1 files changed, 93 insertions, 0 deletions
diff --git a/spec/requests/api/graphql/ci/config_variables_spec.rb b/spec/requests/api/graphql/ci/config_variables_spec.rb
new file mode 100644
index 00000000000..2b5a5d0dc93
--- /dev/null
+++ b/spec/requests/api/graphql/ci/config_variables_spec.rb
@@ -0,0 +1,93 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe 'Query.project(fullPath).ciConfigVariables(sha)' do
+  include GraphqlHelpers
+  include ReactiveCachingHelpers
+
+  let_it_be(:content) do
+    File.read(Rails.root.join('spec/support/gitlab_stubs/gitlab_ci.yml'))
+  end
+
+  let_it_be(:project) { create(:project, :custom_repo, :public, files: { '.gitlab-ci.yml' => content }) }
+  let_it_be(:user) { create(:user) }
+
+  let(:service) { Ci::ListConfigVariablesService.new(project, user) }
+  let(:sha) { project.repository.commit.sha }
+
+  let(:query) do
+    %(
+      query {
+        project(fullPath: "#{project.full_path}") {
+          ciConfigVariables(sha: "#{sha}") {
+            key
+            value
+            description
+          }
+        }
+      }
+    )
+  end
+
+  context 'when the user has the correct permissions' do
+    before do
+      project.add_maintainer(user)
+      allow(Ci::ListConfigVariablesService)
+        .to receive(:new)
+        .and_return(service)
+    end
+
+    context 'when the cache is not empty' do
+      before do
+        synchronous_reactive_cache(service)
+      end
+
+      it 'returns the CI variables for the config' do
+        expect(service)
+          .to receive(:execute)
+          .with(sha)
+          .and_call_original
+
+        post_graphql(query, current_user: user)
+
+        expect(graphql_data.dig('project', 'ciConfigVariables')).to contain_exactly(
+          {
+            'key' => 'DB_NAME',
+            'value' => 'postgres',
+            'description' => nil
+          },
+          {
+            'key' => 'ENVIRONMENT_VAR',
+            'value' => 'env var value',
+            'description' => 'env var description'
+          }
+        )
+      end
+    end
+
+    context 'when the cache is empty' do
+      it 'returns nothing' do
+        post_graphql(query, current_user: user)
+
+        expect(graphql_data.dig('project', 'ciConfigVariables')).to be_nil
+      end
+    end
+  end
+
+  context 'when the user is not authorized' do
+    before do
+      project.add_guest(user)
+      allow(Ci::ListConfigVariablesService)
+        .to receive(:new)
+        .and_return(service)
+      synchronous_reactive_cache(service)
+    end
+
+    it 'returns nothing' do
+      post_graphql(query, current_user: user)
+
+      expect(graphql_data.dig('project', 'ciConfigVariables')).to be_nil
+    end
+  end
+end