mirror/php-flarum
1
0
Fork 0
mirror of https://github.com/flarum/core.git synced 2025-07-30 21:20:24 +02:00
Code Issues Releases Wiki Activity

Fix inconsistent status codes

Browse Source 
HTTP 401 should be used when logging in (i.e. authenticating) would make
a difference; HTTP 403 is reserved for requests that fail because the
already authenticated user is not authorized (i.e. lacking permissions)
to do something.
This commit is contained in:
Franz Liedke
2019-08-20 07:19:55 +02:00
parent 70e98f810c
commit 04bcf1eef6
10 changed files with 53 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
tests/integration/api/Auth/AuthenticateWithApiKeyTest.php
View File

@@ -65,7 +65,7 @@ class AuthenticateWithApiKeyTest extends TestCase
$response = $api->send(CreateGroupController::class, new Guest);
$this->assertEquals(403, $response->getStatusCode());
$this->assertEquals(401, $response->getStatusCode());
}
/**

2
tests/integration/api/Controller/CreateGroupControllerTest.php
View File

@@ -80,7 +80,7 @@ class CreateGroupControllerTest extends ApiControllerTestCase
/**
* @test
*/
public function unauthorized_user_cannot_create_group()
public function normal_user_cannot_create_group()
{
$this->actor = User::find(2);

2
tests/integration/api/Controller/ListNotificationsControllerTest.php
View File

@@ -36,7 +36,7 @@ class ListNotificationsControllerTest extends ApiControllerTestCase
{
$response = $this->callWith();
$this->assertEquals(403, $response->getStatusCode());
$this->assertEquals(401, $response->getStatusCode());
}
/**

2
tests/integration/api/Controller/ListUsersControllerTest.php
View File

@@ -42,7 +42,7 @@ class ListUsersControllerTest extends ApiControllerTestCase
{
$response = $this->callWith();
$this->assertEquals(403, $response->getStatusCode());
$this->assertEquals(401, $response->getStatusCode());
}
/**