2015-12-10 12:04:40 -05:00
|
|
|
require 'spec_helper'
|
|
|
|
|
2016-11-23 15:14:08 -05:00
|
|
|
describe API::Triggers do
|
2016-01-04 10:38:32 -05:00
|
|
|
let(:user) { create(:user) }
|
|
|
|
let(:user2) { create(:user) }
|
2016-01-05 06:25:16 -05:00
|
|
|
let!(:trigger_token) { 'secure_token' }
|
|
|
|
let!(:trigger_token_2) { 'secure_token_2' }
|
2017-01-26 18:51:57 -05:00
|
|
|
let!(:project) { create(:project, :repository, creator: user) }
|
2016-03-06 16:53:22 -05:00
|
|
|
let!(:master) { create(:project_member, :master, user: user, project: project) }
|
|
|
|
let!(:developer) { create(:project_member, :developer, user: user2, project: project) }
|
2017-08-24 09:50:05 -04:00
|
|
|
let!(:trigger) { create(:ci_trigger, project: project, token: trigger_token, owner: user) }
|
|
|
|
let!(:trigger2) { create(:ci_trigger, project: project, token: trigger_token_2, owner: user2) }
|
2016-01-04 10:38:32 -05:00
|
|
|
let!(:trigger_request) { create(:ci_trigger_request, trigger: trigger, created_at: '2015-01-01 12:13:14') }
|
|
|
|
|
2017-03-05 14:58:08 -05:00
|
|
|
describe 'POST /projects/:project_id/trigger/pipeline' do
|
2017-08-01 14:51:52 -04:00
|
|
|
let!(:project2) { create(:project, :repository) }
|
2015-12-10 12:04:40 -05:00
|
|
|
let(:options) do
|
|
|
|
{
|
|
|
|
token: trigger_token
|
|
|
|
}
|
|
|
|
end
|
|
|
|
|
|
|
|
before do
|
2016-06-03 10:22:26 -04:00
|
|
|
stub_ci_pipeline_to_return_yaml_file
|
2015-12-10 12:04:40 -05:00
|
|
|
end
|
|
|
|
|
|
|
|
context 'Handles errors' do
|
2016-08-01 11:00:44 -04:00
|
|
|
it 'returns bad request if token is missing' do
|
2017-03-05 14:58:08 -05:00
|
|
|
post api("/projects/#{project.id}/trigger/pipeline"), ref: 'master'
|
|
|
|
|
2016-06-27 14:10:42 -04:00
|
|
|
expect(response).to have_http_status(400)
|
2015-12-10 12:04:40 -05:00
|
|
|
end
|
|
|
|
|
2016-08-01 11:00:44 -04:00
|
|
|
it 'returns not found if project is not found' do
|
2017-03-05 14:58:08 -05:00
|
|
|
post api('/projects/0/trigger/pipeline'), options.merge(ref: 'master')
|
|
|
|
|
2016-06-27 14:10:42 -04:00
|
|
|
expect(response).to have_http_status(404)
|
2015-12-10 12:04:40 -05:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context 'Have a commit' do
|
2016-06-03 10:22:26 -04:00
|
|
|
let(:pipeline) { project.pipelines.last }
|
2015-12-10 12:04:40 -05:00
|
|
|
|
2017-03-05 14:58:08 -05:00
|
|
|
it 'creates pipeline' do
|
|
|
|
post api("/projects/#{project.id}/trigger/pipeline"), options.merge(ref: 'master')
|
|
|
|
|
2016-06-27 14:10:42 -04:00
|
|
|
expect(response).to have_http_status(201)
|
2017-03-05 14:58:08 -05:00
|
|
|
expect(json_response).to include('id' => pipeline.id)
|
2016-06-03 10:22:26 -04:00
|
|
|
pipeline.builds.reload
|
2016-08-11 09:22:35 -04:00
|
|
|
expect(pipeline.builds.pending.size).to eq(2)
|
|
|
|
expect(pipeline.builds.size).to eq(5)
|
2015-12-10 12:04:40 -05:00
|
|
|
end
|
|
|
|
|
2017-03-05 14:58:08 -05:00
|
|
|
it 'returns bad request with no pipeline created if there\'s no commit for that ref' do
|
|
|
|
post api("/projects/#{project.id}/trigger/pipeline"), options.merge(ref: 'other-branch')
|
|
|
|
|
2016-06-27 14:10:42 -04:00
|
|
|
expect(response).to have_http_status(400)
|
2017-07-26 05:31:09 -04:00
|
|
|
expect(json_response['message']).to eq('base' => ["Reference not found"])
|
2015-12-10 12:04:40 -05:00
|
|
|
