debian-mirror-gitlab/spec/features/invites_spec.rb

296 lines
10 KiB
Ruby
Raw Normal View History

2019-10-12 21:52:04 +05:30
# frozen_string_literal: true
2018-03-17 18:26:18 +05:30
require 'spec_helper'
2020-11-24 15:15:51 +05:30
RSpec.describe 'Group or Project invitations', :aggregate_failures do
2020-07-28 23:09:34 +05:30
let(:user) { create(:user, email: 'user@example.com') }
2018-03-17 18:26:18 +05:30
let(:owner) { create(:user, name: 'John Doe') }
let(:group) { create(:group, name: 'Owned') }
let(:project) { create(:project, :repository, namespace: group) }
2018-11-08 19:23:39 +05:30
let(:group_invite) { group.group_members.invite.last }
2018-03-17 18:26:18 +05:30
before do
2021-01-29 00:20:46 +05:30
stub_application_setting(require_admin_approval_after_user_signup: false)
2018-11-18 11:00:15 +05:30
project.add_maintainer(owner)
2020-07-28 23:09:34 +05:30
group.add_owner(owner)
2018-03-17 18:26:18 +05:30
group.add_developer('user@example.com', owner)
2018-11-08 19:23:39 +05:30
group_invite.generate_invite_token!
end
2019-10-12 21:52:04 +05:30
def confirm_email(new_user)
2018-11-08 19:23:39 +05:30
new_user_token = User.find_by_email(new_user.email).confirmation_token
visit user_confirmation_path(confirmation_token: new_user_token)
end
def fill_in_sign_up_form(new_user)
2021-01-03 14:25:43 +05:30
fill_in 'new_user_first_name', with: new_user.first_name
fill_in 'new_user_last_name', with: new_user.last_name
2020-07-28 23:09:34 +05:30
fill_in 'new_user_username', with: new_user.username
fill_in 'new_user_email', with: new_user.email
fill_in 'new_user_password', with: new_user.password
click_button 'Register'
2018-11-08 19:23:39 +05:30
end
def fill_in_sign_in_form(user)
fill_in 'user_login', with: user.email
fill_in 'user_password', with: user.password
check 'user_remember_me'
click_button 'Sign in'
2018-03-17 18:26:18 +05:30
end
2020-11-24 15:15:51 +05:30
def fill_in_welcome_form
select 'Software Developer', from: 'user_role'
click_button 'Get started!'
end
2018-03-17 18:26:18 +05:30
context 'when signed out' do
before do
2018-11-08 19:23:39 +05:30
visit invite_path(group_invite.raw_invite_token)
2018-03-17 18:26:18 +05:30
end
it 'renders sign in page with sign in notice' do
2021-04-29 21:17:54 +05:30
expect(current_path).to eq(new_user_registration_path)
expect(page).to have_content('To accept this invitation, create an account or sign in')
2018-03-17 18:26:18 +05:30
end
2020-10-24 23:57:45 +05:30
it 'pre-fills the "Username or email" field on the sign in box with the invite_email from the invite' do
2021-04-29 21:17:54 +05:30
click_link 'Sign in'
2020-10-24 23:57:45 +05:30
expect(find_field('Username or email').value).to eq(group_invite.invite_email)
end
it 'pre-fills the Email field on the sign up box with the invite_email from the invite' do
expect(find_field('Email').value).to eq(group_invite.invite_email)
end
2020-07-28 23:09:34 +05:30
it 'sign in, grants access and redirects to group page' do
2021-04-29 21:17:54 +05:30
click_link 'Sign in'
2018-11-08 19:23:39 +05:30
fill_in_sign_in_form(user)
2018-03-17 18:26:18 +05:30
2020-07-28 23:09:34 +05:30
expect(current_path).to eq(group_path(group))
expect(page).to have_content('You have been granted Developer access to group Owned.')
