106 lines
3.2 KiB
Ruby
106 lines
3.2 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
describe 'Api::V2::Admin::APIKeys' do
|
|
include_context 'bearer authentication'
|
|
|
|
let!(:create_member_permission) do
|
|
create :permission,
|
|
role: 'member'
|
|
end
|
|
let!(:create_superadmin_permission) do
|
|
create :permission,
|
|
role: 'superadmin'
|
|
end
|
|
|
|
describe 'GET /api/v2/admin/api_keys' do
|
|
let!(:test_user) { create(:user, otp: otp_enabled, role: 'superadmin') }
|
|
let(:otp_enabled) { true }
|
|
let!(:first_api_key) { create :api_key, key_holder_account: test_user }
|
|
let!(:second_api_key) { create :api_key, key_holder_account: test_user }
|
|
let(:expected_fields) do
|
|
{
|
|
kid: first_api_key.kid,
|
|
state: first_api_key.state,
|
|
scope: %w[trade]
|
|
}
|
|
end
|
|
let(:params) do
|
|
{
|
|
uid: test_user.uid
|
|
}
|
|
end
|
|
let(:do_request) { get "/api/v2/admin/api_keys", params: params, headers: auth_header }
|
|
|
|
context 'successful' do
|
|
it 'Returns api keys for selected account' do
|
|
do_request
|
|
|
|
expect(response.status).to eq(200)
|
|
expect(json_body.first.keys).to match_array %i[kid algorithm scope state created_at updated_at]
|
|
expect(json_body.first).to include(expected_fields)
|
|
expect(json_body.first).not_to include(:secret)
|
|
end
|
|
|
|
it 'Returns api keys for selected account in ASC order' do
|
|
params[:ordering] = 'asc'
|
|
params[:order_by] = 'id'
|
|
do_request
|
|
|
|
expect(response.status).to eq(200)
|
|
expect(json_body.first.keys).to match_array %i[kid algorithm scope state created_at updated_at]
|
|
expect(json_body.first).to include(expected_fields)
|
|
expect(json_body.first).not_to include(:secret)
|
|
end
|
|
|
|
it 'Returns api keys for selected account in DESC order' do
|
|
params[:ordering] = 'desc'
|
|
params[:order_by] = 'id'
|
|
do_request
|
|
|
|
expect(response.status).to eq(200)
|
|
expect(json_body.first.keys).to match_array %i[kid algorithm scope state created_at updated_at]
|
|
expect(json_body.second).to include(expected_fields)
|
|
expect(json_body.second).not_to include(:secret)
|
|
end
|
|
|
|
it 'Returns empty array if no api keys exist for selected account' do
|
|
test_user.api_keys.delete_all
|
|
|
|
do_request
|
|
expect(response.status).to eq(200)
|
|
expect(json_body).to eq([])
|
|
end
|
|
end
|
|
|
|
context 'error' do
|
|
let(:params) do
|
|
{
|
|
uid: 'random'
|
|
}
|
|
end
|
|
|
|
it 'Returns error if user doesnt exist' do
|
|
do_request
|
|
expect(response.status).to eq(404)
|
|
expect(json_body.first).to include(:errors, ["admin.user.doesnt_exist"])
|
|
end
|
|
|
|
it 'Returns error if api key attribute doesnt exist' do
|
|
params[:uid] = test_user.uid
|
|
params[:order_by] = 'length'
|
|
do_request
|
|
expect(response.status).to eq(422)
|
|
expect(json_body.first).to include(:errors, ["api_keys.ordering.invalid_attribute"])
|
|
end
|
|
|
|
it 'Returns error if invalid ordering' do
|
|
params[:uid] = test_user.uid
|
|
params[:ordering] = 'res'
|
|
do_request
|
|
expect(response.status).to eq(422)
|
|
expect(json_body.first).to include(:errors, ["api_keys.ordering.invalid_ordering"])
|
|
end
|
|
end
|
|
end
|
|
end
|