end
|
|
|
|
|
|
|
|
context 'Validates variables' do
|
|
|
|
let(:variables) do
|
|
|
|
{ 'TRIGGER_KEY' => 'TRIGGER_VALUE' }
|
|
|
|
end
|
|
|
|
|
2016-08-01 11:00:44 -04:00
|
|
|
it 'validates variables to be a hash' do
|
2017-03-05 14:58:08 -05:00
|
|
|
post api("/projects/#{project.id}/trigger/pipeline"), options.merge(variables: 'value', ref: 'master')
|
|
|
|
|
2016-06-27 14:10:42 -04:00
|
|
|
expect(response).to have_http_status(400)
|
2016-11-09 10:47:39 -05:00
|
|
|
expect(json_response['error']).to eq('variables is invalid')
|
2015-12-10 12:04:40 -05:00
|
|
|
end
|
|
|
|
|
2016-08-01 11:00:44 -04:00
|
|
|
it 'validates variables needs to be a map of key-valued strings' do
|
2017-03-05 14:58:08 -05:00
|
|
|
post api("/projects/#{project.id}/trigger/pipeline"), options.merge(variables: { key: %w(1 2) }, ref: 'master')
|
|
|
|
|
2016-06-27 14:10:42 -04:00
|
|
|
expect(response).to have_http_status(400)
|
2015-12-10 12:04:40 -05:00
|
|
|
expect(json_response['message']).to eq('variables needs to be a map of key-valued strings')
|
|
|
|
end
|
|
|
|
|
2016-08-01 11:00:44 -04:00
|
|
|
it 'creates trigger request with variables' do
|
2017-03-05 14:58:08 -05:00
|
|
|
post api("/projects/#{project.id}/trigger/pipeline"), options.merge(variables: variables, ref: 'master')
|
|
|
|
|
2016-06-27 14:10:42 -04:00
|
|
|
expect(response).to have_http_status(201)
|
2017-07-27 11:38:26 -04:00
|
|
|
expect(pipeline.variables.map { |v| { v.key => v.value } }.last).to eq(variables)
|
2015-12-10 12:04:40 -05:00
|
|
|
end
|
|
|
|
end
|
2017-03-20 08:49:31 -04:00
|
|
|
|
2017-08-28 03:00:11 -04:00
|
|
|
context 'when legacy trigger' do
|
|
|
|
before do
|
|
|
|
trigger.update(owner: nil)
|
|
|
|
end
|
2017-08-28 02:35:26 -04:00
|
|
|
|
2017-08-28 03:00:11 -04:00
|
|
|
it 'creates pipeline' do
|
|
|
|
post api("/projects/#{project.id}/trigger/pipeline"), options.merge(ref: 'master')
|
2017-08-28 02:35:26 -04:00
|
|
|
|
2017-08-28 03:00:11 -04:00
|
|
|
expect(response).to have_http_status(201)
|
|
|
|
expect(json_response).to include('id' => pipeline.id)
|
|
|
|
pipeline.builds.reload
|
|
|
|
expect(pipeline.builds.pending.size).to eq(2)
|
|
|
|
expect(pipeline.builds.size).to eq(5)
|
|
|
|
end
|
2017-08-28 02:35:26 -04:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2017-03-20 08:49:31 -04:00
|
|
|
context 'when triggering a pipeline from a trigger token' do
|
2017-07-26 05:31:09 -04:00
|
|
|
it 'does not leak the presence of project when token is for different project' do
|
|
|
|
post api("/projects/#{project2.id}/ref/master/trigger/pipeline?token=#{trigger_token}"), { ref: 'refs/heads/other-branch' }
|
|
|
|
|
|
|
|
expect(response).to have_http_status(404)
|
|
|
|
end
|
|
|
|
|
2017-03-20 08:49:31 -04:00
|
|
|
it 'creates builds from the ref given in the URL, not in the body' do
|
|
|
|
expect do
|
|
|
|
post api("/projects/#{project.id}/ref/master/trigger/pipeline?token=#{trigger_token}"), { ref: 'refs/heads/other-branch' }
|
|
|
|
end.to change(project.builds, :count).by(5)
|
|
|
|
|
|
|
|
expect(response).to have_http_status(201)
|
|
|
|
end
|
|
|
|
|
|
|
|
context 'when ref contains a dot' do
|
|
|
|
it 'creates builds from the ref given in the URL, not in the body' do
|
|
|
|
project.repository.create_file(user, '.gitlab/gitlabhq/new_feature.md', 'something valid', message: 'new_feature', branch_name: 'v.1-branch')