2018-03-17 18:26:18 +05:30
end
end
2020-07-28 23:09:34 +05:30
context 'when signed in as an existing member' do
2018-03-17 18:26:18 +05:30
before do
sign_in(owner)
end
it 'shows message user already a member' do
2018-11-08 19:23:39 +05:30
visit invite_path(group_invite.raw_invite_token)
2020-10-24 23:57:45 +05:30
expect(page).to have_link(owner.name, href: user_url(owner))
2018-03-17 18:26:18 +05:30
expect(page).to have_content('However, you are already a member of this group.')
end
end
2021-04-29 21:17:54 +05:30
context 'when inviting an unregistered user' do
2018-11-08 19:23:39 +05:30
let(:new_user) { build_stubbed(:user) }
let(:invite_email) { new_user.email }
2021-01-03 14:25:43 +05:30
let(:group_invite) { create(:group_member, :invited, group: group, invite_email: invite_email, created_by: owner) }
2018-11-08 19:23:39 +05:30
let!(:project_invite) { create(:project_member, :invited, project: project, invite_email: invite_email) }
2021-04-29 21:17:54 +05:30
context 'when registering using invitation email' do
2020-07-28 23:09:34 +05:30
before do
stub_application_setting(send_user_confirmation_email: send_email_confirmation)
visit invite_path(group_invite.raw_invite_token)
2021-01-29 00:20:46 +05:30
end
2021-04-29 21:17:54 +05:30
context 'with admin approval required enabled' do
2021-01-29 00:20:46 +05:30
before do
stub_application_setting(require_admin_approval_after_user_signup: true)
end
let(:send_email_confirmation) { true }
it 'does not sign the user in' do
fill_in_sign_up_form(new_user)
expect(current_path).to eq(new_user_session_path)
expect(page).to have_content('You have signed up successfully. However, we could not sign you in because your account is awaiting approval from your GitLab administrator')
end
2018-11-08 19:23:39 +05:30
end
2020-07-28 23:09:34 +05:30
context 'email confirmation disabled' do
let(:send_email_confirmation) { false }
2018-11-08 19:23:39 +05:30
2020-07-28 23:09:34 +05:30
it 'signs up and redirects to the dashboard page with all the projects/groups invitations automatically accepted' do
2018-11-08 19:23:39 +05:30
fill_in_sign_up_form(new_user)
2020-11-24 15:15:51 +05:30
fill_in_welcome_form
2018-11-08 19:23:39 +05:30
2020-07-28 23:09:34 +05:30
expect(current_path).to eq(dashboard_projects_path)
2019-10-12 21:52:04 +05:30
expect(page).to have_content(project.full_name)
2020-03-13 15:44:24 +05:30
2019-10-12 21:52:04 +05:30
visit group_path(group)
2020-03-13 15:44:24 +05:30
2019-10-12 21:52:04 +05:30
expect(page).to have_content(group.full_name)
end
2020-07-28 23:09:34 +05:30
context 'the user sign-up using a different email address' do
let(:invite_email) { build_stubbed(:user).email }
2019-10-12 21:52:04 +05:30
2020-07-28 23:09:34 +05:30
it 'signs up and redirects to the invitation page' do
fill_in_sign_up_form(new_user)
2020-11-24 15:15:51 +05:30
fill_in_welcome_form
2020-03-13 15:44:24 +05:30
2020-07-28 23:09:34 +05:30
expect(current_path).to eq(invite_path(group_invite.raw_invite_token))
end
2019-10-12 21:52:04 +05:30
end
2018-11-08 19:23:39 +05:30
end
2020-07-28 23:09:34 +05:30
context 'email confirmation enabled' do
let(:send_email_confirmation) { true }
2018-11-08 19:23:39 +05:30
2019-10-12 21:52:04 +05:30
context 'when soft email confirmation is not enabled' do
before do
allow(User).to receive(:allow_unconfirmed_access_for).and_return 0
end
2018-11-08 19:23:39 +05:30
2020-07-28 23:09:34 +05:30
it 'signs up and redirects to root page with all the project/groups invitation automatically accepted' do
2019-10-12 21:52:04 +05:30
fill_in_sign_up_form(new_user)
confirm_email(new_user)
fill_in_sign_in_form(new_user)
2020-11-24 15:15:51 +05:30
fill_in_welcome_form
2019-10-12 21:52:04 +05:30
2020-07-28 23:09:34 +05:30
expect(current_path).to eq(root_path)
expect(page).to have_content(project.full_name)
visit group_path(group)
expect(page).to have_content(group.full_name)
2019-10-12 21:52:04 +05:30
end
end
context 'when soft email confirmation is enabled' do
before do
allow(User).to receive(:allow_unconfirmed_access_for).and_return 2.days
end
2020-07-28 23:09:34 +05:30
it 'signs up and redirects to root page with all the project/groups invitation automatically accepted' do
