add slightly more authorized/unauthorized tests

This affects the POST to /entries/preview.
nightscout · Aug 8, 2016 · c2ff306 · c2ff306
1 parent 980112c
commit c2ff306
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 3 deletions.
diff --git a/tests/api.entries.test.js b/tests/api.entries.test.js
@@ -197,13 +197,13 @@ describe('Entries REST api', function ( ) {
       });
   });
 
-  it('/entries/preview', function (done) {
+  it('disallow POST by readable /entries/preview', function (done) {
     request(this.app)
       .post('/entries/preview.json')
       .send(load('json'))
-      .expect(201)
+      .expect(401)
       .end(function (err, res) {
-        res.body.should.be.instanceof(Array).and.have.lengthOf(30);
+        // res.body.should.be.instanceof(Array).and.have.lengthOf(30);
         done();
       });
   });

diff --git a/tests/api.unauthorized.test.js b/tests/api.unauthorized.test.js
@@ -60,6 +60,19 @@ describe('authed REST api', function ( ) {
       });
   });
 
+  it('/entries/preview', function (done) {
+    var known_key = this.known_key;
+    request(this.app)
+      .post('/entries/preview.json')
+      .set('api-secret', known_key)
+      .send(load('json'))
+      .expect(201)
+      .end(function (err, res) {
+        res.body.should.be.instanceof(Array).and.have.lengthOf(30);
+        done();
+      });
+  });
+
   it('allow authorized POST', function (done) {
     var app = this.app;
     var known_key = this.known_key;