937 lines
32 KiB
Ruby
937 lines
32 KiB
Ruby
# frozen_string_literal: true
|
||
|
||
require 'spec_helper'
|
||
|
||
RSpec.describe API::Releases do
|
||
let(:project) { create(:project, :repository, :private) }
|
||
let(:maintainer) { create(:user) }
|
||
let(:reporter) { create(:user) }
|
||
let(:developer) { create(:user) }
|
||
let(:guest) { create(:user) }
|
||
let(:non_project_member) { create(:user) }
|
||
let(:commit) { create(:commit, project: project) }
|
||
|
||
before do
|
||
project.add_maintainer(maintainer)
|
||
project.add_reporter(reporter)
|
||
project.add_guest(guest)
|
||
project.add_developer(developer)
|
||
|
||
project.repository.add_tag(maintainer, 'v0.1', commit.id)
|
||
project.repository.add_tag(maintainer, 'v0.2', commit.id)
|
||
end
|
||
|
||
describe 'GET /projects/:id/releases' do
|
||
context 'when there are two releases' do
|
||
let!(:release_1) do
|
||
create(:release,
|
||
project: project,
|
||
tag: 'v0.1',
|
||
author: maintainer,
|
||
released_at: 2.days.ago)
|
||
end
|
||
|
||
let!(:release_2) do
|
||
create(:release,
|
||
project: project,
|
||
tag: 'v0.2',
|
||
author: maintainer,
|
||
released_at: 1.day.ago)
|
||
end
|
||
|
||
it 'returns 200 HTTP status' do
|
||
get api("/projects/#{project.id}/releases", maintainer)
|
||
|
||
expect(response).to have_gitlab_http_status(:ok)
|
||
end
|
||
|
||
it 'returns releases ordered by released_at' do
|
||
get api("/projects/#{project.id}/releases", maintainer)
|
||
|
||
expect(json_response.count).to eq(2)
|
||
expect(json_response.first['tag_name']).to eq(release_2.tag)
|
||
expect(json_response.second['tag_name']).to eq(release_1.tag)
|
||
end
|
||
|
||
it 'matches response schema' do
|
||
get api("/projects/#{project.id}/releases", maintainer)
|
||
|
||
expect(response).to match_response_schema('public_api/v4/releases')
|
||
end
|
||
|
||
it 'returns rendered helper paths' do
|
||
get api("/projects/#{project.id}/releases", maintainer)
|
||
|
||
expect(json_response.first['commit_path']).to eq("/#{release_2.project.full_path}/-/commit/#{release_2.commit.id}")
|
||
expect(json_response.first['tag_path']).to eq("/#{release_2.project.full_path}/-/tags/#{release_2.tag}")
|
||
expect(json_response.second['commit_path']).to eq("/#{release_1.project.full_path}/-/commit/#{release_1.commit.id}")
|
||
expect(json_response.second['tag_path']).to eq("/#{release_1.project.full_path}/-/tags/#{release_1.tag}")
|
||
end
|
||
|
||
it 'returns the merge requests and issues links, with correct query' do
|
||
get api("/projects/#{project.id}/releases", maintainer)
|
||
|
||
links = json_response.first['_links']
|
||
release = json_response.first['tag_name']
|
||
expected_query = "release_tag=#{release}&scope=all&state=opened"
|
||
path_base = "/#{project.namespace.path}/#{project.path}"
|
||
mr_uri = URI.parse(links['merge_requests_url'])
|
||
issue_uri = URI.parse(links['issues_url'])
|
||
|
||
expect(mr_uri.path).to eq("#{path_base}/-/merge_requests")
|
||
expect(issue_uri.path).to eq("#{path_base}/-/issues")
|
||
expect(mr_uri.query).to eq(expected_query)
|
||
expect(issue_uri.query).to eq(expected_query)
|
||
end
|
||
end
|
||
|
||
it 'returns an upcoming_release status for a future release' do
|
||
tomorrow = Time.now.utc + 1.day
|
||
create(:release, project: project, tag: 'v0.1', author: maintainer, released_at: tomorrow)
|
||
|
||
get api("/projects/#{project.id}/releases", maintainer)
|
||
|
||
expect(response).to have_gitlab_http_status(:ok)
|
||
expect(json_response.first['upcoming_release']).to eq(true)
|
||
end
|
||
|
||
it 'returns an upcoming_release status for a past release' do
|
||
yesterday = Time.now.utc - 1.day
|
||
create(:release, project: project, tag: 'v0.1', author: maintainer, released_at: yesterday)
|
||
|
||
get api("/projects/#{project.id}/releases", maintainer)
