SWAMPy

✎ CARVE FLESH

EDITING: inst_access_tokens_controller_spec.rb

# frozen_string_literal: true

#
# Copyright (C) 2021 - present Instructure, Inc.
#
# This file is part of Canvas.
#
# Canvas is free software: you can redistribute it and/or modify it under
# the terms of the GNU Affero General Public License as published by the Free
# Software Foundation, version 3 of the License.
#
# Canvas is distributed in the hope that it will be useful, but WITHOUT ANY
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
# A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
# details.
#
# You should have received a copy of the GNU Affero General Public License along
# with this program. If not, see <http://www.gnu.org/licenses/>.

require_relative "../spec_helper"

describe InstAccessTokensController do
  include_context "InstAccess setup"

let_once(:user) { user_with_pseudonym }

describe "#create" do
    it "requires being logged in" do
      post "create"
      expect(response).to be_redirect
      expect(response).to have_http_status(:found)
    end

context "with valid user session" do
      before { user_session(user) }

let(:deserialized_token) do
        token = response.parsed_body["token"]
        decrypt_and_deserialize_token(token)
      end

it "generates an InstAccess token for the requesting user" do
        post "create", format: "json"
        expect(response).to have_http_status(:created)
        expect(deserialized_token.user_uuid).to eq(user.uuid)
      end

it "has the user's domain in the token" do
        post "create", format: "json"
        expect(deserialized_token.canvas_domain).to eq("test.host")
      end

it "has the region in the token" do
        expect(ApplicationController).to receive(:region).and_return "us-west-2"
        post "create", format: "json"
        expect(deserialized_token.region).to eq("us-west-2")
      end
    end

it "doesn't allow using an InstAccess token to generate an InstAccess token" do
      token = InstAccess::Token.for_user(user_uuid: user.uuid, account_uuid: user.account.uuid).to_unencrypted_token_string
      request.headers["Authorization"] = "Bearer #{token}"
      get "create", format: "json"
      expect(response).to have_http_status(:forbidden)
      expect(response.body).to match(/cannot generate a JWT when authorized by a JWT/)
    end

context "with a services JWT" do
      include_context "JWT setup"

it "doesn't allow you to create an InstAccess token" do
        token = build_wrapped_token(user.global_id)
        @request.headers["Authorization"] = "Bearer #{token}"
        get "create", format: "json"
        expect(response).to have_http_status(:forbidden)
        expect(response.body).to match(/cannot generate a JWT when authorized by a JWT/)
      end
    end
  end
end

