# frozen_string_literal: true require 'rails_helper' RSpec.describe 'Pins' do let(:user) { Fabricate(:user) } let(:scopes) { 'write:accounts' } let(:token) { Fabricate(:accessible_access_token, resource_owner_id: user.id, scopes: scopes) } let(:headers) { { 'Authorization' => "Bearer #{token.token}" } } describe 'POST /api/v1/statuses/:status_id/pin' do subject do post "/api/v1/statuses/#{status.id}/pin", headers: headers end let(:status) { Fabricate(:status, account: user.account) } it_behaves_like 'forbidden for wrong scope', 'read read:accounts' context 'when the status is public' do it 'pins the status successfully and returns updated json', :aggregate_failures do subject expect(response).to have_http_status(200) expect(response.content_type) .to start_with('application/json') expect(user.account.pinned?(status)).to be true expect(response.parsed_body).to match( a_hash_including(id: status.id.to_s, pinned: true) ) end end context 'when the status is private' do let(:status) { Fabricate(:status, account: user.account, visibility: :private) } it 'pins the status successfully', :aggregate_failures do subject expect(response).to have_http_status(200) expect(response.content_type) .to start_with('application/json') expect(user.account.pinned?(status)).to be true end end context 'when the status belongs to somebody else' do let(:status) { Fabricate(:status) } it 'returns http unprocessable entity' do subject expect(response).to have_http_status(422) expect(response.content_type) .to start_with('application/json') end end context 'when the status does not exist' do it 'returns http not found' do post '/api/v1/statuses/-1/pin', headers: headers expect(response).to have_http_status(404) expect(response.content_type) .to start_with('application/json') end end context 'without an authorization header' do let(:headers) { {} } it 'returns http unauthorized' do subject expect(response).to have_http_status(401) expect(response.content_type) .to start_with('application/json') end end end describe 'POST /api/v1/statuses/:status_id/unpin' do subject do post "/api/v1/statuses/#{status.id}/unpin", headers: headers end let(:status) { Fabricate(:status, account: user.account) } context 'when the status is pinned' do before do Fabricate(:status_pin, status: status, account: user.account) end it 'unpins the status successfully and includes updated json', :aggregate_failures do subject expect(response).to have_http_status(200) expect(response.content_type) .to start_with('application/json') expect(user.account.pinned?(status)).to be false expect(response.parsed_body).to match( a_hash_including(id: status.id.to_s, pinned: false) ) end end context 'when the status is not pinned' do it 'returns http success' do subject expect(response).to have_http_status(200) expect(response.content_type) .to start_with('application/json') end end context 'when the status does not exist' do it 'returns http not found' do post '/api/v1/statuses/-1/unpin', headers: headers expect(response).to have_http_status(404) expect(response.content_type) .to start_with('application/json') end end context 'without an authorization header' do let(:headers) { {} } it 'returns http unauthorized' do subject expect(response).to have_http_status(401) expect(response.content_type) .to start_with('application/json') end end end end