gitlab-org--gitlab-foss/spec/lib/gitlab/auth_spec.rb

require 'spec_helper'

describe Gitlab::Auth do
  let(:gl_auth) { Gitlab::Auth.new }

  describe :find do
    let!(:user) do
      create(:user,
        username: username,
        password: password,
        password_confirmation: password)
    end
    let(:username) { 'john' }
    let(:password) { 'my-secret' }

    it "should find user by valid login/password" do
      expect( gl_auth.find(username, password) ).to eql user
    end

    it "should not find user with invalid password" do
      password = 'wrong'
      expect( gl_auth.find(username, password) ).to_not eql user
    end

    it "should not find user with invalid login" do
      user = 'wrong'
      expect( gl_auth.find(username, password) ).to_not eql user
    end

    context "with ldap enabled" do
      before { Gitlab.config.ldap['enabled'] = true }
      after  { Gitlab.config.ldap['enabled'] = false }

      it "tries to autheticate with db before ldap" do
        expect(Gitlab::LDAP::User).not_to receive(:authenticate)

        gl_auth.find(username, password)
      end

      it "uses ldap as fallback to for authentication" do
        expect(Gitlab::LDAP::User).to receive(:authenticate)

        gl_auth.find('ldap_user', 'password')
      end
    end
  end
end