github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-05-23 11:33:42 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

BUGFIX: improve error messages for invalid API keys

Browse Source 
BUGFIX: don't track last seen for message bus
This commit is contained in:
Sam
2014-05-22 09:01:29 +10:00
parent 7fee3d7f8f
commit eeef775f21
6 changed files with 94 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
spec/controllers/application_controller_spec.rb
View File

@ -163,16 +163,14 @@ describe 'api' do
it 'disallows phonies to bookmark posts' do
PostAction.expects(:act).with(user, post, PostActionType.types[:bookmark]).never
lambda do
put :bookmark, bookmarked: "true", post_id: post.id, api_key: SecureRandom.hex(32), api_username: user.username, format: :json
end.should raise_error Discourse::NotLoggedIn
put :bookmark, bookmarked: "true", post_id: post.id, api_key: SecureRandom.hex(32), api_username: user.username, format: :json
response.code.to_i.should == 403
end
it 'disallows blank api' do
PostAction.expects(:act).with(user, post, PostActionType.types[:bookmark]).never
lambda do
put :bookmark, bookmarked: "true", post_id: post.id, api_key: "", api_username: user.username, format: :json
end.should raise_error Discourse::NotLoggedIn
put :bookmark, bookmarked: "true", post_id: post.id, api_key: "", api_username: user.username, format: :json
response.code.to_i.should == 403
end
end
end