2013-02-26 20:53:59 +00:00
|
|
|
require 'spec_helper'
|
|
|
|
|
2014-04-11 19:45:56 +00:00
|
|
|
describe API::API, api: true do
|
2013-02-26 20:53:59 +00:00
|
|
|
include ApiHelpers
|
|
|
|
let(:user) { create(:user) }
|
|
|
|
let(:key) { create(:key, user: user) }
|
|
|
|
let(:project) { create(:project) }
|
2014-10-15 15:26:15 +00:00
|
|
|
let(:secret_token) { File.read Rails.root.join('.gitlab_shell_secret') }
|
2013-02-26 20:53:59 +00:00
|
|
|
|
|
|
|
describe "GET /internal/check", no_db: true do
|
|
|
|
it do
|
2014-10-15 15:26:15 +00:00
|
|
|
get api("/internal/check"), secret_token: secret_token
|
2013-02-26 20:53:59 +00:00
|
|
|
|
|
|
|
response.status.should == 200
|
2013-05-14 12:33:31 +00:00
|
|
|
json_response['api_version'].should == API::API.version
|
2013-02-26 20:53:59 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
describe "GET /internal/discover" do
|
|
|
|
it do
|
2014-10-15 15:26:15 +00:00
|
|
|
get(api("/internal/discover"), key_id: key.id, secret_token: secret_token)
|
2013-02-26 20:53:59 +00:00
|
|
|
|
|
|
|
response.status.should == 200
|
|
|
|
|
2013-03-11 13:47:44 +00:00
|
|
|
json_response['name'].should == user.name
|
2013-02-26 20:53:59 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2014-12-01 14:55:33 +00:00
|
|
|
describe "POST /internal/allowed" do
|
2013-02-26 20:53:59 +00:00
|
|
|
context "access granted" do
|
|
|
|
before do
|
|
|
|
project.team << [user, :developer]
|
|
|
|
end
|
|
|
|
|
|
|
|
context "git pull" do
|
|
|
|
it do
|
2013-03-07 12:18:30 +00:00
|
|
|
pull(key, project)
|
2013-02-26 20:53:59 +00:00
|
|
|
|
|
|
|
response.status.should == 200
|
2014-11-14 16:23:55 +00:00
|
|
|
JSON.parse(response.body)["status"].should be_true
|
2013-02-26 20:53:59 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context "git push" do
|
|
|
|
it do
|
2013-03-07 12:18:30 +00:00
|
|
|
push(key, project)
|
2013-02-26 20:53:59 +00:00
|
|
|
|
|
|
|
response.status.should == 200
|
2014-11-14 16:23:55 +00:00
|
|
|
JSON.parse(response.body)["status"].should be_true
|
2013-02-26 20:53:59 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context "access denied" do
|
|
|
|
before do
|
|
|
|
project.team << [user, :guest]
|
|
|
|
end
|
|
|
|
|
|
|
|
context "git pull" do
|
|
|
|
it do
|
2013-03-07 12:18:30 +00:00
|
|
|
pull(key, project)
|
2013-02-26 20:53:59 +00:00
|
|
|
|
|
|
|
response.status.should == 200
|
2014-11-14 16:23:55 +00:00
|
|
|
JSON.parse(response.body)["status"].should be_false
|
2013-02-26 20:53:59 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context "git push" do
|
|
|
|
it do
|
2013-03-07 12:18:30 +00:00
|
|
|
push(key, project)
|
2013-02-26 20:53:59 +00:00
|
|
|
|
|
|
|
response.status.should == 200
|
2014-11-14 16:23:55 +00:00
|
|
|
JSON.parse(response.body)["status"].should be_false
|
2013-02-26 20:53:59 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2013-03-07 12:18:30 +00:00
|
|
|
context "blocked user" do
|
|
|
|
let(:personal_project) { create(:project, namespace: user.namespace) }
|
|
|
|
|
|
|
|
before do
|
|
|
|
user.block
|
|
|
|
end
|
|
|
|
|
|
|
|
context "git pull" do
|
|
|
|
it do
|
|
|
|
pull(key, personal_project)
|
|
|
|
|
|
|
|
response.status.should == 200
|
2014-11-14 16:23:55 +00:00
|
|
|
JSON.parse(response.body)["status"].should be_false
|
2013-03-07 12:18:30 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context "git push" do
|
|
|
|
it do
|
|
|
|
push(key, personal_project)
|
|
|
|
|
|
|
|
response.status.should == 200
|
2014-11-14 16:23:55 +00:00
|
|
|
JSON.parse(response.body)["status"].should be_false
|
2013-03-07 12:18:30 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
2013-07-29 12:25:33 +00:00
|
|
|
|
2013-11-29 16:10:59 +00:00
|
|
|
context "archived project" do
|
|
|
|
let(:personal_project) { create(:project, namespace: user.namespace) }
|
|
|
|
|
|
|
|
before do
|
|
|
|
project.team << [user, :developer]
|
|
|
|
project.archive!
