2019-03-28 10:22:37 +00:00
|
|
|
# frozen_string_literal: true
|
|
|
|
|
2015-07-02 14:33:38 +00:00
|
|
|
require "spec_helper"
|
|
|
|
|
|
|
|
describe AuthHelper do
|
|
|
|
describe "button_based_providers" do
|
2016-05-04 14:04:54 +00:00
|
|
|
it 'returns all enabled providers from devise' do
|
2015-07-02 14:33:38 +00:00
|
|
|
allow(helper).to receive(:auth_providers) { [:twitter, :github] }
|
|
|
|
expect(helper.button_based_providers).to include(*[:twitter, :github])
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'does not return ldap provider' do
|
|
|
|
allow(helper).to receive(:auth_providers) { [:twitter, :ldapmain] }
|
|
|
|
expect(helper.button_based_providers).to include(:twitter)
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'returns empty array' do
|
|
|
|
allow(helper).to receive(:auth_providers) { [] }
|
|
|
|
expect(helper.button_based_providers).to eq([])
|
|
|
|
end
|
2016-05-09 07:42:57 +00:00
|
|
|
end
|
2016-05-04 14:04:54 +00:00
|
|
|
|
2018-04-22 23:15:48 +00:00
|
|
|
describe "providers_for_base_controller" do
|
|
|
|
it 'returns all enabled providers from devise' do
|
|
|
|
allow(helper).to receive(:auth_providers) { [:twitter, :github] }
|
|
|
|
expect(helper.providers_for_base_controller).to include(*[:twitter, :github])
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'excludes ldap providers' do
|
|
|
|
allow(helper).to receive(:auth_providers) { [:twitter, :ldapmain] }
|
|
|
|
expect(helper.providers_for_base_controller).not_to include(:ldapmain)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
describe "form_based_providers" do
|
|
|
|
it 'includes LDAP providers' do
|
|
|
|
allow(helper).to receive(:auth_providers) { [:twitter, :ldapmain] }
|
|
|
|
expect(helper.form_based_providers).to eq %i(ldapmain)
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'includes crowd provider' do
|
|
|
|
allow(helper).to receive(:auth_providers) { [:twitter, :crowd] }
|
|
|
|
expect(helper.form_based_providers).to eq %i(crowd)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2018-11-12 21:40:42 +00:00
|
|
|
describe 'form_based_auth_provider_has_active_class?' do
|
|
|
|
it 'selects main LDAP server' do
|
|
|
|
allow(helper).to receive(:auth_providers) { [:twitter, :ldapprimary, :ldapsecondary, :kerberos] }
|
|
|
|
expect(helper.form_based_auth_provider_has_active_class?(:twitter)).to be(false)
|
|
|
|
expect(helper.form_based_auth_provider_has_active_class?(:ldapprimary)).to be(true)
|
|
|
|
expect(helper.form_based_auth_provider_has_active_class?(:ldapsecondary)).to be(false)
|
|
|
|
expect(helper.form_based_auth_provider_has_active_class?(:kerberos)).to be(false)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2019-11-01 00:06:02 +00:00
|
|
|
describe 'any_form_based_providers_enabled?' do
|
|
|
|
before do
|
|
|
|
allow(Gitlab::Auth::LDAP::Config).to receive(:enabled?).and_return(true)
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'detects form-based providers' do
|
|
|
|
allow(helper).to receive(:auth_providers) { [:twitter, :ldapmain] }
|
|
|
|
expect(helper.any_form_based_providers_enabled?).to be(true)
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'ignores ldap providers when ldap web sign in is disabled' do
|
|
|
|
allow(helper).to receive(:auth_providers) { [:twitter, :ldapmain] }
|
|
|
|
allow(helper).to receive(:ldap_sign_in_enabled?).and_return(false)
|
|
|
|
expect(helper.any_form_based_providers_enabled?).to be(false)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2016-05-09 07:42:57 +00:00
|
|
|
describe 'enabled_button_based_providers' do
|
2016-05-09 07:51:24 +00:00
|
|
|
before do
|
2020-01-22 09:08:39 +00:00
|
|
|
allow(helper).to receive(:auth_providers) { [:twitter, :github, :google_oauth2] }
|
