spec/services/auth/dependency_proxy_authentication_service_spec.rb


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49

# frozen_string_literal: true

require 'spec_helper'

RSpec.describe Auth::DependencyProxyAuthenticationService do
  let_it_be(:user) { create(:user) }
  let(:service) { Auth::DependencyProxyAuthenticationService.new(nil, user) }

  before do
    stub_config(dependency_proxy: { enabled: true })
  end

  describe '#execute' do
    subject { service.execute(authentication_abilities: nil) }

    shared_examples 'returning' do |status:, message:|
      it "returns #{message}", :aggregate_failures do
        expect(subject[:http_status]).to eq(status)
        expect(subject[:message]).to eq(message)
      end
    end

    context 'dependency proxy is not enabled' do
      before do
        stub_config(dependency_proxy: { enabled: false })
      end

      it_behaves_like 'returning', status: 404, message: 'dependency proxy not enabled'
    end

    context 'without a user' do
      let(:user) { nil }

      it_behaves_like 'returning', status: 403, message: 'access forbidden'
    end

    context 'with a deploy token as user' do
      let_it_be(:user) { create(:deploy_token) }

      it_behaves_like 'returning', status: 403, message: 'access forbidden'
    end

    context 'with a user' do
      it 'returns a token' do
        expect(subject[:token]).not_to be_nil
      end
    end
  end
end