|
||
|
||
expect(response).to have_gitlab_http_status(:ok)
|
||
expect(json_response.first['upcoming_release']).to eq(false)
|
||
end
|
||
|
||
it 'avoids N+1 queries' do
|
||
create(:release, :with_evidence, project: project, tag: 'v0.1', author: maintainer)
|
||
|
||
control_count = ActiveRecord::QueryRecorder.new do
|
||
get api("/projects/#{project.id}/releases", maintainer)
|
||
end.count
|
||
|
||
create(:release, :with_evidence, project: project, tag: 'v0.1', author: maintainer)
|
||
create(:release, :with_evidence, project: project, tag: 'v0.1', author: maintainer)
|
||
|
||
expect do
|
||
get api("/projects/#{project.id}/releases", maintainer)
|
||
end.not_to exceed_query_limit(control_count)
|
||
end
|
||
|
||
context 'when tag does not exist in git repository' do
|
||
let!(:release) { create(:release, project: project, tag: 'v1.1.5') }
|
||
|
||
it 'returns the tag' do
|
||
get api("/projects/#{project.id}/releases", maintainer)
|
||
|
||
expect(json_response.count).to eq(1)
|
||
expect(json_response.first['tag_name']).to eq('v1.1.5')
|
||
expect(release).to be_tag_missing
|
||
end
|
||
end
|
||
|
||
context 'when tag contains a slash' do
|
||
let!(:release) { create(:release, project: project, tag: 'debian/2.4.0-1', description: "debian/2.4.0-1") }
|
||
|
||
it 'returns 200 HTTP status' do
|
||
get api("/projects/#{project.id}/releases", maintainer)
|
||
|
||
expect(response).to have_gitlab_http_status(:ok)
|
||
end
|
||
end
|
||
|
||
context 'when user is a guest' do
|
||
let!(:release) do
|
||
create(:release,
|
||
project: project,
|
||
tag: 'v0.1',
|
||
author: maintainer,
|
||
created_at: 2.days.ago)
|
||
end
|
||
|
||
it 'responds 200 OK' do
|
||
get api("/projects/#{project.id}/releases", guest)
|
||
|
||
expect(response).to have_gitlab_http_status(:ok)
|
||
end
|
||
|
||
it "does not expose tag, commit, source code or helper paths" do
|
||
get api("/projects/#{project.id}/releases", guest)
|
||
|
||
expect(response).to match_response_schema('public_api/v4/release/releases_for_guest')
|
||
expect(json_response[0]['assets']['count']).to eq(release.links.count)
|
||
expect(json_response[0]['commit_path']).to be_nil
|
||
expect(json_response[0]['tag_path']).to be_nil
|
||
end
|
||
|
||
context 'when project is public' do
|
||
let(:project) { create(:project, :repository, :public) }
|
||
|
||
it 'responds 200 OK' do
|
||
get api("/projects/#{project.id}/releases", guest)
|
||
|
||
expect(response).to have_gitlab_http_status(:ok)
|
||
end
|
||
|
||
it "exposes tag, commit, source code and helper paths" do
|
||
get api("/projects/#{project.id}/releases", guest)
|
||
|
||
expect(response).to match_response_schema('public_api/v4/releases')
|
||
expect(json_response.first['assets']['count']).to eq(release.links.count + release.sources.count)
|
||
expect(json_response.first['commit_path']).to eq("/#{release.project.full_path}/-/commit/#{release.commit.id}")
|
||
expect(json_response.first['tag_path']).to eq("/#{release.project.full_path}/-/tags/#{release.tag}")
|
||
end
|
||
end
|
||
end
|
||
|
||
context 'when user is not a project member' do
|
||
it 'cannot find the project' do
|
||
get api("/projects/#{project.id}/releases", non_project_member)
|
||
|
||
expect(response).to have_gitlab_http_status(:not_found)
|
||
end
|
||
|
||
context 'when project is public' do
|
||
let(:project) { create(:project, :repository, :public) }
|
||
|
||
it 'allows the request' do
|
||
get api("/projects/#{project.id}/releases", non_project_member)
|
||
|
||
expect(response).to have_gitlab_http_status(:ok)
|
||
end
|
||
end
|
||
end
|
||
end
|
||
|
||
describe 'GET /projects/:id/releases/:tag_name' do
|
||
context 'when there is a release' do
|
||
let!(:release) do
|
||
create(:release,
|
||
project: project,
|
||
tag: 'v0.1',
|
||
sha: commit.id,
