Rails%203%20In%20Action

The projects API
file at spec/api/v1/authentication_spec.rb, which will be filled with the content from
the following listing.
require "spec_helper"
describe "API errors", :type => :api do
end
Listing 13.5 spec/api/v1/authentication_spec.rb
it "making a request with no token" do
get "/api/v1/projects.json", :token => ""
error = { :error => "Token is invalid." }
last_response.body.should eql(error.to_json)
end
You’re using Rack::Test::Methods in the spec again, and you’ve set up the token to
be a blank string so get will pass this through as the token. Let’s run this spec to make
sure it’s failing first with bin/rspec spec/api/v1/authentication_spec.rb:
Failures:
1) API errors making a request with no token
Failure/Error: get "/api/v1/projects.json", :token => ""
NoMethodError:
undefined method `admin?' for nil:NilClass
# ./app/models/project.rb:13:in `for'
# ./app/controllers/api/v1/projects_controller.rb:3:in `index'
# ./spec/api/v1/
authentication_spec.rb:6:in `block (2 levels) in '
1 example, 1 failure
Yup, definitely looks like it’s failing. Line 13 of app/models/project.rb attempts to call
admin? on the User object passed in to the for method. If you attempt to make a
request without a valid token, the call to User.find_by_authentication_token will
return nil, resulting in the error you see here. You should check if the user has been
found, and if not then you’ll show the error. To make your authenticate_user
method do this in app/controllers/api/v1/base_controller.rb, you’ll change it to what
is shown in the following listing.
Listing 13.6 app/controllers/api/v1/base_controller.rb
def authenticate_user
@current_user = User.find_by_authentication_token(params[:token])
unless @current_user
respond_with({:error => "Token is invalid." })
end
end
If the @current_user variable is nil here, you set the response’s body to be the JSONform
of { :error => "Token is invalid" } and respond_with that object. Does this
work? Let’s find out with bin/rspec spec/api/v1/authentication_spec.rb:
1 example, 0 failures
357