2019-10-29 00:06:10 +00:00
|
|
|
# frozen_string_literal: true
|
|
|
|
|
2016-08-03 12:45:32 +00:00
|
|
|
require 'spec_helper'
|
|
|
|
|
2020-06-24 06:09:01 +00:00
|
|
|
RSpec.describe API::DeployKeys do
|
2016-08-05 09:35:44 +00:00
|
|
|
let(:user) { create(:user) }
|
2019-10-17 00:07:27 +00:00
|
|
|
let(:maintainer) { create(:user) }
|
2016-08-05 09:35:44 +00:00
|
|
|
let(:admin) { create(:admin) }
|
2017-08-02 19:55:11 +00:00
|
|
|
let(:project) { create(:project, creator_id: user.id) }
|
|
|
|
let(:project2) { create(:project, creator_id: user.id) }
|
2020-06-22 18:08:47 +00:00
|
|
|
let(:deploy_key) { create(:deploy_key, public: true) }
|
2016-08-05 09:35:44 +00:00
|
|
|
|
|
|
|
let!(:deploy_keys_project) do
|
|
|
|
create(:deploy_keys_project, project: project, deploy_key: deploy_key)
|
|
|
|
end
|
2016-08-03 12:45:32 +00:00
|
|
|
|
|
|
|
describe 'GET /deploy_keys' do
|
|
|
|
context 'when unauthenticated' do
|
2017-03-31 12:54:38 +00:00
|
|
|
it 'returns authentication error' do
|
2016-08-03 12:45:32 +00:00
|
|
|
get api('/deploy_keys')
|
|
|
|
|
2020-03-31 21:08:05 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:unauthorized)
|
2016-08-03 12:45:32 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context 'when authenticated as non-admin user' do
|
2017-03-31 12:54:38 +00:00
|
|
|
it 'returns a 403 error' do
|
2016-08-03 12:45:32 +00:00
|
|
|
get api('/deploy_keys', user)
|
|
|
|
|
2020-03-31 21:08:05 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:forbidden)
|
2016-08-03 12:45:32 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context 'when authenticated as admin' do
|
2017-03-31 12:54:38 +00:00
|
|
|
it 'returns all deploy keys' do
|
2016-08-03 12:45:32 +00:00
|
|
|
get api('/deploy_keys', admin)
|
|
|
|
|
2020-03-31 21:08:05 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:ok)
|
2017-01-24 20:49:10 +00:00
|
|
|
expect(response).to include_pagination_headers
|
2016-08-03 12:45:32 +00:00
|
|
|
expect(json_response).to be_an Array
|
|
|
|
expect(json_response.first['id']).to eq(deploy_keys_project.deploy_key.id)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2016-08-04 11:09:10 +00:00
|
|
|
describe 'GET /projects/:id/deploy_keys' do
|
2017-06-14 18:18:56 +00:00
|
|
|
before do
|
|
|
|
deploy_key
|
|
|
|
end
|
2016-08-04 11:09:10 +00:00
|
|
|
|
2017-03-31 12:54:38 +00:00
|
|
|
it 'returns array of ssh keys' do
|
2016-08-04 11:09:10 +00:00
|
|
|
get api("/projects/#{project.id}/deploy_keys", admin)
|
|
|
|
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:ok)
|
2017-01-24 20:49:10 +00:00
|
|
|
expect(response).to include_pagination_headers
|
2016-08-04 11:09:10 +00:00
|
|
|
expect(json_response).to be_an Array
|
|
|
|
expect(json_response.first['title']).to eq(deploy_key.title)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
describe 'GET /projects/:id/deploy_keys/:key_id' do
|
2017-03-31 12:54:38 +00:00
|
|
|
it 'returns a single key' do
|
2016-08-04 11:09:10 +00:00
|
|
|
get api("/projects/#{project.id}/deploy_keys/#{deploy_key.id}", admin)
|
|
|
|
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:ok)
|
2016-08-04 11:09:10 +00:00
|
|
|
expect(json_response['title']).to eq(deploy_key.title)
|
|
|
|
end
|
|
|
|
|
2017-03-31 12:54:38 +00:00
|
|
|
it 'returns 404 Not Found with invalid ID' do
|
2016-08-04 11:09:10 +00:00
|
|
|
get api("/projects/#{project.id}/deploy_keys/404", admin)
|
|
|
|
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:not_found)
|
2016-08-04 11:09:10 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
describe 'POST /projects/:id/deploy_keys' do
|
2017-03-31 12:54:38 +00:00
|
|
|
it 'does not create an invalid ssh key' do
|
2018-12-17 22:52:17 +00:00
|
|
|
post api("/projects/#{project.id}/deploy_keys", admin), params: { title: 'invalid key' }
