mirror of
https://github.com/Freika/dawarich.git
synced 2026-01-11 09:41:40 -05:00
b1393ee674
* Implement OmniAuth GitHub authentication * Fix omniauth GitHub scope to include user email access * Remove margin-bottom * Implement Google OAuth2 authentication * Implement OIDC authentication for Dawarich using omniauth_openid_connect gem. * Add patreon account linking and patron checking service * Update docker-compose.yml to use boolean values instead of strings * Add support for KML files * Add tests * Update changelog * Remove patreon OAuth integration * Move omniauthable to a concern * Update an icon in integrations * Update changelog * Update app version * Fix family location sharing toggle * Move family location sharing to its own controller * Update changelog * Implement basic tagging functionality for places, allowing users to categorize and label places with custom tags. * Add places management API and tags feature * Add some changes related to places management feature * Fix some tests * Fix sometests * Add places layer * Update places layer to use Leaflet.Control.Layers.Tree for hierarchical layer control * Rework tag form * Add hashtag * Add privacy zones to tags * Add notes to places and manage place tags * Update changelog * Update e2e tests * Extract tag serializer to its own file * Fix some tests * Fix tags request specs * Fix some tests * Fix rest of the tests * Revert some changes * Add missing specs * Revert changes in place export/import code * Fix some specs * Fix PlaceFinder to only consider global places when finding existing places * Fix few more specs * Fix visits creator spec * Fix last tests * Update place creating modal * Add home location based on "Home" tagged place * Save enabled tag layers * Some fixes * Fix bug where enabling place tag layers would trigger saving enabled layers, overwriting with incomplete data * Update migration to use disable_ddl_transaction! and add up/down methods * Fix tag layers restoration and filtering logic * Update OIDC auto-registration and email/password registration settings * Fix potential xss
69 lines
2.2 KiB
Ruby
69 lines
2.2 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
require 'rails_helper'
|
|
|
|
RSpec.describe 'Api::V1::Families::Locations', type: :request do
|
|
include ActiveSupport::Testing::TimeHelpers
|
|
|
|
let(:user) { create(:user) }
|
|
let(:other_user) { create(:user) }
|
|
let(:family) { create(:family, creator: user) }
|
|
let!(:user_membership) { create(:family_membership, user: user, family: family, role: :owner) }
|
|
|
|
describe 'GET /api/v1/families/locations' do
|
|
context 'with valid API key' do
|
|
before do
|
|
create(:family_membership, user: other_user, family: family, role: :member)
|
|
other_user.update_family_location_sharing!(true, duration: 'permanent')
|
|
end
|
|
|
|
it 'returns family member locations' do
|
|
get '/api/v1/families/locations', params: { api_key: user.api_key }
|
|
|
|
expect(response).to have_http_status(:ok)
|
|
json_response = JSON.parse(response.body)
|
|
expect(json_response).to have_key('locations')
|
|
expect(json_response).to have_key('updated_at')
|
|
expect(json_response).to have_key('sharing_enabled')
|
|
end
|
|
|
|
it 'includes sharing status' do
|
|
user.update_family_location_sharing!(true, duration: 'permanent')
|
|
|
|
get '/api/v1/families/locations', params: { api_key: user.api_key }
|
|
|
|
json_response = JSON.parse(response.body)
|
|
expect(json_response['sharing_enabled']).to be true
|
|
end
|
|
end
|
|
|
|
context 'without API key' do
|
|
it 'returns unauthorized' do
|
|
get '/api/v1/families/locations'
|
|
|
|
expect(response).to have_http_status(:unauthorized)
|
|
end
|
|
end
|
|
|
|
context 'with invalid API key' do
|
|
it 'returns unauthorized' do
|
|
get '/api/v1/families/locations', params: { api_key: 'invalid' }
|
|
|
|
expect(response).to have_http_status(:unauthorized)
|
|
end
|
|
end
|
|
|
|
context 'when user is not in a family' do
|
|
let(:solo_user) { create(:user) }
|
|
|
|
it 'returns forbidden' do
|
|
get '/api/v1/families/locations', params: { api_key: solo_user.api_key }
|
|
|
|
expect(response).to have_http_status(:forbidden)
|
|
json_response = JSON.parse(response.body)
|
|
expect(json_response['error']).to eq('User is not part of a family')
|
|
end
|
|
end
|
|
end
|
|
|
|
end
|