canvas-lms/spec/integration/account_spec.rb

86 lines
2.8 KiB
Ruby

# frozen_string_literal: true
#
# Copyright (C) 2012 - present Instructure, Inc.
#
# This file is part of Canvas.
#
# Canvas is free software: you can redistribute it and/or modify it under
# the terms of the GNU Affero General Public License as published by the Free
# Software Foundation, version 3 of the License.
#
# Canvas is distributed in the hope that it will be useful, but WITHOUT ANY
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
# A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
# details.
#
# You should have received a copy of the GNU Affero General Public License along
# with this program. If not, see <http://www.gnu.org/licenses/>.
#
require 'spec_helper'
require 'nokogiri'
describe AccountsController do
context "SAML meta data" do
before(:each) do
skip("requires SAML extension") unless AuthenticationProvider::SAML.enabled?
@account = Account.create!(:name => "test")
end
it 'should render for non SAML configured accounts' do
get "/saml2"
expect(response).to be_successful
expect(response.body).not_to eq ""
end
it "should use the correct entity_id" do
allow(HostUrl).to receive(:default_host).and_return('bob.cody.instructure.com')
@aac = @account.authentication_providers.create!(:auth_type => "saml")
get "/saml2"
expect(response).to be_successful
doc = Nokogiri::XML(response.body)
expect(doc.at_xpath("md:EntityDescriptor", SAML2::Namespaces::ALL)['entityID']).to eq "http://bob.cody.instructure.com/saml2"
end
it "renders valid schema" do
allow(HostUrl).to receive(:context_hosts).and_return(['bob.cody.instructure.com'])
get "/saml2"
expect(response).to be_successful
entity = SAML2::Entity.parse(response.body)
expect(entity).to be_valid_schema
end
end
context "section tabs" do
it "should change in response to role override changes" do
enable_cache do
# cache permissions and tabs for a user
@account = Account.default
account_admin_user account: @account
user_session @admin
Timecop.freeze(61.minutes.ago) do
get "/accounts/#{@account.id}"
expect(response).to be_ok
doc = Nokogiri::HTML5(response.body)
expect(doc.at_css('#section-tabs .section .outcomes')).not_to be_nil
end
# change a permission on the user's role
@account.role_overrides.create! role: admin_role, permission: 'manage_outcomes',
enabled: false
# ensure the change is reflected once the user's cached permissions expire
get "/accounts/#{@account.id}"
expect(response).to be_ok
doc = Nokogiri::HTML5(response.body)
expect(doc.at_css('#section-tabs .section .outcomes')).to be_nil
end
end
end
end