|
2016-08-04 11:09:10 +00:00
|
|
|
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:bad_request)
|
2017-01-23 16:06:57 +00:00
|
|
|
expect(json_response['error']).to eq('key is missing')
|
2016-08-04 11:09:10 +00:00
|
|
|
end
|
|
|
|
|
2017-03-31 12:54:38 +00:00
|
|
|
it 'does not create a key without title' do
|
2018-12-17 22:52:17 +00:00
|
|
|
post api("/projects/#{project.id}/deploy_keys", admin), params: { key: 'some key' }
|
2016-08-04 11:09:10 +00:00
|
|
|
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:bad_request)
|
2017-01-23 16:06:57 +00:00
|
|
|
expect(json_response['error']).to eq('title is missing')
|
2016-08-04 11:09:10 +00:00
|
|
|
end
|
|
|
|
|
2017-03-31 12:54:38 +00:00
|
|
|
it 'creates new ssh key' do
|
2016-08-04 11:09:10 +00:00
|
|
|
key_attrs = attributes_for :another_key
|
|
|
|
|
|
|
|
expect do
|
2018-12-17 22:52:17 +00:00
|
|
|
post api("/projects/#{project.id}/deploy_keys", admin), params: key_attrs
|
2017-03-31 12:54:38 +00:00
|
|
|
end.to change { project.deploy_keys.count }.by(1)
|
2018-03-28 16:53:52 +00:00
|
|
|
|
|
|
|
new_key = project.deploy_keys.last
|
|
|
|
expect(new_key.key).to eq(key_attrs[:key])
|
|
|
|
expect(new_key.user).to eq(admin)
|
2016-08-04 11:09:10 +00:00
|
|
|
end
|
2016-10-11 09:02:51 +00:00
|
|
|
|
|
|
|
it 'returns an existing ssh key when attempting to add a duplicate' do
|
|
|
|
expect do
|
2018-12-17 22:52:17 +00:00
|
|
|
post api("/projects/#{project.id}/deploy_keys", admin), params: { key: deploy_key.key, title: deploy_key.title }
|
2016-10-11 09:02:51 +00:00
|
|
|
end.not_to change { project.deploy_keys.count }
|
|
|
|
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:created)
|
2016-10-11 09:02:51 +00:00
|
|
|
end
|
|
|
|
|
|
|
|
it 'joins an existing ssh key to a new project' do
|
|
|
|
expect do
|
2018-12-17 22:52:17 +00:00
|
|
|
post api("/projects/#{project2.id}/deploy_keys", admin), params: { key: deploy_key.key, title: deploy_key.title }
|
2016-10-11 09:02:51 +00:00
|
|
|
end.to change { project2.deploy_keys.count }.by(1)
|
|
|
|
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:created)
|
2016-10-11 09:02:51 +00:00
|
|
|
end
|
2017-04-05 06:22:28 +00:00
|
|
|
|
|
|
|
it 'accepts can_push parameter' do
|
2018-01-05 15:23:44 +00:00
|
|
|
key_attrs = attributes_for(:another_key).merge(can_push: true)
|
2017-04-05 06:22:28 +00:00
|
|
|
|
2018-12-17 22:52:17 +00:00
|
|
|
post api("/projects/#{project.id}/deploy_keys", admin), params: key_attrs
|
2017-04-05 06:22:28 +00:00
|
|
|
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:created)
|
2017-04-05 06:22:28 +00:00
|
|
|
expect(json_response['can_push']).to eq(true)
|
|
|
|
end
|
2016-08-04 11:09:10 +00:00
|
|
|
end
|
|
|
|
|
2017-03-31 12:54:38 +00:00
|
|
|
describe 'PUT /projects/:id/deploy_keys/:key_id' do
|
2019-10-17 00:07:27 +00:00
|
|
|
let(:extra_params) { {} }
|
|
|
|
|
|
|
|
subject do
|
|
|
|
put api("/projects/#{project.id}/deploy_keys/#{deploy_key.id}", api_user), params: extra_params
|
2017-03-31 12:54:38 +00:00
|
|
|
end
|
|
|
|
|
2019-10-17 00:07:27 +00:00
|
|
|
context 'with non-admin' do
|
|
|
|
let(:api_user) { user }
|
2017-03-31 12:54:38 +00:00
|
|
|
|
2019-10-17 00:07:27 +00:00
|
|
|
it 'does not update a public deploy key' do
|
|
|
|
expect { subject }.not_to change(deploy_key, :title)
|
|
|
|
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:not_found)
|
2019-10-17 00:07:27 +00:00
|
|
|
end
|
2017-03-31 12:54:38 +00:00
|
|
|
end
|
|
|
|
|
2019-10-17 00:07:27 +00:00
|
|
|
context 'with admin' do
|
|
|
|
let(:api_user) { admin }
|
2017-03-31 12:54:38 +00:00
|
|
|
|
2019-10-17 00:07:27 +00:00
|
|
|
context 'public deploy key attached to project' do
|
|
|
|
let(:extra_params) { { title: 'new title', can_push: true } }
