post }, - { :controller => "api/changeset_comments", :action => "create", :id => "1", :format => "json" } - ) - assert_routing( - { :path => "/api/0.6/changeset/comment/1/hide", :method => :post }, - { :controller => "api/changeset_comments", :action => "destroy", :id => "1" } - ) - assert_routing( - { :path => "/api/0.6/changeset/comment/1/hide.json", :method => :post }, - { :controller => "api/changeset_comments", :action => "destroy", :id => "1", :format => "json" } - ) - assert_routing( - { :path => "/api/0.6/changeset/comment/1/unhide", :method => :post }, - { :controller => "api/changeset_comments", :action => "restore", :id => "1" } - ) - assert_routing( - { :path => "/api/0.6/changeset/comment/1/unhide.json", :method => :post }, - { :controller => "api/changeset_comments", :action => "restore", :id => "1", :format => "json" } + { :controller => "api/changeset_comments", :action => "create", :changeset_id => "1", :format => "json" } ) end @@ -81,35 +65,35 @@ module Api def test_create_by_unauthorized assert_no_difference "ChangesetComment.count" do - post changeset_comment_path(create(:changeset, :closed), :text => "This is a comment") + post api_changeset_changeset_comments_path(create(:changeset, :closed), :text => "This is a comment") assert_response :unauthorized end end def test_create_on_missing_changeset assert_no_difference "ChangesetComment.count" do - post changeset_comment_path(999111, :text => "This is a comment"), :headers => bearer_authorization_header + post api_changeset_changeset_comments_path(999111, :text => "This is a comment"), :headers => bearer_authorization_header assert_response :not_found end end def test_create_on_open_changeset assert_no_difference "ChangesetComment.count" do - post changeset_comment_path(create(:changeset), :text => "This is a comment"), :headers => bearer_authorization_header + post api_changeset_changeset_comments_path(create(:changeset), :text => "This is a comment"), :headers => bearer_authorization_header assert_response :conflict end end def test_create_without_text assert_no_difference "ChangesetComment.count" do - post changeset_comment_path(create(:changeset, :closed)), :headers => bearer_authorization_header + post api_changeset_changeset_comments_path(create(:changeset, :closed)), :headers => bearer_authorization_header assert_response :bad_request end end def test_create_with_empty_text assert_no_difference "ChangesetComment.count" do - post changeset_comment_path(create(:changeset, :closed), :text => ""), :headers => bearer_authorization_header + post api_changeset_changeset_comments_path(create(:changeset, :closed), :text => ""), :headers => bearer_authorization_header assert_response :bad_request end end @@ -120,7 +104,7 @@ module Api changeset = create(:changeset, :closed) assert_difference "ChangesetComment.count", 0 do - post changeset_comment_path(changeset), :params => { :text => "This is a comment" }, :headers => auth_header + post api_changeset_changeset_comments_path(changeset), :params => { :text => "This is a comment" }, :headers => auth_header assert_response :forbidden end end @@ -131,7 +115,7 @@ module Api changeset = create(:changeset, :closed) assert_difference "ChangesetComment.count", 0 do - post changeset_comment_path(changeset), :params => { :text => "This is a comment" }, :headers => auth_header + post api_changeset_changeset_comments_path(changeset), :params => { :text => "This is a comment" }, :headers => auth_header assert_response :forbidden end end @@ -142,7 +126,7 @@ module Api changeset = create(:changeset, :closed) assert_difference "ChangesetComment.count", 1 do - post changeset_comment_path(changeset), :params => { :text => "This is a comment" }, :headers => auth_header + post api_changeset_changeset_comments_path(changeset), :params => { :text => "This is a comment" }, :headers => auth_header assert_response :success end @@ -159,7 +143,7 @@ module Api changeset = create(:changeset, :closed) assert_difference "ChangesetComment.count", 1 do - post changeset_comment_path(changeset), :params => { :text => "This is a comment" }, :headers => auth_header + post api_changeset_changeset_comments_path(changeset), :params => { :text => "This is