33 lines
1.0 KiB
JavaScript
33 lines
1.0 KiB
JavaScript
require('../helper');
|
|
|
|
var app = require(global.settings.app_root + '/app/controllers/app')
|
|
, assert = require('assert')
|
|
, tests = module.exports = {}
|
|
, querystring = require('querystring');
|
|
|
|
tests['valid api key should allow insert in protected tables'] = function(){
|
|
assert.response(app, {
|
|
// view prepare_db.sh to see where to set api_key
|
|
url: "/api/v1/sql?api_key=1234&q=INSERT%20INTO%20private_table%20(name)%20VALUES%20('test')",
|
|
|
|
headers: {host: 'vizzuality.localhost.lan:8080' },
|
|
method: 'GET'
|
|
},{}, function(res) {
|
|
assert.equal(res.statusCode, 200, res.body);
|
|
} );
|
|
}
|
|
|
|
tests['invalid api key should NOT allow insert in protected tables'] = function(){
|
|
assert.response(app, {
|
|
// view prepare_db.sh to see where to set api_key
|
|
url: "/api/v1/sql?api_key=RAMBO&q=INSERT%20INTO%20private_table%20(name)%20VALUES%20('RAMBO')",
|
|
|
|
headers: {host: 'vizzuality.cartodb.com' },
|
|
method: 'GET'
|
|
},{
|
|
status: 400
|
|
});
|
|
}
|
|
|
|
|