0

我正在使用 Michael Hartl 的教程。当我运行测试时，我收到此错误：

 1) Authentication authorization for non-signed-in users when attempting to visit a   
protected page as non-admin user submitting a DELETE request to the Users#destroy action
Failure/Error: specify { response.should redirect_to(root_path) } 
Expected response to be a redirect to <http://www.example.com/> but
was a redirect to <http://www.example.com/users>
# ./spec/requests/authentication_pages_spec.rb:81:in `block (7 levels)
in <top required)>'

这是我的 authentication_pages_spec.rb。代码可能与教程示例中显示的略有不同。这些变化对于通过最近的测试是必要的。到目前为止，一切都很完美。

require 'spec_helper'

describe "Authentication" do
  let(:user) { FactoryGirl.create(:user) } 
    subject { page }

  describe "signin page" do
    before { visit signin_path }

    it { should have_selector('h1', text: 'Sign in') }
    it { should have_selector('title', text: 'Sign in') }
  end

  describe "signin" do

    before { visit signin_path } 

    describe "with invalid information" do
      before { click_button "Sign in" }

      it { should have_selector('title', text: 'Sign in') }
      it { should have_selector('div.alert.alert-error', text: 'Invalid') }

      describe "after visiting another page" do
          before { click_link "Home"}
          it { should have_selector('div.alert.alert-error') }
      end
    end

      describe "with valid information" do     
      let(:user) { FactoryGirl.create(:user) } 
      before do
        fill_in "Email",    with: user.email
        fill_in "Password", with: user.password
        click_button "Sign in"
      end

      it { should have_selector('title',    text: user.name) }

      it { should have_link('Users',        href: users_path) }
      it { should have_link('Profile',      href: user_path(user)) }
      it { should have_link('Settings',     href: edit_user_path(user)) }
      it { should have_link('Sign out',     href: signout_path) }

      it { should_not have_link('Sign in',  href: signin_path) } 

      describe "followed by signout" do
        before { click_link "Sign out" }
        it { should have_link('Sign in') }
      end
    end
  end

  describe "authorization" do

    describe "for non-signed-in users" do
      let(:user) { FactoryGirl.create(:user) }

      describe "when attempting to visit a protected page" do
        before do
          visit edit_user_path(user)
          fill_in "Email",    with: user.email
          fill_in "Password", with: user.password
          click_button "Sign in"
        end

        describe "after signing in" do

          it "should render the desired protected page" do
            page.should have_selector('title', text: 'Edit user')
          end          
       end
        describe "as non-admin user" do
          let(:user)  { FactoryGirl.create(:user) }
          let(:non_admin) { FactoryGirl.create(:user) }

          before { sign_in non_admin }

          describe "submitting a DELETE request to the Users#destroy action" do
            before { delete user_path(user) }
            specify { response.should redirect_to(root_path) }
          end
        end        
      end
    end

    describe "in the Users controller" do

      describe "visiting the edit page" do
        before { visit edit_user_path(user) }
        it { should have_selector('title', text: "Sign in") }
      end

      describe "submitting to the update action" do
        before { put user_path(user) }
        specify { response.should redirect_to(signin_path) }
      end

      describe "visiting the user index" do
        before {visit users_path }
        it { should have_selector('title', text: 'Sign in') }
      end
    end


     describe "as wrong user" do
       let(:user) { FactoryGirl.create(:user) }
       let(:wrong_user) { FactoryGirl.create(:user, email: "wrong@example.com") }
       before { sign_in user }

       describe "visiting User#edit page" do
         before { visit edit_user_path(wrong_user) }
         it { should_not have_selector('title', text: full_title('Edit user')) }
       end

       describe "submitting a PUT request to the User#update action" do
         before { put user_path(wrong_user) }
         specify { response.should redirect_to(root_path) } 
       end
    end    
  end
end

有人知道吗？感谢您的帮助和兴趣！

4

2 回答 2

3

在您的 users_controller#destroy 中，您已经重定向到users_path而不是root_path（您期望的）。你能展示你的#destroy 动作吗？

于 2012-10-08T12:09:24.147 回答
0

我刚刚浏览了这一章并遇到了同样的问题，但我认为接受的答案不正确，原因如下：

用户控制器中的销毁操作应该重定向到 users_path，而不是 root_path，因为我们希望管理员在删除用户后返回到用户列表，并且我们希望重定向任何试图发出 DELETE 的非管理员请求返回主页。

重新阅读该部分后，我意识到我在用户控制器中错过了之前的过滤器：

before_action :admin_user, only: :destroy

添加它使测试通过。

于 2013-07-28T19:13:35.083 回答