|
|
|
|
|
|
|
|
it 'updates the title of the deploy key' do
|
|
|
|
expect { subject }.to change { deploy_key.reload.title }.to 'new title'
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:ok)
|
2019-10-17 00:07:27 +00:00
|
|
|
end
|
|
|
|
|
|
|
|
it 'updates can_push of deploy_keys_project' do
|
|
|
|
expect { subject }.to change { deploy_keys_project.reload.can_push }.from(false).to(true)
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:ok)
|
2019-10-17 00:07:27 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context 'private deploy key' do
|
|
|
|
let(:deploy_key) { create(:another_deploy_key, public: false) }
|
|
|
|
let(:deploy_keys_project) do
|
|
|
|
create(:deploy_keys_project, project: project, deploy_key: deploy_key)
|
|
|
|
end
|
2020-08-11 03:11:00 +00:00
|
|
|
|
2019-10-17 00:07:27 +00:00
|
|
|
let(:extra_params) { { title: 'new title', can_push: true } }
|
|
|
|
|
|
|
|
it 'updates the title of the deploy key' do
|
|
|
|
expect { subject }.to change { deploy_key.reload.title }.to 'new title'
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:ok)
|
2019-10-17 00:07:27 +00:00
|
|
|
end
|
|
|
|
|
|
|
|
it 'updates can_push of deploy_keys_project' do
|
|
|
|
expect { subject }.to change { deploy_keys_project.reload.can_push }.from(false).to(true)
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:ok)
|
2019-10-17 00:07:27 +00:00
|
|
|
end
|
|
|
|
|
|
|
|
context 'invalid title' do
|
|
|
|
let(:extra_params) { { title: '' } }
|
|
|
|
|
|
|
|
it 'does not update the title of the deploy key' do
|
|
|
|
expect { subject }.not_to change { deploy_key.reload.title }
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:bad_request)
|
2019-10-17 00:07:27 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
2017-03-31 12:54:38 +00:00
|
|
|
end
|
|
|
|
|
2019-10-17 00:07:27 +00:00
|
|
|
context 'with admin as project maintainer' do
|
|
|
|
let(:api_user) { admin }
|
2017-03-31 12:54:38 +00:00
|
|
|
|
2019-10-17 00:07:27 +00:00
|
|
|
before do
|
|
|
|
project.add_maintainer(admin)
|
|
|
|
end
|
2017-03-31 12:54:38 +00:00
|
|
|
|
2019-10-17 00:07:27 +00:00
|
|
|
context 'public deploy key attached to project' do
|
|
|
|
let(:extra_params) { { title: 'new title', can_push: true } }
|
|
|
|
|
|
|
|
it 'updates the title of the deploy key' do
|
|
|
|
expect { subject }.to change { deploy_key.reload.title }.to 'new title'
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:ok)
|
2019-10-17 00:07:27 +00:00
|
|
|
end
|
|
|
|
|
|
|
|
it 'updates can_push of deploy_keys_project' do
|
|
|
|
expect { subject }.to change { deploy_keys_project.reload.can_push }.from(false).to(true)
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:ok)
|
2019-10-17 00:07:27 +00:00
|
|
|
end
|
|
|
|
end
|
2017-03-31 12:54:38 +00:00
|
|
|
end
|
|
|
|
|
2019-10-17 00:07:27 +00:00
|
|
|
context 'with maintainer' do
|
|
|
|
let(:api_user) { maintainer }
|
2017-03-31 12:54:38 +00:00
|
|
|
|
2019-10-17 00:07:27 +00:00
|
|
|
before do
|
|
|
|
project.add_maintainer(maintainer)
|
|
|
|
end
|
2017-03-31 12:54:38 +00:00
|
|
|
|
2019-10-17 00:07:27 +00:00
|
|
|
context 'public deploy key attached to project' do
|
|
|
|
let(:extra_params) { { title: 'new title', can_push: true } }
|
|
|
|
|
|
|
|
it 'does not update the title of the deploy key' do
|
|
|
|
expect { subject }.not_to change { deploy_key.reload.title }
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:ok)
|
2019-10-17 00:07:27 +00:00
|
|
|
end
|
|
|
|
|
|
|
|
it 'updates can_push of deploy_keys_project' do
|
|
|
|
expect { subject }.to change { deploy_keys_project.reload.can_push }.from(false).to(true)
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:ok)
|
2019-10-17 00:07:27 +00:00
|
|
|
end
|
|
|
|
end
|
