From 28baaa3c3d5a906fd350603307b05946d3f1f750 Mon Sep 17 00:00:00 2001 From: Dan Elbert Date: Tue, 7 Apr 2026 20:00:31 -0500 Subject: [PATCH] Fix spec --- spec/controllers/notes_controller_spec.rb | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/spec/controllers/notes_controller_spec.rb b/spec/controllers/notes_controller_spec.rb index 6aaf06b..fbfeef3 100644 --- a/spec/controllers/notes_controller_spec.rb +++ b/spec/controllers/notes_controller_spec.rb @@ -99,9 +99,15 @@ RSpec.describe NotesController, type: :controller do it 'redirects if note is not owned' do note = create(:note) - put :update, params: {id: note.to_param, note: valid_attributes}, session: valid_session + put :update, params: {id: note.to_param, note: valid_attributes, format: :html}, session: valid_session expect(response).to redirect_to(root_path) end + + it 'returns a 403 if note is not owned for json requests' do + note = create(:note) + put :update, params: {id: note.to_param, note: valid_attributes, format: :json}, session: valid_session + expect(response).to have_http_status 403 + end end context "with invalid params" do