|
||
author: maintainer,
|
||
description: 'This is v0.1')
|
||
end
|
||
|
||
it 'returns 200 HTTP status' do
|
||
get api("/projects/#{project.id}/releases/v0.1", maintainer)
|
||
|
||
expect(response).to have_gitlab_http_status(:ok)
|
||
end
|
||
|
||
it 'returns a release entry' do
|
||
get api("/projects/#{project.id}/releases/v0.1", maintainer)
|
||
|
||
expect(json_response['tag_name']).to eq(release.tag)
|
||
expect(json_response['description']).to eq('This is v0.1')
|
||
expect(json_response['author']['name']).to eq(maintainer.name)
|
||
expect(json_response['commit']['id']).to eq(commit.id)
|
||
expect(json_response['assets']['count']).to eq(4)
|
||
expect(json_response['commit_path']).to eq("/#{release.project.full_path}/-/commit/#{release.commit.id}")
|
||
expect(json_response['tag_path']).to eq("/#{release.project.full_path}/-/tags/#{release.tag}")
|
||
end
|
||
|
||
it 'matches response schema' do
|
||
get api("/projects/#{project.id}/releases/v0.1", maintainer)
|
||
|
||
expect(response).to match_response_schema('public_api/v4/release')
|
||
end
|
||
|
||
it 'contains source information as assets' do
|
||
get api("/projects/#{project.id}/releases/v0.1", maintainer)
|
||
|
||
expect(json_response['assets']['sources'].map { |h| h['format'] })
|
||
.to match_array(release.sources.map(&:format))
|
||
expect(json_response['assets']['sources'].map { |h| h['url'] })
|
||
.to match_array(release.sources.map(&:url))
|
||
end
|
||
|
||
context 'with evidence' do
|
||
let!(:evidence) { create(:evidence, release: release) }
|
||
|
||
it 'returns the evidence' do
|
||
get api("/projects/#{project.id}/releases/v0.1", maintainer)
|
||
|
||
expect(json_response['evidences'].count).to eq(1)
|
||
end
|
||
|
||
it '#collected_at' do
|
||
Timecop.freeze(Time.now.round) do
|
||
get api("/projects/#{project.id}/releases/v0.1", maintainer)
|
||
|
||
expect(json_response['evidences'].first['collected_at'].to_datetime.to_i).to be_within(1.minute).of(release.evidences.first.created_at.to_i)
|
||
end
|
||
end
|
||
end
|
||
|
||
context 'when release has link asset' do
|
||
let!(:link) do
|
||
create(:release_link,
|
||
release: release,
|
||
name: 'release-18.04.dmg',
|
||
url: url)
|
||
end
|
||
|
||
let(:url) { 'https://my-external-hosting.example.com/scrambled-url/app.zip' }
|
||
|
||
it 'contains link information as assets' do
|
||
get api("/projects/#{project.id}/releases/v0.1", maintainer)
|
||
|
||
expect(json_response['assets']['links'].count).to eq(1)
|
||
expect(json_response['assets']['links'].first['id']).to eq(link.id)
|
||
expect(json_response['assets']['links'].first['name'])
|
||
.to eq('release-18.04.dmg')
|
||
expect(json_response['assets']['links'].first['url'])
|
||
.to eq('https://my-external-hosting.example.com/scrambled-url/app.zip')
|
||
expect(json_response['assets']['links'].first['external'])
|
||
.to be_truthy
|
||
end
|
||
|
||
context 'when link is internal' do
|
||
let(:url) do
|
||
"#{project.web_url}/-/jobs/artifacts/v11.6.0-rc4/download?" \
|
||
"job=rspec-mysql+41%2F50"
|
||
end
|
||
|
||
it 'has external false' do
|
||
get api("/projects/#{project.id}/releases/v0.1", maintainer)
|
||
|
||
expect(json_response['assets']['links'].first['external'])
|
||
.to be_falsy
|
||
end
|
||
end
|
||
end
|
||
|
||
context 'when user is a guest' do
|
||
it 'responds 403 Forbidden' do
|
||
get api("/projects/#{project.id}/releases/v0.1", guest)
|
||
|
||
expect(response).to have_gitlab_http_status(:forbidden)
|
||
end
|
||
|
||
context 'when project is public' do
|
||
let(:project) { create(:project, :repository, :public) }
|
||
|
||
it 'responds 200 OK' do
|
||
get api("/projects/#{project.id}/releases/v0.1", guest)
|
||
|
||
expect(response).to have_gitlab_http_status(:ok)
|
||
end
|
||
|
||
it "exposes tag and commit" do
|
||
create(:release,
