Test that forbidden folders don't get listed

1 files changed, 16 insertions, 0 deletions

diff --git a/tests/api/GetFilesCest.php b/tests/api/GetFilesCest.php
index 0355b51d..378d8689 100644
--- a/tests/api/GetFilesCest.php
+++ b/tests/api/GetFilesCest.php
@@ -126,4 +126,20 @@ class GetFilesCest {
 		$I->seeResponseContainsJson(['locationhaschanged' => true]);
 	}
 
+	public function getListOfForbiddenPath(\Step\Api\User $I) {
+		$params = $this->params;
+		// This folder contains a .nomedia file
+		$params['location'] = 'folder4';
+
+		$I->am('an app');
+		$I->wantTo('get the list of files of a folder which contains the .nomedia file'
+		);
+
+		$I->getUserCredentialsAndUseHttpAuthentication();
+		$I->sendGET($this->apiUrl, $params);
+		$I->seeResponseCodeIs(403);
+		$I->seeResponseIsJson();
+		$I->seeResponseContainsJson(['message' => 'Album is private or unavailable']);
+	}
+
 }