discourse/spec/requests/drafts_controller_spec.rb

# frozen_string_literal: true

require 'rails_helper'

describe DraftsController do
  it 'requires you to be logged in' do
    get "/drafts.json"
    expect(response.status).to eq(403)
  end

  it 'returns correct stream length after adding a draft' do
    user = sign_in(Fabricate(:user))
    Draft.set(user, 'xxx', 0, '{}')
    get "/drafts.json", params: { username: user.username }
    expect(response.status).to eq(200)
    parsed = JSON.parse(response.body)
    expect(parsed["drafts"].length).to eq(1)
  end

  it 'has empty stream after deleting last draft' do
    user = sign_in(Fabricate(:user))
    Draft.set(user, 'xxx', 0, '{}')
    Draft.clear(user, 'xxx', 0)
    get "/drafts.json", params: { username: user.username }
    expect(response.status).to eq(200)
    parsed = JSON.parse(response.body)
    expect(parsed["drafts"].length).to eq(0)
  end

  it 'does not let a user see drafts stream of another user' do
    user_b = Fabricate(:user)
    Draft.set(user_b, 'xxx', 0, '{}')
    sign_in(Fabricate(:user))
    get "/drafts.json", params: { username: user_b.username }
    expect(response.status).to eq(403)
  end

  it 'does not include topic details when user cannot see topic' do
    topic = Fabricate(:private_message_topic)
    topic_user = topic.user
    other_user = Fabricate(:user)
    Draft.set(topic_user, "topic_#{topic.id}", 0, '{}')
    Draft.set(other_user, "topic_#{topic.id}", 0, '{}')

    sign_in(topic_user)
    get "/drafts.json", params: { username: topic_user.username }
    expect(response.status).to eq(200)
    parsed = JSON.parse(response.body)
    expect(parsed["drafts"].first["title"]).to eq(topic.title)

    sign_in(other_user)
    get "/drafts.json", params: { username: other_user.username }
    expect(response.status).to eq(200)
    parsed = JSON.parse(response.body)
    expect(parsed["drafts"].first["title"]).to eq(nil)
  end
end