CANCEL

Name	Type	Size	Modified	Actions
↩ ..	DIR	—	—
📁 bookmarks/	DIR	—	2023-09-24 03:36
📁 concerns/	DIR	—	2023-09-24 03:39
📁 login/	DIR	—	2023-09-24 03:39
📁 lti/	DIR	—	2023-09-24 03:39
📁 master_courses/	DIR	—	2023-09-24 03:39
📁 microsoft_sync/	DIR	—	2023-09-24 03:36
📁 quizzes/	DIR	—	2023-09-24 03:39
📁 submissions/	DIR	—	2023-09-24 03:36
📁 support_helpers/	DIR	—	2023-09-24 03:39
📄 account_calendars_api_controller_spec.rb	RB	26.8 KB	2023-09-24 03:39	EDIT
📄 accounts_controller_spec.rb	RB	81.3 KB	2023-09-24 03:39	EDIT
📄 announcements_controller_spec.rb	RB	5.8 KB	2023-09-24 03:36	EDIT
📄 anonymous_submissions_controller_spec.rb	RB	14.2 KB	2023-09-24 03:36	EDIT
📄 app_center_controller_spec.rb	RB	1.6 KB	2023-09-24 03:36	EDIT
📄 application_controller_spec.rb	RB	123.6 KB	2023-09-24 03:39	EDIT
📄 appointment_groups_controller_spec.rb	RB	5.7 KB	2023-09-24 03:36	EDIT
📄 assignment_groups_controller_spec.rb	RB	46.5 KB	2023-09-24 03:36	EDIT
📄 assignments_controller_spec.rb	RB	105.8 KB	2023-09-24 03:39	EDIT
📄 auditor_api_controller_spec.rb	RB	2.3 KB	2023-09-24 03:36	EDIT
📄 authentication_providers_controller_spec.rb	RB	11.3 KB	2023-09-24 03:36	EDIT
📄 big_blue_button_conferences_controller_spec.rb	RB	2.1 KB	2023-09-24 03:39	EDIT
📄 blackout_dates_controller_spec.rb	RB	5.7 KB	2023-09-24 03:36	EDIT
📄 brand_configs_api_controller_spec.rb	RB	1.5 KB	2023-09-24 03:36	EDIT
📄 brand_configs_controller_spec.rb	RB	7.7 KB	2023-09-24 03:36	EDIT
📄 calendar_events_controller_spec.rb	RB	9.2 KB	2023-09-24 03:36	EDIT
📄 calendars_controller_spec.rb	RB	13.7 KB	2023-09-24 03:39	EDIT
📄 canvadoc_sessions_controller_spec.rb	RB	28.9 KB	2023-09-24 03:39	EDIT
📄 collaborations_controller_spec.rb	RB	20.6 KB	2023-09-24 03:39	EDIT
📄 communication_channels_controller_spec.rb	RB	62.8 KB	2023-09-24 03:36	EDIT
📄 conferences_controller_spec.rb	RB	24.9 KB	2023-09-24 03:36	EDIT
📄 content_exports_controller_spec.rb	RB	5.3 KB	2023-09-24 03:36	EDIT
📄 content_migrations_controller_spec.rb	RB	2.7 KB	2023-09-24 03:36	EDIT
📄 content_shares_controller_spec.rb	RB	17.1 KB	2023-09-24 03:36	EDIT
📄 context_controller_spec.rb	RB	22.2 KB	2023-09-24 03:39	EDIT
📄 context_modules_controller_spec.rb	RB	58.7 KB	2023-09-24 03:36	EDIT
📄 conversations_controller_spec.rb	RB	57.2 KB	2023-09-24 03:39	EDIT
📄 course_paces_controller_spec.rb	RB	40.9 KB	2023-09-24 03:39	EDIT
📄 courses_controller_spec.rb	RB	186.3 KB	2023-09-24 03:39	EDIT
📄 crocodoc_sessions_controller_spec.rb	RB	4.9 KB	2023-09-24 03:39	EDIT
📄 developer_key_account_bindings_controller_spec.rb	RB	6.1 KB	2023-09-24 03:36	EDIT
📄 developer_keys_controller_spec.rb	RB	23.4 KB	2023-09-24 03:39	EDIT
📄 disable_post_to_sis_api_controller_spec.rb	RB	3.9 KB	2023-09-24 03:36	EDIT
📄 discussion_entries_controller_spec.rb	RB	19.2 KB	2023-09-24 03:39	EDIT
📄 discussion_topics_api_controller_spec.rb	RB	6.5 KB	2023-09-24 03:39	EDIT
📄 discussion_topics_controller_spec.rb	RB	108 KB	2023-09-24 03:39	EDIT
📄 docviewer_audit_events_controller_spec.rb	RB	19.9 KB	2023-09-24 03:39	EDIT
📄 eportfolio_categories_controller_spec.rb	RB	7.4 KB	2023-09-24 03:36	EDIT
📄 eportfolio_entries_controller_spec.rb	RB	10.6 KB	2023-09-24 03:36	EDIT
📄 eportfolios_controller_spec.rb	RB	19 KB	2023-09-24 03:39	EDIT
📄 epub_exports_controller_spec.rb	RB	5.8 KB	2023-09-24 03:36	EDIT
📄 equation_images_controller_spec.rb	RB	2 KB	2023-09-24 03:39	EDIT
📄 errors_controller_spec.rb	RB	3.8 KB	2023-09-24 03:36	EDIT
📄 external_content_controller_spec.rb	RB	20 KB	2023-09-24 03:36	EDIT
📄 external_tools_controller_spec.rb	RB	130.8 KB	2023-09-24 03:39	EDIT
📄 file_previews_controller_spec.rb	RB	6.5 KB	2023-09-24 03:36	EDIT
📄 files_controller_spec.rb	RB	66.4 KB	2023-09-24 03:39	EDIT
📄 folders_controller_spec.rb	RB	4.3 KB	2023-09-24 03:36	EDIT
📄 grade_change_audit_api_controller_spec.rb	RB	13.9 KB	2023-09-24 03:36	EDIT
