2008-01-05 08:32:38 -05:00
|
|
|
require 'abstract_unit'
|
2006-09-29 12:25:49 -04:00
|
|
|
|
|
|
|
class AuthorizationTest < Test::Unit::TestCase
|
|
|
|
Response = Struct.new(:code)
|
|
|
|
|
|
|
|
def setup
|
|
|
|
@conn = ActiveResource::Connection.new('http://localhost')
|
|
|
|
@matz = { :id => 1, :name => 'Matz' }.to_xml(:root => 'person')
|
|
|
|
@david = { :id => 2, :name => 'David' }.to_xml(:root => 'person')
|
|
|
|
@authenticated_conn = ActiveResource::Connection.new("http://david:test123@localhost")
|
|
|
|
@authorization_request_header = { 'Authorization' => 'Basic ZGF2aWQ6dGVzdDEyMw==' }
|
2006-12-12 10:29:54 -05:00
|
|
|
|
2006-09-29 12:25:49 -04:00
|
|
|
ActiveResource::HttpMock.respond_to do |mock|
|
|
|
|
mock.get "/people/2.xml", @authorization_request_header, @david
|
|
|
|
mock.put "/people/2.xml", @authorization_request_header, nil, 204
|
|
|
|
mock.delete "/people/2.xml", @authorization_request_header, nil, 200
|
|
|
|
mock.post "/people/2/addresses.xml", @authorization_request_header, nil, 201, 'Location' => '/people/1/addresses/5'
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
def test_authorization_header
|
2007-10-02 01:32:14 -04:00
|
|
|
authorization_header = @authenticated_conn.send!(:authorization_header)
|
2006-09-29 12:25:49 -04:00
|
|
|
assert_equal @authorization_request_header['Authorization'], authorization_header['Authorization']
|
|
|
|
authorization = authorization_header["Authorization"].to_s.split
|
|
|
|
|
|
|
|
assert_equal "Basic", authorization[0]
|
2007-12-18 16:14:07 -05:00
|
|
|
assert_equal ["david", "test123"], ActiveSupport::Base64.decode64(authorization[1]).split(":")[0..1]
|
2006-09-29 12:25:49 -04:00
|
|
|
end
|
|
|
|
|
|
|
|
def test_authorization_header_with_username_but_no_password
|
|
|
|
@conn = ActiveResource::Connection.new("http://david:@localhost")
|
2007-10-02 01:32:14 -04:00
|
|
|
authorization_header = @conn.send!(:authorization_header)
|
2006-09-29 12:25:49 -04:00
|
|
|
authorization = authorization_header["Authorization"].to_s.split
|
|
|
|
|
|
|
|
assert_equal "Basic", authorization[0]
|
2007-12-18 16:14:07 -05:00
|
|
|
assert_equal ["david"], ActiveSupport::Base64.decode64(authorization[1]).split(":")[0..1]
|
2006-09-29 12:25:49 -04:00
|
|
|
end
|
|
|
|
|
|
|
|
def test_authorization_header_with_password_but_no_username
|
|
|
|
@conn = ActiveResource::Connection.new("http://:test123@localhost")
|
2007-10-02 01:32:14 -04:00
|
|
|
authorization_header = @conn.send!(:authorization_header)
|
2006-09-29 12:25:49 -04:00
|
|
|
authorization = authorization_header["Authorization"].to_s.split
|
|
|
|
|
|
|
|
assert_equal "Basic", authorization[0]
|
2007-12-18 16:14:07 -05:00
|
|
|
assert_equal ["", "test123"], ActiveSupport::Base64.decode64(authorization[1]).split(":")[0..1]
|
2006-09-29 12:25:49 -04:00
|
|
|
end
|
|
|
|
|
2008-02-19 18:06:09 -05:00
|
|
|
def test_authorization_header_with_decoded_credentials_from_url
|
|
|
|
@conn = ActiveResource::Connection.new("http://my%40email.com:%31%32%33@localhost")
|
|
|
|
authorization_header = @conn.send!(:authorization_header)
|
|
|
|
authorization = authorization_header["Authorization"].to_s.split
|
|
|
|
|
|
|
|
assert_equal "Basic", authorization[0]
|
|
|
|
