123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206 |
- // Copyright 2019 The Gitea Authors. All rights reserved.
- // SPDX-License-Identifier: MIT
-
- package integration
-
- import (
- "fmt"
- "net/http"
- "net/url"
- "os"
- "path/filepath"
- "testing"
- "time"
-
- auth_model "code.gitea.io/gitea/models/auth"
- "code.gitea.io/gitea/modules/git"
- api "code.gitea.io/gitea/modules/structs"
-
- "github.com/stretchr/testify/assert"
- )
-
- func doCheckRepositoryEmptyStatus(ctx APITestContext, isEmpty bool) func(*testing.T) {
- return doAPIGetRepository(ctx, func(t *testing.T, repository api.Repository) {
- assert.Equal(t, isEmpty, repository.Empty)
- })
- }
-
- func doAddChangesToCheckout(dstPath, filename string) func(*testing.T) {
- return func(t *testing.T) {
- assert.NoError(t, os.WriteFile(filepath.Join(dstPath, filename), []byte(fmt.Sprintf("# Testing Repository\n\nOriginally created in: %s at time: %v", dstPath, time.Now())), 0o644))
- assert.NoError(t, git.AddChanges(dstPath, true))
- signature := git.Signature{
- Email: "test@example.com",
- Name: "test",
- When: time.Now(),
- }
- assert.NoError(t, git.CommitChanges(dstPath, git.CommitChangesOptions{
- Committer: &signature,
- Author: &signature,
- Message: "Initial Commit",
- }))
- }
- }
-
- func TestPushDeployKeyOnEmptyRepo(t *testing.T) {
- onGiteaRun(t, testPushDeployKeyOnEmptyRepo)
- }
-
- func testPushDeployKeyOnEmptyRepo(t *testing.T, u *url.URL) {
- // OK login
- ctx := NewAPITestContext(t, "user2", "deploy-key-empty-repo-1", auth_model.AccessTokenScopeWriteRepository, auth_model.AccessTokenScopeWriteUser)
- ctxWithDeleteRepo := NewAPITestContext(t, "user2", "deploy-key-empty-repo-1", auth_model.AccessTokenScopeWriteRepository, auth_model.AccessTokenScopeWriteUser)
-
- keyname := fmt.Sprintf("%s-push", ctx.Reponame)
- u.Path = ctx.GitPath()
-
- t.Run("CreateEmptyRepository", doAPICreateRepository(ctx, true))
-
- t.Run("CheckIsEmpty", doCheckRepositoryEmptyStatus(ctx, true))
-
- withKeyFile(t, keyname, func(keyFile string) {
- t.Run("CreatePushDeployKey", doAPICreateDeployKey(ctx, keyname, keyFile, false))
-
- // Setup the testing repository
- dstPath := t.TempDir()
-
- t.Run("InitTestRepository", doGitInitTestRepository(dstPath))
-
- // Setup remote link
- sshURL := createSSHUrl(ctx.GitPath(), u)
-
- t.Run("AddRemote", doGitAddRemote(dstPath, "origin", sshURL))
-
- t.Run("SSHPushTestRepository", doGitPushTestRepository(dstPath, "origin", "master"))
-
- t.Run("CheckIsNotEmpty", doCheckRepositoryEmptyStatus(ctx, false))
-
- t.Run("DeleteRepository", doAPIDeleteRepository(ctxWithDeleteRepo))
- })
- }
-
- func TestKeyOnlyOneType(t *testing.T) {
- onGiteaRun(t, testKeyOnlyOneType)
- }
-
- func testKeyOnlyOneType(t *testing.T, u *url.URL) {
- // Once a key is a user key we cannot use it as a deploy key
- // If we delete it from the user we should be able to use it as a deploy key
- reponame := "ssh-key-test-repo"
- username := "user2"
- u.Path = fmt.Sprintf("%s/%s.git", username, reponame)
- keyname := fmt.Sprintf("%s-push", reponame)
-
- // OK login
- ctx := NewAPITestContext(t, username, reponame, auth_model.AccessTokenScopeWriteRepository, auth_model.AccessTokenScopeWriteUser)
- ctxWithDeleteRepo := NewAPITestContext(t, username, reponame, auth_model.AccessTokenScopeWriteRepository, auth_model.AccessTokenScopeWriteUser)
-
- otherCtx := ctx
- otherCtx.Reponame = "ssh-key-test-repo-2"
- otherCtxWithDeleteRepo := ctxWithDeleteRepo
- otherCtxWithDeleteRepo.Reponame = otherCtx.Reponame