|
||
project: project,
|
||
tag: 'v0.1',
|
||
author: maintainer,
|
||
created_at: 2.days.ago)
|
||
get api("/projects/#{project.id}/releases/v0.1", guest)
|
||
|
||
expect(response).to match_response_schema('public_api/v4/release')
|
||
end
|
||
end
|
||
end
|
||
end
|
||
|
||
context 'when specified tag is not found in the project' do
|
||
it 'cannot find the release entry' do
|
||
get api("/projects/#{project.id}/releases/non_exist_tag", maintainer)
|
||
|
||
expect(response).to have_gitlab_http_status(:forbidden)
|
||
end
|
||
end
|
||
|
||
context 'when user is not a project member' do
|
||
let!(:release) { create(:release, tag: 'v0.1', project: project) }
|
||
|
||
it 'cannot find the project' do
|
||
get api("/projects/#{project.id}/releases/v0.1", non_project_member)
|
||
|
||
expect(response).to have_gitlab_http_status(:not_found)
|
||
end
|
||
|
||
context 'when project is public' do
|
||
let(:project) { create(:project, :repository, :public) }
|
||
|
||
it 'allows the request' do
|
||
get api("/projects/#{project.id}/releases/v0.1", non_project_member)
|
||
|
||
expect(response).to have_gitlab_http_status(:ok)
|
||
end
|
||
|
||
context 'when release is associated to a milestone' do
|
||
let!(:release) do
|
||
create(:release, tag: 'v0.1', project: project, milestones: [milestone])
|
||
end
|
||
|
||
let(:milestone) { create(:milestone, project: project) }
|
||
|
||
it 'matches schema' do
|
||
get api("/projects/#{project.id}/releases/v0.1", non_project_member)
|
||
|
||
expect(response).to match_response_schema('public_api/v4/release')
|
||
end
|
||
|
||
it 'exposes milestones' do
|
||
get api("/projects/#{project.id}/releases/v0.1", non_project_member)
|
||
|
||
expect(json_response['milestones'].first['title']).to eq(milestone.title)
|
||
end
|
||
|
||
it 'returns issue stats for milestone' do
|
||
create_list(:issue, 2, milestone: milestone, project: project)
|
||
create_list(:issue, 3, :closed, milestone: milestone, project: project)
|
||
|
||
get api("/projects/#{project.id}/releases/v0.1", non_project_member)
|
||
|
||
issue_stats = json_response['milestones'].first["issue_stats"]
|
||
expect(issue_stats["total"]).to eq(5)
|
||
expect(issue_stats["closed"]).to eq(3)
|
||
end
|
||
|
||
context 'when project restricts visibility of issues and merge requests' do
|
||
let!(:project) { create(:project, :repository, :public, :issues_private, :merge_requests_private) }
|
||
|
||
it 'does not expose milestones' do
|
||
get api("/projects/#{project.id}/releases/v0.1", non_project_member)
|
||
|
||
expect(json_response['milestones']).to be_nil
|
||
end
|
||
end
|
||
|
||
context 'when project restricts visibility of issues' do
|
||
let!(:project) { create(:project, :repository, :public, :issues_private) }
|
||
|
||
it 'exposes milestones' do
|
||
get api("/projects/#{project.id}/releases/v0.1", non_project_member)
|
||
|
||
expect(json_response['milestones'].first['title']).to eq(milestone.title)
|
||
end
|
||
end
|
||
end
|
||
end
|
||
end
|
||
end
|
||
|
||
describe 'POST /projects/:id/releases' do
|
||
let(:params) do
|
||
{
|
||
name: 'New release',
|
||
tag_name: 'v0.1',
|
||
description: 'Super nice release',
|
||
assets: {
|
||
links: [
|
||
{
|
||
name: 'An example runbook link',
|
||
url: 'https://example.com/runbook',
|
||
link_type: 'runbook',
|
||
filepath: '/permanent/path/to/runbook'
|
||
}
|
||
]
|
||
}
|
||
}
|
||
end
|
||
|
||
it 'accepts the request' do
|
||
post api("/projects/#{project.id}/releases", maintainer), params: params
|
||
|
||
expect(response).to have_gitlab_http_status(:created)
|
||
end
|
||
|
||
it 'creates a new release' do
|
||
expect do
|
||
post api("/projects/#{project.id}/releases", maintainer), params: params
|
||
end.to change { Release.count }.by(1)
|
||
|
||
release = project.releases.last
|
