· 7 years ago · Feb 14, 2018, 10:20 AM
1it "grants access to a user's data when he sets an Authentication token as a request parameter" do
2data =
3{
4 "grant_type" => "password",
5 "password" => password,
6 "username" => user.email
7}
8post('/oauth/token', data, {'HTTP_ACCEPT' => "application/json"})
9token = json["access_token"]
10get('/users/me', data, {'HTTP_ACCEPT' => "application/json", "Authorization" => "Bearer #{token}"})
11
12expect(response).to have_http_status(200)
13expect(json["email"]).to eq(user.email)
14
15it "grants access to a user's data when he sets an Authentication token as a request parameter" do
16data =
17{
18 "grant_type" => "password",
19 "password" => password,
20 "username" => user.email
21}
22post "/oauth/token", params: data
23token = json["access_token"]
24
25header = {"Authorization": "Bearer #{token}", "Accept": "application/json"}
26request.headers.merge!(header)
27get '/users/me'
28
29expect(response).to have_http_status(200)
30expect(json["email"]).to eq(user.email)