-
- failCtx := ctx
- failCtx.ExpectedCode = http.StatusUnprocessableEntity
-
- t.Run("CreateRepository", doAPICreateRepository(ctx, false))
- t.Run("CreateOtherRepository", doAPICreateRepository(otherCtx, false))
-
- withKeyFile(t, keyname, func(keyFile string) {
- var userKeyPublicKeyID int64
- t.Run("KeyCanOnlyBeUser", func(t *testing.T) {
- dstPath := t.TempDir()
-
- sshURL := createSSHUrl(ctx.GitPath(), u)
-
- t.Run("FailToClone", doGitCloneFail(sshURL))
-
- t.Run("CreateUserKey", doAPICreateUserKey(ctx, keyname, keyFile, func(t *testing.T, publicKey api.PublicKey) {
- userKeyPublicKeyID = publicKey.ID
- }))
-
- t.Run("FailToAddReadOnlyDeployKey", doAPICreateDeployKey(failCtx, keyname, keyFile, true))
-
- t.Run("FailToAddDeployKey", doAPICreateDeployKey(failCtx, keyname, keyFile, false))
-
- t.Run("Clone", doGitClone(dstPath, sshURL))
-
- t.Run("AddChanges", doAddChangesToCheckout(dstPath, "CHANGES1.md"))
-
- t.Run("Push", doGitPushTestRepository(dstPath, "origin", "master"))
-
- t.Run("DeleteUserKey", doAPIDeleteUserKey(ctx, userKeyPublicKeyID))
- })
-
- t.Run("KeyCanBeAnyDeployButNotUserAswell", func(t *testing.T) {
- dstPath := t.TempDir()
-
- sshURL := createSSHUrl(ctx.GitPath(), u)
-
- t.Run("FailToClone", doGitCloneFail(sshURL))
-
- // Should now be able to add...
- t.Run("AddReadOnlyDeployKey", doAPICreateDeployKey(ctx, keyname, keyFile, true))
-
- t.Run("Clone", doGitClone(dstPath, sshURL))
-
- t.Run("AddChanges", doAddChangesToCheckout(dstPath, "CHANGES2.md"))
-
- t.Run("FailToPush", doGitPushTestRepositoryFail(dstPath, "origin", "master"))
-
- otherSSHURL := createSSHUrl(otherCtx.GitPath(), u)
- dstOtherPath := t.TempDir()
-
- t.Run("AddWriterDeployKeyToOther", doAPICreateDeployKey(otherCtx, keyname, keyFile, false))
-
- t.Run("CloneOther", doGitClone(dstOtherPath, otherSSHURL))
-
- t.Run("AddChangesToOther", doAddChangesToCheckout(dstOtherPath, "CHANGES3.md"))
-
- t.Run("PushToOther", doGitPushTestRepository(dstOtherPath, "origin", "master"))
-
- t.Run("FailToCreateUserKey", doAPICreateUserKey(failCtx, keyname, keyFile))
- })
-
- t.Run("DeleteRepositoryShouldReleaseKey", func(t *testing.T) {
- otherSSHURL := createSSHUrl(otherCtx.GitPath(), u)
- dstOtherPath := t.TempDir()
-
- t.Run("DeleteRepository", doAPIDeleteRepository(ctxWithDeleteRepo))
-
- t.Run("FailToCreateUserKeyAsStillDeploy", doAPICreateUserKey(failCtx, keyname, keyFile))
-
- t.Run("MakeSureCloneOtherStillWorks", doGitClone(dstOtherPath, otherSSHURL))
-
- t.Run("AddChangesToOther", doAddChangesToCheckout(dstOtherPath, "CHANGES3.md"))
-
- t.Run("PushToOther", doGitPushTestRepository(dstOtherPath, "origin", "master"))
-
- t.Run("DeleteOtherRepository", doAPIDeleteRepository(otherCtxWithDeleteRepo))
-
- t.Run("RecreateRepository", doAPICreateRepository(ctxWithDeleteRepo, false))
-
- t.Run("CreateUserKey", doAPICreateUserKey(ctx, keyname, keyFile, func(t *testing.T, publicKey api.PublicKey) {
- userKeyPublicKeyID = publicKey.ID
- }))
-
- dstPath := t.TempDir()
-
- sshURL := createSSHUrl(ctx.GitPath(), u)
-
- t.Run("Clone", doGitClone(dstPath, sshURL))
-
- t.Run("AddChanges", doAddChangesToCheckout(dstPath, "CHANGES1.md"))
-
- t.Run("Push", doGitPushTestRepository(dstPath, "origin", "master"))
- })
-
- t.Run("DeleteUserKeyShouldRemoveAbilityToClone", func(t *testing.T) {
- sshURL := createSSHUrl(ctx.GitPath(), u)
-
- t.Run("DeleteUserKey", doAPIDeleteUserKey(ctx, userKeyPublicKeyID))
-
- t.Run("FailToClone", doGitCloneFail(sshURL))
- })
- })
- }
|