# frozen_string_literal: true require 'rails_helper' RSpec.describe 'Collections' do describe 'GET /collections/:id' do subject { get collection_path(collection) } let(:collection) do Fabricate(:collection, name: 'Frequent posters', description: 'Amazing people that can quickly fill your timeline', language: 'en') end it 'returns success and includes opengraph meta tags' do subject expect(response).to have_http_status(200) expect(head_meta_content('og:title')).to eq 'Frequent posters' expect(head_meta_content('og:description')).to eq 'Amazing people that can quickly fill your timeline' expect(head_meta_content('og:type')).to eq 'website' expect(head_meta_content('og:url')).to eq collection_url(collection) expect(head_meta_content('og:locale')).to eq 'en' end end describe 'GET /ap/:account_id/collections/:id' do subject { get ap_account_collection_path(account.id, collection, format: :json) } let(:collection) { Fabricate(:collection) } let(:account) { collection.account } context 'when requested as HTML' do it 'redirects to canonical URL' do get ap_account_collection_path(account.id, collection) expect(response).to redirect_to(collection_path(collection)) end end context 'when signed out' do context 'when account is permanently suspended' do before do account.suspend! account.deletion_request.destroy end it 'returns http gone' do subject expect(response) .to have_http_status(410) end end context 'when account is temporarily suspended' do before { account.suspend! } it 'returns http forbidden' do subject expect(response) .to have_http_status(403) end end context 'when account is accessible' do context 'with JSON' do subject { get ap_account_collection_path(account.id, collection, format: :json) } it 'renders ActivityPub FeaturedCollection object successfully', :aggregate_failures do subject expect(response) .to have_http_status(200) .and have_cacheable_headers.with_vary('Accept, Accept-Language, Cookie') expect(response.headers).to include( 'Content-Type' => include('application/activity+json') ) expect(response.parsed_body) .to include({ 'type' => 'FeaturedCollection', 'name' => collection.name, }) end end end end context 'when signed in' do let(:user) { Fabricate(:user) } before do post user_session_path, params: { user: { email: user.email, password: user.password } } end context 'when account blocks user' do before { account.block!(user.account) } it 'returns http not found' do subject expect(response) .to have_http_status(404) end end end context 'with "HTTP Signature" access signed by a remote account' do subject do get ap_account_collection_path(account.id, collection, format: :json), headers: nil, sign_with: remote_account end let(:remote_account) { Fabricate(:account, domain: 'host.example') } context 'when account blocks the remote account' do before { account.block!(remote_account) } it 'returns http not found' do subject expect(response) .to have_http_status(404) end end context 'when account domain blocks the domain of the remote account' do before { account.block_domain!(remote_account.domain) } it 'returns http not found' do subject expect(response) .to have_http_status(404) end end context 'with JSON' do subject do get ap_account_collection_path(account.id, collection, format: :json), headers: nil, sign_with: remote_account end it 'renders ActivityPub FeaturedCollection object successfully', :aggregate_failures do subject expect(response) .to have_http_status(200) .and have_cacheable_headers.with_vary('Accept, Accept-Language, Cookie') expect(response.headers).to include( 'Content-Type' => include('application/activity+json') ) expect(response.parsed_body) .to include({ 'type' => 'FeaturedCollection', 'name' => collection.name, }) end end end end end