X-Git-Url: https://git.openstreetmap.org/rails.git/blobdiff_plain/d3700e6201b4b78a70bbb2941572edc985b63c2c..65e8bbd5f896f70b0210e7ef36430d9273191b68:/test/controllers/traces_controller_test.rb diff --git a/test/controllers/traces_controller_test.rb b/test/controllers/traces_controller_test.rb index 456bf9f8a..179070e00 100644 --- a/test/controllers/traces_controller_test.rb +++ b/test/controllers/traces_controller_test.rb @@ -1,5 +1,4 @@ require "test_helper" -require "digest" require "minitest/mock" class TracesControllerTest < ActionController::TestCase @@ -56,35 +55,35 @@ class TracesControllerTest < ActionController::TestCase assert_routing( { :path => "/traces", :method => :get }, - { :controller => "traces", :action => "list" } + { :controller => "traces", :action => "index" } ) assert_routing( { :path => "/traces/page/1", :method => :get }, - { :controller => "traces", :action => "list", :page => "1" } + { :controller => "traces", :action => "index", :page => "1" } ) assert_routing( { :path => "/traces/tag/tagname", :method => :get }, - { :controller => "traces", :action => "list", :tag => "tagname" } + { :controller => "traces", :action => "index", :tag => "tagname" } ) assert_routing( { :path => "/traces/tag/tagname/page/1", :method => :get }, - { :controller => "traces", :action => "list", :tag => "tagname", :page => "1" } + { :controller => "traces", :action => "index", :tag => "tagname", :page => "1" } ) assert_routing( { :path => "/user/username/traces", :method => :get }, - { :controller => "traces", :action => "list", :display_name => "username" } + { :controller => "traces", :action => "index", :display_name => "username" } ) assert_routing( { :path => "/user/username/traces/page/1", :method => :get }, - { :controller => "traces", :action => "list", :display_name => "username", :page => "1" } + { :controller => "traces", :action => "index", :display_name => "username", :page => "1" } ) assert_routing( { :path => "/user/username/traces/tag/tagname", :method => :get }, - { :controller => "traces", :action => "list", :display_name => "username", :tag => "tagname" } + { :controller => "traces", :action => "index", :display_name => "username", :tag => "tagname" } ) assert_routing( { :path => "/user/username/traces/tag/tagname/page/1", :method => :get }, - { :controller => "traces", :action => "list", :display_name => "username", :tag => "tagname", :page => "1" } + { :controller => "traces", :action => "index", :display_name => "username", :tag => "tagname", :page => "1" } ) assert_routing( @@ -123,7 +122,7 @@ class TracesControllerTest < ActionController::TestCase assert_routing( { :path => "/user/username/traces/1", :method => :get }, - { :controller => "traces", :action => "view", :display_name => "username", :id => "1" } + { :controller => "traces", :action => "show", :display_name => "username", :id => "1" } ) assert_routing( { :path => "/user/username/traces/1/picture", :method => :get }, @@ -151,12 +150,12 @@ class TracesControllerTest < ActionController::TestCase { :controller => "traces", :action => "data", :id => "1", :format => "xml" } ) assert_routing( - { :path => "/trace/1/edit", :method => :get }, + { :path => "/traces/1/edit", :method => :get }, { :controller => "traces", :action => "edit", :id => "1" } ) assert_routing( - { :path => "/trace/1/edit", :method => :post }, - { :controller => "traces", :action => "edit", :id => "1" } + { :path => "/traces/1", :method => :put }, + { :controller => "traces", :action => "update", :id => "1" } ) assert_routing( { :path => "/trace/1/delete", :method => :post }, @@ -164,8 +163,8 @@ class TracesControllerTest < ActionController::TestCase ) end - # Check that the list of traces is displayed - def test_list + # Check that the index of traces is displayed + def test_index user = create(:user) # The fourth test below is surpisingly sensitive to timestamp ordering when the timestamps are equal. trace_a = create(:trace, :visibility => "public", :timestamp => 4.seconds.ago) do |trace| @@ -181,25 +180,25 @@ class TracesControllerTest < ActionController::TestCase create(:tracetag, :trace => trace, :tag => "Birmingham") end - # First with the public list - get :list - check_trace_list [trace_b, trace_a] + # First with the public index + get :index + check_trace_index [trace_b, trace_a] # Restrict traces to those with a given tag - get :list, :params => { :tag => "London" } - check_trace_list [trace_a] + get :index, :params => { :tag => "London" } + check_trace_index [trace_a] # Should see more when we are logged in - get :list, :session => { :user => user } - check_trace_list [trace_d, trace_c, trace_b, trace_a] + get :index, :session => { :user => user } + check_trace_index [trace_d, trace_c, trace_b, trace_a] # Again, we should see more when we are logged in - get :list, :params => { :tag => "London" }, :session => { :user => user } - check_trace_list [trace_c, trace_a] + get :index, :params => { :tag => "London" }, :session => { :user => user } + check_trace_index [trace_c, trace_a] end # Check that I can get mine - def test_list_mine + def test_index_mine user = create(:user) create(:trace, :visibility => "public") do |trace| create(:tracetag, :trace => trace, :tag => "Birmingham") @@ -210,19 +209,19 @@ class TracesControllerTest < ActionController::TestCase # First try to get it when not logged in get :mine - assert_redirected_to :controller => "user", :action => "login", :referer => "/traces/mine" + assert_redirected_to :controller => "users", :action => "login", :referer => "/traces/mine" # Now try when logged in get :mine, :session => { :user => user } - assert_redirected_to :action => "list", :display_name => user.display_name + assert_redirected_to :action => "index", :display_name => user.display_name - # Fetch the actual list - get :list, :params => { :display_name => user.display_name }, :session => { :user => user } - check_trace_list [trace_b] + # Fetch the actual index + get :index, :params => { :display_name => user.display_name }, :session => { :user => user } + check_trace_index [trace_b] end - # Check the list of traces for a specific user - def test_list_user + # Check the index of traces for a specific user + def test_index_user user = create(:user) second_user = create(:user) third_user = create(:user) @@ -233,121 +232,155 @@ class TracesControllerTest < ActionController::TestCase end # Test a user with no traces - get :list, :params => { :display_name => second_user.display_name } - check_trace_list [] + get :index, :params => { :display_name => second_user.display_name } + check_trace_index [] # Test the user with the traces - should see only public ones - get :list, :params => { :display_name => user.display_name } - check_trace_list [trace_b] + get :index, :params => { :display_name => user.display_name } + check_trace_index [trace_b] # Should still see only public ones when authenticated as another user - get :list, :params => { :display_name => user.display_name }, :session => { :user => third_user } - check_trace_list [trace_b] + get :index, :params => { :display_name => user.display_name }, :session => { :user => third_user } + check_trace_index [trace_b] # Should see all traces when authenticated as the target user - get :list, :params => { :display_name => user.display_name }, :session => { :user => user } - check_trace_list [trace_c, trace_b] + get :index, :params => { :display_name => user.display_name }, :session => { :user => user } + check_trace_index [trace_c, trace_b] # Should only see traces with the correct tag when a tag is specified - get :list, :params => { :display_name => user.display_name, :tag => "London" }, :session => { :user => user } - check_trace_list [trace_c] + get :index, :params => { :display_name => user.display_name, :tag => "London" }, :session => { :user => user } + check_trace_index [trace_c] # Should get an error if the user does not exist - get :list, :params => { :display_name => "UnknownUser" } + get :index, :params => { :display_name => "UnknownUser" } assert_response :not_found - assert_template "user/no_such_user" + assert_template "users/no_such_user" end - # Check a multi-page list - def test_list_paged + # Check a multi-page index + def test_index_paged # Create several pages worth of traces create_list(:trace, 50) - # Try and get the list - get :list + # Try and get the index + get :index assert_response :success assert_select "table#trace_list tbody", :count => 1 do assert_select "tr", :count => 20 end # Try and get the second page - get :list, :params => { :page => 2 } + get :index, :params => { :page => 2 } assert_response :success assert_select "table#trace_list tbody", :count => 1 do assert_select "tr", :count => 20 end end - # Check that the rss loads + # Check the RSS feed def test_rss user = create(:user) + # The fourth test below is surpisingly sensitive to timestamp ordering when the timestamps are equal. + trace_a = create(:trace, :visibility => "public", :timestamp => 4.seconds.ago) do |trace| + create(:tracetag, :trace => trace, :tag => "London") + end + trace_b = create(:trace, :visibility => "public", :timestamp => 3.seconds.ago) do |trace| + create(:tracetag, :trace => trace, :tag => "Birmingham") + end + create(:trace, :visibility => "private", :user => user, :timestamp => 2.seconds.ago) do |trace| + create(:tracetag, :trace => trace, :tag => "London") + end + create(:trace, :visibility => "private", :user => user, :timestamp => 1.second.ago) do |trace| + create(:tracetag, :trace => trace, :tag => "Birmingham") + end # First with the public feed get :georss, :params => { :format => :rss } - check_trace_feed Trace.visible_to_all + check_trace_feed [trace_b, trace_a] # Restrict traces to those with a given tag get :georss, :params => { :tag => "London", :format => :rss } - check_trace_feed Trace.tagged("London").visible_to_all + check_trace_feed [trace_a] + end - # Restrict traces to those for a given user + # Check the RSS feed for a specific user + def test_rss_user + user = create(:user) + second_user = create(:user) + create(:user) + create(:trace) + trace_b = create(:trace, :visibility => "public", :timestamp => 4.seconds.ago, :user => user) + trace_c = create(:trace, :visibility => "public", :timestamp => 3.seconds.ago, :user => user) do |trace| + create(:tracetag, :trace => trace, :tag => "London") + end + create(:trace, :visibility => "private") + + # Test a user with no traces + get :georss, :params => { :display_name => second_user.display_name, :format => :rss } + check_trace_feed [] + + # Test the user with the traces - should see only public ones get :georss, :params => { :display_name => user.display_name, :format => :rss } - check_trace_feed user.traces.visible_to_all + check_trace_feed [trace_c, trace_b] + + # Should only see traces with the correct tag when a tag is specified + get :georss, :params => { :display_name => user.display_name, :tag => "London", :format => :rss } + check_trace_feed [trace_c] - # Restrict traces to those for a given user with a tiven tag - get :georss, :params => { :display_name => user.display_name, :tag => "Birmingham", :format => :rss } - check_trace_feed user.traces.tagged("Birmingham").visible_to_all + # Should no traces if the user does not exist + get :georss, :params => { :display_name => "UnknownUser", :format => :rss } + check_trace_feed [] end - # Test viewing a trace - def test_view + # Test showing a trace + def test_show public_trace_file = create(:trace, :visibility => "public") # First with no auth, which should work since the trace is public - get :view, :params => { :display_name => public_trace_file.user.display_name, :id => public_trace_file.id } - check_trace_view public_trace_file + get :show, :params => { :display_name => public_trace_file.user.display_name, :id => public_trace_file.id } + check_trace_show public_trace_file # Now with some other user, which should work since the trace is public - get :view, :params => { :display_name => public_trace_file.user.display_name, :id => public_trace_file.id }, :session => { :user => create(:user) } - check_trace_view public_trace_file + get :show, :params => { :display_name => public_trace_file.user.display_name, :id => public_trace_file.id }, :session => { :user => create(:user) } + check_trace_show public_trace_file # And finally we should be able to do it with the owner of the trace - get :view, :params => { :display_name => public_trace_file.user.display_name, :id => public_trace_file.id }, :session => { :user => public_trace_file.user } - check_trace_view public_trace_file + get :show, :params => { :display_name => public_trace_file.user.display_name, :id => public_trace_file.id }, :session => { :user => public_trace_file.user } + check_trace_show public_trace_file end # Check an anonymous trace can't be viewed by another user - def test_view_anon + def test_show_anon anon_trace_file = create(:trace, :visibility => "private") # First with no auth - get :view, :params => { :display_name => anon_trace_file.user.display_name, :id => anon_trace_file.id } + get :show, :params => { :display_name => anon_trace_file.user.display_name, :id => anon_trace_file.id } assert_response :redirect - assert_redirected_to :action => :list + assert_redirected_to :action => :index # Now with some other user, which should not work since the trace is anon - get :view, :params => { :display_name => anon_trace_file.user.display_name, :id => anon_trace_file.id }, :session => { :user => create(:user) } + get :show, :params => { :display_name => anon_trace_file.user.display_name, :id => anon_trace_file.id }, :session => { :user => create(:user) } assert_response :redirect - assert_redirected_to :action => :list + assert_redirected_to :action => :index # And finally we should be able to do it with the owner of the trace - get :view, :params => { :display_name => anon_trace_file.user.display_name, :id => anon_trace_file.id }, :session => { :user => anon_trace_file.user } - check_trace_view anon_trace_file + get :show, :params => { :display_name => anon_trace_file.user.display_name, :id => anon_trace_file.id }, :session => { :user => anon_trace_file.user } + check_trace_show anon_trace_file end - # Test viewing a trace that doesn't exist - def test_view_not_found + # Test showing a trace that doesn't exist + def test_show_not_found deleted_trace_file = create(:trace, :deleted) # First with a trace that has never existed - get :view, :params => { :display_name => create(:user).display_name, :id => 0 } + get :show, :params => { :display_name => create(:user).display_name, :id => 0 } assert_response :redirect - assert_redirected_to :action => :list + assert_redirected_to :action => :index # Now with a trace that has been deleted - get :view, :params => { :display_name => deleted_trace_file.user.display_name, :id => deleted_trace_file.id }, :session => { :user => deleted_trace_file.user } + get :show, :params => { :display_name => deleted_trace_file.user.display_name, :id => deleted_trace_file.id }, :session => { :user => deleted_trace_file.user } assert_response :redirect - assert_redirected_to :action => :list + assert_redirected_to :action => :index end # Test downloading a trace @@ -513,7 +546,7 @@ class TracesControllerTest < ActionController::TestCase # First with no auth get :new assert_response :redirect - assert_redirected_to :controller => :user, :action => :login, :referer => new_trace_path + assert_redirected_to :controller => :users, :action => :login, :referer => new_trace_path # Now authenticated as a user with gps.trace.visibility set user = create(:user) @@ -558,8 +591,8 @@ class TracesControllerTest < ActionController::TestCase assert_not_equal "trackable", user.preferences.where(:k => "gps.trace.visibility").first.v post :create, :params => { :trace => { :gpx_file => file, :description => "New Trace", :tagstring => "new,trace", :visibility => "trackable" } }, :session => { :user => user } assert_response :redirect - assert_redirected_to :action => :list, :display_name => user.display_name - assert_match /file has been uploaded/, flash[:notice] + assert_redirected_to :action => :index, :display_name => user.display_name + assert_match(/file has been uploaded/, flash[:notice]) trace = Trace.order(:id => :desc).first assert_equal "a.gpx", trace.name assert_equal "New Trace", trace.description @@ -571,6 +604,21 @@ class TracesControllerTest < ActionController::TestCase assert_equal "trackable", user.preferences.where(:k => "gps.trace.visibility").first.v end + # Test creating a trace with validation errors + def test_create_post_with_validation_errors + # Get file to use + fixture = Rails.root.join("test", "gpx", "fixtures", "a.gpx") + file = Rack::Test::UploadedFile.new(fixture, "application/gpx+xml") + user = create(:user) + + # Now authenticated + create(:user_preference, :user => user, :k => "gps.trace.visibility", :v => "identifiable") + assert_not_equal "trackable", user.preferences.where(:k => "gps.trace.visibility").first.v + post :create, :params => { :trace => { :gpx_file => file, :description => "", :tagstring => "new,trace", :visibility => "trackable" } }, :session => { :user => user } + assert_template :new + assert_match "Description is too short (minimum is 1 character)", response.body + end + # Test fetching the edit page for a trace using GET def test_edit_get public_trace_file = create(:trace, :visibility => "public") @@ -579,7 +627,7 @@ class TracesControllerTest < ActionController::TestCase # First with no auth get :edit, :params => { :display_name => public_trace_file.user.display_name, :id => public_trace_file.id } assert_response :redirect - assert_redirected_to :controller => :user, :action => :login, :referer => trace_edit_path(:display_name => public_trace_file.user.display_name, :id => public_trace_file.id) + assert_redirected_to :controller => :users, :action => :login, :referer => edit_trace_path(:display_name => public_trace_file.user.display_name, :id => public_trace_file.id) # Now with some other user, which should fail get :edit, :params => { :display_name => public_trace_file.user.display_name, :id => public_trace_file.id }, :session => { :user => create(:user) } @@ -598,34 +646,8 @@ class TracesControllerTest < ActionController::TestCase assert_response :success end - # Test fetching