summaryrefslogtreecommitdiff
path: root/test/web/auth/oauth_test_controller_test.exs
diff options
context:
space:
mode:
authorEgor Kislitsyn <egor@kislitsyn.com>2020-04-30 13:51:27 +0400
committerEgor Kislitsyn <egor@kislitsyn.com>2020-04-30 13:51:27 +0400
commit1898054da4bcccb25e0bcd9d6463af38ced43351 (patch)
tree66c8eab923d261a1b802046afa50aa77926171d4 /test/web/auth/oauth_test_controller_test.exs
parent560f2c1979ca4d49f18abd6de6aac49875bfc771 (diff)
parentdae91630606d6ba408b3f340b6b450703c164ce1 (diff)
downloadpleroma-1898054da4bcccb25e0bcd9d6463af38ced43351.tar.gz
pleroma-1898054da4bcccb25e0bcd9d6463af38ced43351.zip
Merge branch 'develop' into openapi/reports
Diffstat (limited to 'test/web/auth/oauth_test_controller_test.exs')
-rw-r--r--test/web/auth/oauth_test_controller_test.exs49
1 files changed, 0 insertions, 49 deletions
diff --git a/test/web/auth/oauth_test_controller_test.exs b/test/web/auth/oauth_test_controller_test.exs
deleted file mode 100644
index a2f6009ac..000000000
--- a/test/web/auth/oauth_test_controller_test.exs
+++ /dev/null
@@ -1,49 +0,0 @@
-# Pleroma: A lightweight social networking server
-# Copyright © 2017-2020 Pleroma Authors <https://pleroma.social/>
-# SPDX-License-Identifier: AGPL-3.0-only
-
-defmodule Pleroma.Tests.OAuthTestControllerTest do
- use Pleroma.Web.ConnCase
-
- import Pleroma.Factory
-
- setup %{conn: conn} do
- user = insert(:user)
- conn = assign(conn, :user, user)
- %{conn: conn, user: user}
- end
-
- test "missed_oauth", %{conn: conn} do
- res =
- conn
- |> get("/test/authenticated_api/missed_oauth")
- |> json_response(403)
-
- assert res ==
- %{
- "error" =>
- "Security violation: OAuth scopes check was neither handled nor explicitly skipped."
- }
- end
-
- test "skipped_oauth", %{conn: conn} do
- conn
- |> assign(:token, nil)
- |> get("/test/authenticated_api/skipped_oauth")
- |> json_response(200)
- end
-
- test "performed_oauth", %{user: user} do
- %{conn: good_token_conn} = oauth_access(["read"], user: user)
-
- good_token_conn
- |> get("/test/authenticated_api/performed_oauth")
- |> json_response(200)
-
- %{conn: bad_token_conn} = oauth_access(["follow"], user: user)
-
- bad_token_conn
- |> get("/test/authenticated_api/performed_oauth")
- |> json_response(403)
- end
-end