X-Git-Url: https://git.openstreetmap.org/rails.git/blobdiff_plain/41a123334bc75d17335e3f242b0243ddfd3e6389..f3ff36418b60a56f18525900720e6ff9d21f516d:/test/unit/oauth_token_test.rb

diff --git a/test/unit/oauth_token_test.rb b/test/unit/oauth_token_test.rb
index eb8219c57..655e64eda 100644
--- a/test/unit/oauth_token_test.rb
+++ b/test/unit/oauth_token_test.rb
@@ -23,4 +23,15 @@ class OauthTokenTest < ActiveSupport::TestCase
     assert_equal false, tok.authorized?, "Token should now be invalid."
   end
 
+  ##
+  # test that tokens can't be found unless they're authorised
+  def test_find_token
+    tok = client_applications(:oauth_web_app).create_request_token
+    assert_equal false, tok.authorized?, "Token should be created unauthorised."
+    assert_equal nil, OauthToken.find_token(tok.token), "Shouldn't be able to find unauthorised token"
+    tok.authorize!(users(:public_user))
+    assert_equal true, tok.authorized?, "Token should now be authorised."
+    assert_not_equal nil, OauthToken.find_token(tok.token), "Should be able to find authorised token"
+  end
+
 end