Require any attribute that is going to be mass assigned to be whitelisted, and whitelist those attributes which need it
28 lines
956 B
Ruby
28 lines
956 B
Ruby
require File.dirname(__FILE__) + '/../test_helper'
|
|
|
|
class OauthTokenTest < ActiveSupport::TestCase
|
|
api_fixtures
|
|
|
|
##
|
|
# check that after calling invalidate! on a token, it is invalid.
|
|
def test_token_invalidation
|
|
tok = OauthToken.new
|
|
assert_equal false, tok.invalidated?, "Token should be created valid."
|
|
tok.invalidate!
|
|
assert_equal true, tok.invalidated?, "Token should now be invalid."
|
|
end
|
|
|
|
##
|
|
# check that an authorized token is authorised and can be invalidated
|
|
def test_token_authorisation
|
|
tok = RequestToken.create({
|
|
:client_application => client_applications(:oauth_web_app)
|
|
}, :without_protection => true)
|
|
assert_equal false, tok.authorized?, "Token should be created unauthorised."
|
|
tok.authorize!(users(:public_user))
|
|
assert_equal true, tok.authorized?, "Token should now be authorised."
|
|
tok.invalidate!
|
|
assert_equal false, tok.authorized?, "Token should now be invalid."
|
|
end
|
|
|
|
end
|