zydronium/internetee-registry
1
0
Fork 0
mirror of https://github.com/internetee/registry.git synced 2025-06-07 21:25:39 +02:00
Code Issues Projects Releases Packages Wiki Activity

Disable anonymous access

Browse source 
#697
This commit is contained in:
Artur Beljajev 2018-02-11 03:02:24 +02:00
parent 8d088109cc
commit bfe9ef3c1f
3 changed files with 58 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
app/controllers/epp/polls_controller.rb
View file

@ -1,7 +1,6 @@
class Epp::PollsController < EppController class Epp::PollsController < EppController
skip_authorization_check # TODO: move authorization under ability
def poll def poll
authorize! :manage, :poll
req_poll if params[:parsed_frame].css('poll').first['op'] == 'req' req_poll if params[:parsed_frame].css('poll').first['op'] == 'req'
ack_poll if params[:parsed_frame].css('poll').first['op'] == 'ack' ack_poll if params[:parsed_frame].css('poll').first['op'] == 'ack'
end end

4
test/fixtures/messages.yml vendored Normal file
View file

@ -0,0 +1,4 @@
greeting:
body: Welcome!
queued: true
registrar: bestnames

53
test/integration/epp/poll_test.rb Normal file
View file

@ -0,0 +1,53 @@
require 'test_helper'
class EppPollTest < ActionDispatch::IntegrationTest
def setup
@session_id = epp_sessions(:api_bestnames).session_id
end
def test_messages
request_xml = <<-XML
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="https://epp.tld.ee/schema/epp-ee-1.0.xsd">
<command>
<poll op="req"/>
</command>
</epp>
XML
post '/epp/command/poll', { frame: request_xml }, { 'HTTP_COOKIE' => "session=#{@session_id}" }
assert Nokogiri::XML(response.body).at_css('result[code="1301"]')
assert_equal 1, Nokogiri::XML(response.body).css('msgQ').size
assert_equal 1, Nokogiri::XML(response.body).css('result').size
end
def test_no_messages
request_xml = <<-XML
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="https://epp.tld.ee/schema/epp-ee-1.0.xsd">
<command>
<poll op="req"/>
</command>
</epp>
XML
Message.delete_all
post '/epp/command/poll', { frame: request_xml }, { 'HTTP_COOKIE' => "session=#{@session_id}" }
assert Nokogiri::XML(response.body).at_css('result[code="1300"]')
assert_equal 1, Nokogiri::XML(response.body).css('result').size
end
def test_unauthenticated_user
request_xml = <<-XML
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="https://epp.tld.ee/schema/epp-ee-1.0.xsd">
<command>
<poll op="req"/>
</command>
</epp>
XML
post '/epp/command/poll', frame: request_xml
assert Nokogiri::XML(response.body).at_css('result[code="2201"]')
end
end