github/overleaf
1
0
Fork 0
mirror of https://github.com/overleaf/overleaf.git synced 2025-02-23 11:31:10 +00:00
Code Issues Projects Releases Packages Wiki Activity

Test for when anon write access is disabled

Browse source
This commit is contained in:
Shane Kilkelly 2017-11-02 15:16:04 +00:00
parent 51ba81e431
commit 9cd6b4e6ad
1 changed files with 29 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

31
services/web/test/acceptance/coffee/TokenAccessTests.coffee
View file

@ -263,9 +263,36 @@ describe 'TokenAccess', ->
, done)
if !settings.allowAnonymousReadAndWriteSharing
console.log ">> Skipping anonymous read-write token tests"
describe 'anonymous read-and-write token, disabled', ->
before (done) ->
@owner.createProject "token-anon-rw-test#{Math.random()}", (err, project_id) =>
return done(err) if err?
@project_id = project_id
@owner.makeTokenBased @project_id, (err) =>
return done(err) if err?
@owner.getProject @project_id, (err, project) =>
return done(err) if err?
@tokens = project.tokens
done()
it 'should deny access before the token is used', (done) ->
try_read_access(@anon, @project_id, (response, body) =>
expect(response.statusCode).to.equal 302
expect(body).to.match /.*\/restricted.*/
, done)
it 'should not allow the user to access read-and-write token', (done) ->
try_read_and_write_token_access(@anon, @tokens.readAndWrite, (response, body) =>
expect(response.statusCode).to.equal 404
, done)
it 'should not allow the user to join the project', (done) ->
try_anon_content_access(@anon, @project_id, @tokens.readAndWrite, (response, body) =>
expect(body.privilegeLevel).to.equal false
, done)
else
describe 'anonymous read-and-write token', ->
describe 'anonymous read-and-write token, enabled', ->
before (done) ->
@owner.createProject "token-anon-rw-test#{Math.random()}", (err, project_id) =>
return done(err) if err?