exclude revoked session when authenticating.

1 files changed, 8 insertions, 0 deletions

diff --git a/spec/models/session_spec.rb b/spec/models/session_spec.rb
index acd6cad..6c20b1c 100644
--- a/spec/models/session_spec.rb
+++ b/spec/models/session_spec.rb
@@ -24,6 +24,14 @@ describe Session do
         expect(-> { Session.authenticate!('blah') }).to raise_error(ActiveRecord::RecordNotFound)
       end
     end
+
+    context "when the session key is revoked" do
+      let(:revoked_session) { create(:session, revoked_at: Time.now) }
+
+      it 'raises an error' do
+        expect(-> { Session.authenticate(revoked_session.id) }).to raise_error
+      end
+    end
   end
 
   context "#revoke!" do