编写用于 HTTP 摘要式身份验证的测试/方法



我将如何编写一个用于 rspec 测试的方法,以访问需要用户名和密码进行 HTTP 摘要身份验证的页面。例如,此测试...

it "edit" do
  http_login
  post :edit, id: @post
  assigns[:post].should eq(@post)
end

需要http_login方法才能像这样...

def http_login
 user = {"username" => 
 Digest::MD5.hexdigest(["username","Application","password"].join(":"))} 
 request.env['HTTP_AUTHORIZATION'] = 
 ActionController::HttpAuthentication::Digest.encode_credentials(?,?,?,?)
end

我的问题是我在编码凭据的四个参数中放了什么。参数将http_method, credentials, password, password_is_ha1但我不确定如何编写http_methodcredentials在测试中实现。

这里的

解决方案:https://gist.github.com/1282275

此处转载供后人使用

# Adds support for http digest authentication in Rails 3  
# Inspired by: http://lightyearsoftware.com/2009/04/testing-http-digest-authentication-in-rails/
# Place this code in test/test_helper.rb
# In your test, call authenticate_with_http_digest prior to calling get, post, put or delete  
# Tested with Rails 3.0.7
class ActionController::TestCase
  require 'digest/md5'
  def authenticate_with_http_digest(user = API_USERNAME, password = API_PASSWORD, realm = API_REALM)
    ActionController::Base.class_eval { include ActionController::Testing }
    @controller.instance_eval %Q(
      alias real_process_with_new_base_test process_with_new_base_test
      def process_with_new_base_test(request, response)
        credentials = {
      :uri => request.url,
      :realm => "#{realm}",
      :username => "#{user}",
      :nonce => ActionController::HttpAuthentication::Digest.nonce(request.env['action_dispatch.secret_token']),
      :opaque => ActionController::HttpAuthentication::Digest.opaque(request.env['action_dispatch.secret_token'])
        }
        request.env['HTTP_AUTHORIZATION'] = ActionController::HttpAuthentication::Digest.encode_credentials(request.request_method, credentials, "#{password}", false)
        real_process_with_new_base_test(request, response)
      end
    )
  end
end

以下是 RSpec 3.1 和 Rails 4 HTTP Digest 身份验证测试的解决方案: https://gist.github.com/murbanski/6b971a3edc91b562acaf

最新更新