allow login via private token only for atom feeds

This commit is contained in:
Nihad Abbasov 2012-06-01 06:56:28 -07:00
parent f8f6ff065e
commit cc3c6ad0ef
2 changed files with 16 additions and 2 deletions

View file

@ -28,6 +28,13 @@ describe "Projects" do
visit projects_path(:atom, :private_token => @user.private_token)
page.body.should have_selector("feed title")
end
it "should not render projects page via private token" do
logout
visit projects_path(:private_token => @user.private_token)
current_path.should == new_user_session_path
end
end
describe "GET /projects/new" do