2019-10-12 21:52:04 +05:30
fill_in_sign_up_form(new_user)
2020-11-24 15:15:51 +05:30
fill_in_welcome_form
2020-07-28 23:09:34 +05:30
confirm_email(new_user)
2019-10-12 21:52:04 +05:30
2020-07-28 23:09:34 +05:30
expect(current_path).to eq(root_path)
expect(page).to have_content(project.full_name)
visit group_path(group)
expect(page).to have_content(group.full_name)
end
end
it "doesn't accept invitations until the user confirms their email" do
fill_in_sign_up_form(new_user)
2020-11-24 15:15:51 +05:30
fill_in_welcome_form
2020-07-28 23:09:34 +05:30
sign_in(owner)
visit project_project_members_path(project)
expect(page).to have_content 'Invited'
end
context 'the user sign-up using a different email address' do
let(:invite_email) { build_stubbed(:user).email }
context 'when soft email confirmation is not enabled' do
before do
stub_feature_flags(soft_email_confirmation: false)
allow(User).to receive(:allow_unconfirmed_access_for).and_return 0
end
it 'signs up and redirects to the invitation page' do
fill_in_sign_up_form(new_user)
confirm_email(new_user)
fill_in_sign_in_form(new_user)
2020-11-24 15:15:51 +05:30
fill_in_welcome_form
2020-07-28 23:09:34 +05:30
expect(current_path).to eq(invite_path(group_invite.raw_invite_token))
end
end
context 'when soft email confirmation is enabled' do
before do
stub_feature_flags(soft_email_confirmation: true)
allow(User).to receive(:allow_unconfirmed_access_for).and_return 2.days
end
it 'signs up and redirects to the invitation page' do
fill_in_sign_up_form(new_user)
2020-11-24 15:15:51 +05:30
fill_in_welcome_form
2020-07-28 23:09:34 +05:30
expect(current_path).to eq(invite_path(group_invite.raw_invite_token))
end
2019-10-12 21:52:04 +05:30
end
2018-11-08 19:23:39 +05:30
end
end
end
2020-07-28 23:09:34 +05:30
context 'when declining the invitation' do
let(:send_email_confirmation) { true }
2021-01-03 14:25:43 +05:30
context 'as an existing user' do
let(:group_invite) { create(:group_member, user: user, group: group, created_by: owner) }
context 'when signed in' do
before do
sign_in(user)
visit decline_invite_path(group_invite.raw_invite_token)
end
it 'declines application and redirects to dashboard' do
expect(current_path).to eq(dashboard_projects_path)
expect(page).to have_content('You have declined the invitation to join group Owned.')
expect { group_invite.reload }.to raise_error ActiveRecord::RecordNotFound
end
2020-07-28 23:09:34 +05:30
end
2021-01-03 14:25:43 +05:30
context 'when signed out' do
before do
visit decline_invite_path(group_invite.raw_invite_token)
end
2020-10-24 23:57:45 +05:30
2021-01-03 14:25:43 +05:30
it 'declines application and redirects to sign in page' do
expect(current_path).to eq(new_user_session_path)
expect(page).to have_content('You have declined the invitation to join group Owned.')
expect { group_invite.reload }.to raise_error ActiveRecord::RecordNotFound
end
2020-07-28 23:09:34 +05:30
end
end
2021-01-03 14:25:43 +05:30
context 'as a non-existing user' do
2020-07-28 23:09:34 +05:30
before do
visit decline_invite_path(group_invite.raw_invite_token)
end
2021-01-03 14:25:43 +05:30
it 'declines application and shows a decline page' do
expect(current_path).to eq(decline_invite_path(group_invite.raw_invite_token))
expect(page).to have_content('You successfully declined the invitation')
2020-10-24 23:57:45 +05:30
expect { group_invite.reload }.to raise_error ActiveRecord::RecordNotFound
2020-07-28 23:09:34 +05:30
end
end
end
context 'when accepting the invitation' do
let(:send_email_confirmation) { true }
before do
sign_in(user)
visit invite_path(group_invite.raw_invite_token)
end
it 'grants access and redirects to group page' do
2020-10-24 23:57:45 +05:30
expect(group.users.include?(user)).to be false
2020-07-28 23:09:34 +05:30
page.click_link 'Accept invitation'
2020-10-24 23:57:45 +05:30
2020-07-28 23:09:34 +05:30
expect(current_path).to eq(group_path(group))
expect(page).to have_content('You have been granted Owner access to group Owned.')
2020-10-24 23:57:45 +05:30
expect(group.users.include?(user)).to be true
2020-07-28 23:09:34 +05:30
end
end
2018-11-08 19:23:39 +05:30
end
2018-03-17 18:26:18 +05:30
end