debian-mirror-gitlab/spec/requests/api/branches_spec.rb

604 lines
20 KiB
Ruby
Raw Normal View History

2014-09-02 18:07:02 +05:30
require 'spec_helper'
2017-08-17 22:00:37 +05:30
describe API::Branches do
2018-03-17 18:26:18 +05:30
set(:user) { create(:user) }
2017-09-10 17:25:29 +05:30
let(:project) { create(:project, :repository, creator: user, path: 'my.project') }
2018-03-17 18:26:18 +05:30
let(:guest) { create(:user).tap { |u| project.add_guest(u) } }
2017-09-10 17:25:29 +05:30
let(:branch_name) { 'feature' }
let(:branch_sha) { '0b4bc9a49b562e85de7cc9e834518ea6828729b9' }
let(:branch_with_dot) { project.repository.find_branch('ends-with.json') }
let(:branch_with_slash) { project.repository.find_branch('improve/awesome') }
let(:project_id) { project.id }
let(:current_user) { nil }
before do
project.add_master(user)
end
2014-09-02 18:07:02 +05:30
describe "GET /projects/:id/repository/branches" do
2017-09-10 17:25:29 +05:30
let(:route) { "/projects/#{project_id}/repository/branches" }
2015-09-11 14:41:01 +05:30
2017-08-17 22:00:37 +05:30
shared_examples_for 'repository branches' do
it 'returns the repository branches' do
get api(route, current_user), per_page: 100
2017-09-10 17:25:29 +05:30
expect(response).to have_gitlab_http_status(200)
expect(response).to match_response_schema('public_api/v4/branches')
2017-08-17 22:00:37 +05:30
expect(response).to include_pagination_headers
branch_names = json_response.map { |x| x['name'] }
expect(branch_names).to match_array(project.repository.branch_names)
end
context 'when repository is disabled' do
include_context 'disabled repository'
it_behaves_like '403 response' do
let(:request) { get api(route, current_user) }
end
end
end
2018-03-27 19:54:05 +05:30
context 'when search parameter is passed' do
context 'and branch exists' do
it 'returns correct branches' do
get api(route, user), per_page: 100, search: branch_name
searched_branch_names = json_response.map { |branch| branch['name'] }
project_branch_names = project.repository.branch_names.grep(/#{branch_name}/)
expect(searched_branch_names).to match_array(project_branch_names)
end
end
context 'and branch does not exist' do
it 'returns an empty array' do
get api(route, user), per_page: 100, search: 'no_such_branch_name_entropy_of_jabadabadu'
expect(json_response).to eq []
end
end
end
2017-08-17 22:00:37 +05:30
context 'when unauthenticated', 'and project is public' do
2018-03-17 18:26:18 +05:30
before do
project.update(visibility_level: Gitlab::VisibilityLevel::PUBLIC)
end
2017-09-10 17:25:29 +05:30
it_behaves_like 'repository branches'
2017-08-17 22:00:37 +05:30
end
context 'when unauthenticated', 'and project is private' do
it_behaves_like '404 response' do
let(:request) { get api(route) }
let(:message) { '404 Project Not Found' }
end
end
2017-09-10 17:25:29 +05:30
context 'when authenticated', 'as a master' do
let(:current_user) { user }
it_behaves_like 'repository branches'
context 'requesting with the escaped project full path' do
let(:project_id) { CGI.escape(project.full_path) }
it_behaves_like 'repository branches'
2017-08-17 22:00:37 +05:30
end
end
context 'when authenticated', 'as a guest' do
it_behaves_like '403 response' do
let(:request) { get api(route, guest) }
end
2014-09-02 18:07:02 +05:30
end
end
describe "GET /projects/:id/repository/branches/:branch" do
2017-09-10 17:25:29 +05:30
let(:route) { "/projects/#{project_id}/repository/branches/#{branch_name}" }
2014-09-02 18:07:02 +05:30
2017-09-10 17:25:29 +05:30
shared_examples_for 'repository branch' do
2018-03-17 18:26:18 +05:30
