summaryrefslogtreecommitdiff
path: root/spec/lib/api/helpers/packages_manager_clients_helpers_spec.rb
blob: 73b67f9e61c528aeda6716623843e818b09b58fa (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
# frozen_string_literal: true

require 'spec_helper'

RSpec.describe API::Helpers::PackagesManagerClientsHelpers do
  let_it_be(:personal_access_token) { create(:personal_access_token) }
  let_it_be(:username) { personal_access_token.user.username }
  let_it_be(:helper) { Class.new.include(described_class).new }
  let(:password) { personal_access_token.token }

  describe '#find_job_from_http_basic_auth' do
    let_it_be(:user) { personal_access_token.user }

    let(:job) { create(:ci_build, user: user, status: :running) }
    let(:password) { job.token }
    let(:headers) { { Authorization: basic_http_auth(username, password) } }

    subject { helper.find_job_from_http_basic_auth }

    before do
      allow(helper).to receive(:headers).and_return(headers&.with_indifferent_access)
    end

    context 'with a valid Authorization header' do
      it { is_expected.to eq job }

      context 'when the job is not running' do
        before do
          job.update!(status: :failed)
        end

        it { is_expected.to be nil }
      end
    end

    context 'with an invalid Authorization header' do
      where(:headers) do
        [
          [{ Authorization: 'Invalid' }],
          [{}],
          [nil]
        ]
      end

      with_them do
        it { is_expected.to be nil }
      end
    end

    context 'with an unknown Authorization header' do
      let(:password) { 'Unknown' }

      it { is_expected.to be nil }
    end
  end

  describe '#find_deploy_token_from_http_basic_auth' do
    let_it_be(:deploy_token) { create(:deploy_token) }
    let(:token) { deploy_token.token }
    let(:headers) { { Authorization: basic_http_auth(deploy_token.username, token) } }

    subject { helper.find_deploy_token_from_http_basic_auth }

    before do
      allow(helper).to receive(:headers).and_return(headers&.with_indifferent_access)
    end

    context 'with a valid Authorization header' do
      it { is_expected.to eq deploy_token }
    end

    context 'with an invalid Authorization header' do
      where(:headers) do
        [
          [{ Authorization: 'Invalid' }],
          [{}],
          [nil]
        ]
      end

      with_them do
        it { is_expected.to be nil }
      end
    end

    context 'with an invalid token' do
      let(:token) { 'Unknown' }

      it { is_expected.to be nil }
    end
  end

  describe '#uploaded_package_file' do
    let_it_be(:params) { {} }

    subject { helper.uploaded_package_file }

    before do
      allow(helper).to receive(:params).and_return(params)
    end

    context 'with valid uploaded package file' do
      let_it_be(:uploaded_file) { Object.new }

      before do
        allow(UploadedFile).to receive(:from_params).and_return(uploaded_file)
      end

      it { is_expected.to be uploaded_file }
    end

    context 'with invalid uploaded package file' do
      before do
        allow(UploadedFile).to receive(:from_params).and_return(nil)
      end

      it 'fails with bad_request!' do
        expect(helper).to receive(:bad_request!)

        expect(subject).to be nil
      end
    end
  end

  def basic_http_auth(username, password)
    ActionController::HttpAuthentication::Basic.encode_credentials(username, password)
  end
end