assert_equal ["my@email.com", "123"], ActiveSupport::Base64.decode64(authorization[1]).split(":")[0..1]
|
|
|
|
end
|
|
|
|
|
2008-02-17 19:21:18 -05:00
|
|
|
def test_authorization_header_explicitly_setting_username_and_password
|
|
|
|
@authenticated_conn = ActiveResource::Connection.new("http://@localhost")
|
|
|
|
@authenticated_conn.user = 'david'
|
|
|
|
@authenticated_conn.password = 'test123'
|
|
|
|
authorization_header = @authenticated_conn.send!(:authorization_header)
|
|
|
|
assert_equal @authorization_request_header['Authorization'], authorization_header['Authorization']
|
|
|
|
authorization = authorization_header["Authorization"].to_s.split
|
|
|
|
|
|
|
|
assert_equal "Basic", authorization[0]
|
|
|
|
assert_equal ["david", "test123"], ActiveSupport::Base64.decode64(authorization[1]).split(":")[0..1]
|
|
|
|
end
|
|
|
|
|
|
|
|
def test_authorization_header_explicitly_setting_username_but_no_password
|
|
|
|
@conn = ActiveResource::Connection.new("http://@localhost")
|
|
|
|
@conn.user = "david"
|
|
|
|
authorization_header = @conn.send!(:authorization_header)
|
|
|
|
authorization = authorization_header["Authorization"].to_s.split
|
|
|
|
|
|
|
|
assert_equal "Basic", authorization[0]
|
|
|
|
assert_equal ["david"], ActiveSupport::Base64.decode64(authorization[1]).split(":")[0..1]
|
|
|
|
end
|
|
|
|
|
|
|
|
def test_authorization_header_explicitly_setting_password_but_no_username
|
|
|
|
@conn = ActiveResource::Connection.new("http://@localhost")
|
|
|
|
@conn.password = "test123"
|
|
|
|
authorization_header = @conn.send!(:authorization_header)
|
|
|
|
authorization = authorization_header["Authorization"].to_s.split
|
|
|
|
|
|
|
|
assert_equal "Basic", authorization[0]
|
|
|
|
assert_equal ["", "test123"], ActiveSupport::Base64.decode64(authorization[1]).split(":")[0..1]
|
|
|
|
end
|
|
|
|
|
2006-09-29 12:25:49 -04:00
|
|
|
def test_get
|
|
|
|
david = @authenticated_conn.get("/people/2.xml")
|
2006-12-12 10:29:54 -05:00
|
|
|
assert_equal "David", david["name"]
|
2006-09-29 12:25:49 -04:00
|
|
|
end
|
|
|
|
|
|
|
|
def test_post
|
|
|
|
response = @authenticated_conn.post("/people/2/addresses.xml")
|
|
|
|
assert_equal "/people/1/addresses/5", response["Location"]
|
|
|
|
end
|
|
|
|
|
|
|
|
def test_put
|
|
|
|
response = @authenticated_conn.put("/people/2.xml")
|
|
|
|
assert_equal 204, response.code
|
|
|
|
end
|
|
|
|
|
|
|
|
def test_delete
|
|
|
|
response = @authenticated_conn.delete("/people/2.xml")
|
|
|
|
assert_equal 200, response.code
|
|
|
|
end
|
|
|
|
|
|
|
|
def test_raises_invalid_request_on_unauthorized_requests
|
|
|
|
assert_raises(ActiveResource::InvalidRequestError) { @conn.post("/people/2.xml") }
|
|
|
|
assert_raises(ActiveResource::InvalidRequestError) { @conn.post("/people/2/addresses.xml") }
|
|
|
|
assert_raises(ActiveResource::InvalidRequestError) { @conn.put("/people/2.xml") }
|
|
|
|
assert_raises(ActiveResource::InvalidRequestError) { @conn.delete("/people/2.xml") }
|
|
|
|
end
|
|
|
|
|
|
|
|
protected
|
|
|
|
def assert_response_raises(klass, code)
|
|
|
|
assert_raise(klass, "Expected response code #{code} to raise #{klass}") do
|
2007-10-02 01:32:14 -04:00
|
|
|
@conn.send!(:handle_response, Response.new(code))
|
2006-09-29 12:25:49 -04:00
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|