openstreetmap-website/test/controllers/traces/icons_controller_test.rb
2024-03-28 08:42:01 +03:00

76 lines
2.6 KiB
Ruby

require "test_helper"
module Traces
class IconsControllerTest < ActionDispatch::IntegrationTest
##
# test all routes which lead to this controller
def test_routes
assert_routing(
{ :path => "/user/username/traces/1/icon", :method => :get },
{ :controller => "traces/icons", :action => "show", :display_name => "username", :trace_id => "1" }
)
end
# Test downloading the icon for a trace
def test_show
public_trace_file = create(:trace, :visibility => "public", :fixture => "a")
# First with no auth, which should work since the trace is public
get trace_icon_path(public_trace_file.user, public_trace_file)
check_trace_icon public_trace_file
# Now with some other user, which should work since the trace is public
session_for(create(:user))
get trace_icon_path(public_trace_file.user, public_trace_file)
check_trace_icon public_trace_file
# And finally we should be able to do it with the owner of the trace
session_for(public_trace_file.user)
get trace_icon_path(public_trace_file.user, public_trace_file)
check_trace_icon public_trace_file
end
# Check the icon for an anonymous trace can't be downloaded by another user
def test_show_anon
anon_trace_file = create(:trace, :visibility => "private", :fixture => "b")
# First with no auth
get trace_icon_path(anon_trace_file.user, anon_trace_file)
assert_response :forbidden
# Now with some other user, which shouldn't work since the trace is anon
session_for(create(:user))
get trace_icon_path(anon_trace_file.user, anon_trace_file)
assert_response :forbidden
# And finally we should be able to do it with the owner of the trace
session_for(anon_trace_file.user)
get trace_icon_path(anon_trace_file.user, anon_trace_file)
check_trace_icon anon_trace_file
end
# Test downloading the icon for a trace that doesn't exist
def test_show_not_found
deleted_trace_file = create(:trace, :deleted)
# First with a trace that has never existed
get trace_icon_path(create(:user), 0)
assert_response :not_found
# Now with a trace that has been deleted
session_for(deleted_trace_file.user)
get trace_icon_path(deleted_trace_file.user, deleted_trace_file)
assert_response :not_found
end
private
def check_trace_icon(trace)
follow_redirect!
follow_redirect!
assert_response :success
assert_equal "image/gif", response.media_type
assert_equal trace.icon_picture, response.body
end
end
end