162 lines
		
	
	
		
			4.2 KiB
		
	
	
	
		
			Ruby
		
	
	
	
	
	
			
		
		
	
	
			162 lines
		
	
	
		
			4.2 KiB
		
	
	
	
		
			Ruby
		
	
	
	
	
	
| # frozen_string_literal: true
 | |
| 
 | |
| require 'rails_helper'
 | |
| 
 | |
| RSpec.describe '/api/web/embed' do
 | |
|   subject { get "/api/web/embeds/#{id}", headers: headers }
 | |
| 
 | |
|   context 'when accessed anonymously' do
 | |
|     let(:headers) { {} }
 | |
| 
 | |
|     context 'when the requested status is local' do
 | |
|       let(:id) { status.id }
 | |
| 
 | |
|       context 'when the requested status is public' do
 | |
|         let(:status) { Fabricate(:status, visibility: :public) }
 | |
| 
 | |
|         it 'returns JSON with an html attribute' do
 | |
|           subject
 | |
| 
 | |
|           expect(response).to have_http_status(200)
 | |
|           expect(body_as_json[:html]).to be_present
 | |
|         end
 | |
|       end
 | |
| 
 | |
|       context 'when the requested status is private' do
 | |
|         let(:status) { Fabricate(:status, visibility: :private) }
 | |
| 
 | |
|         it 'returns http not found' do
 | |
|           subject
 | |
| 
 | |
|           expect(response).to have_http_status(404)
 | |
|         end
 | |
|       end
 | |
|     end
 | |
| 
 | |
|     context 'when the requested status is remote' do
 | |
|       let(:remote_account) { Fabricate(:account, domain: 'example.com') }
 | |
|       let(:status)         { Fabricate(:status, visibility: :public, account: remote_account, url: 'https://example.com/statuses/1') }
 | |
|       let(:id)             { status.id }
 | |
| 
 | |
|       it 'returns http not found' do
 | |
|         subject
 | |
| 
 | |
|         expect(response).to have_http_status(404)
 | |
|       end
 | |
|     end
 | |
| 
 | |
|     context 'when the requested status does not exist' do
 | |
|       let(:id) { -1 }
 | |
| 
 | |
|       it 'returns http not found' do
 | |
|         subject
 | |
| 
 | |
|         expect(response).to have_http_status(404)
 | |
|       end
 | |
|     end
 | |
|   end
 | |
| 
 | |
|   context 'with an API token' do
 | |
|     let(:user)    { Fabricate(:user) }
 | |
|     let(:token)   { Fabricate(:accessible_access_token, resource_owner_id: user.id, scopes: 'read') }
 | |
|     let(:headers) { { 'Authorization' => "Bearer #{token.token}" } }
 | |
| 
 | |
|     context 'when the requested status is local' do
 | |
|       let(:id) { status.id }
 | |
| 
 | |
|       context 'when the requested status is public' do
 | |
|         let(:status) { Fabricate(:status, visibility: :public) }
 | |
| 
 | |
|         it 'returns JSON with an html attribute' do
 | |
|           subject
 | |
| 
 | |
|           expect(response).to have_http_status(200)
 | |
|           expect(body_as_json[:html]).to be_present
 | |
|         end
 | |
| 
 | |
|         context 'when the requesting user is blocked' do
 | |
|           before do
 | |
|             status.account.block!(user.account)
 | |
|           end
 | |
| 
 | |
|           it 'returns http not found' do
 | |
|             subject
 | |
| 
 | |
|             expect(response).to have_http_status(404)
 | |
|           end
 | |
|         end
 | |
|       end
 | |
| 
 | |
|       context 'when the requested status is private' do
 | |
|         let(:status) { Fabricate(:status, visibility: :private) }
 | |
| 
 | |
|         before do
 | |
|           user.account.follow!(status.account)
 | |
|         end
 | |
| 
 | |
|         it 'returns http not found' do
 | |
|           subject
 | |
| 
 | |
|           expect(response).to have_http_status(404)
 | |
|         end
 | |
|       end
 | |
|     end
 | |
| 
 | |
|     context 'when the requested status is remote' do
 | |
|       let(:remote_account) { Fabricate(:account, domain: 'example.com') }
 | |
|       let(:status)         { Fabricate(:status, visibility: :public, account: remote_account, url: 'https://example.com/statuses/1') }
 | |
|       let(:id)             { status.id }
 | |
| 
 | |
|       let(:service_instance) { instance_double(FetchOEmbedService) }
 | |
| 
 | |
|       before do
 | |
|         allow(FetchOEmbedService).to receive(:new) { service_instance }
 | |
|         allow(service_instance).to receive(:call) { call_result }
 | |
|       end
 | |
| 
 | |
|       context 'when the requesting user is blocked' do
 | |
|         before do
 | |
|           status.account.block!(user.account)
 | |
|         end
 | |
| 
 | |
|         it 'returns http not found' do
 | |
|           subject
 | |
| 
 | |
|           expect(response).to have_http_status(404)
 | |
|         end
 | |
|       end
 | |
| 
 | |
|       context 'when successfully fetching OEmbed' do
 | |
|         let(:call_result) { { html: 'ok' } }
 | |
| 
 | |
|         it 'returns JSON with an html attribute' do
 | |
|           subject
 | |
| 
 | |
|           expect(response).to have_http_status(200)
 | |
|           expect(body_as_json[:html]).to be_present
 | |
|         end
 | |
|       end
 | |
| 
 | |
|       context 'when failing to fetch OEmbed' do
 | |
|         let(:call_result) { nil }
 | |
| 
 | |
|         it 'returns http not found' do
 | |
|           subject
 | |
| 
 | |
|           expect(response).to have_http_status(404)
 | |
|         end
 | |
|       end
 | |
|     end
 | |
| 
 | |
|     context 'when the requested status does not exist' do
 | |
|       let(:id) { -1 }
 | |
| 
 | |
|       it 'returns http not found' do
 | |
|         subject
 | |
| 
 | |
|         expect(response).to have_http_status(404)
 | |
|       end
 | |
|     end
 | |
|   end
 | |
| end
 |