status_messages_controller_spec.rb

#   Copyright (c) 2010, Diaspora Inc.  This file is
#   licensed under the Affero General Public License version 3 or later.  See
#   the COPYRIGHT file.

require 'spec_helper'

describe StatusMessagesController do
  render_views

  before do
    @aspect1 = alice.aspects.first
    @aspect2 = bob.aspects.first

    request.env["HTTP_REFERER"] = ""
    sign_in :user, alice
    @controller.stub!(:current_user).and_return(alice)
    alice.reload
  end

  describe '#bookmarklet' do
    it 'succeeds' do
      get :bookmarklet
      response.should be_success
    end
  end

  describe '#new' do
    it 'succeeds' do
      get :new,
        :person_id => bob.person.id
      response.should be_success
    end

      it 'generates a jasmine fixture' do
        contact = alice.contact_for(bob.person)
        aspect = alice.aspects.create(:name => 'people')
        contact.aspects << aspect
        contact.save
        get :new, :person_id => bob.person.id, :layout => true
        save_fixture(html_for("body"), "status_message_new")
      end
  end

  describe '#show' do
    before do
      @message = alice.build_post :status_message, :text => "ohai", :to => @aspect1.id
      @message.save!

      alice.add_to_streams(@message, [@aspect1])
      alice.dispatch_post @message, :to => @aspect1.id
    end

    it 'succeeds' do
      get :show, "id" => @message.id.to_s
      response.should be_success
    end

    it 'marks a corresponding notification as read' do
      alice.comment("comment after me", :on => @message)
      bob.comment("here you go", :on => @message)
      note = Notification.where(:recipient_id => alice.id, :target_id => @message.id).first
      lambda{
        get :show, :id => @message.id
        note.reload
      }.should change(note, :unread).from(true).to(false)
    end


    it 'redirects to back if there is no status message' do
      get :show, :id => 2345
      response.status.should == 302
    end
  end

  describe '#create' do
    let(:status_message_hash) {
      { :status_message => {
        :public  => "true",
        :text => "facebook, is that you?",
        },
      :aspect_ids => [@aspect1.id.to_s] }
    }
    context 'js requests' do
      it 'responds' do
        post :create, status_message_hash.merge(:format => 'js')
        response.status.should == 201
      end
      it 'responds with json' do
        post :create, status_message_hash.merge(:format => 'js')
        json = JSON.parse(response.body)
        json['post_id'].should_not be_nil
        json['html'].should_not be_nil
      end
      it 'escapes XSS' do
        xss = "<script> alert('hi browser') </script>"
        post :create, status_message_hash.merge(:format => 'js', :text => xss)
        json = JSON.parse(response.body)
        json['html'].should_not =~ /<script>/
      end
    end

    it "dispatches the post to the specified services" do
      s1 = Services::Facebook.new
      alice.services << s1
      alice.services << Services::Twitter.new
      status_message_hash[:services] = ['facebook']
      alice.should_receive(:dispatch_post).with(anything(), hash_including(:services => [s1]))
      post :create, status_message_hash
    end

    it "doesn't overwrite author_id" do
      status_message_hash[:status_message][:author_id] = bob.person.id
      post :create, status_message_hash
      new_message = StatusMessage.find_by_text(status_message_hash[:status_message][:text])
      new_message.author_id.should == alice.person.id
    end

    it "doesn't overwrite id" do
      old_status_message = alice.post(:status_message, :text => "hello", :to => @aspect1.id)
      status_message_hash[:status_message][:id] = old_status_message.id
      post :create, status_message_hash
      old_status_message.reload.text.should == 'hello'
    end

    it 'calls dispatch post once subscribers is set' do
      alice.should_receive(:dispatch_post){|post, opts|
        post.subscribers(alice).should == [bob.person]
      }
      post :create, status_message_hash
    end
    it 'sends the errors in the body on js' do
      post :create, status_message_hash.merge!(:format => 'js', :status_message => {:text => ''})
      response.body.should include('Status message requires a message or at least one photo')
    end


    context 'with photos' do
      before do
        fixture_filename  = 'button.png'
        fixture_name      = File.join(File.dirname(__FILE__), '..', 'fixtures', fixture_filename)

        @photo1 = alice.build_post(:photo, :pending => true, :user_file=> File.open(fixture_name), :to => @aspect1.id)
        @photo2 = alice.build_post(:photo, :pending => true, :user_file=> File.open(fixture_name), :to => @aspect1.id)

        @photo1.save!
        @photo2.save!

        @hash = status_message_hash
        @hash[:photos] = [@photo1.id.to_s, @photo2.id.to_s]
      end
      it "will post a photo without text" do
        @hash.delete :text
        post :create, @hash
        response.should be_redirect
      end
      it "dispatches all referenced photos" do
        alice.should_receive(:dispatch_post).exactly(3).times
        post :create, @hash
      end
      it "sets the pending bit of referenced photos" do
        post :create, @hash
        @photo1.reload.pending.should be_false
        @photo2.reload.pending.should be_false
      end

      it 'queues all photos to be processed' do
        pending
      end
    end
  end

  describe '#destroy' do
    before do
      @message = alice.post(:status_message, :text => "hey", :to => @aspect1.id)
      @message2 = bob.post(:status_message, :text => "hey", :to => @aspect2.id)
      @message3 = eve.post(:status_message, :text => "hey", :to => eve.aspects.first.id)
    end

    it 'let a user delete his message' do
      delete :destroy, :format => :js, :id => @message.id
      StatusMessage.find_by_id(@message.id).should be_nil
    end

    it 'sends a retraction on delete' do
      alice.should_receive(:retract).with(@message)
      delete :destroy, :format => :js, :id => @message.id
    end

    it 'will not let you destroy posts visible to you' do
      delete :destroy, :format => :js, :id => @message2.id
      StatusMessage.find_by_id(@message2.id).should be_true
    end

    it 'will not let you destory posts you do not own' do
      delete :destroy, :format => :js, :id => @message3.id
      StatusMessage.find_by_id(@message3.id).should be_true
    end
  end
end