Matt-Yorkley 9f49a84e7f Clarify use of access tokens used for viewing order details as a guest user ...

There are 4 or 5 different places in the app where we reference a :token and params[:token] for completely different purposes (they're not even vaguely the *same* token).

This is an attempt to clarify the places in the app where we use params[:token] in relation to *orders*, for allowing guest users (who are not logged in) to view details of an order they have placed (like after checkout completion), and differentiate it from the various other places where params[:token] can actually be used for something entirely different!

2021-12-16 13:35:55 +00:00

..

api

Add an order with no line_items, should not be returned by API

2021-09-08 10:44:04 +02:00

checkout

Clarify use of access tokens used for viewing order details as a guest user

2021-12-16 13:35:55 +00:00

embedded_shopfronts_headers_spec.rb

Try some mass auto-correct adding frozen-string-literal to all specs

2020-12-03 06:38:24 -08:00

home_controller_spec.rb

Move unauthorized view to HomeController only, all other calls to unauthorized will go through Auth which will redirect to the home controller IF the user is logged in or to login if user is not logged in

2020-07-15 14:54:52 +01:00

large_request_spec.rb

Fix rspec syntax

2021-05-03 14:17:54 +01:00