instiki/vendor/rails/actionpack/test/controller/cookie_test.rb

require 'abstract_unit'

class CookieTest < ActionController::TestCase
  class TestController < ActionController::Base
    self.cookie_verifier_secret = "thisISverySECRET123"
    
    def authenticate
      cookies["user_name"] = "david"
    end

    def set_with_with_escapable_characters
      cookies["that & guy"] = "foo & bar => baz"
    end

    def authenticate_for_fourteen_days
      cookies["user_name"] = { "value" => "david", "expires" => Time.utc(2005, 10, 10,5) }
    end

    def authenticate_for_fourteen_days_with_symbols
      cookies[:user_name] = { :value => "david", :expires => Time.utc(2005, 10, 10,5) }
    end

    def set_multiple_cookies
      cookies["user_name"] = { "value" => "david", "expires" => Time.utc(2005, 10, 10,5) }
      cookies["login"]     = "XJ-122"
    end

    def access_frozen_cookies
      cookies["will"] = "work"
    end

    def logout
      cookies.delete("user_name")
    end

    def delete_cookie_with_path
      cookies.delete("user_name", :path => '/beaten')
      render :text => "hello world"
    end

    def authenticate_with_http_only
      cookies["user_name"] = { :value => "david", :httponly => true }
    end
    
    def authenticate_with_secure
      cookies["user_name"] = { :value => "david", :secure => true }
    end
    
    def set_permanent_cookie
      cookies.permanent[:user_name] = "Jamie"
    end

    def set_signed_cookie
      cookies.signed[:user_id] = 45
    end
    
    def set_permanent_signed_cookie
      cookies.permanent.signed[:remember_me] = 100
    end

    def rescue_action(e)
      raise unless ActionView::MissingTemplate # No templates here, and we don't care about the output
    end
  end

  tests TestController

  def setup
    @request.host = "www.nextangle.com"
  end

  def test_setting_cookie
    get :authenticate
    assert_equal ["user_name=david; path=/"], @response.headers["Set-Cookie"]
    assert_equal({"user_name" => "david"}, @response.cookies)
  end

  def test_setting_with_escapable_characters
    get :set_with_with_escapable_characters
    assert_equal ["that+%26+guy=foo+%26+bar+%3D%3E+baz; path=/"], @response.headers["Set-Cookie"]
    assert_equal({"that & guy" => "foo & bar => baz"}, @response.cookies)
  end

  def test_setting_cookie_for_fourteen_days
    get :authenticate_for_fourteen_days
    assert_equal ["user_name=david; path=/; expires=Mon, 10-Oct-2005 05:00:00 GMT"], @response.headers["Set-Cookie"]
    assert_equal({"user_name" => "david"}, @response.cookies)
  end

  def test_setting_cookie_for_fourteen_days_with_symbols
    get :authenticate_for_fourteen_days_with_symbols
    assert_equal ["user_name=david; path=/; expires=Mon, 10-Oct-2005 05:00:00 GMT"], @response.headers["Set-Cookie"]
    assert_equal({"user_name" => "david"}, @response.cookies)
  end

  def test_setting_cookie_with_http_only
    get :authenticate_with_http_only
    assert_equal ["user_name=david; path=/; HttpOnly"], @response.headers["Set-Cookie"]
    assert_equal({"user_name" => "david"}, @response.cookies)
  end
  
  def test_setting_cookie_with_secure
    @request.env["HTTPS"] = "on"
    get :authenticate_with_secure
    assert_equal ["user_name=david; path=/; secure"], @response.headers["Set-Cookie"]
    assert_equal({"user_name" => "david"}, @response.cookies)
  end

  def test_setting_cookie_with_secure_in_development
    with_environment(:development) do
      get :authenticate_with_secure
      assert_equal ["user_name=david; path=/; secure"], @response.headers["Set-Cookie"]
      assert_equal({"user_name" => "david"}, @response.cookies)
    end
  end

  def test_not_setting_cookie_with_secure
    get :authenticate_with_secure
    assert_not_equal ["user_name=david; path=/; secure"], @response.headers["Set-Cookie"]
    assert_not_equal({"user_name" => "david"}, @response.cookies)
  end

  def test_multiple_cookies
    get :set_multiple_cookies
    assert_equal 2, @response.cookies.size
    assert_equal "user_name=david; path=/; expires=Mon, 10-Oct-2005 05:00:00 GMT", @response.headers["Set-Cookie"][0]
    assert_equal "login=XJ-122; path=/", @response.headers["Set-Cookie"][1]
    assert_equal({"login" => "XJ-122", "user_name" => "david"}, @response.cookies)
  end

  def test_setting_test_cookie
    assert_nothing_raised { get :access_frozen_cookies }
  end

  def test_expiring_cookie
    get :logout
    assert_equal ["user_name=; path=/; expires=Thu, 01-Jan-1970 00:00:00 GMT"], @response.headers["Set-Cookie"]
    assert_equal({"user_name" => nil}, @response.cookies)
  end

  def test_cookiejar_accessor
    @request.cookies["user_name"] = "david"
    @controller.request = @request
    jar = ActionController::CookieJar.new(@controller)
    assert_equal "david", jar["user_name"]
    assert_equal nil, jar["something_else"]
  end

  def test_cookiejar_accessor_with_array_value
    @request.cookies["pages"] = %w{1 2 3}
    @controller.request = @request
    jar = ActionController::CookieJar.new(@controller)
    assert_equal %w{1 2 3}, jar["pages"]
  end

  def test_cookiejar_delete_removes_item_and_returns_its_value
    @request.cookies["user_name"] = "david"
    @controller.response = @response
    jar = ActionController::CookieJar.new(@controller)
    assert_equal "david", jar.delete("user_name")
  end

  def test_delete_cookie_with_path
    get :delete_cookie_with_path
    assert_equal ["user_name=; path=/beaten; expires=Thu, 01-Jan-1970 00:00:00 GMT"], @response.headers["Set-Cookie"]
  end

  def test_cookies_persist_throughout_request
    get :authenticate
    cookies = @controller.send(:cookies)
    assert_equal 'david', cookies['user_name']
  end
  
  def test_permanent_cookie
    get :set_permanent_cookie
    assert_match /Jamie/, @response.headers["Set-Cookie"].first
    assert_match %r(#{20.years.from_now.year}), @response.headers["Set-Cookie"].first
  end
  
  def test_signed_cookie
    get :set_signed_cookie
    assert_equal 45, @controller.send(:cookies).signed[:user_id]
  end
  
  def test_accessing_nonexistant_signed_cookie_should_not_raise_an_invalid_signature
    get :set_signed_cookie
    assert_nil @controller.send(:cookies).signed[:non_existant_attribute]
  end
  
  def test_permanent_signed_cookie
    get :set_permanent_signed_cookie
    assert_match %r(#{20.years.from_now.year}), @response.headers["Set-Cookie"].first
    assert_equal 100, @controller.send(:cookies).signed[:remember_me]
  end

  private
    def with_environment(enviroment)
      old_rails = Object.const_get(:Rails) rescue nil
      mod = Object.const_set(:Rails, Module.new)
      (class << mod; self; end).instance_eval do
        define_method(:env) { @_env ||= ActiveSupport::StringInquirer.new(enviroment.to_s) }
      end
      yield
    ensure
      Object.module_eval { remove_const(:Rails) } if defined?(Rails)
      Object.const_set(:Rails, old_rails) if old_rails
    end
end