123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198 |
- // Copyright 2017 The Gogs Authors. All rights reserved.
- // Use of this source code is governed by a MIT-style
- // license that can be found in the LICENSE file.
-
- package integrations
-
- import (
- "fmt"
- "net/http"
- "net/url"
- "testing"
-
- asymkey_model "code.gitea.io/gitea/models/asymkey"
- "code.gitea.io/gitea/models/perm"
- repo_model "code.gitea.io/gitea/models/repo"
- "code.gitea.io/gitea/models/unittest"
- user_model "code.gitea.io/gitea/models/user"
- api "code.gitea.io/gitea/modules/structs"
-
- "github.com/stretchr/testify/assert"
- )
-
- func TestViewDeployKeysNoLogin(t *testing.T) {
- defer prepareTestEnv(t)()
- req := NewRequest(t, "GET", "/api/v1/repos/user2/repo1/keys")
- MakeRequest(t, req, http.StatusUnauthorized)
- }
-
- func TestCreateDeployKeyNoLogin(t *testing.T) {
- defer prepareTestEnv(t)()
- req := NewRequestWithJSON(t, "POST", "/api/v1/repos/user2/repo1/keys", api.CreateKeyOption{
- Title: "title",
- Key: "key",
- })
- MakeRequest(t, req, http.StatusUnauthorized)
- }
-
- func TestGetDeployKeyNoLogin(t *testing.T) {
- defer prepareTestEnv(t)()
- req := NewRequest(t, "GET", "/api/v1/repos/user2/repo1/keys/1")
- MakeRequest(t, req, http.StatusUnauthorized)
- }
-
- func TestDeleteDeployKeyNoLogin(t *testing.T) {
- defer prepareTestEnv(t)()
- req := NewRequest(t, "DELETE", "/api/v1/repos/user2/repo1/keys/1")
- MakeRequest(t, req, http.StatusUnauthorized)
- }
-
- func TestCreateReadOnlyDeployKey(t *testing.T) {
- defer prepareTestEnv(t)()
- repo := unittest.AssertExistsAndLoadBean(t, &repo_model.Repository{Name: "repo1"}).(*repo_model.Repository)
- repoOwner := unittest.AssertExistsAndLoadBean(t, &user_model.User{ID: repo.OwnerID}).(*user_model.User)
-
- session := loginUser(t, repoOwner.Name)
- token := getTokenForLoggedInUser(t, session)
- keysURL := fmt.Sprintf("/api/v1/repos/%s/%s/keys?token=%s", repoOwner.Name, repo.Name, token)
- rawKeyBody := api.CreateKeyOption{
- Title: "read-only",
- Key: "ssh-rsa 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 nocomment\n",
- ReadOnly: true,
- }
- req := NewRequestWithJSON(t, "POST", keysURL, rawKeyBody)
- resp := session.MakeRequest(t, req, http.StatusCreated)
-
- var newDeployKey api.DeployKey
- DecodeJSON(t, resp, &newDeployKey)
- unittest.AssertExistsAndLoadBean(t, &asymkey_model.DeployKey{
- ID: newDeployKey.ID,
- Name: rawKeyBody.Title,
- Content: rawKeyBody.Key,
- Mode: perm.AccessModeRead,
- })
- }
-
- func TestCreateReadWriteDeployKey(t *testing.T) {
- defer prepareTestEnv(t)()
- repo := unittest.AssertExistsAndLoadBean(t, &repo_model.Repository{Name: "repo1"}).(*repo_model.Repository)
- repoOwner := unittest.AssertExistsAndLoadBean(t, &user_model.User{ID: repo.OwnerID}).(*user_model.User)
-
- session := loginUser(t, repoOwner.Name)
- token := getTokenForLoggedInUser(t, session)
- keysURL := fmt.Sprintf("/api/v1/repos/%s/%s/keys?token=%s", repoOwner.Name, repo.Name, token)
- rawKeyBody := api.CreateKeyOption{
- Title: "read-write",
- Key: "ssh-rsa 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 nocomment\n",
- }
- req := NewRequestWithJSON(t, "POST", keysURL, rawKeyBody)
- resp := session.MakeRequest(t, req, http.StatusCreated)
-
- var newDeployKey api.DeployKey
- DecodeJSON(t, resp, &newDeployKey)
- unittest.AssertExistsAndLoadBean(t, &asymkey_model.DeployKey{
- ID: newDeployKey.ID,
- Name: rawKeyBody.Title,
- Content: rawKeyBody.Key,
- Mode: perm.AccessModeWrite,
- })
- }
-
- func TestCreateUserKey(t *testing.T) {
- defer prepareTestEnv(t)()
- user := unittest.AssertExistsAndLoadBean(t, &user_model.User{Name: "user1"}).(*user_model.User)
-
- session := loginUser(t, "user1")
- token := url.QueryEscape(getTokenForLoggedInUser(t, session))
- keysURL := fmt.Sprintf("/api/v1/user/keys?token=%s", token)
