new spec to test strong params

npauzenga · Jan 12, 2016 · ed70c78 · ed70c78
1 parent a91641c
commit ed70c78
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/app/controllers/password_resets_controller.rb b/app/controllers/password_resets_controller.rb
@@ -9,7 +9,7 @@ def create
   end
 
   def update
-    update = UpdatePasswordOrganizer.call(password: params[:user][:password],
+    update = UpdatePasswordOrganizer.call(password: user_params[:password],
                                           token:    params[:id])
     if update.success?
       render json: update.message, status: :ok

diff --git a/spec/controllers/password_resets_controller_spec.rb b/spec/controllers/password_resets_controller_spec.rb
@@ -85,6 +85,15 @@
       end
     end
 
+    context "when no user param is given" do
+      let(:paramz) { { id: "token123" } }
+
+      it "throws an error" do
+        expect { patch :update, paramz }.
+          to raise_error ActionController::ParameterMissing
+      end
+    end
+
     context "when unsuccessful" do
       let(:context) { double(:context, success?: false) }