工厂方法模式是否可能没有抽象方法？(Is Factory Method pattern without abstract methods possible?)

 从官方复数页面复制了一些代码提取 
 
 要进行身份验证的端点位于config/routes.rb 
 
post 'authenticate', to: 'authentication#authenticate'
 
 执行此操作。 如果您正确进行身份验证，操作将返回令牌。 
 
def authenticate 
   command = AuthenticateUser.call(params[:email], params[:password]) 
   if command.success? 
      render json: { auth_token: command.result } 
   else 
      render json: { error: command.errors }, status: :unauthorized 
   end 
end
 
 在rspec中，您有两个选项，您可以模拟此方法或创建工厂。 
 
 token based身份验证的概念是，一旦经过身份验证，用户将拥有令牌，并且通过提供此令牌，他将能够访问仅保留给用户的功能 
 
 请求 
 
$ curl -H "Content-Type: application/json" -X POST -d '{"email":"example@mail.com","password":"123123123"}' http://localhost:3000/authenticate
 
 作为回应令牌 
 
{"auth_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1c2VyX2lkIjoxLCJleHAiOjE0NjA2NTgxODZ9.xsSwcPC22IR71OBv6bU_OGCSyfE89DvEzWfDU0iybMA"}
 
 如果您在标头中包含令牌，请求将不会触发授权错误 
 
$ curl -H "Authorization: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1c2VyX2lkIjoxLCJleHAiOjE0NjA2NTgxODZ9.xsSwcPC22IR71OBv6bU_OGCSyfE89DvEzWfDU0iybMA" http://localhost:3000/items []
 
 所以在执行get请求之前，请在请求标头中包含令牌 
 
request.headers['Authorization'] = auth_token
get :your_action
 
 如何提供正确的auth_token值？ 
 
 您需要在ApplicationController 模拟 authenticate_request方法，因为它在action before被调用 
 
#app/controllers/application_controller.rb
class ApplicationController < ActionController::API
 before_action :authenticate_request
  attr_reader :current_user

  private

  def authenticate_request
    @current_user = AuthorizeApiRequest.call(request.headers).result
    render json: { error: 'Not Authorized' }, status: 401 unless @current_user
  end
end
 
 我相信你应该模拟这行代码，以避免收到身份验证错误。 
 
@current_user = AuthorizeApiRequest.call(request.headers).result
 
 所以我会写一些像这样的规格 
 
user = FactoryBot.create(:user)
allow(AuthorizeApiRequest).to receive(:call).and_return(user)
# request.headers['Authorization'] = auth_token # this is not required anymore the authentication is skipped
get :your_action
 
 我引用了复数 
 
 
 
 通过使用before_action，每次用户发出请求时，服务器都会将request headers （使用内置对象属性request.headers）传递给AuthorizeApiRequest 。 在AuthorizeApiRequest.call(request.headers)上调用result来自SimpleCommand模块，其中定义为attr_reader :result 。 请求结果将返回给@current_user ，从而可供从ApplicationController继承的所有控制器使用。 
 
 
 你可以阅读更多关于嘲笑的内容 
 
 https://github.com/rspec/rspec-mocks 

Some Code Extracts copied from the the official pluralsight page
 
the endpoint to authenticate is in config/routes.rb
 
post 'authenticate', to: 'authentication#authenticate'
 
which executes this action. The action returns the token if you correctly authenticate.
 
def authenticate 
   command = AuthenticateUser.call(params[:email], params[:password]) 
   if command.success? 
      render json: { auth_token: command.result } 
   else 
      render json: { error: command.errors }, status: :unauthorized 
   end 
end
 
In rspec you have two options, you either mock this method or create a factory.
 
The concept of token based authentication is that once authenticated the user will have a token and by providing this token he will be able to access the functionalities only reserved to users
 
The request
 
$ curl -H "Content-Type: application/json" -X POST -d '{"email":"example@mail.com","password":"123123123"}' http://localhost:3000/authenticate
 
gives in response the token 
 
{"auth_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1c2VyX2lkIjoxLCJleHAiOjE0NjA2NTgxODZ9.xsSwcPC22IR71OBv6bU_OGCSyfE89DvEzWfDU0iybMA"}
 
if you include in the header the token, the request will not trigger an authorization error
 
$ curl -H "Authorization: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1c2VyX2lkIjoxLCJleHAiOjE0NjA2NTgxODZ9.xsSwcPC22IR71OBv6bU_OGCSyfE89DvEzWfDU0iybMA" http://localhost:3000/items []
 
so before doing your get request, include in the request header the token
 
request.headers['Authorization'] = auth_token
get :your_action
 
How to provide a correct value of auth_token? 
 
You will need to mock the method authenticate_request in ApplicationController, as it is called before the action
 
#app/controllers/application_controller.rb
class ApplicationController < ActionController::API
 before_action :authenticate_request
  attr_reader :current_user

  private

  def authenticate_request
    @current_user = AuthorizeApiRequest.call(request.headers).result
    render json: { error: 'Not Authorized' }, status: 401 unless @current_user
  end
end
 
I believe you should mock this line of code, to avoid receiving an authentication error.
 
@current_user = AuthorizeApiRequest.call(request.headers).result
 
so I would write the specs somethind like this 
 
user = FactoryBot.create(:user)
allow(AuthorizeApiRequest).to receive(:call).and_return(user)
# request.headers['Authorization'] = auth_token # this is not required anymore the authentication is skipped
get :your_action
 
I quote pluralsight
 
 
 
By using before_action, the server passes the request headers (using the built-in object property request.headers) to AuthorizeApiRequest every time the user makes a request. Calling result on AuthorizeApiRequest.call(request.headers) is coming from SimpleCommand module where it is defined as attr_reader :result. The request results are returned to the @current_user, thus becoming available to all controllers inheriting from ApplicationController.
 
 
You can read more about mocking at 
 
https://github.com/rspec/rspec-mocks