Hide contact password unless the current registrar is sponsoring

Closes #1446
This commit is contained in:
Artur Beljajev 2019-12-18 09:14:13 +02:00
parent b90a937c9a
commit 5d2f1a89fb
2 changed files with 29 additions and 5 deletions

View file

@ -69,10 +69,6 @@ xml.epp_head do
xml.tag!('contact:authInfo') do xml.tag!('contact:authInfo') do
xml.tag!('contact:pw', @contact.auth_info) xml.tag!('contact:pw', @contact.auth_info)
end end
else
xml.tag!('contact:authInfo') do
xml.tag!('contact:pw', 'No access')
end
end end
end end
end end

View file

@ -44,9 +44,37 @@ class EppContactInfoBaseTest < EppTestCase
contact: xml_schema).text contact: xml_schema).text
end end
def test_hides_password_when_current_registrar_is_not_sponsoring
non_sponsoring_registrar = registrars(:goodnames)
@contact.update!(registrar: non_sponsoring_registrar)
# https://github.com/internetee/registry/issues/415
@contact.update_columns(code: @contact.code.upcase)
request_xml = <<-XML
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="https://epp.tld.ee/schema/epp-ee-1.0.xsd">
<command>
<info>
<contact:info xmlns:contact="https://epp.tld.ee/schema/contact-ee-1.1.xsd">
<contact:id>#{@contact.code}</contact:id>
</contact:info>
</info>
</command>
</epp>
XML
post epp_info_path, params: { frame: request_xml }, headers: { 'HTTP_COOKIE' =>
'session=api_bestnames' }
assert_epp_response :completed_successfully
response_xml = Nokogiri::XML(response.body)
assert_nil response_xml.at_xpath('//contact:authInfo', contact: xml_schema)
end
private private
def xml_schema def xml_schema
'https://epp.tld.ee/schema/contact-ee-1.1.xsd' 'https://epp.tld.ee/schema/contact-ee-1.1.xsd'
end end
end end