discourse/spec/requests/admin/admin_controller_spec.rb

require 'rails_helper'

RSpec.describe Admin::AdminController do
  it "should return the right response if user isn't a staff" do
    get "/admin", params: { api_key: 'asdiasiduga' }
    expect(response.status).to eq(404)

    get "/admin"
    expect(response.status).to eq(404)
  end
end
FIX: Return 404 if API access is invalid. 2017-08-10 17:27:01 +08:00			`require 'rails_helper'`

Move new controller specs to reqeusts folder. 2017-08-24 11:01:11 +08:00			`RSpec.describe Admin::AdminController do`
FIX: Return 404 if API access is invalid. 2017-08-10 17:27:01 +08:00			`it "should return the right response if user isn't a staff" do`
FIX: return 429 when admin api key is limited on admin route This also handles a general case where exceptions leak out prior to being handled by the application controller 2018-01-12 11:15:10 +08:00			`get "/admin", params: { api_key: 'asdiasiduga' }`
			`expect(response.status).to eq(404)`
FIX: don't return 200s when login is required to paths When running `ensure_login_required` it should always happen prior to `check_xhr` cause check xhr will trigger a 200 response 2018-02-01 09:26:45 +08:00
			`get "/admin"`
			`expect(response.status).to eq(404)`
FIX: Return 404 if API access is invalid. 2017-08-10 17:27:01 +08:00			`end`
			`end`