the edit page for a trace using POST - def test_edit_post_no_details - public_trace_file = create(:trace, :visibility => "public") - deleted_trace_file = create(:trace, :deleted) - - # First with no auth - post :edit, :params => { :display_name => public_trace_file.user.display_name, :id => public_trace_file.id } - assert_response :forbidden - - # Now with some other user, which should fail - post :edit, :params => { :display_name => public_trace_file.user.display_name, :id => public_trace_file.id }, :session => { :user => create(:user) } - assert_response :forbidden - - # Now with a trace which doesn't exist - post :edit, :params => { :display_name => create(:user).display_name, :id => 0 }, :session => { :user => create(:user) } - assert_response :not_found - - # Now with a trace which has been deleted - post :edit, :params => { :display_name => deleted_trace_file.user.display_name, :id => deleted_trace_file.id }, :session => { :user => deleted_trace_file.user } - assert_response :not_found - - # Finally with a trace that we are allowed to edit - post :edit, :params => { :display_name => public_trace_file.user.display_name, :id => public_trace_file.id }, :session => { :user => public_trace_file.user } - assert_response :success - end - # Test saving edits to a trace - def test_edit_post_with_details + def test_update public_trace_file = create(:trace, :visibility => "public") deleted_trace_file = create(:trace, :deleted) @@ -633,25 +655,25 @@ class TracesControllerTest < ActionController::TestCase new_details = { :description => "Changed description", :tagstring => "new_tag", :visibility => "private" } # First with no auth - post :edit, :params => { :display_name => public_trace_file.user.display_name, :id => public_trace_file.id, :trace => new_details } + put :update, :params => { :display_name => public_trace_file.user.display_name, :id => public_trace_file.id, :trace => new_details } assert_response :forbidden # Now with some other user, which should fail - post :edit, :params => { :display_name => public_trace_file.user.display_name, :id => public_trace_file.id, :trace => new_details }, :session => { :user => create(:user) } + put :update, :params => { :display_name => public_trace_file.user.display_name, :id => public_trace_file.id, :trace => new_details }, :session => { :user => create(:user) } assert_response :forbidden # Now with a trace which doesn't exist - post :edit, :params => { :display_name => create(:user).display_name, :id => 0 }, :session => { :user => create(:user), :trace => new_details } + put :update, :params => { :display_name => create(:user).display_name, :id => 0 }, :session => { :user => create(:user), :trace => new_details } assert_response :not_found # Now with a trace which has been deleted - post :edit, :params => { :display_name => deleted_trace_file.user.display_name, :id => deleted_trace_file.id, :trace => new_details }, :session => { :user => deleted_trace_file.user } + put :update, :params => { :display_name => deleted_trace_file.user.display_name, :id => deleted_trace_file.id, :trace => new_details }, :session => { :user => deleted_trace_file.user } assert_response :not_found # Finally with a trace that we are allowed to edit - post :edit, :params => { :display_name => public_trace_file.user.display_name, :id => public_trace_file.id, :trace => new_details }, :session => { :user => public_trace_file.user } + put :update, :params => { :display_name => public_trace_file.user.display_name, :id => public_trace_file.id, :trace => new_details }, :session => { :user => public_trace_file.user } assert_response :redirect - assert_redirected_to :action => :view, :display_name => public_trace_file.user.display_name + assert_redirected_to :action => :show, :display_name => public_trace_file.user.display_name trace = Trace.find(public_trace_file.id) assert_equal new_details[:description], trace.description assert_equal new_details[:tagstring], trace.tagstring @@ -682,7 +704,7 @@ class TracesControllerTest < ActionController::TestCase # Now with a trace that we are allowed to delete post :delete, :params => { :display_name => public_trace_file.user.display_name, :id => public_trace_file.id }, :session => { :user => public_trace_file.user } assert_response :redirect - assert_redirected_to :action => :list, :display_name => public_trace_file.user.display_name + assert_redirected_to :action => :index, :display_name => public_trace_file.user.display_name trace = Trace.find(public_trace_file.id) assert_equal false, trace.visible @@ -692,7 +714,7 @@ class TracesControllerTest < ActionController::TestCase post :delete, :params => { :display_name => public_trace_file.user.display_name, :id => public_trace_file.id }, :session => { :user => admin } assert_response :redirect - assert_redirected_to :action => :list, :display_name => public_trace_file.user.display_name + assert_redirected_to :action => :index, :display_name => public_trace_file.user.display_name trace = Trace.find(public_trace_file.id) assert_equal false, trace.visible end @@ -906,32 +928,27 @@ class TracesControllerTest < ActionController::TestCase anon_trace_file = create(:trace, :visibility => "private") # First with no auth - content public_trace_file.to_xml - put :api_update, :params => { :id => public_trace_file.id } + put :api_update, :params => { :id => public_trace_file.id }, :body => public_trace_file.to_xml.to_s assert_response :unauthorized # Now with some other user, which should fail basic_authorization create(:user).display_name, "test" - content public_trace_file.to_xml - put :api_update, :params => { :id => public_trace_file.id } + put :api_update, :params => { :id => public_trace_file.id }, :body => public_trace_file.to_xml.to_s assert_response :forbidden # Now with a trace which doesn't exist basic_authorization create(:user).display_name, "test" - content public_trace_file.to_xml - put :api_update, :params => { :id => 0 } + put :api_update, :params => { :id => 0 }, :body => public_trace_file.to_xml.to_s assert_response :not_found # Now with a trace which did exist but has been deleted basic_authorization deleted_trace_file.user.display_name, "test" - content deleted_trace_file.to_xml - put :api_update, :params => { :id => deleted_trace_file.id } + put :api_update, :params => { :id => deleted_trace_file.id }, :body => deleted_trace_file.to_xml.to_s assert_response :not_found # Now try an update with the wrong ID basic_authorization public_trace_file.user.display_name, "test" - content anon_trace_file.to_xml - put :api_update, :params => { :id => public_trace_file.id } + put :api_update, :params => { :id => public_trace_file.id }, :body => anon_trace_file.to_xml.to_s assert_response :bad_request, "should not be able to update a trace with a different ID from the XML" @@ -940,8 +957,7 @@ class TracesControllerTest < ActionController::TestCase t = public_trace_file t.description = "Changed description" t.visibility = "private" - content t.to_xml - put :api_update, :params => { :id => t.id } + put :api_update, :params => { :id => t.id }, :body => t.to_xml.to_s assert_response :success nt = Trace.find(t.id) assert_equal nt.description, t.description @@ -954,8 +970,7 @@ class TracesControllerTest < ActionController::TestCase trace = tracetag.trace basic_authorization trace.user.display_name, "test" - content trace.to_xml - put :api_update, :params => { :id => trace.id } + put :api_update, :params => { :id => trace.id }, :body => trace.to_xml.to_s assert_response :success updated = Trace.find(trace.id) @@ -1006,11 +1021,11 @@ class TracesControllerTest < ActionController::TestCase assert_select "description" assert_select "link" assert_select "image" - assert_select "item", :count => traces.visible.count do |items| - traces.visible.order("timestamp DESC").zip(items).each do |trace, item| + assert_select "item", :count => traces.length do |items| + traces.zip(items).each do |trace, item| assert_select item, "title", trace.name - assert_select item, "link", "http://test.host/user/#{trace.user.display_name}/traces/#{trace.id}" - assert_select item, "guid", "http://test.host/user/#{trace.user.display_name}/traces/#{trace.id}" + assert_select item, "link", "http://test.host/user/#{ERB::Util.u(trace.user.display_name)}/traces/#{trace.id}" + assert_select item, "guid", "http://test.host/user/#{ERB::Util.u(trace.user.display_name)}/traces/#{trace.id}" assert_select item, "description" # assert_select item, "dc:creator", trace.user.display_name assert_select item, "pubDate", trace.timestamp.rfc822 @@ -1020,9 +1035,9 @@ class TracesControllerTest < ActionController::TestCase end end - def check_trace_list(traces) + def check_trace_index(traces) assert_response :success - assert_template "list" + assert_template "index" if !traces.empty? assert_select "table#trace_list tbody", :count => 1 do @@ -1040,9 +1055,9 @@ class TracesControllerTest < ActionController::TestCase end end - def check_trace_view(trace) + def check_trace_show(trace) assert_response :success - assert_template "view" + assert_template "show" assert_select "table", :count => 1 do assert_select "td", /^#{Regexp.quote(trace.name)} /