Skip to content

Commit 2e6e5b0

Browse files
committed
Adds assertions for remember_me cookie.
Asserts cookie is http_only, secure, and same-site is "strict". Closes #87.
1 parent c4e6e7b commit 2e6e5b0

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

Diff for: test/controllers/sessions_controller_test.rb

+6
Original file line numberDiff line numberDiff line change
@@ -44,6 +44,12 @@ class SessionsControllerTest < ActionDispatch::IntegrationTest
4444

4545
assert_not_nil current_user
4646
assert_not_nil cookies[:remember_token]
47+
48+
remember_me_cookie = cookies.get_cookie("remember_token")
49+
50+
assert remember_me_cookie.http_only?
51+
assert remember_me_cookie.secure?
52+
assert_equal "Strict", remember_me_cookie.to_h["SameSite"]
4753
end
4854

4955
test "should forget user when logging out" do

0 commit comments

Comments
 (0)