X-Git-Url: http://source.bookstackapp.com/bookstack/blobdiff_plain/82a8db373961d89ab1c9a3736ba5fc467fe2e03d..refs/pull/2986/head:/tests/Api/ApiAuthTest.php diff --git a/tests/Api/ApiAuthTest.php b/tests/Api/ApiAuthTest.php index 2ab81814b..c45bd77ee 100644 --- a/tests/Api/ApiAuthTest.php +++ b/tests/Api/ApiAuthTest.php @@ -1,10 +1,11 @@ get($this->endpoint); $resp->assertStatus(401); - $this->actingAs($viewer, 'web'); + $this->actingAs($viewer, 'standard'); $resp = $this->get($this->endpoint); $resp->assertStatus(200); @@ -30,28 +31,28 @@ class ApiAuthTest extends TestCase { $resp = $this->get($this->endpoint); $resp->assertStatus(401); - $resp->assertJson($this->errorResponse("No authorization token found on the request", 401)); + $resp->assertJson($this->errorResponse('No authorization token found on the request', 401)); } public function test_bad_token_format_throws_error() { - $resp = $this->get($this->endpoint, ['Authorization' => "Token abc123"]); + $resp = $this->get($this->endpoint, ['Authorization' => 'Token abc123']); $resp->assertStatus(401); - $resp->assertJson($this->errorResponse("An authorization token was found on the request but the format appeared incorrect", 401)); + $resp->assertJson($this->errorResponse('An authorization token was found on the request but the format appeared incorrect', 401)); } public function test_token_with_non_existing_id_throws_error() { - $resp = $this->get($this->endpoint, ['Authorization' => "Token abc:123"]); + $resp = $this->get($this->endpoint, ['Authorization' => 'Token abc:123']); $resp->assertStatus(401); - $resp->assertJson($this->errorResponse("No matching API token was found for the provided authorization token", 401)); + $resp->assertJson($this->errorResponse('No matching API token was found for the provided authorization token', 401)); } public function test_token_with_bad_secret_value_throws_error() { $resp = $this->get($this->endpoint, ['Authorization' => "Token {$this->apiTokenId}:123"]); $resp->assertStatus(401); - $resp->assertJson($this->errorResponse("The secret provided for the given used API token is incorrect", 401)); + $resp->assertJson($this->errorResponse('The secret provided for the given used API token is incorrect', 401)); } public function test_api_access_permission_required_to_access_api() @@ -66,17 +67,17 @@ class ApiAuthTest extends TestCase $resp = $this->get($this->endpoint, $this->apiAuthHeader()); $resp->assertStatus(403); - $resp->assertJson($this->errorResponse("The owner of the used API token does not have permission to make API calls", 403)); + $resp->assertJson($this->errorResponse('The owner of the used API token does not have permission to make API calls', 403)); } public function test_api_access_permission_required_to_access_api_with_session_auth() { $editor = $this->getEditor(); - $this->actingAs($editor, 'web'); + $this->actingAs($editor, 'standard'); $resp = $this->get($this->endpoint); $resp->assertStatus(200); - auth('web')->logout(); + auth('standard')->logout(); $accessApiPermission = RolePermission::getByName('access-api'); $editorRole = $this->getEditor()->roles()->first(); @@ -84,10 +85,10 @@ class ApiAuthTest extends TestCase $editor = User::query()->where('id', '=', $editor->id)->first(); - $this->actingAs($editor, 'web'); + $this->actingAs($editor, 'standard'); $resp = $this->get($this->endpoint); $resp->assertStatus(403); - $resp->assertJson($this->errorResponse("The owner of the used API token does not have permission to make API calls", 403)); + $resp->assertJson($this->errorResponse('The owner of the used API token does not have permission to make API calls', 403)); } public function test_token_expiry_checked() @@ -103,7 +104,7 @@ class ApiAuthTest extends TestCase $token->save(); $resp = $this->get($this->endpoint, $this->apiAuthHeader()); - $resp->assertJson($this->errorResponse("The authorization token used has expired", 403)); + $resp->assertJson($this->errorResponse('The authorization token used has expired', 403)); } public function test_email_confirmation_checked_using_api_auth() @@ -117,7 +118,7 @@ class ApiAuthTest extends TestCase $resp = $this->get($this->endpoint, $this->apiAuthHeader()); $resp->assertStatus(401); - $resp->assertJson($this->errorResponse("The email address for the account in use needs to be confirmed", 401)); + $resp->assertJson($this->errorResponse('The email address for the account in use needs to be confirmed', 401)); } public function test_rate_limit_headers_active_on_requests() @@ -142,7 +143,7 @@ class ApiAuthTest extends TestCase $resp->assertJson([ 'error' => [ 'code' => 429, - ] + ], ]); } -} \ No newline at end of file +}