2016-05-09 07:51:24 +00:00
|
|
|
end
|
|
|
|
|
2016-05-10 08:17:37 +00:00
|
|
|
context 'all providers are enabled to sign in' do
|
|
|
|
it 'returns all the enabled providers from settings' do
|
2020-01-22 09:08:39 +00:00
|
|
|
expect(helper.enabled_button_based_providers).to include('twitter', 'github', 'google_oauth2')
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'puts google and github in the beginning' do
|
|
|
|
expect(helper.enabled_button_based_providers.first).to eq('google_oauth2')
|
|
|
|
expect(helper.enabled_button_based_providers.second).to eq('github')
|
2016-05-10 08:17:37 +00:00
|
|
|
end
|
2016-05-04 14:04:54 +00:00
|
|
|
end
|
|
|
|
|
2016-05-10 08:17:37 +00:00
|
|
|
context 'GitHub OAuth sign in is disabled from application setting' do
|
|
|
|
it "doesn't return github as provider" do
|
|
|
|
stub_application_setting(
|
|
|
|
disabled_oauth_sign_in_sources: ['github']
|
|
|
|
)
|
2016-05-04 14:04:54 +00:00
|
|
|
|
2016-05-10 08:17:37 +00:00
|
|
|
expect(helper.enabled_button_based_providers).to include('twitter')
|
2016-05-23 23:37:59 +00:00
|
|
|
expect(helper.enabled_button_based_providers).not_to include('github')
|
2016-05-10 08:17:37 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
describe 'button_based_providers_enabled?' do
|
|
|
|
before do
|
|
|
|
allow(helper).to receive(:auth_providers) { [:twitter, :github] }
|
2016-05-04 14:04:54 +00:00
|
|
|
end
|
2016-05-04 14:06:07 +00:00
|
|
|
|
2016-05-10 08:17:37 +00:00
|
|
|
context 'button based providers enabled' do
|
|
|
|
it 'returns true' do
|
|
|
|
expect(helper.button_based_providers_enabled?).to be true
|
|
|
|
end
|
2016-05-04 14:06:07 +00:00
|
|
|
end
|
|
|
|
|
2016-05-10 08:17:37 +00:00
|
|
|
context 'all the button based providers are disabled via application_setting' do
|
|
|
|
it 'returns false' do
|
|
|
|
stub_application_setting(
|
2017-02-22 17:46:57 +00:00
|
|
|
disabled_oauth_sign_in_sources: %w(github twitter)
|
2016-05-10 08:17:37 +00:00
|
|
|
)
|
2016-05-04 14:06:07 +00:00
|
|
|
|
2016-05-10 08:17:37 +00:00
|
|
|
expect(helper.button_based_providers_enabled?).to be false
|
|
|
|
end
|
2016-05-04 14:06:07 +00:00
|
|
|
end
|
2015-07-02 14:33:38 +00:00
|
|
|
end
|
2017-03-28 10:33:51 +00:00
|
|
|
|
2019-03-18 14:36:34 +00:00
|
|
|
describe '#link_provider_allowed?' do
|
|
|
|
let(:policy) { instance_double('IdentityProviderPolicy') }
|
|
|
|
let(:current_user) { instance_double('User') }
|
|
|
|
let(:provider) { double }
|
|
|
|
|
|
|
|
before do
|
|
|
|
allow(helper).to receive(:current_user).and_return(current_user)
|
|
|
|
allow(IdentityProviderPolicy).to receive(:new).with(current_user, provider).and_return(policy)
|
2017-03-28 10:33:51 +00:00
|
|
|
end
|
|
|
|
|
2019-03-18 14:36:34 +00:00
|
|
|
it 'delegates to identity provider policy' do
|
|
|
|
allow(policy).to receive(:can?).with(:link).and_return('policy_link_result')
|
|
|
|
|
|
|
|
expect(helper.link_provider_allowed?(provider)).to eq 'policy_link_result'
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
describe '#unlink_provider_allowed?' do
|
|
|
|
let(:policy) { instance_double('IdentityProviderPolicy') }
|
|
|
|
let(:current_user) { instance_double('User') }
|
|
|
|
let(:provider) { double }
|
|
|
|
|
|
|
|
before do
|
|
|
|
allow(helper).to receive(:current_user).and_return(current_user)
|
|
|
|
allow(IdentityProviderPolicy).to receive(:new).with(current_user, provider).and_return(policy)
|
|
|
|
end
|
|
|
|
|
|
|
|
it 'delegates to identity provider policy' do
|
|
|
|
allow(policy).to receive(:can?).with(:unlink).and_return('policy_unlink_result')
|
|
|
|
|
|
|
|
expect(helper.unlink_provider_allowed?(provider)).to eq 'policy_unlink_result'
|
2017-03-28 10:33:51 +00:00
|
|
|
end
|
|
|
|
end
|
2015-07-02 14:33:38 +00:00
|
|
|
end
|