123456789101112131415161718192021222324252627282930313233343536373839404142434445 |
- # frozen_string_literal: true
- require 'rails_helper'
- describe Api::V1::Apps::CredentialsController do
- render_views
- let(:token) { Fabricate(:accessible_access_token, scopes: 'read', application: Fabricate(:application)) }
- context 'with an oauth token' do
- before do
- allow(controller).to receive(:doorkeeper_token) { token }
- end
- describe 'GET #show' do
- before do
- get :show
- end
- it 'returns http success' do
- expect(response).to have_http_status(200)
- end
- it 'does not contain client credentials' do
- json = body_as_json
- expect(json).to_not have_key(:client_secret)
- expect(json).to_not have_key(:client_id)
- end
- end
- end
- context 'without an oauth token' do
- before do
- allow(controller).to receive(:doorkeeper_token).and_return(nil)
- end
- describe 'GET #show' do
- it 'returns http unauthorized' do
- get :show
- expect(response).to have_http_status(401)
- end
- end
- end
- end
|