||
|
||
aggregate_failures do
|
||
expect(release.name).to eq('New release')
|
||
expect(release.tag).to eq('v0.1')
|
||
expect(release.description).to eq('Super nice release')
|
||
expect(release.links.last.name).to eq('An example runbook link')
|
||
expect(release.links.last.url).to eq('https://example.com/runbook')
|
||
expect(release.links.last.link_type).to eq('runbook')
|
||
expect(release.links.last.filepath).to eq('/permanent/path/to/runbook')
|
||
end
|
||
end
|
||
|
||
it 'creates a new release without description' do
|
||
params = {
|
||
name: 'New release without description',
|
||
tag_name: 'v0.1',
|
||
released_at: '2019-03-25 10:00:00'
|
||
}
|
||
|
||
expect do
|
||
post api("/projects/#{project.id}/releases", maintainer), params: params
|
||
end.to change { Release.count }.by(1)
|
||
|
||
expect(project.releases.last.name).to eq('New release without description')
|
||
expect(project.releases.last.tag).to eq('v0.1')
|
||
expect(project.releases.last.description).to eq(nil)
|
||
end
|
||
|
||
it 'sets the released_at to the current time if the released_at parameter is not provided' do
|
||
now = Time.zone.parse('2015-08-25 06:00:00Z')
|
||
Timecop.freeze(now) do
|
||
post api("/projects/#{project.id}/releases", maintainer), params: params
|
||
|
||
expect(project.releases.last.released_at).to eq(now)
|
||
end
|
||
end
|
||
|
||
it 'sets the released_at to the value in the parameters if specified' do
|
||
params = {
|
||
name: 'New release',
|
||
tag_name: 'v0.1',
|
||
description: 'Super nice release',
|
||
released_at: '2019-03-20T10:00:00Z'
|
||
}
|
||
post api("/projects/#{project.id}/releases", maintainer), params: params
|
||
|
||
expect(project.releases.last.released_at).to eq('2019-03-20T10:00:00Z')
|
||
end
|
||
|
||
it 'assumes the utc timezone for released_at if the timezone is not provided' do
|
||
params = {
|
||
name: 'New release',
|
||
tag_name: 'v0.1',
|
||
description: 'Super nice release',
|
||
released_at: '2019-03-25 10:00:00'
|
||
}
|
||
post api("/projects/#{project.id}/releases", maintainer), params: params
|
||
|
||
expect(project.releases.last.released_at).to eq('2019-03-25T10:00:00Z')
|
||
end
|
||
|
||
it 'allows specifying a released_at with a local time zone' do
|
||
params = {
|
||
name: 'New release',
|
||
tag_name: 'v0.1',
|
||
description: 'Super nice release',
|
||
released_at: '2019-03-25T10:00:00+09:00'
|
||
}
|
||
post api("/projects/#{project.id}/releases", maintainer), params: params
|
||
|
||
expect(project.releases.last.released_at).to eq('2019-03-25T01:00:00Z')
|
||
end
|
||
|
||
it 'matches response schema' do
|
||
post api("/projects/#{project.id}/releases", maintainer), params: params
|
||
|
||
expect(response).to match_response_schema('public_api/v4/release')
|
||
end
|
||
|
||
it 'does not create a new tag' do
|
||
expect do
|
||
post api("/projects/#{project.id}/releases", maintainer), params: params
|
||
end.not_to change { Project.find_by_id(project.id).repository.tag_count }
|
||
end
|
||
|
||
context 'when user is a reporter' do
|
||
it 'forbids the request' do
|
||
post api("/projects/#{project.id}/releases", reporter), params: params
|
||
|
||
expect(response).to have_gitlab_http_status(:forbidden)
|
||
end
|
||
end
|
||
|
||
context 'when user is not a project member' do
|
||
it 'forbids the request' do
|
||
post api("/projects/#{project.id}/releases", non_project_member),
|
||
params: params
|
||
|
||
expect(response).to have_gitlab_http_status(:not_found)
|
||
end
|
||
|
||
context 'when project is public' do
|
||
let(:project) { create(:project, :repository, :public) }
|
||
|
||
it 'forbids the request' do
|
||
post api("/projects/#{project.id}/releases", non_project_member),
|
||
params: params
|
||
|
||
expect(response).to have_gitlab_http_status(:forbidden)
|
||
end
|
||
