Fix bug in auth; add tests

oslo-lib/src/lib.rs

@@ -22,6 +22,8 @@ pub async fn build_app() -> Result<tide::Server<State>, tide::Error> {
         login_path: login_path.clone(),
     });
 
+    dbg!(std::env::var("POSTS_DIR"))?;
+
     app.at("/static").serve_dir("static")?;
 
     app.with(After(errors));
@@ -34,8 +36,9 @@ pub async fn build_app() -> Result<tide::Server<State>, tide::Error> {
     app.at("/posts/new")
         .with(require_auth)
         .get(routes::new_post);
+    app.at("/posts/:slug").get(routes::single_post);
     app.at("/posts/:slug")
-        .get(routes::single_post)
+        .with(require_auth)
         .post(routes::update_post)
         .delete(routes::delete_post);
     app.at("/posts/:slug/edit")

tests/auth.rs

@@ -1,6 +1,9 @@
 mod tests {
+    use std::path::PathBuf;
+
     use async_std::task::block_on;
-    use oslo_lib::{State};
+    use oslo_lib::State;
+    use serde_json::json;
     use tide::{
         http::{Method, Request, Response, StatusCode, Url},
         Result, Server,
@@ -60,7 +63,7 @@ mod tests {
     }
 
     #[test]
-    fn test_accessing_protected_route_as_gest() -> Result<()> {
+    fn test_accessing_protected_route_as_guest() -> Result<()> {
         block_on(async {
             let app = build_app().await;
             let req = Request::new(Method::Get, url("/posts/1/edit"));
@@ -70,4 +73,72 @@ mod tests {
             Ok(())
         })
     }
+
+    #[test]
+    fn test_attempting_to_create_post_as_guest() -> Result<()> {
+        block_on(async {
+            let app = build_app().await;
+            let mut req = Request::new(Method::Post, url("/posts"));
+            req.set_content_type(tide::http::mime::MULTIPART_FORM);
+            req.replace_body("title=test1&slug=test1&body=test1");
+            let res: Response = app.respond(req).await?;
+            assert_eq!(res.status(), StatusCode::Found);
+            assert_eq!(res.header("location").unwrap(), "/login");
+            Ok(())
+        })
+    }
+
+    #[test]
+    fn test_attempting_to_update_post_as_guest() -> Result<()> {
+        let data = json!({
+            "title":"test1",
+            "slug":"test1",
+            "body":"test1",
+            "html":"<p>test1</p>\n",
+            "date":"2000-01-01",
+            "draft":0
+        });
+        block_on(async {
+            let app = build_app().await;
+            let posts_dir = std::env::var("POSTS_DIR")?;
+            let path = PathBuf::from(posts_dir);
+            let path = path.join("test1.json");
+            std::fs::write(&path, data.to_string())?;
+            let mut req = Request::new(Method::Post, url("/posts/test1"));
+            req.set_content_type(tide::http::mime::MULTIPART_FORM);
+            req.replace_body("title=test1&slug=test1&body=test2");
+            let res: Response = app.respond(req).await?;
+            assert_eq!(res.status(), StatusCode::Found);
+            assert_eq!(res.header("location").unwrap(), "/login");
+            assert_eq!(std::fs::read_to_string(&path)?, data.to_string());
+            std::fs::remove_file(&path)?;
+            Ok(())
+        })
+    }
+
+    #[test]
+    fn test_attempting_to_delete_post_as_guest() -> Result<()> {
+        let data = json!({
+            "title":"test2",
+            "slug":"test2",
+            "body":"test2",
+            "html":"<p>test2</p>\n",
+            "date":"2000-01-01",
+            "draft":0
+        });
+        block_on(async {
+            let app = build_app().await;
+            let posts_dir = std::env::var("POSTS_DIR")?;
+            let path = PathBuf::from(posts_dir);
+            let path = path.join("test2.json");
+            std::fs::write(&path, data.to_string())?;
+            let req = Request::new(Method::Delete, url("/posts/test2"));
+            let res: Response = app.respond(req).await?;
+            assert_eq!(res.status(), StatusCode::Found);
+            assert_eq!(res.header("location").unwrap(), "/login");
+            assert_eq!(std::fs::read_to_string(&path)?, data.to_string());
+            std::fs::remove_file(&path)?;
+            Ok(())
+        })
+    }
 }