3cbe75469b
Remove scopes from tokens Squashed commits: [83db38f] Add redirect uris to supported metadata
48 lines
2.2 KiB
Ruby
48 lines
2.2 KiB
Ruby
Given(/^all scopes exist$/) do
|
|
OpenidConnect::Scope.find_or_create_by(name: "openid")
|
|
OpenidConnect::Scope.find_or_create_by(name: "read")
|
|
end
|
|
|
|
When /^I register a new client$/ do
|
|
post openid_connect_clients_path, redirect_uris: ["http://localhost:3000"], client_name: "diaspora client"
|
|
end
|
|
|
|
Given /^I send a post request from that client to the password flow token endpoint using "([^\"]*)"'s credentials$/ do |username|
|
|
client_json = JSON.parse(last_response.body)
|
|
user = User.find_by(username: username)
|
|
post openid_connect_access_tokens_path, grant_type: "password", username: user.username,
|
|
password: "password", # Password has been hard coded as all test accounts seem to have a password of "password"
|
|
client_id: client_json["o_auth_application"]["client_id"],
|
|
client_secret: client_json["o_auth_application"]["client_secret"],
|
|
scope: "read"
|
|
end
|
|
|
|
Given /^I send a post request from that client to the password flow token endpoint using invalid credentials$/ do
|
|
client_json = JSON.parse(last_response.body)
|
|
post openid_connect_access_tokens_path, grant_type: "password", username: "bob", password: "wrongpassword",
|
|
client_id: client_json["o_auth_application"]["client_id"],
|
|
client_secret: client_json["o_auth_application"]["client_secret"],
|
|
scope: "read"
|
|
end
|
|
|
|
When /^I use received valid bearer tokens to access user info$/ do
|
|
access_token_json = JSON.parse(last_response.body)
|
|
get api_v0_user_path, access_token: access_token_json["access_token"]
|
|
end
|
|
|
|
When /^I use invalid bearer tokens to access user info$/ do
|
|
get api_v0_user_path, access_token: SecureRandom.hex(32)
|
|
end
|
|
|
|
Then /^I should receive "([^\"]*)"'s id, username, and email$/ do |username|
|
|
user_info_json = JSON.parse(last_response.body)
|
|
user = User.find_by_username(username)
|
|
expect(user_info_json["username"]).to have_content(user.username)
|
|
expect(user_info_json["language"]).to have_content(user.language)
|
|
expect(user_info_json["email"]).to have_content(user.email)
|
|
end
|
|
|
|
Then /^I should receive an "([^\"]*)" error$/ do |error_message|
|
|
user_info_json = JSON.parse(last_response.body)
|
|
expect(user_info_json["error"]).to have_content(error_message)
|
|
end
|