📄 gradebook_csvs_controller_spec.rb	RB	2.9 KB	2023-09-24 03:39	EDIT
📄 gradebook_history_api_controller_spec.rb	RB	5 KB	2023-09-24 03:36	EDIT
📄 gradebook_settings_controller_spec.rb	RB	7.8 KB	2023-09-24 03:36	EDIT
📄 gradebook_uploads_controller_spec.rb	RB	5.5 KB	2023-09-24 03:39	EDIT
📄 gradebooks_controller_spec.rb	RB	146.5 KB	2023-09-24 03:39	EDIT
📄 grading_period_sets_controller_spec.rb	RB	8.6 KB	2023-09-24 03:36	EDIT
📄 grading_periods_controller_spec.rb	RB	23.6 KB	2023-09-24 03:36	EDIT
📄 grading_schemes_json_controller_spec.rb	RB	23.6 KB	2023-09-24 03:39	EDIT
📄 grading_standards_controller_spec.rb	RB	6 KB	2023-09-24 03:36	EDIT
📄 graphql_controller_spec.rb	RB	10.5 KB	2023-09-24 03:39	EDIT
📄 group_categories_controller_spec.rb	RB	17.6 KB	2023-09-24 03:36	EDIT
📄 groups_controller_spec.rb	RB	45.1 KB	2023-09-24 03:39	EDIT
📄 immersive_reader_controller_spec.rb	RB	3.3 KB	2023-09-24 03:36	EDIT
📄 info_controller_spec.rb	RB	14.3 KB	2023-09-24 03:39	EDIT
📄 inst_access_tokens_controller_spec.rb	RB	2.7 KB	2023-09-24 03:36	EDIT
📄 jwts_controller_spec.rb	RB	13.4 KB	2023-09-24 03:36	EDIT
📄 late_policy_controller_spec.rb	RB	7.5 KB	2023-09-24 03:36	EDIT
📄 legal_information_controller_spec.rb	RB	2 KB	2023-09-24 03:36	EDIT
📄 login_controller_spec.rb	RB	9.3 KB	2023-09-24 03:36	EDIT
📄 lti_api_controllers_spec.rb	RB	33.5 KB	2023-09-24 03:36	EDIT
📄 media_objects_controller_spec.rb	RB	34.4 KB	2023-09-24 03:39	EDIT
📄 media_tracks_controller_spec.rb	RB	30.8 KB	2023-09-24 03:36	EDIT
📄 messages_controller_spec.rb	RB	1.9 KB	2023-09-24 03:36	EDIT
📄 notification_preferences_controller_spec.rb	RB	1.9 KB	2023-09-24 03:36	EDIT
📄 oauth2_provider_controller_spec.rb	RB	33 KB	2023-09-24 03:36	EDIT
📄 oauth_proxy_controller_spec.rb	RB	1.9 KB	2023-09-24 03:36	EDIT
📄 outcome_results_controller_spec.rb	RB	72.7 KB	2023-09-24 03:36	EDIT
📄 outcomes_controller_spec.rb	RB	17.7 KB	2023-09-24 03:39	EDIT
📄 page_views_controller_spec.rb	RB	5 KB	2023-09-24 03:39	EDIT
📄 planner_controller_spec.rb	RB	67.1 KB	2023-09-24 03:39	EDIT
📄 planner_notes_controller_spec.rb	RB	21.2 KB	2023-09-24 03:36	EDIT
📄 planner_overrides_controller_spec.rb	RB	4.8 KB	2023-09-24 03:36	EDIT
📄 plugins_controller_spec.rb	RB	2.6 KB	2023-09-24 03:36	EDIT
📄 profile_controller_spec.rb	RB	14.4 KB	2023-09-24 03:39	EDIT
📄 progress_controller_spec.rb	RB	2 KB	2023-09-24 03:36	EDIT
📄 pseudonyms_controller_spec.rb	RB	24.6 KB	2023-09-24 03:36	EDIT
📄 question_banks_controller_spec.rb	RB	4.3 KB	2023-09-24 03:36	EDIT
📄 react_content_router_controller_spec.rb	RB	4 KB	2023-09-24 03:36	EDIT
📄 release_notes_controller_spec.rb	RB	9.8 KB	2023-09-24 03:39	EDIT
📄 role_overrides_controller_spec.rb	RB	16.2 KB	2023-09-24 03:39	EDIT
📄 rubric_assessments_controller_spec.rb	RB	25.2 KB	2023-09-24 03:36	EDIT
📄 rubric_associations_controller_spec.rb	RB	14.8 KB	2023-09-24 03:36	EDIT
📄 rubrics_controller_spec.rb	RB	33.2 KB	2023-09-24 03:36	EDIT
📄 search_controller_spec.rb	RB	11.9 KB	2023-09-24 03:36	EDIT
📄 security_controller_spec.rb	RB	2.8 KB	2023-09-24 03:36	EDIT
📄 self_enrollments_controller_spec.rb	RB	3.7 KB	2023-09-24 03:36	EDIT
📄 sis_api_controller_spec.rb	RB	3.6 KB	2023-09-24 03:36	EDIT
📄 sub_accounts_controller_spec.rb	RB	11.4 KB	2023-09-24 03:39	EDIT
📄 submission_comments_controller_spec.rb	RB	11.9 KB	2023-09-24 03:39	EDIT
📄 submissions_controller_spec.rb	RB	63.5 KB	2023-09-24 03:39	EDIT
📄 terms_controller_spec.rb	RB	4.4 KB	2023-09-24 03:36	EDIT
📄 tokens_controller_spec.rb	RB	7.6 KB	2023-09-24 03:36	EDIT
📄 user_lists_controller_spec.rb	RB	2.1 KB	2023-09-24 03:36	EDIT
📄 user_notes_controller_spec.rb	RB	1.4 KB	2023-09-24 03:39	EDIT
📄 users_controller_spec.rb	RB	125.8 KB	2023-09-24 03:39	EDIT
📄 web_zip_export_controller_spec.rb	RB	3.4 KB	2023-09-24 03:36	EDIT
📄 wiki_pages_controller_spec.rb	RB	8.2 KB	2023-09-24 03:39	EDIT