aboutsummaryrefslogtreecommitdiff
path: root/test
diff options
context:
space:
mode:
authorPatrick J Cherry <patrick@bytemark.co.uk>2017-09-12 16:39:01 +0100
committerPatrick J Cherry <patrick@bytemark.co.uk>2017-09-12 16:39:01 +0100
commitd115cd9e58300ee8ab580e6d1d3d6e8d35cb8845 (patch)
treebc281a0b23153378579e24d0f10218069bb34faf /test
parent4eff930c3f01414bb454d7bcb5501827cb60289b (diff)
parent44636adb743dbe538a059a8dd34485a678018f0b (diff)
Merge branch '22-alerts-can-be-accessed-without-prior-authentication' into 'develop'
AJAX auth and navbar change Closes #22 and #18 See merge request !3
Diffstat (limited to 'test')
-rw-r--r--test/tc_mauve_web_interface.rb10
1 files changed, 9 insertions, 1 deletions
diff --git a/test/tc_mauve_web_interface.rb b/test/tc_mauve_web_interface.rb
index 54c9697..c93c25c 100644
--- a/test/tc_mauve_web_interface.rb
+++ b/test/tc_mauve_web_interface.rb
@@ -112,13 +112,21 @@ EOF
assert last_response.body.include?("Mauve: Login")
assert session['__FLASH__'].empty?
- # Check we can access this page before logging in.
+ # Check we can't access this page before logging in.
get '/alerts'
assert(session['__FLASH__'].has_key?(:error),"The flash error wasn't set following forbidden access")
follow_redirect! while last_response.redirect?
assert_equal(403, last_response.status, "The HTTP status wasn't 403")
assert last_response.body.include?("Mauve: Login")
assert session['__FLASH__'].empty?
+
+ # Check we can't access AJAX requests before logging in.
+ get '/ajax/alerts_table/raised/subject', {}, {:xhr => true}
+ refute(session['__FLASH__'].has_key?(:error), "The flash error shouldn't have been set from an AJAX call")
+ follow_redirect! while last_response.redirect?
+ assert_equal(403, last_response.status, "The HTTP status wasn't 403")
+ assert last_response.body.include?('You must be logged in to access this page')
+ assert session['__FLASH__'].empty?
#
# Try to falsify our login.