require "test_helper" module Traces class IconsControllerTest < ActionDispatch::IntegrationTest ## # test all routes which lead to this controller def test_routes assert_routing( { :path => "/user/username/traces/1/icon", :method => :get }, { :controller => "traces/icons", :action => "show", :display_name => "username", :trace_id => "1" } ) end # Test downloading the icon for a trace def test_show public_trace_file = create(:trace, :visibility => "public", :fixture => "a") # First with no auth, which should work since the trace is public get trace_icon_path(public_trace_file.user, public_trace_file) check_trace_icon public_trace_file # Now with some other user, which should work since the trace is public session_for(create(:user)) get trace_icon_path(public_trace_file.user, public_trace_file) check_trace_icon public_trace_file # And finally we should be able to do it with the owner of the trace session_for(public_trace_file.user) get trace_icon_path(public_trace_file.user, public_trace_file) check_trace_icon public_trace_file end # Check the icon for an anonymous trace can't be downloaded by another user def test_show_anon anon_trace_file = create(:trace, :visibility => "private", :fixture => "b") # First with no auth get trace_icon_path(anon_trace_file.user, anon_trace_file) assert_response :forbidden # Now with some other user, which shouldn't work since the trace is anon session_for(create(:user)) get trace_icon_path(anon_trace_file.user, anon_trace_file) assert_response :forbidden # And finally we should be able to do it with the owner of the trace session_for(anon_trace_file.user) get trace_icon_path(anon_trace_file.user, anon_trace_file) check_trace_icon anon_trace_file end # Test downloading the icon for a trace that doesn't exist def test_show_not_found deleted_trace_file = create(:trace, :deleted) # First with a trace that has never existed get trace_icon_path(create(:user), 0) assert_response :not_found # Now with a trace that has been deleted session_for(deleted_trace_file.user) get trace_icon_path(deleted_trace_file.user, deleted_trace_file) assert_response :not_found end private def check_trace_icon(trace) follow_redirect! follow_redirect! assert_response :success assert_equal "image/gif", response.media_type assert_equal trace.icon_picture, response.body end end end