X-Git-Url: https://git.openstreetmap.org./rails.git/blobdiff_plain/dc2a2c8ebd1a11e4a64555fda22c6859a51defff..d3e91a79ff3ab35006b233d39e059ffa406ba443:/test/integration/cors_test.rb diff --git a/test/integration/cors_test.rb b/test/integration/cors_test.rb index fdecfc256..9ff7e360e 100644 --- a/test/integration/cors_test.rb +++ b/test/integration/cors_test.rb @@ -1,32 +1,27 @@ require "test_helper" class CORSTest < ActionDispatch::IntegrationTest - # Rails 4 adds a built-in `options` method. When we upgrade, we can remove - # this definition. - unless instance_methods.include?(:options) - def options(*args) - reset! unless integration_session - @html_document = nil - integration_session.send(:process, :options, *args).tap do - copy_session_variables! - end - end - end - def test_api_routes_allow_cross_origin_requests - options "/api/capabilities", nil, - "HTTP_ORIGIN" => "http://www.example.com", - "HTTP_ACCESS_CONTROL_REQUEST_METHOD" => "GET" + process :options, "/api/capabilities", :headers => { + "HTTP_ORIGIN" => "http://www.example.com", + "HTTP_ACCESS_CONTROL_REQUEST_METHOD" => "GET" + } assert_response :success - assert_equal "http://www.example.com", response.headers["Access-Control-Allow-Origin"] + assert_equal "*", response.headers["Access-Control-Allow-Origin"] + assert_equal "text/plain", response.content_type + assert_equal "", response.body end def test_non_api_routes_dont_allow_cross_origin_requests - assert_raises ActionController::RoutingError do - options "/", nil, - "HTTP_ORIGIN" => "http://www.example.com", - "HTTP_ACCESS_CONTROL_REQUEST_METHOD" => "GET" - end + process :options, "/", :headers => { + "HTTP_ORIGIN" => "http://www.example.com", + "HTTP_ACCESS_CONTROL_REQUEST_METHOD" => "GET" + } + + assert_response :success + assert_nil response.headers["Access-Control-Allow-Origin"] + assert_nil response.content_type + assert_equal "", response.body end end