end
|
||
|
||
context 'when create assets altogether' do
|
||
let(:base_params) do
|
||
{
|
||
name: 'New release',
|
||
tag_name: 'v0.1',
|
||
description: 'Super nice release'
|
||
}
|
||
end
|
||
|
||
context 'when create one asset' do
|
||
let(:params) do
|
||
base_params.merge({
|
||
assets: {
|
||
links: [{ name: 'beta', url: 'https://dosuken.example.com/inspection.exe' }]
|
||
}
|
||
})
|
||
end
|
||
|
||
it 'accepts the request' do
|
||
post api("/projects/#{project.id}/releases", maintainer), params: params
|
||
|
||
expect(response).to have_gitlab_http_status(:created)
|
||
end
|
||
|
||
it 'creates an asset with specified parameters' do
|
||
post api("/projects/#{project.id}/releases", maintainer), params: params
|
||
|
||
expect(json_response['assets']['links'].count).to eq(1)
|
||
expect(json_response['assets']['links'].first['name']).to eq('beta')
|
||
expect(json_response['assets']['links'].first['url'])
|
||
.to eq('https://dosuken.example.com/inspection.exe')
|
||
end
|
||
|
||
it 'matches response schema' do
|
||
post api("/projects/#{project.id}/releases", maintainer), params: params
|
||
|
||
expect(response).to match_response_schema('public_api/v4/release')
|
||
end
|
||
end
|
||
|
||
context 'when create two assets' do
|
||
let(:params) do
|
||
base_params.merge({
|
||
assets: {
|
||
links: [
|
||
{ name: 'alpha', url: 'https://dosuken.example.com/alpha.exe' },
|
||
{ name: 'beta', url: 'https://dosuken.example.com/beta.exe' }
|
||
]
|
||
}
|
||
})
|
||
end
|
||
|
||
it 'creates two assets with specified parameters' do
|
||
post api("/projects/#{project.id}/releases", maintainer), params: params
|
||
|
||
expect(json_response['assets']['links'].count).to eq(2)
|
||
expect(json_response['assets']['links'].map { |h| h['name'] })
|
||
.to match_array(%w[alpha beta])
|
||
expect(json_response['assets']['links'].map { |h| h['url'] })
|
||
.to match_array(%w[https://dosuken.example.com/alpha.exe
|
||
https://dosuken.example.com/beta.exe])
|
||
end
|
||
|
||
context 'when link names are duplicates' do
|
||
let(:params) do
|
||
base_params.merge({
|
||
assets: {
|
||
links: [
|
||
{ name: 'alpha', url: 'https://dosuken.example.com/alpha.exe' },
|
||
{ name: 'alpha', url: 'https://dosuken.example.com/beta.exe' }
|
||
]
|
||
}
|
||
})
|
||
end
|
||
|
||
it 'recognizes as a bad request' do
|
||
post api("/projects/#{project.id}/releases", maintainer), params: params
|
||
|
||
expect(response).to have_gitlab_http_status(:bad_request)
|
||
end
|
||
end
|
||
end
|
||
end
|
||
end
|
||
|
||
context 'when using JOB-TOKEN auth' do
|
||
let(:job) { create(:ci_build, user: maintainer) }
|
||
let(:params) do
|
||
{
|
||
name: 'Another release',
|
||
tag_name: 'v0.2',
|
||
description: 'Another nice release',
|
||
released_at: '2019-04-25T10:00:00+09:00'
|
||
}
|
||
end
|
||
|
||
context 'when no token is provided' do
|
||
it 'returns a :not_found error' do
|
||
post api("/projects/#{project.id}/releases"), params: params
|
||
|
||
expect(response).to have_gitlab_http_status(:not_found)
|
||
end
|
||
end
|
||
|
||
context 'when an invalid token is provided' do
|
||
it 'returns an :unauthorized error' do
|
||
post api("/projects/#{project.id}/releases"), params: params.merge(job_token: 'yadayadayada')
|
||
|
||
expect(response).to have_gitlab_http_status(:unauthorized)
|
||
end
|
||
end
|
||
|
||
context 'when a valid token is provided' do
|
||
it 'creates the release for a running job' do
|
||
job.update!(status: :running)
|
||
post api("/projects/#{project.id}/releases"), params: params.merge(job_token: job.token)
|
||
|
||
expect(response).to have_gitlab_http_status(:created)
|
||
expect(project.releases.last.description).to eq('Another nice release')
|
||
end
|
||
|
||
it 'returns an :unauthorized error for a completed job' do
|
||
job.success!
