X-Git-Url: https://git.openstreetmap.org./rails.git/blobdiff_plain/cdf9634d08540baf0264bdf74bd9a2f6bebfb124..c0ef1a88ad2e8c92e4e2da9c387da5e171938ccc:/test/controllers/api/changeset_comments_controller_test.rb diff --git a/test/controllers/api/changeset_comments_controller_test.rb b/test/controllers/api/changeset_comments_controller_test.rb index 21f30714c..b3dc19325 100644 --- a/test/controllers/api/changeset_comments_controller_test.rb +++ b/test/controllers/api/changeset_comments_controller_test.rb @@ -33,7 +33,7 @@ module Api ## # create comment success - def test_create_comment_success + def test_create user = create(:user) user2 = create(:user) private_user = create(:user, :data_public => false) @@ -98,43 +98,72 @@ module Api ActionMailer::Base.deliveries.clear end - ## - # create comment fail - def test_create_comment_fail - # unauthorized - post changeset_comment_path(create(:changeset, :closed), :text => "This is a comment") - assert_response :unauthorized - - auth_header = bearer_authorization_header + def test_create_by_unauthorized + assert_no_difference "ChangesetComment.count" do + post changeset_comment_path(create(:changeset, :closed), :text => "This is a comment") + assert_response :unauthorized + end + end - # bad changeset id + def test_create_on_missing_changeset assert_no_difference "ChangesetComment.count" do - post changeset_comment_path(999111, :text => "This is a comment"), :headers => auth_header + post changeset_comment_path(999111, :text => "This is a comment"), :headers => bearer_authorization_header + assert_response :not_found end - assert_response :not_found + end - # not closed changeset + def test_create_on_open_changeset assert_no_difference "ChangesetComment.count" do - post changeset_comment_path(create(:changeset), :text => "This is a comment"), :headers => auth_header + post changeset_comment_path(create(:changeset), :text => "This is a comment"), :headers => bearer_authorization_header + assert_response :conflict end - assert_response :conflict + end - # no text + def test_create_without_text assert_no_difference "ChangesetComment.count" do - post changeset_comment_path(create(:changeset, :closed)), :headers => auth_header + post changeset_comment_path(create(:changeset, :closed)), :headers => bearer_authorization_header + assert_response :bad_request end - assert_response :bad_request + end - # empty text + def test_create_with_empty_text assert_no_difference "ChangesetComment.count" do - post changeset_comment_path(create(:changeset, :closed), :text => ""), :headers => auth_header + post changeset_comment_path(create(:changeset, :closed), :text => ""), :headers => bearer_authorization_header + assert_response :bad_request + end + end + + def test_create_when_not_agreed_to_terms + user = create(:user, :terms_agreed => nil) + auth_header = bearer_authorization_header user + changeset = create(:changeset, :closed) + + assert_difference "ChangesetComment.count", 0 do + post changeset_comment_path(changeset), :params => { :text => "This is a comment" }, :headers => auth_header + assert_response :forbidden + end + end + + def test_create_with_write_api_scope + user = create(:user) + auth_header = bearer_authorization_header user, :scopes => %w[write_api] + changeset = create(:changeset, :closed) + + assert_difference "ChangesetComment.count", 1 do + post changeset_comment_path(changeset), :params => { :text => "This is a comment" }, :headers => auth_header + assert_response :success end - assert_response :bad_request + + comment = ChangesetComment.last + assert_equal changeset.id, comment.changeset_id + assert_equal user.id, comment.author_id + assert_equal "This is a comment", comment.body + assert comment.visible end ## # create comment rate limit for new users - def test_create_comment_new_user_rate_limit + def test_create_by_new_user_with_rate_limit changeset = create(:changeset, :closed) user = create(:user) @@ -155,7 +184,7 @@ module Api ## # create comment rate limit for experienced users - def test_create_comment_experienced_user_rate_limit + def test_create_by_experienced_user_with_rate_limit changeset = create(:changeset, :closed) user = create(:user) create_list(:changeset_comment, Settings.comments_to_max_changeset_comments, :author_id => user.id, :created_at => Time.now.utc - 1.day) @@ -177,7 +206,7 @@ module Api ## # create comment rate limit for reported users - def test_create_comment_reported_user_rate_limit + def test_create_by_reported_user_with_rate_limit changeset = create(:changeset, :closed) user = create(:user) create(:issue_with_reports, :reportable => user, :reported_user => user) @@ -199,7 +228,7 @@ module Api ## # create comment rate limit for moderator users - def test_create_comment_moderator_user_rate_limit + def test_create_by_moderator_user_with_rate_limit changeset = create(:changeset, :closed) user = create(:moderator_user) @@ -220,7 +249,7 @@ module Api ## # test hide comment fail - def test_destroy_comment_fail + def test_hide_fail # unauthorized comment = create(:changeset_comment) assert comment.visible @@ -246,7 +275,7 @@ module Api ## # test hide comment succes - def test_hide_comment_success + def test_hide comment = create(:changeset_comment) assert comment.visible @@ -259,7 +288,7 @@ module Api ## # test unhide comment fail - def test_restore_comment_fail + def test_unhide_fail # unauthorized comment = create(:changeset_comment, :visible => false) assert_not comment.visible @@ -285,7 +314,7 @@ module Api ## # test unhide comment succes - def test_unhide_comment_success + def test_unhide comment = create(:changeset_comment, :visible => false) assert_not comment.visible @@ -295,30 +324,5 @@ module Api assert_response :success assert comment.reload.visible end - - # This test ensures that token capabilities behave correctly for a method that - # requires the terms to have been agreed. - # (This would be better as an integration or system testcase, since the changeset_comment - # create method is simply a stand-in for any method that requires terms agreement. - # But writing oauth tests is hard, and so it's easier to put in a controller test.) - def test_api_write_and_terms_agreed_via_token - user = create(:user, :terms_agreed => nil) - auth_header = bearer_authorization_header(user, :scopes => %w[write_api]) - changeset = create(:changeset, :closed) - - assert_difference "ChangesetComment.count", 0 do - post changeset_comment_path(changeset), :params => { :text => "This is a comment" }, :headers => auth_header - end - assert_response :forbidden - - # Try again, after agreement with the terms - user.terms_agreed = Time.now.utc - user.save! - - assert_difference "ChangesetComment.count", 1 do - post changeset_comment_path(changeset), :params => { :text => "This is a comment" }, :headers => auth_header - end - assert_response :success - end end end