@@ -5,6 +5,8 @@ class FreeDays < Application def index only_provides :ics + raise Forbidden unless params[:access_key] == Setting.free_days_access_key + render FreeDay.to_ical end app/controllers/free_days.rb @@ -3,15 +3,28 @@ require File.join(File.dirname(__FILE__), '..', 'spec_helper.rb') describe FreeDays do describe ".index" do + before { Setting.stub!(:free_days_access_key => 'access_key') } - it "should be successful" do - FreeDay.stub!(:to_ical => "iCalFileContent") - dispatch_to(FreeDays, :index).should be_successful + context "with valid :access_key" do + + it "should be successful" do + FreeDay.stub!(:to_ical => "iCalFileContent") + dispatch_to(FreeDays, :index, :access_key => 'access_key').should be_successful + end + + it "should render free days iCalendar" do + FreeDay.should_receive(:to_ical).and_return("iCalFileContent") + dispatch_to(FreeDays, :index, :access_key => 'access_key').body.should == "iCalFileContent" + end + end - it "should render free days iCalendar" do - FreeDay.should_receive(:to_ical).and_return("iCalFileContent") - dispatch_to(FreeDays, :index).body.should == "iCalFileContent" + context "with invalid :access_key" do + + it "should be successful" do + lambda { dispatch_to(FreeDays, :index, :access_key => 'invalid') }.should raise_error(Merb::ControllerExceptions::Forbidden) + end + end end spec/controllers/free_days_spec.rb 5cd1b70377fb1229c243eee344418866af62916a Jacek Mikrut jacek.mikrut@llp.pl http://github.com/LunarLogicPolska/rubytime/commit/456be8201f3ad85b1477f3f2bc12dccad0fcc6a6 456be8201f3ad85b1477f3f2bc12dccad0fcc6a6 2009-09-25T06:55:07-07:00 2009-09-25T06:55:07-07:00 Restricted access to free days iCal feed, now :access_key is required. ac361ece718144fe8c491fcae2221029680eefc0 Jacek Mikrut jacek.mikrut@llp.pl