diff options
author | lain <lain@soykaf.club> | 2020-04-29 11:09:30 +0000 |
---|---|---|
committer | lain <lain@soykaf.club> | 2020-04-29 11:09:30 +0000 |
commit | 58fded9858edbeb318dc011cb313e82a86fbafcb (patch) | |
tree | 90539822a02e9ff1de91969ad179da907c031b4d /test/web/auth/oauth_test_controller_test.exs | |
parent | 699fc9569fa06278baaec6804348375cb9891185 (diff) | |
parent | 4c0e53367acd74de04de070a5e33380f5e457163 (diff) | |
download | pleroma-58fded9858edbeb318dc011cb313e82a86fbafcb.tar.gz pleroma-58fded9858edbeb318dc011cb313e82a86fbafcb.zip |
Merge branch 'automatic-authentication-and-instance-publicity-checks' into 'develop'
Automatic checks of authentication / authorization / instance publicity
See merge request pleroma/pleroma!2409
Diffstat (limited to 'test/web/auth/oauth_test_controller_test.exs')
-rw-r--r-- | test/web/auth/oauth_test_controller_test.exs | 49 |
1 files changed, 0 insertions, 49 deletions
diff --git a/test/web/auth/oauth_test_controller_test.exs b/test/web/auth/oauth_test_controller_test.exs deleted file mode 100644 index a2f6009ac..000000000 --- a/test/web/auth/oauth_test_controller_test.exs +++ /dev/null @@ -1,49 +0,0 @@ -# Pleroma: A lightweight social networking server -# Copyright © 2017-2020 Pleroma Authors <https://pleroma.social/> -# SPDX-License-Identifier: AGPL-3.0-only - -defmodule Pleroma.Tests.OAuthTestControllerTest do - use Pleroma.Web.ConnCase - - import Pleroma.Factory - - setup %{conn: conn} do - user = insert(:user) - conn = assign(conn, :user, user) - %{conn: conn, user: user} - end - - test "missed_oauth", %{conn: conn} do - res = - conn - |> get("/test/authenticated_api/missed_oauth") - |> json_response(403) - - assert res == - %{ - "error" => - "Security violation: OAuth scopes check was neither handled nor explicitly skipped." - } - end - - test "skipped_oauth", %{conn: conn} do - conn - |> assign(:token, nil) - |> get("/test/authenticated_api/skipped_oauth") - |> json_response(200) - end - - test "performed_oauth", %{user: user} do - %{conn: good_token_conn} = oauth_access(["read"], user: user) - - good_token_conn - |> get("/test/authenticated_api/performed_oauth") - |> json_response(200) - - %{conn: bad_token_conn} = oauth_access(["follow"], user: user) - - bad_token_conn - |> get("/test/authenticated_api/performed_oauth") - |> json_response(403) - end -end |