|
|
|
|
|
|
|
|
expect do
|
|
|
|
post api("/projects/#{project.id}/ref/v.1-branch/trigger/pipeline?token=#{trigger_token}"), { ref: 'refs/heads/other-branch' }
|
|
|
|
end.to change(project.builds, :count).by(4)
|
|
|
|
|
|
|
|
expect(response).to have_http_status(201)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
2015-12-10 12:04:40 -05:00
|
|
|
end
|
2016-01-04 10:38:32 -05:00
|
|
|
|
2016-01-05 06:25:16 -05:00
|
|
|
describe 'GET /projects/:id/triggers' do
|
2016-01-04 10:38:32 -05:00
|
|
|
context 'authenticated user with valid permissions' do
|
2016-08-01 11:00:44 -04:00
|
|
|
it 'returns list of triggers' do
|
2016-01-04 10:38:32 -05:00
|
|
|
get api("/projects/#{project.id}/triggers", user)
|
|
|
|
|
2016-06-27 14:10:42 -04:00
|
|
|
expect(response).to have_http_status(200)
|
2017-01-24 15:49:10 -05:00
|
|
|
expect(response).to include_pagination_headers
|
2016-01-04 10:38:32 -05:00
|
|
|
expect(json_response).to be_a(Array)
|
2016-01-07 12:48:33 -05:00
|
|
|
expect(json_response[0]).to have_key('token')
|
2016-01-04 10:38:32 -05:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context 'authenticated user with invalid permissions' do
|
2016-08-01 11:00:44 -04:00
|
|
|
it 'does not return triggers list' do
|
2016-01-04 10:38:32 -05:00
|
|
|
get api("/projects/#{project.id}/triggers", user2)
|
|
|
|
|
2016-06-27 14:10:42 -04:00
|
|
|
expect(response).to have_http_status(403)
|
2016-01-04 10:38:32 -05:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2016-01-13 06:16:27 -05:00
|
|
|
context 'unauthenticated user' do
|
2016-08-01 11:00:44 -04:00
|
|
|
it 'does not return triggers list' do
|
2016-01-04 10:38:32 -05:00
|
|
|
get api("/projects/#{project.id}/triggers")
|
|
|
|
|
2016-06-27 14:10:42 -04:00
|
|
|
expect(response).to have_http_status(401)
|
2016-01-04 10:38:32 -05:00
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
2016-01-05 05:27:38 -05:00
|
|
|
|
2017-03-05 14:58:08 -05:00
|
|
|
describe 'GET /projects/:id/triggers/:trigger_id' do
|
2016-01-05 06:25:16 -05:00
|
|
|
context 'authenticated user with valid permissions' do
|
2016-08-01 11:00:44 -04:00
|
|
|
it 'returns trigger details' do
|
2017-03-05 14:58:08 -05:00
|
|
|
get api("/projects/#{project.id}/triggers/#{trigger.id}", user)
|
2016-01-05 06:25:16 -05:00
|
|
|
|
2016-06-27 14:10:42 -04:00
|
|
|
expect(response).to have_http_status(200)
|
2016-01-07 12:48:33 -05:00
|
|
|
expect(json_response).to be_a(Hash)
|
2016-01-05 06:25:16 -05:00
|
|
|
end
|
|
|
|
|
2016-08-01 11:00:44 -04:00
|
|
|
it 'responds with 404 Not Found if requesting non-existing trigger' do
|
2017-03-05 14:58:08 -05:00
|
|
|
get api("/projects/#{project.id}/triggers/-5", user)
|
2016-01-05 06:25:16 -05:00
|
|
|
|
2016-06-27 14:10:42 -04:00
|
|
|
expect(response).to have_http_status(404)
|
2016-01-05 06:25:16 -05:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context 'authenticated user with invalid permissions' do
|
2016-08-01 11:00:44 -04:00
|
|
|
it 'does not return triggers list' do
|
2017-03-05 14:58:08 -05:00
|
|
|
get api("/projects/#{project.id}/triggers/#{trigger.id}", user2)
|
2016-01-05 06:25:16 -05:00
|
|
|
|
2016-06-27 14:10:42 -04:00
|
|
|
expect(response).to have_http_status(403)
|
2016-01-05 06:25:16 -05:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2016-01-13 06:16:27 -05:00
