require 'spec_helper' describe API::API, api: true do include ApiHelpers let(:user) { create(:user) } let(:api_user) { user } let(:user2) { create(:user) } let!(:project) { create(:project, creator_id: user.id) } let!(:developer) { create(:project_member, user: user, project: project, access_level: ProjectMember::DEVELOPER) } let!(:reporter) { create(:project_member, user: user2, project: project, access_level: ProjectMember::REPORTER) } let(:commit) { create(:ci_commit, project: project)} let(:build) { create(:ci_build, commit: commit) } describe 'GET /projects/:id/builds ' do let(:query) { '' } before { get api("/projects/#{project.id}/builds?#{query}", api_user) } context 'authorized user' do it 'should return project builds' do expect(response.status).to eq(200) expect(json_response).to be_an Array end context 'filter project with one scope element' do let(:query) { 'scope=pending' } it do expect(response.status).to eq(200) expect(json_response).to be_an Array end end context 'filter project with array of scope elements' do let(:query) { 'scope[0]=pending&scope[1]=running' } it do expect(response.status).to eq(200) expect(json_response).to be_an Array end end context 'respond 400 when scope contains invalid state' do let(:query) { 'scope[0]=pending&scope[1]=unknown_status' } it { expect(response.status).to eq(400) } end end context 'unauthorized user' do let(:api_user) { nil } it 'should not return project builds' do expect(response.status).to eq(401) end end end describe 'GET /projects/:id/repository/commits/:sha/builds' do before do project.ensure_ci_commit(commit.sha) get api("/projects/#{project.id}/repository/commits/#{commit.sha}/builds", api_user) end context 'authorized user' do it 'should return project builds for specific commit' do expect(response.status).to eq(200) expect(json_response).to be_an Array end end context 'unauthorized user' do let(:api_user) { nil } it 'should not return project builds' do expect(response.status).to eq(401) end end end describe 'GET /projects/:id/builds/:build_id' do before { get api("/projects/#{project.id}/builds/#{build.id}", api_user) } context 'authorized user' do it 'should return specific build data' do expect(response.status).to eq(200) expect(json_response['name']).to eq('test') end end context 'unauthorized user' do let(:api_user) { nil } it 'should not return specific build data' do expect(response.status).to eq(401) end end end describe 'GET /projects/:id/builds/:build_id/artifacts' do before { get api("/projects/#{project.id}/builds/#{build.id}/artifacts", api_user) } context 'build with artifacts' do let(:build) { create(:ci_build, :artifacts, commit: commit) } context 'authorized user' do let(:download_headers) do { 'Content-Transfer-Encoding'=>'binary', 'Content-Disposition'=>'attachment; filename=ci_build_artifacts.zip' } end it 'should return specific build artifacts' do expect(response.status).to eq(200) expect(response.headers).to include(download_headers) end end context 'unauthorized user' do let(:api_user) { nil } it 'should not return specific build artifacts' do expect(response.status).to eq(401) end end end it 'should not return build artifacts if not uploaded' do expect(response.status).to eq(404) end end describe 'GET /projects/:id/builds/:build_id/trace' do let(:build) { create(:ci_build, :trace, commit: commit) } before { get api("/projects/#{project.id}/builds/#{build.id}/trace", api_user) } context 'authorized user' do it 'should return specific build trace' do expect(response.status).to eq(200) expect(response.body).to eq(build.trace) end end context 'unauthorized user' do let(:api_user) { nil } it 'should not return specific build trace' do expect(response.status).to eq(401) end end end describe 'POST /projects/:id/builds/:build_id/cancel' do before { post api("/projects/#{project.id}/builds/#{build.id}/cancel", api_user) } context 'authorized user' do context 'user with :update_build persmission' do it 'should cancel running or pending build' do expect(response.status).to eq(201) expect(project.builds.first.status).to eq('canceled') end end context 'user without :update_build permission' do let(:api_user) { user2 } it 'should not cancel build' do expect(response.status).to eq(403) end end end context 'unauthorized user' do let(:api_user) { nil } it 'should not cancel build' do expect(response.status).to eq(401) end end end describe 'POST /projects/:id/builds/:build_id/retry' do let(:build) { create(:ci_build, :canceled, commit: commit) } before { post api("/projects/#{project.id}/builds/#{build.id}/retry", api_user) } context 'authorized user' do context 'user with :update_build permission' do it 'should retry non-running build' do expect(response.status).to eq(201) expect(project.builds.first.status).to eq('canceled') expect(json_response['status']).to eq('pending') end end context 'user without :update_build permission' do let(:api_user) { user2 } it 'should not retry build' do expect(response.status).to eq(403) end end end context 'unauthorized user' do let(:api_user) { nil } it 'should not retry build' do expect(response.status).to eq(401) end end end describe 'POST /projects/:id/builds/:build_id/erase' do before do post api("/projects/#{project.id}/builds/#{build.id}/erase", user) end context 'build is erasable' do let(:build) { create(:ci_build, :trace, :artifacts, :success, project: project, commit: commit) } it 'should erase build content' do expect(response.status).to eq 201 expect(build.trace).to be_empty expect(build.artifacts_file.exists?).to be_falsy expect(build.artifacts_metadata.exists?).to be_falsy end it 'should update build' do expect(build.reload.erased_at).to be_truthy expect(build.reload.erased_by).to eq user end end context 'build is not erasable' do let(:build) { create(:ci_build, :trace, project: project, commit: commit) } it 'should respond with forbidden' do expect(response.status).to eq 403 end end end end