context 'HEAD request' do
it 'returns 204 No Content' do
head api(route, user)
expect(response).to have_gitlab_http_status(204)
expect(response.body).to be_empty
end
it 'returns 404 Not Found' do
head api("/projects/#{project_id}/repository/branches/unknown", user)
expect(response).to have_gitlab_http_status(404)
expect(response.body).to be_empty
end
end
2017-08-17 22:00:37 +05:30
it 'returns the repository branch' do
get api(route, current_user)
2017-09-10 17:25:29 +05:30
expect(response).to have_gitlab_http_status(200)
expect(response).to match_response_schema('public_api/v4/branch')
expect(json_response['name']).to eq(CGI.unescape(branch_name))
2017-08-17 22:00:37 +05:30
end
context 'when branch does not exist' do
let(:branch_name) { 'unknown' }
it_behaves_like '404 response' do
let(:request) { get api(route, current_user) }
let(:message) { '404 Branch Not Found' }
end
end
2018-03-17 18:26:18 +05:30
context 'when the branch refname is invalid' do
let(:branch_name) { 'branch*' }
let(:message) { 'The branch refname is invalid' }
it_behaves_like '400 response' do
let(:request) { get api(route, current_user) }
end
end
2017-08-17 22:00:37 +05:30
context 'when repository is disabled' do
include_context 'disabled repository'
it_behaves_like '403 response' do
let(:request) { get api(route, current_user) }
end
end
2014-09-02 18:07:02 +05:30
end
2017-08-17 22:00:37 +05:30
context 'when unauthenticated', 'and project is public' do
2018-03-17 18:26:18 +05:30
before do
project.update(visibility_level: Gitlab::VisibilityLevel::PUBLIC)
end
2017-09-10 17:25:29 +05:30
it_behaves_like 'repository branch'
2014-09-02 18:07:02 +05:30
end
2017-08-17 22:00:37 +05:30
context 'when unauthenticated', 'and project is private' do
it_behaves_like '404 response' do
let(:request) { get api(route) }
let(:message) { '404 Project Not Found' }
end
end
2017-09-10 17:25:29 +05:30
context 'when authenticated', 'as a master' do
2017-08-17 22:00:37 +05:30
let(:current_user) { user }
2017-09-10 17:25:29 +05:30
2017-08-17 22:00:37 +05:30
it_behaves_like 'repository branch'
context 'when branch contains a dot' do
let(:branch_name) { branch_with_dot.name }
it_behaves_like 'repository branch'
end
2017-09-10 17:25:29 +05:30
context 'when branch contains a slash' do
let(:branch_name) { branch_with_slash.name }
2017-08-17 22:00:37 +05:30
2017-09-10 17:25:29 +05:30
it_behaves_like '404 response' do
let(:request) { get api(route, current_user) }
end
end
context 'when branch contains an escaped slash' do
let(:branch_name) { CGI.escape(branch_with_slash.name) }
it_behaves_like 'repository branch'
end
context 'requesting with the escaped project full path' do
let(:project_id) { CGI.escape(project.full_path) }
it_behaves_like 'repository branch'
context 'when branch contains a dot' do
let(:branch_name) { branch_with_dot.name }
it_behaves_like 'repository branch'
end
2017-08-17 22:00:37 +05:30
end
end
context 'when authenticated', 'as a guest' do
it_behaves_like '403 response' do
let(:request) { get api(route, guest) }
end
2014-09-02 18:07:02 +05:30
end
end
2016-08-24 12:49:21 +05:30
describe 'PUT /projects/:id/repository/branches/:branch/protect' do
2017-09-10 17:25:29 +05:30
let(:route) { "/projects/#{project_id}/repository/branches/#{branch_name}/protect" }
2014-09-02 18:07:02 +05:30
2017-09-10 17:25:29 +05:30
shared_examples_for 'repository new protected branch' do
it 'protects a single branch' do
put api(route, current_user)
2017-08-17 22:00:37 +05:30
2017-09-10 17:25:29 +05:30
expect(response).to have_gitlab_http_status(200)