|
|
|
context 'unauthenticated user' do
|
2016-08-01 11:00:44 -04:00
|
|
|
it 'does not return triggers list' do
|
2017-03-05 14:58:08 -05:00
|
|
|
get api("/projects/#{project.id}/triggers/#{trigger.id}")
|
2016-01-05 06:25:16 -05:00
|
|
|
|
2016-06-27 14:10:42 -04:00
|
|
|
expect(response).to have_http_status(401)
|
2016-01-05 06:25:16 -05:00
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
describe 'POST /projects/:id/triggers' do
|
2016-01-05 05:44:10 -05:00
|
|
|
context 'authenticated user with valid permissions' do
|
2017-03-05 14:58:08 -05:00
|
|
|
context 'with required parameters' do
|
|
|
|
it 'creates trigger' do
|
|
|
|
expect do
|
|
|
|
post api("/projects/#{project.id}/triggers", user),
|
|
|
|
description: 'trigger'
|
2017-08-09 05:52:22 -04:00
|
|
|
end.to change {project.triggers.count}.by(1)
|
2017-03-05 14:58:08 -05:00
|
|
|
|
|
|
|
expect(response).to have_http_status(201)
|
|
|
|
expect(json_response).to include('description' => 'trigger')
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context 'without required parameters' do
|
2017-03-06 05:48:33 -05:00
|
|
|
it 'does not create trigger' do
|
2016-01-05 05:44:10 -05:00
|
|
|
post api("/projects/#{project.id}/triggers", user)
|
|
|
|
|
2017-03-05 14:58:08 -05:00
|
|
|
expect(response).to have_http_status(:bad_request)
|
|
|
|
end
|
2016-01-05 05:44:10 -05:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context 'authenticated user with invalid permissions' do
|
2016-08-01 11:00:44 -04:00
|
|
|
it 'does not create trigger' do
|
2017-03-05 14:58:08 -05:00
|
|
|
post api("/projects/#{project.id}/triggers", user2),
|
|
|
|
description: 'trigger'
|
2016-01-05 05:44:10 -05:00
|
|
|
|
2016-06-27 14:10:42 -04:00
|
|
|
expect(response).to have_http_status(403)
|
2016-01-05 05:44:10 -05:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2016-01-13 06:16:27 -05:00
|
|
|
context 'unauthenticated user' do
|
2016-08-01 11:00:44 -04:00
|
|
|
it 'does not create trigger' do
|
2017-03-05 14:58:08 -05:00
|
|
|
post api("/projects/#{project.id}/triggers"),
|
|
|
|
description: 'trigger'
|
|
|
|
|
|
|
|
expect(response).to have_http_status(401)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
describe 'PUT /projects/:id/triggers/:trigger_id' do
|
|
|
|
context 'authenticated user with valid permissions' do
|
|
|
|
let(:new_description) { 'new description' }
|
|
|
|
|
|
|
|
it 'updates description' do
|
|
|
|
put api("/projects/#{project.id}/triggers/#{trigger.id}", user),
|
|
|
|
description: new_description
|
|
|
|
|
|
|
|
expect(response).to have_http_status(200)
|
|
|
|
expect(json_response).to include('description' => new_description)
|
|
|
|
expect(trigger.reload.description).to eq(new_description)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context 'authenticated user with invalid permissions' do
|
|
|
|
it 'does not update trigger' do
|
|
|
|
put api("/projects/#{project.id}/triggers/#{trigger.id}", user2)
|
|
|
|
|
|
|
|
expect(response).to have_http_status(403)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context 'unauthenticated user' do
|
|
|
|
it 'does not update trigger' do
|
|
|
|
put api("/projects/#{project.id}/triggers/#{trigger.id}")
|
|
|
|
|
|
|
|
expect(response).to have_http_status(401)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2017-03-06 06:00:15 -05:00