a comment" }, :headers => auth_header assert_response :success end @@ -177,7 +161,7 @@ module Api assert_difference "ChangesetComment.count", 1 do assert_no_difference "ActionMailer::Base.deliveries.size" do perform_enqueued_jobs do - post changeset_comment_path(changeset, :text => "This is a comment"), :headers => auth_header + post api_changeset_changeset_comments_path(changeset, :text => "This is a comment"), :headers => auth_header assert_response :success end end @@ -193,7 +177,7 @@ module Api assert_difference "ChangesetComment.count", 1 do assert_no_difference "ActionMailer::Base.deliveries.size" do perform_enqueued_jobs do - post changeset_comment_path(changeset, :text => "This is a comment"), :headers => auth_header + post api_changeset_changeset_comments_path(changeset, :text => "This is a comment"), :headers => auth_header assert_response :success end end @@ -209,7 +193,7 @@ module Api assert_difference "ChangesetComment.count", 1 do assert_no_difference "ActionMailer::Base.deliveries.size" do perform_enqueued_jobs do - post changeset_comment_path(changeset, :text => "This is a comment"), :headers => auth_header + post api_changeset_changeset_comments_path(changeset, :text => "This is a comment"), :headers => auth_header assert_response :success end end @@ -226,7 +210,7 @@ module Api assert_difference "ChangesetComment.count", 1 do assert_difference "ActionMailer::Base.deliveries.size", 1 do perform_enqueued_jobs do - post changeset_comment_path(changeset, :text => "This is a comment"), :headers => auth_header + post api_changeset_changeset_comments_path(changeset, :text => "This is a comment"), :headers => auth_header assert_response :success end end @@ -250,7 +234,7 @@ module Api assert_difference "ChangesetComment.count", 1 do assert_difference "ActionMailer::Base.deliveries.size", 2 do perform_enqueued_jobs do - post changeset_comment_path(changeset, :text => "This is a comment"), :headers => auth_header + post api_changeset_changeset_comments_path(changeset, :text => "This is a comment"), :headers => auth_header assert_response :success end end @@ -277,13 +261,13 @@ module Api assert_difference "ChangesetComment.count", Settings.initial_changeset_comments_per_hour do 1.upto(Settings.initial_changeset_comments_per_hour) do |count| - post changeset_comment_path(changeset, :text => "Comment #{count}"), :headers => auth_header + post api_changeset_changeset_comments_path(changeset, :text => "Comment #{count}"), :headers => auth_header assert_response :success end end assert_no_difference "ChangesetComment.count" do - post changeset_comment_path(changeset, :text => "One comment too many"), :headers => auth_header + post api_changeset_changeset_comments_path(changeset, :text => "One comment too many"), :headers => auth_header assert_response :too_many_requests end end @@ -299,13 +283,13 @@ module Api assert_difference "ChangesetComment.count", Settings.max_changeset_comments_per_hour do 1.upto(Settings.max_changeset_comments_per_hour) do |count| - post changeset_comment_path(changeset, :text => "Comment #{count}"), :headers => auth_header + post api_changeset_changeset_comments_path(changeset, :text => "Comment #{count}"), :headers => auth_header assert_response :success end end assert_no_difference "ChangesetComment.count" do - post changeset_comment_path(changeset, :text => "One comment too many"), :headers => auth_header + post api_changeset_changeset_comments_path(changeset, :text => "One comment too many"), :headers => auth_header assert_response :too_many_requests end end @@ -321,13 +305,13 @@ module Api assert_difference "ChangesetComment.count", Settings.initial_changeset_comments_per_hour / 2 do 1.upto(Settings.initial_changeset_comments_per_hour / 2) do |count| - post changeset_comment_path(changeset, :text => "Comment #{count}"), :headers => auth_header + post api_changeset_changeset_comments_path(changeset, :text => "Comment #{count}"), :headers => auth_header assert_response :success end end assert_no_difference "ChangesetComment.count" do - post changeset_comment_path(changeset, :text => "One comment too many"), :headers => auth_header + post api_changeset_changeset_comments_path(changeset, :text => "One comment