|
||
post api("/projects/#{project.id}/releases"), params: params.merge(job_token: job.token)
|
||
|
||
expect(response).to have_gitlab_http_status(:unauthorized)
|
||
end
|
||
end
|
||
end
|
||
|
||
context 'when tag does not exist in git repository' do
|
||
let(:params) do
|
||
{
|
||
name: 'Android ~ Ice Cream Sandwich ~',
|
||
tag_name: tag_name,
|
||
description: 'Android 4.0–4.0.4 "Ice Cream Sandwich" is the ninth' \
|
||
'version of the Android mobile operating system developed' \
|
||
'by Google.',
|
||
ref: 'master'
|
||
}
|
||
end
|
||
|
||
let(:tag_name) { 'v4.0' }
|
||
|
||
it 'creates a new tag' do
|
||
expect do
|
||
post api("/projects/#{project.id}/releases", maintainer), params: params
|
||
end.to change { Project.find_by_id(project.id).repository.tag_count }.by(1)
|
||
|
||
expect(project.repository.find_tag('v4.0').dereferenced_target.id)
|
||
.to eq(project.repository.commit('master').id)
|
||
end
|
||
|
||
it 'creates a new release' do
|
||
expect do
|
||
post api("/projects/#{project.id}/releases", maintainer), params: params
|
||
end.to change { Release.count }.by(1)
|
||
|
||
expect(project.releases.last.name).to eq('Android ~ Ice Cream Sandwich ~')
|
||
expect(project.releases.last.tag).to eq('v4.0')
|
||
expect(project.releases.last.description).to eq(
|
||
'Android 4.0–4.0.4 "Ice Cream Sandwich" is the ninth' \
|
||
'version of the Android mobile operating system developed' \
|
||
'by Google.')
|
||
end
|
||
|
||
context 'when tag name is HEAD' do
|
||
let(:tag_name) { 'HEAD' }
|
||
|
||
it 'returns a 400 error as failure on tag creation' do
|
||
post api("/projects/#{project.id}/releases", maintainer), params: params
|
||
|
||
expect(response).to have_gitlab_http_status(:bad_request)
|
||
expect(json_response['message']).to eq('Tag name invalid')
|
||
end
|
||
end
|
||
|
||
context 'when tag name is empty' do
|
||
let(:tag_name) { '' }
|
||
|
||
it 'returns a 400 error as failure on tag creation' do
|
||
post api("/projects/#{project.id}/releases", maintainer), params: params
|
||
|
||
expect(response).to have_gitlab_http_status(:bad_request)
|
||
expect(json_response['message']).to eq('Tag name invalid')
|
||
end
|
||
end
|
||
end
|
||
|
||
context 'when release already exists' do
|
||
before do
|
||
create(:release, project: project, tag: 'v0.1', name: 'New release')
|
||
end
|
||
|
||
it 'returns an error as conflicted request' do
|
||
post api("/projects/#{project.id}/releases", maintainer), params: params
|
||
|
||
expect(response).to have_gitlab_http_status(:conflict)
|
||
end
|
||
end
|
||
end
|
||
|
||
describe 'PUT /projects/:id/releases/:tag_name' do
|
||
let(:params) { { description: 'Best release ever!' } }
|
||
|
||
let!(:release) do
|
||
create(:release,
|
||
project: project,
|
||
tag: 'v0.1',
|
||
name: 'New release',
|
||
released_at: '2018-03-01T22:00:00Z',
|
||
description: 'Super nice release')
|
||
end
|
||
|
||
it 'accepts the request' do
|
||
put api("/projects/#{project.id}/releases/v0.1", maintainer), params: params
|
||
|
||
expect(response).to have_gitlab_http_status(:ok)
|
||
end
|
||
|
||
it 'updates the description' do
|
||
put api("/projects/#{project.id}/releases/v0.1", maintainer), params: params
|
||
|
||
expect(project.releases.last.description).to eq('Best release ever!')
