raggedstaff/openfoodnetwork
1
0
Fork 0
mirror of https://github.com/openfoodfoundation/openfoodnetwork synced 2026-03-05 02:41:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

Requesting read_write permission when authorizing Stripe standalone account

Browse Source
This commit is contained in:
Rob Harrington
2017-02-17 12:22:32 +11:00
parent 37f60bf7a1
commit 99a7665edc
2 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
app/helpers/admin/stripe_helper.rb
View File

@@ -21,7 +21,7 @@ module Admin
options
)
def get_stripe_token(code, options={scope: 'read_write'})
def get_stripe_token(code, options={})
StripeHelper.client.auth_code.get_token(code, options)
end
@@ -29,7 +29,7 @@ module Admin
options = options.merge({enterprise_id: enterprise_id})
jwt = jwt_encode options
# State param will be passed back after auth
StripeHelper.client.auth_code.authorize_url(state: jwt)
StripeHelper.client.auth_code.authorize_url(state: jwt, scope: 'read_write')
end
def deauthorize_stripe(account_id)

8
spec/helpers/admin/stripe_helper_spec.rb
View File

@@ -6,13 +6,14 @@ describe Admin::StripeHelper do
let!(:stripe_account) { create(:stripe_account, enterprise: enterprise) }
it "calls the Stripe API to get a token" do
expect(Admin::StripeHelper.client.auth_code).to receive(:get_token).with("abc",{scope: "read_write"})
expect(Admin::StripeHelper.client.auth_code).to receive(:get_token).with("abc", {})
helper.get_stripe_token("abc")
end
it "calls the Stripe API for authorization, passing appropriate JWT in the state param" do
it "calls the Stripe API for authorization with read_write permission, passing appropriate JWT in the state param" do
expect(Admin::StripeHelper.client.auth_code).to receive(:authorize_url).with({
state: JWT.encode({enterprise_id: "enterprise-permalink"}, Openfoodnetwork::Application.config.secret_token, 'HS256')
state: JWT.encode({enterprise_id: "enterprise-permalink"}, Openfoodnetwork::Application.config.secret_token, 'HS256'),
scope: "read_write"
})
helper.authorize_stripe("enterprise-permalink")
end
@@ -47,6 +48,5 @@ describe Admin::StripeHelper do
it "encodes and decodes JWT" do
jwt_decode(jwt_encode({test: "string"})).should eq({"test" => "string"})
end
end
end