too many"), :headers => auth_header assert_response :too_many_requests end end @@ -342,131 +326,17 @@ module Api assert_difference "ChangesetComment.count", Settings.moderator_changeset_comments_per_hour do 1.upto(Settings.moderator_changeset_comments_per_hour) do |count| - post changeset_comment_path(changeset, :text => "Comment #{count}"), :headers => auth_header + post api_changeset_changeset_comments_path(changeset, :text => "Comment #{count}"), :headers => auth_header assert_response :success end end assert_no_difference "ChangesetComment.count" do - post changeset_comment_path(changeset, :text => "One comment too many"), :headers => auth_header + post api_changeset_changeset_comments_path(changeset, :text => "One comment too many"), :headers => auth_header assert_response :too_many_requests end end - def test_hide_by_unauthorized - comment = create(:changeset_comment) - - post changeset_comment_hide_path(comment) - - assert_response :unauthorized - assert comment.reload.visible - end - - def test_hide_by_normal_user - comment = create(:changeset_comment) - auth_header = bearer_authorization_header - - post changeset_comment_hide_path(comment), :headers => auth_header - - assert_response :forbidden - assert comment.reload.visible - end - - def test_hide_missing_comment - auth_header = bearer_authorization_header create(:moderator_user) - - post changeset_comment_hide_path(999111), :headers => auth_header - - assert_response :not_found - end - - def test_hide_without_required_scope - comment = create(:changeset_comment) - auth_header = bearer_authorization_header create(:moderator_user), :scopes => %w[read_prefs] - - post changeset_comment_hide_path(comment), :headers => auth_header - - assert_response :forbidden - assert comment.reload.visible - end - - def test_hide_with_write_changeset_comments_scope - comment = create(:changeset_comment) - auth_header = bearer_authorization_header create(:moderator_user), :scopes => %w[write_changeset_comments] - - post changeset_comment_hide_path(comment), :headers => auth_header - - assert_response :success - assert_not comment.reload.visible - end - - def test_hide_with_write_api_scope - comment = create(:changeset_comment) - auth_header = bearer_authorization_header create(:moderator_user), :scopes => %w[write_api] - - post changeset_comment_hide_path(comment), :headers => auth_header - - assert_response :success - assert_not comment.reload.visible - end - - def test_unhide_by_unauthorized - comment = create(:changeset_comment, :visible => false) - - post changeset_comment_unhide_path(comment) - - assert_response :unauthorized - assert_not comment.reload.visible - end - - def test_unhide_by_normal_user - comment = create(:changeset_comment, :visible => false) - auth_header = bearer_authorization_header - - post changeset_comment_unhide_path(comment), :headers => auth_header - - assert_response :forbidden - assert_not comment.reload.visible - end - - def test_unhide_missing_comment - auth_header = bearer_authorization_header create(:moderator_user) - - post changeset_comment_unhide_path(999111), :headers => auth_header - - assert_response :not_found - end - - def test_unhide_without_required_scope - comment = create(:changeset_comment, :visible => false) - auth_header = bearer_authorization_header create(:moderator_user), :scopes => %w[read_prefs] - - post changeset_comment_unhide_path(comment), :headers => auth_header - - assert_response :forbidden - assert_not comment.reload.visible - end - - def test_unhide_with_write_changeset_comments_scope - comment = create(:changeset_comment, :visible => false) - auth_header = bearer_authorization_header create(:moderator_user), :scopes => %w[write_changeset_comments] - - post changeset_comment_unhide_path(comment), :headers => auth_header - - assert_response :success - assert comment.reload.visible - end - - def test_unhide_with_write_api_scope - comment = create(:changeset_comment, :visible => false) - auth_header = bearer_authorization_header create(:moderator_user), :scopes => %w[write_api] - - post changeset_comment_unhide_path(comment), :headers => auth_header - - assert_response :success - assert comment.reload.visible - end - private ##