|
|
|
describe 'POST /projects/:id/triggers/:trigger_id/take_ownership' do
|
2017-03-05 14:58:08 -05:00
|
|
|
context 'authenticated user with valid permissions' do
|
|
|
|
it 'updates owner' do
|
2017-03-06 06:00:15 -05:00
|
|
|
post api("/projects/#{project.id}/triggers/#{trigger.id}/take_ownership", user)
|
2017-03-05 14:58:08 -05:00
|
|
|
|
|
|
|
expect(response).to have_http_status(200)
|
|
|
|
expect(json_response).to include('owner')
|
|
|
|
expect(trigger.reload.owner).to eq(user)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context 'authenticated user with invalid permissions' do
|
|
|
|
it 'does not update owner' do
|
2017-03-06 06:00:15 -05:00
|
|
|
post api("/projects/#{project.id}/triggers/#{trigger.id}/take_ownership", user2)
|
2017-03-05 14:58:08 -05:00
|
|
|
|
|
|
|
expect(response).to have_http_status(403)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
context 'unauthenticated user' do
|
|
|
|
it 'does not update owner' do
|
2017-03-06 06:00:15 -05:00
|
|
|
post api("/projects/#{project.id}/triggers/#{trigger.id}/take_ownership")
|
2016-01-05 05:44:10 -05:00
|
|
|
|
2016-06-27 14:10:42 -04:00
|
|
|
expect(response).to have_http_status(401)
|
2016-01-05 05:44:10 -05:00
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2017-03-05 14:58:08 -05:00
|
|
|
describe 'DELETE /projects/:id/triggers/:trigger_id' do
|
2016-01-05 05:27:38 -05:00
|
|
|
context 'authenticated user with valid permissions' do
|
2016-08-01 11:00:44 -04:00
|
|
|
it 'deletes trigger' do
|
2016-01-05 05:27:38 -05:00
|
|
|
expect do
|
2017-03-05 14:58:08 -05:00
|
|
|
delete api("/projects/#{project.id}/triggers/#{trigger.id}", user)
|
2017-02-20 13:18:12 -05:00
|
|
|
|
|
|
|
expect(response).to have_http_status(204)
|
2017-08-09 05:52:22 -04:00
|
|
|
end.to change {project.triggers.count}.by(-1)
|
2016-01-05 05:27:38 -05:00
|
|
|
end
|
|
|
|
|
2016-08-01 11:00:44 -04:00
|
|
|
it 'responds with 404 Not Found if requesting non-existing trigger' do
|
2017-03-05 14:58:08 -05:00
|
|
|
delete api("/projects/#{project.id}/triggers/-5", user)
|
2016-01-05 05:27:38 -05:00
|
|
|
|
2016-06-27 14:10:42 -04:00
|
|
|
expect(response).to have_http_status(404)
|
2016-01-05 05:27:38 -05:00
|
|
|
end
|
2017-08-24 12:03:39 -04:00
|
|
|
|
|
|
|
it_behaves_like '412 response' do
|
|
|
|
let(:request) { api("/projects/#{project.id}/triggers/#{trigger.id}", user) }
|
|
|
|
end
|
2016-01-05 05:27:38 -05:00
|
|
|
end
|
|
|
|
|
|
|
|
context 'authenticated user with invalid permissions' do
|
2016-08-01 11:00:44 -04:00
|
|
|
it 'does not delete trigger' do
|
2017-03-05 14:58:08 -05:00
|
|
|
delete api("/projects/#{project.id}/triggers/#{trigger.id}", user2)
|
2016-01-05 05:27:38 -05:00
|
|
|
|
2016-06-27 14:10:42 -04:00
|
|
|
expect(response).to have_http_status(403)
|
2016-01-05 05:27:38 -05:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2016-01-13 06:16:27 -05:00
|
|
|
context 'unauthenticated user' do
|
2016-08-01 11:00:44 -04:00
|
|
|
it 'does not delete trigger' do
|
2017-03-05 14:58:08 -05:00
|
|
|
delete api("/projects/#{project.id}/triggers/#{trigger.id}")
|
2016-01-05 05:27:38 -05:00
|
|
|
|
2016-06-27 14:10:42 -04:00
|
|
|
expect(response).to have_http_status(401)
|
2016-01-05 05:27:38 -05:00
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
2015-12-10 12:04:40 -05:00
|
|
|
end
|