|
||
end
|
||
|
||
it 'does not change other attributes' do
|
||
put api("/projects/#{project.id}/releases/v0.1", maintainer), params: params
|
||
|
||
expect(project.releases.last.tag).to eq('v0.1')
|
||
expect(project.releases.last.name).to eq('New release')
|
||
expect(project.releases.last.released_at).to eq('2018-03-01T22:00:00Z')
|
||
end
|
||
|
||
it 'matches response schema' do
|
||
put api("/projects/#{project.id}/releases/v0.1", maintainer), params: params
|
||
|
||
expect(response).to match_response_schema('public_api/v4/release')
|
||
end
|
||
|
||
it 'updates released_at' do
|
||
params = { released_at: '2015-10-10T05:00:00Z' }
|
||
|
||
put api("/projects/#{project.id}/releases/v0.1", maintainer), params: params
|
||
|
||
expect(project.releases.last.released_at).to eq('2015-10-10T05:00:00Z')
|
||
end
|
||
|
||
context 'when user tries to update sha' do
|
||
let(:params) { { sha: 'xxx' } }
|
||
|
||
it 'does not allow the request' do
|
||
put api("/projects/#{project.id}/releases/v0.1", maintainer), params: params
|
||
|
||
expect(response).to have_gitlab_http_status(:bad_request)
|
||
end
|
||
end
|
||
|
||
context 'when params is empty' do
|
||
let(:params) { {} }
|
||
|
||
it 'does not allow the request' do
|
||
put api("/projects/#{project.id}/releases/v0.1", maintainer), params: params
|
||
|
||
expect(response).to have_gitlab_http_status(:bad_request)
|
||
end
|
||
end
|
||
|
||
context 'when there are no corresponding releases' do
|
||
let!(:release) { }
|
||
|
||
it 'forbids the request' do
|
||
put api("/projects/#{project.id}/releases/v0.1", maintainer), params: params
|
||
|
||
expect(response).to have_gitlab_http_status(:forbidden)
|
||
end
|
||
end
|
||
|
||
context 'when user is a reporter' do
|
||
it 'forbids the request' do
|
||
put api("/projects/#{project.id}/releases/v0.1", reporter), params: params
|
||
|
||
expect(response).to have_gitlab_http_status(:forbidden)
|
||
end
|
||
end
|
||
|
||
context 'when user is not a project member' do
|
||
it 'forbids the request' do
|
||
put api("/projects/#{project.id}/releases/v0.1", non_project_member),
|
||
params: params
|
||
|
||
expect(response).to have_gitlab_http_status(:not_found)
|
||
end
|
||
|
||
context 'when project is public' do
|
||
let(:project) { create(:project, :repository, :public) }
|
||
|
||
it 'forbids the request' do
|
||
put api("/projects/#{project.id}/releases/v0.1", non_project_member),
|
||
params: params
|
||
|
||
expect(response).to have_gitlab_http_status(:forbidden)
|
||
end
|
||
end
|
||
end
|
||
end
|
||
|
||
describe 'DELETE /projects/:id/releases/:tag_name' do
|
||
let!(:release) do
|
||
create(:release,
|
||
project: project,
|
||
tag: 'v0.1',
|
||
name: 'New release',
|
||
description: 'Super nice release')
|
||
end
|
||
|
||
it 'accepts the request' do
|
||
delete api("/projects/#{project.id}/releases/v0.1", maintainer)
|
||
|
||
expect(response).to have_gitlab_http_status(:ok)
|
||
end
|
||
|
||
it 'destroys the release' do
|
||
expect do
|
||
delete api("/projects/#{project.id}/releases/v0.1", maintainer)
|
||
end.to change { Release.count }.by(-1)
|
||
end
|
||
|
||
it 'does not remove a tag in repository' do
|
||
expect do
|
||
delete api("/projects/#{project.id}/releases/v0.1", maintainer)
|
||
end.not_to change { Project.find_by_id(project.id).repository.tag_count }
|
||
end
|
||
|
||
it 'matches response schema' do
|
||
delete api("/projects/#{project.id}/releases/v0.1", maintainer)
|
||
|
||
expect(response).to match_response_schema('public_api/v4/release')
|
||
end
|
||
|
||
context 'when there are no corresponding releases' do
|
||
let!(:release) { }
|
||
|
||
it 'forbids the request' do
|
||
delete api("/projects/#{project.id}/releases/v0.1", maintainer)
|
||
|
||
expect(response).to have_gitlab_http_status(:forbidden)
|
||
end
|
||
end
|
||
|
||
context 'when user is a reporter' do
|
||
it 'forbids the request' do
|
||
delete api("/projects/#{project.id}/releases/v0.1", reporter)
|
||
|
||
expect(response).to have_gitlab_http_status(:forbidden)
|
||
end
|
||
end
|
||
|
||
context 'when user is not a project member' do
|
||
it 'forbids the request' do
|
||
delete api("/projects/#{project.id}/releases/v0.1", non_project_member)
|
||
|
||
expect(response).to have_gitlab_http_status(:not_found)
|
||
end
|
||
|
||
context 'when project is public' do
|
||
let(:project) { create(:project, :repository, :public) }
|
||
|
||
it 'forbids the request' do
|
||
delete api("/projects/#{project.id}/releases/v0.1", non_project_member)
|
||
|
||
expect(response).to have_gitlab_http_status(:forbidden)
|
||
end
|
||
end
|
||
end
|
||
end
|
||
end
|