summaryrefslogtreecommitdiff
path: root/spec/lib/gitlab/auth/blocked_user_tracker_spec.rb
blob: 43b68e69131fdff171feb92702519a1b5732c5ed (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
require 'spec_helper'

describe Gitlab::Auth::BlockedUserTracker do
  set(:user) { create(:user) }

  describe '.log_if_user_blocked' do
    it 'does not log if user failed to login due to undefined reason' do
      expect_any_instance_of(SystemHooksService).not_to receive(:execute_hooks_for)

      expect(described_class.log_if_user_blocked({})).to be_nil
    end

    it 'gracefully handles malformed environment variables' do
      env = { 'warden.options' => 'test' }

      expect(described_class.log_if_user_blocked(env)).to be_nil
    end

    context 'failed login due to blocked user' do
      let(:base_env) { { 'warden.options' => { message: User::BLOCKED_MESSAGE } } }
      let(:env) { base_env.merge(request_env) }

      subject { described_class.log_if_user_blocked(env) }

      before do
        expect_any_instance_of(SystemHooksService).to receive(:execute_hooks_for).with(user, :failed_login)
      end

      context 'via GitLab login' do
        let(:request_env) { { described_class::ACTIVE_RECORD_REQUEST_PARAMS => { 'user' => { 'login' => user.username } } } }

        it 'logs a blocked user' do
          user.block!

          expect(subject).to be_truthy
        end

        it 'logs a blocked user by e-mail' do
          user.block!
          env[described_class::ACTIVE_RECORD_REQUEST_PARAMS]['user']['login'] = user.email

          expect(subject).to be_truthy
        end
      end

      context 'via LDAP login' do
        let(:request_env) { { described_class::ACTIVE_RECORD_REQUEST_PARAMS => { 'username' => user.username } } }

        it 'logs a blocked user' do
          user.block!

          expect(subject).to be_truthy
        end

        it 'logs a LDAP blocked user' do
          user.ldap_block!

          expect(subject).to be_truthy
        end
      end
    end
  end
end