|
|
|
|
end
|
|
|
|
|
|
|
|
context "git pull" do
|
|
|
|
it do
|
|
|
|
pull(key, project)
|
|
|
|
|
|
|
|
response.status.should == 200
|
2014-11-14 16:23:55 +00:00
|
|
|
JSON.parse(response.body)["status"].should be_true
|
2013-11-29 16:10:59 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context "git push" do
|
|
|
|
it do
|
|
|
|
push(key, project)
|
|
|
|
|
|
|
|
response.status.should == 200
|
2014-11-14 16:23:55 +00:00
|
|
|
JSON.parse(response.body)["status"].should be_false
|
2013-11-29 16:10:59 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2013-07-29 12:25:33 +00:00
|
|
|
context "deploy key" do
|
|
|
|
let(:key) { create(:deploy_key) }
|
|
|
|
|
|
|
|
context "added to project" do
|
|
|
|
before do
|
|
|
|
key.projects << project
|
|
|
|
end
|
|
|
|
|
|
|
|
it do
|
|
|
|
archive(key, project)
|
|
|
|
|
|
|
|
response.status.should == 200
|
2014-12-01 14:55:33 +00:00
|
|
|
JSON.parse(response.body)["status"].should be_true
|
2013-07-29 12:25:33 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context "not added to project" do
|
|
|
|
it do
|
|
|
|
archive(key, project)
|
|
|
|
|
|
|
|
response.status.should == 200
|
2014-12-01 14:55:33 +00:00
|
|
|
JSON.parse(response.body)["status"].should be_false
|
2013-07-29 12:25:33 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
2014-12-01 14:55:33 +00:00
|
|
|
|
|
|
|
context 'project does not exist' do
|
|
|
|
it do
|
|
|
|
pull(key, OpenStruct.new(path_with_namespace: 'gitlab/notexists'))
|
|
|
|
|
|
|
|
response.status.should == 200
|
|
|
|
JSON.parse(response.body)["status"].should be_false
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context 'user does not exist' do
|
|
|
|
it do
|
|
|
|
pull(OpenStruct.new(id: 0), project)
|
|
|
|
|
|
|
|
response.status.should == 200
|
|
|
|
JSON.parse(response.body)["status"].should be_false
|
|
|
|
end
|
|
|
|
end
|
2013-03-07 12:18:30 +00:00
|
|
|
end
|
|
|
|
|
|
|
|
def pull(key, project)
|
2014-09-03 06:06:16 +00:00
|
|
|
post(
|
2013-03-07 12:18:30 +00:00
|
|
|
api("/internal/allowed"),
|
|
|
|
key_id: key.id,
|
|
|
|
project: project.path_with_namespace,
|
2014-10-15 15:26:15 +00:00
|
|
|
action: 'git-upload-pack',
|
|
|
|
secret_token: secret_token
|
2013-03-07 12:18:30 +00:00
|
|
|
)
|
|
|
|
end
|
|
|
|
|
|
|
|
def push(key, project)
|
2014-09-03 06:06:16 +00:00
|
|
|
post(
|
2013-03-07 12:18:30 +00:00
|
|
|
api("/internal/allowed"),
|
2014-09-02 08:35:34 +00:00
|
|
|
changes: 'd14d6c0abdd253381df51a723d58691b2ee1ab08 570e7b2abdd848b95f2f578043fc23bd6f6fd24d refs/heads/master',
|
2013-03-07 12:18:30 +00:00
|
|
|
key_id: key.id,
|
|
|
|
project: project.path_with_namespace,
|
2014-10-15 15:26:15 +00:00
|
|
|
action: 'git-receive-pack',
|
|
|
|
secret_token: secret_token
|
2013-03-07 12:18:30 +00:00
|
|
|
)
|
2013-02-26 20:53:59 +00:00
|
|
|
end
|
2013-07-29 12:25:33 +00:00
|
|
|
|
|
|
|
def archive(key, project)
|
2014-09-03 06:06:16 +00:00
|
|
|
post(
|
2013-07-29 12:25:33 +00:00
|
|
|
api("/internal/allowed"),
|
|
|
|
ref: 'master',
|
|
|
|
key_id: key.id,
|
|
|
|
project: project.path_with_namespace,
|
2014-10-15 15:26:15 +00:00
|
|
|
action: 'git-upload-archive',
|
|
|
|
secret_token: secret_token
|
2013-07-29 12:25:33 +00:00
|
|
|
)
|
|
|
|
end
|
2013-02-26 20:53:59 +00:00
|
|
|
end
|