1 files changed, 60 insertions, 0 deletions
diff --git a/spec/requests/projects/releases_controller_spec.rb b/spec/requests/projects/releases_controller_spec.rb
new file mode 100644
index 00000000000..8e492125ace
--- /dev/null
+++ b/spec/requests/projects/releases_controller_spec.rb
@@ -0,0 +1,60 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe 'Projects::ReleasesController' do
+  let_it_be(:project) { create(:project, :repository) }
+  let_it_be(:user) { create(:user) }
+
+  before do
+    project.add_developer(user)
+    login_as(user)
+  end
+
+  # Added as a request spec because of https://gitlab.com/gitlab-org/gitlab/-/issues/232386
+  describe 'GET #downloads' do
+    context 'filepath redirection' do
+      let_it_be(:release) { create(:release, project: project, tag: 'v11.9.0-rc2' ) }
+      let!(:link) { create(:release_link, release: release, name: 'linux-amd64 binaries', filepath: filepath, url: 'https://aws.example.com/s3/project/bin/hello-darwin-amd64') }
+      let_it_be(:url) { "#{project_releases_path(project)}/#{release.tag}/downloads/bin/darwin-amd64" }
+
+      let(:subject) { get url }
+
+      context 'valid filepath' do
+        let(:filepath) { '/bin/darwin-amd64' }
+
+        it 'redirects to the asset direct link' do
+          subject
+
+          expect(response).to redirect_to('https://aws.example.com/s3/project/bin/hello-darwin-amd64')
+        end
+
+        it 'redirects with a status of 302' do
+          subject
+
+          expect(response).to have_gitlab_http_status(:redirect)
+        end
+      end
+
+      context 'invalid filepath' do
+        let(:filepath) { '/binaries/win32' }
+
+        it 'is not found' do
+          subject
+
+          expect(response).to have_gitlab_http_status(:not_found)
+        end
+      end
+    end
+
+    context 'invalid filepath' do
+      let(:invalid_filepath) { 'bin/darwin-amd64' }
+
+      let(:subject) { create(:release_link, name: 'linux-amd64 binaries', filepath: invalid_filepath, url: 'https://aws.example.com/s3/project/bin/hello-darwin-amd64') }
+
+      it 'cannot create an invalid filepath' do
+        expect { subject }.to raise_error(ActiveRecord::RecordInvalid)
+      end
+    end
+  end
+end