- keyType := "ssh-rsa"
- keyContent := "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"
- rawKeyBody := api.CreateKeyOption{
- Title: "test-key",
- Key: keyType + " " + keyContent,
- }
- req := NewRequestWithJSON(t, "POST", keysURL, rawKeyBody)
- resp := session.MakeRequest(t, req, http.StatusCreated)
-
- var newPublicKey api.PublicKey
- DecodeJSON(t, resp, &newPublicKey)
- unittest.AssertExistsAndLoadBean(t, &asymkey_model.PublicKey{
- ID: newPublicKey.ID,
- OwnerID: user.ID,
- Name: rawKeyBody.Title,
- Content: rawKeyBody.Key,
- Mode: perm.AccessModeWrite,
- })
-
- // Search by fingerprint
- fingerprintURL := fmt.Sprintf("/api/v1/user/keys?token=%s&fingerprint=%s", token, newPublicKey.Fingerprint)
-
- req = NewRequest(t, "GET", fingerprintURL)
- resp = session.MakeRequest(t, req, http.StatusOK)
-
- var fingerprintPublicKeys []api.PublicKey
- DecodeJSON(t, resp, &fingerprintPublicKeys)
- assert.Equal(t, newPublicKey.Fingerprint, fingerprintPublicKeys[0].Fingerprint)
- assert.Equal(t, newPublicKey.ID, fingerprintPublicKeys[0].ID)
- assert.Equal(t, user.ID, fingerprintPublicKeys[0].Owner.ID)
-
- fingerprintURL = fmt.Sprintf("/api/v1/users/%s/keys?token=%s&fingerprint=%s", user.Name, token, newPublicKey.Fingerprint)
-
- req = NewRequest(t, "GET", fingerprintURL)
- resp = session.MakeRequest(t, req, http.StatusOK)
-
- DecodeJSON(t, resp, &fingerprintPublicKeys)
- assert.Equal(t, newPublicKey.Fingerprint, fingerprintPublicKeys[0].Fingerprint)
- assert.Equal(t, newPublicKey.ID, fingerprintPublicKeys[0].ID)
- assert.Equal(t, user.ID, fingerprintPublicKeys[0].Owner.ID)
-
- // Fail search by fingerprint
- fingerprintURL = fmt.Sprintf("/api/v1/user/keys?token=%s&fingerprint=%sA", token, newPublicKey.Fingerprint)
-
- req = NewRequest(t, "GET", fingerprintURL)
- resp = session.MakeRequest(t, req, http.StatusOK)
-
- DecodeJSON(t, resp, &fingerprintPublicKeys)
- assert.Len(t, fingerprintPublicKeys, 0)
-
- // Fail searching for wrong users key
- fingerprintURL = fmt.Sprintf("/api/v1/users/%s/keys?token=%s&fingerprint=%s", "user2", token, newPublicKey.Fingerprint)
- req = NewRequest(t, "GET", fingerprintURL)
- resp = session.MakeRequest(t, req, http.StatusOK)
-
- DecodeJSON(t, resp, &fingerprintPublicKeys)
- assert.Len(t, fingerprintPublicKeys, 0)
-
- // Now login as user 2
- session2 := loginUser(t, "user2")
- token2 := url.QueryEscape(getTokenForLoggedInUser(t, session2))
-
- // Should find key even though not ours, but we shouldn't know whose it is
- fingerprintURL = fmt.Sprintf("/api/v1/user/keys?token=%s&fingerprint=%s", token2, newPublicKey.Fingerprint)
- req = NewRequest(t, "GET", fingerprintURL)
- resp = session.MakeRequest(t, req, http.StatusOK)
-
- DecodeJSON(t, resp, &fingerprintPublicKeys)
- assert.Equal(t, newPublicKey.Fingerprint, fingerprintPublicKeys[0].Fingerprint)
- assert.Equal(t, newPublicKey.ID, fingerprintPublicKeys[0].ID)
- assert.Nil(t, fingerprintPublicKeys[0].Owner)
-
- // Should find key even though not ours, but we shouldn't know whose it is
- fingerprintURL = fmt.Sprintf("/api/v1/users/%s/keys?token=%s&fingerprint=%s", user.Name, token2, newPublicKey.Fingerprint)
-
- req = NewRequest(t, "GET", fingerprintURL)
- resp = session.MakeRequest(t, req, http.StatusOK)
-
- DecodeJSON(t, resp, &fingerprintPublicKeys)
- assert.Equal(t, newPublicKey.Fingerprint, fingerprintPublicKeys[0].Fingerprint)
- assert.Equal(t, newPublicKey.ID, fingerprintPublicKeys[0].ID)
- assert.Nil(t, fingerprintPublicKeys[0].Owner)
-
- // Fail when searching for key if it is not ours
- fingerprintURL = fmt.Sprintf("/api/v1/users/%s/keys?token=%s&fingerprint=%s", "user2", token2, newPublicKey.Fingerprint)
- req = NewRequest(t, "GET", fingerprintURL)
- resp = session.MakeRequest(t, req, http.StatusOK)
-
- DecodeJSON(t, resp, &fingerprintPublicKeys)
- assert.Len(t, fingerprintPublicKeys, 0)
- }
|