leap_web.git/test/functional/api, branch drop/ruby-2.1

Merge branch '8800-hand-out-configs-json-without-authentication' into 'master'

2017-11-08T06:58:09+00:00

feat: allow unauthenticated access to list of configs

Closes #8800

See merge request leap/webapp!45

fix: sanity checks on user params

2017-10-24T11:33:03+00:00

fixes #8801

Includes a test reproducing 500 on lynx

We now make use of ActionController::Parameters require and permit
methods.

feat: allow unauthenticated access to list of configs

2017-09-11T12:55:14+00:00

This should simplify client code significantly according to
platform#8849

test: admin user api always green

2017-03-21T09:42:27+00:00

Used to fail because the record already existed in the database
fixes #17

respond_to on a per controller basis

2016-08-19T09:15:31+00:00

If you inherit respond to and call it again in your controller
it will not overwrite the previous but add to it.

Since we always have some exceptions from the rules it's probably
easiest to be explicit in the controllers that require it themselves.

[feature] restrict is_admin in the user api, to only allow querying

2016-07-14T13:45:09+00:00

for him/herself

So that it we do not expose the is_admin property to anyone else
including other admins.

api: set defaults for version in routes

2016-05-20T14:35:55+00:00

This way we do not need to specify it all the times.

In the functional tests defaults do not get added automatically.
Introduced api_{get,put,post,delete} to add format and version default.

One to two functional tests failing, everything else passes.

api: allow version bumping - bump to 2

2016-05-18T18:07:41+00:00