summaryrefslogtreecommitdiff
path: root/test/web/auth/oauth_test_controller_test.exs
diff options
context:
space:
mode:
authorIvan Tashkinov <ivantashkinov@gmail.com>2020-04-24 16:52:38 +0300
committerIvan Tashkinov <ivantashkinov@gmail.com>2020-04-24 16:52:38 +0300
commit00e62161f64802317d7d789e7eac42c33f0540f5 (patch)
treeaaaff92984ee19747956a7513c93c928b4604d36 /test/web/auth/oauth_test_controller_test.exs
parent89f38d94c754d33736e2444859d6020b2147eaf7 (diff)
downloadpleroma-00e62161f64802317d7d789e7eac42c33f0540f5.tar.gz
pleroma-00e62161f64802317d7d789e7eac42c33f0540f5.zip
[#2409] Tested all auth setup configs in AuthTestControllerTest. Adjusted :skip_plug definitions for some endpoints.
Diffstat (limited to 'test/web/auth/oauth_test_controller_test.exs')
-rw-r--r--test/web/auth/oauth_test_controller_test.exs49
1 files changed, 0 insertions, 49 deletions
diff --git a/test/web/auth/oauth_test_controller_test.exs b/test/web/auth/oauth_test_controller_test.exs
deleted file mode 100644
index a2f6009ac..000000000
--- a/test/web/auth/oauth_test_controller_test.exs
+++ /dev/null
@@ -1,49 +0,0 @@
-# Pleroma: A lightweight social networking server
-# Copyright © 2017-2020 Pleroma Authors <https://pleroma.social/>
-# SPDX-License-Identifier: AGPL-3.0-only
-
-defmodule Pleroma.Tests.OAuthTestControllerTest do
- use Pleroma.Web.ConnCase
-
- import Pleroma.Factory
-
- setup %{conn: conn} do
- user = insert(:user)
- conn = assign(conn, :user, user)
- %{conn: conn, user: user}
- end
-
- test "missed_oauth", %{conn: conn} do
- res =
- conn
- |> get("/test/authenticated_api/missed_oauth")
- |> json_response(403)
-
- assert res ==
- %{
- "error" =>
- "Security violation: OAuth scopes check was neither handled nor explicitly skipped."
- }
- end
-
- test "skipped_oauth", %{conn: conn} do
- conn
- |> assign(:token, nil)
- |> get("/test/authenticated_api/skipped_oauth")
- |> json_response(200)
- end
-
- test "performed_oauth", %{user: user} do
- %{conn: good_token_conn} = oauth_access(["read"], user: user)
-
- good_token_conn
- |> get("/test/authenticated_api/performed_oauth")
- |> json_response(200)
-
- %{conn: bad_token_conn} = oauth_access(["follow"], user: user)
-
- bad_token_conn
- |> get("/test/authenticated_api/performed_oauth")
- |> json_response(403)
- end
-end