mastodon/spec/requests/collections_spec.rb

# frozen_string_literal: true

require 'rails_helper'

RSpec.describe 'Collections' do
  describe 'GET /@:account_username/collections/:id', feature: :collections do
    subject { get account_collection_path(account, collection, format: :json) }

    let(:collection) { Fabricate(:collection) }
    let(:account) { collection.account }

    context 'when signed out' do
      context 'when account is permanently suspended' do
        before do
          account.suspend!
          account.deletion_request.destroy
        end

        it 'returns http gone' do
          subject

          expect(response)
            .to have_http_status(410)
        end
      end

      context 'when account is temporarily suspended' do
        before { account.suspend! }

        it 'returns http forbidden' do
          subject

          expect(response)
            .to have_http_status(403)
        end
      end

      context 'when account is accessible' do
        context 'with JSON' do
          subject { get ap_account_collection_path(account.id, collection, format: :json) }

          it 'renders ActivityPub FeaturedCollection object successfully', :aggregate_failures do
            subject

            expect(response)
              .to have_http_status(200)
              .and have_cacheable_headers.with_vary('Accept, Accept-Language, Cookie')

            expect(response.headers).to include(
              'Content-Type' => include('application/activity+json')
            )
            expect(response.parsed_body)
              .to include({
                'type' => 'FeaturedCollection',
                'name' => collection.name,
              })
          end
        end
      end
    end

    context 'when signed in' do
      let(:user) { Fabricate(:user) }

      before do
        post user_session_path, params: { user: { email: user.email, password: user.password } }
      end

      context 'when account blocks user' do
        before { account.block!(user.account) }

        it 'returns http not found' do
          subject

          expect(response)
            .to have_http_status(404)
        end
      end
    end

    context 'with "HTTP Signature" access signed by a remote account' do
      subject do
        get account_collection_path(account, collection, format: :json),
            headers: nil,
            sign_with: remote_account
      end

      let(:remote_account) { Fabricate(:account, domain: 'host.example') }

      context 'when account blocks the remote account' do
        before { account.block!(remote_account) }

        it 'returns http not found' do
          subject

          expect(response)
            .to have_http_status(404)
        end
      end

      context 'when account domain blocks the domain of the remote account' do
        before { account.block_domain!(remote_account.domain) }

        it 'returns http not found' do
          subject

          expect(response)
            .to have_http_status(404)
        end
      end

      context 'with JSON' do
        subject do
          get ap_account_collection_path(account.id, collection, format: :json),
              headers: nil,
              sign_with: remote_account
        end

        it 'renders ActivityPub FeaturedCollection object successfully', :aggregate_failures do
          subject

          expect(response)
            .to have_http_status(200)
            .and have_cacheable_headers.with_vary('Accept, Accept-Language, Cookie')

          expect(response.headers).to include(
            'Content-Type' => include('application/activity+json')
          )
          expect(response.parsed_body)
            .to include({
              'type' => 'FeaturedCollection',
              'name' => collection.name,
            })
        end
      end
    end
  end
end