gitlab-org--gitlab-foss/spec/requests/api
Timothy Andrew d1488268b2 Simplify authentication logic in the v4 users API for !12445.
- Rather than using an explicit check to turn off authentication for the
  `/users` endpoint, simply call `authenticate_non_get!`.

- All `GET` endpoints we wish to restrict already call
  `authenticated_as_admin!`, and so remain inacessible to anonymous users.

- This _does_ open up the `/users/:id` endpoint to anonymous access. It contains
  the same access check that `/users` users, and so is safe for use here.

- More context: https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/12445#note_34031323
2017-07-04 12:19:48 +00:00
..
v3 Add parent_id back to the tests 2017-06-28 20:01:43 -03:00
access_requests_spec.rb Unnecessary "include WaitForAjax" and "include ApiHelpers" 2017-04-21 22:32:02 +02:00
award_emoji_spec.rb Correct RSpec/SingleLineHook cop offenses 2017-06-14 13:18:56 -05:00
boards_spec.rb Unnecessary "include WaitForAjax" and "include ApiHelpers" 2017-04-21 22:32:02 +02:00
branches_spec.rb Add confirm delete protected branch modal 2017-05-08 07:41:58 +00:00
broadcast_messages_spec.rb Unnecessary "include WaitForAjax" and "include ApiHelpers" 2017-04-21 22:32:02 +02:00
commit_statuses_spec.rb Fix head pipeline stored in merge request for external pipelines 2017-06-27 21:08:31 +02:00
commits_spec.rb Correct RSpec/SingleLineHook cop offenses 2017-06-14 13:18:56 -05:00
deploy_keys_spec.rb Fix edit button for deploy keys available from other projects 2017-06-20 11:23:13 +00:00
deployments_spec.rb Unnecessary "include WaitForAjax" and "include ApiHelpers" 2017-04-21 22:32:02 +02:00
doorkeeper_access_spec.rb Enable RSpec/FilePath cop 2017-04-26 12:50:32 +01:00
environments_spec.rb Unnecessary "include WaitForAjax" and "include ApiHelpers" 2017-04-21 22:32:02 +02:00
events_spec.rb Accept a username for User-level Events API 2017-06-06 20:16:41 +08:00
features_spec.rb Rename flipper_group to feature_group 2017-06-28 19:29:56 +02:00
files_spec.rb Enable Style/DotPosition Rubocop 👮 2017-06-21 13:48:12 +00:00
groups_spec.rb Enable Style/DotPosition Rubocop 👮 2017-06-21 13:48:12 +00:00
helpers_spec.rb Correct RSpec/SingleLineHook cop offenses 2017-06-14 13:18:56 -05:00
internal_spec.rb Add “Project moved” error to Git-over-SSH 2017-06-16 14:14:19 -07:00
issues_spec.rb fix for Follow-up from "Backport of Multiple Assignees feature 2017-05-11 19:11:49 +03:00
jobs_spec.rb Fix raw_path with the new job path, rename to job 2017-06-06 23:12:33 +08:00
keys_spec.rb Correct RSpec/SingleLineHook cop offenses 2017-06-14 13:18:56 -05:00
labels_spec.rb Correct RSpec/SingleLineHook cop offenses 2017-06-14 13:18:56 -05:00
lint_spec.rb Unnecessary "include WaitForAjax" and "include ApiHelpers" 2017-04-21 22:32:02 +02:00
members_spec.rb Unnecessary "include WaitForAjax" and "include ApiHelpers" 2017-04-21 22:32:02 +02:00
merge_request_diffs_spec.rb Unnecessary "include WaitForAjax" and "include ApiHelpers" 2017-04-21 22:32:02 +02:00
merge_requests_spec.rb Enable Style/DotPosition Rubocop 👮 2017-06-21 13:48:12 +00:00
milestones_spec.rb Improve method names and add more specs 2017-06-16 12:03:15 -03:00
namespaces_spec.rb Improve tests text 2017-06-28 17:55:50 -03:00
notes_spec.rb Enable Style/DotPosition Rubocop 👮 2017-06-21 13:48:12 +00:00
notification_settings_spec.rb Unnecessary "include WaitForAjax" and "include ApiHelpers" 2017-04-21 22:32:02 +02:00
oauth_tokens_spec.rb Enable RSpec/FilePath cop 2017-04-26 12:50:32 +01:00
pipeline_schedules_spec.rb Return 202 for destory. Remove []. Remove def pipeline_schedules from helper. 2017-05-30 23:55:09 +09:00
pipelines_spec.rb Correct RSpec/SingleLineHook cop offenses 2017-06-14 13:18:56 -05:00
project_hooks_spec.rb Merge branch 'bvl-rename-build-events-to-job-events' into 'master' 2017-05-16 14:12:19 +02:00
project_snippets_spec.rb Enable Style/DotPosition Rubocop 👮 2017-06-21 13:48:12 +00:00
projects_spec.rb Add parent_id back to the tests 2017-06-28 20:01:43 -03:00
repositories_spec.rb Unnecessary "include WaitForAjax" and "include ApiHelpers" 2017-04-21 22:32:02 +02:00
runner_spec.rb Enable Style/DotPosition Rubocop 👮 2017-06-21 13:48:12 +00:00
runners_spec.rb Unnecessary "include WaitForAjax" and "include ApiHelpers" 2017-04-21 22:32:02 +02:00
services_spec.rb Unnecessary "include WaitForAjax" and "include ApiHelpers" 2017-04-21 22:32:02 +02:00
session_spec.rb Unnecessary "include WaitForAjax" and "include ApiHelpers" 2017-04-21 22:32:02 +02:00
settings_spec.rb Help landing page customizations 2017-06-14 11:40:21 -04:00
sidekiq_metrics_spec.rb Unnecessary "include WaitForAjax" and "include ApiHelpers" 2017-04-21 22:32:02 +02:00
snippets_spec.rb Enable Style/DotPosition Rubocop 👮 2017-06-21 13:48:12 +00:00
system_hooks_spec.rb Correct RSpec/SingleLineHook cop offenses 2017-06-14 13:18:56 -05:00
tags_spec.rb Unnecessary "include WaitForAjax" and "include ApiHelpers" 2017-04-21 22:32:02 +02:00
templates_spec.rb Correct RSpec/SingleLineHook cop offenses 2017-06-14 13:18:56 -05:00
todos_spec.rb Unnecessary "include WaitForAjax" and "include ApiHelpers" 2017-04-21 22:32:02 +02:00
triggers_spec.rb Unnecessary "include WaitForAjax" and "include ApiHelpers" 2017-04-21 22:32:02 +02:00
users_spec.rb Simplify authentication logic in the v4 users API for !12445. 2017-07-04 12:19:48 +00:00
variables_spec.rb Fix optional args for POST :id/variables 2017-06-27 15:20:11 +08:00
version_spec.rb Unnecessary "include WaitForAjax" and "include ApiHelpers" 2017-04-21 22:32:02 +02:00