2017-03-31 12:54:38 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2016-08-04 11:09:10 +00:00
|
|
|
describe 'DELETE /projects/:id/deploy_keys/:key_id' do
|
2017-06-14 18:18:56 +00:00
|
|
|
before do
|
|
|
|
deploy_key
|
|
|
|
end
|
2016-08-04 11:09:10 +00:00
|
|
|
|
2018-05-04 10:40:37 +00:00
|
|
|
it 'removes existing key from project' do
|
2016-08-04 11:09:10 +00:00
|
|
|
expect do
|
|
|
|
delete api("/projects/#{project.id}/deploy_keys/#{deploy_key.id}", admin)
|
2017-02-20 18:18:12 +00:00
|
|
|
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:no_content)
|
2017-08-09 09:52:22 +00:00
|
|
|
end.to change { project.deploy_keys.count }.by(-1)
|
2016-08-04 11:09:10 +00:00
|
|
|
end
|
|
|
|
|
2018-05-04 10:40:37 +00:00
|
|
|
context 'when the deploy key is public' do
|
|
|
|
it 'does not delete the deploy key' do
|
|
|
|
expect do
|
|
|
|
delete api("/projects/#{project.id}/deploy_keys/#{deploy_key.id}", admin)
|
|
|
|
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:no_content)
|
2018-05-04 10:40:37 +00:00
|
|
|
end.not_to change { DeployKey.count }
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context 'when the deploy key is not public' do
|
|
|
|
let!(:deploy_key) { create(:deploy_key, public: false) }
|
|
|
|
|
|
|
|
context 'when the deploy key is only used by this project' do
|
|
|
|
it 'deletes the deploy key' do
|
|
|
|
expect do
|
|
|
|
delete api("/projects/#{project.id}/deploy_keys/#{deploy_key.id}", admin)
|
|
|
|
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:no_content)
|
2018-05-04 10:40:37 +00:00
|
|
|
end.to change { DeployKey.count }.by(-1)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context 'when the deploy key is used by other projects' do
|
|
|
|
before do
|
|
|
|
create(:deploy_keys_project, project: project2, deploy_key: deploy_key)
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'does not delete the deploy key' do
|
|
|
|
expect do
|
|
|
|
delete api("/projects/#{project.id}/deploy_keys/#{deploy_key.id}", admin)
|
|
|
|
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:no_content)
|
2018-05-04 10:40:37 +00:00
|
|
|
end.not_to change { DeployKey.count }
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2017-03-31 12:54:38 +00:00
|
|
|
it 'returns 404 Not Found with invalid ID' do
|
2016-08-04 11:09:10 +00:00
|
|
|
delete api("/projects/#{project.id}/deploy_keys/404", admin)
|
|
|
|
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:not_found)
|
2016-08-04 11:09:10 +00:00
|
|
|
end
|
2017-08-24 16:03:39 +00:00
|
|
|
|
|
|
|
it_behaves_like '412 response' do
|
|
|
|
let(:request) { api("/projects/#{project.id}/deploy_keys/#{deploy_key.id}", admin) }
|
|
|
|
end
|
2016-08-04 11:09:10 +00:00
|
|
|
end
|
|
|
|
|
2016-08-03 12:45:32 +00:00
|
|
|
describe 'POST /projects/:id/deploy_keys/:key_id/enable' do
|
2017-08-02 19:55:11 +00:00
|
|
|
let(:project2) { create(:project) }
|
2016-08-03 12:45:32 +00:00
|
|
|
|
|
|
|
context 'when the user can admin the project' do
|
|
|
|
it 'enables the key' do
|
|
|
|
expect do
|
|
|
|
post api("/projects/#{project2.id}/deploy_keys/#{deploy_key.id}/enable", admin)
|
|
|
|
end.to change { project2.deploy_keys.count }.from(0).to(1)
|
|
|
|
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:created)
|
2016-08-03 12:45:32 +00:00
|
|
|
expect(json_response['id']).to eq(deploy_key.id)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context 'when authenticated as non-admin user' do
|
2017-03-31 12:54:38 +00:00
|
|
|
it 'returns a 404 error' do
|
2016-08-03 12:45:32 +00:00
|
|
|
post api("/projects/#{project2.id}/deploy_keys/#{deploy_key.id}/enable", user)
|
|
|
|
|
2020-02-21 12:09:07 +00:00
|
|
|
expect(response).to have_gitlab_http_status(:not_found)
|
2016-08-03 12:45:32 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|