expect(response).to match_response_schema('public_api/v4/branch')
expect(json_response['name']).to eq(CGI.unescape(branch_name))
2017-08-17 22:00:37 +05:30
expect(json_response['protected']).to eq(true)
end
2016-11-03 12:29:30 +05:30
it 'protects a single branch and developers can push' do
2017-09-10 17:25:29 +05:30
put api(route, current_user), developers_can_push: true
2016-08-24 12:49:21 +05:30
2017-09-10 17:25:29 +05:30
expect(response).to have_gitlab_http_status(200)
expect(response).to match_response_schema('public_api/v4/branch')
expect(json_response['name']).to eq(CGI.unescape(branch_name))
2016-11-03 12:29:30 +05:30
expect(json_response['protected']).to eq(true)
expect(json_response['developers_can_push']).to eq(true)
expect(json_response['developers_can_merge']).to eq(false)
end
2016-08-24 12:49:21 +05:30
2016-11-03 12:29:30 +05:30
it 'protects a single branch and developers can merge' do
2017-09-10 17:25:29 +05:30
put api(route, current_user), developers_can_merge: true
2016-08-24 12:49:21 +05:30
2017-09-10 17:25:29 +05:30
expect(response).to have_gitlab_http_status(200)
expect(response).to match_response_schema('public_api/v4/branch')
expect(json_response['name']).to eq(CGI.unescape(branch_name))
2016-11-03 12:29:30 +05:30
expect(json_response['protected']).to eq(true)
expect(json_response['developers_can_push']).to eq(false)
expect(json_response['developers_can_merge']).to eq(true)
end
2016-08-24 12:49:21 +05:30
2016-11-03 12:29:30 +05:30
it 'protects a single branch and developers can push and merge' do
2017-09-10 17:25:29 +05:30
put api(route, current_user), developers_can_push: true, developers_can_merge: true
2016-08-24 12:49:21 +05:30
2017-09-10 17:25:29 +05:30
expect(response).to have_gitlab_http_status(200)
expect(response).to match_response_schema('public_api/v4/branch')
expect(json_response['name']).to eq(CGI.unescape(branch_name))
2016-11-03 12:29:30 +05:30
expect(json_response['protected']).to eq(true)
expect(json_response['developers_can_push']).to eq(true)
expect(json_response['developers_can_merge']).to eq(true)
end
2017-09-10 17:25:29 +05:30
context 'when branch does not exist' do
let(:branch_name) { 'unknown' }
it_behaves_like '404 response' do
let(:request) { put api(route, current_user) }
let(:message) { '404 Branch Not Found' }
end
end
2018-03-17 18:26:18 +05:30
context 'when the branch refname is invalid' do
let(:branch_name) { 'branch*' }
let(:message) { 'The branch refname is invalid' }
it_behaves_like '400 response' do
let(:request) { put api(route, current_user) }
end
end
2017-09-10 17:25:29 +05:30
context 'when repository is disabled' do
include_context 'disabled repository'
it_behaves_like '403 response' do
let(:request) { put api(route, current_user) }
end
end
end
context 'when unauthenticated', 'and project is private' do
it_behaves_like '404 response' do
let(:request) { put api(route) }
let(:message) { '404 Project Not Found' }
end
2016-08-24 12:49:21 +05:30
end
2017-09-10 17:25:29 +05:30
context 'when authenticated', 'as a guest' do
it_behaves_like '403 response' do
let(:request) { put api(route, guest) }
2016-08-24 12:49:21 +05:30
end
2017-09-10 17:25:29 +05:30
end
context 'when authenticated', 'as a master' do
let(:current_user) { user }
2016-08-24 12:49:21 +05:30
2017-09-10 17:25:29 +05:30
context "when a protected branch doesn't already exist" do
it_behaves_like 'repository new protected branch'
2016-11-03 12:29:30 +05:30
2017-09-10 17:25:29 +05:30
context 'when branch contains a dot' do
let(:branch_name) { branch_with_dot.name }
2016-11-03 12:29:30 +05:30
2017-09-10 17:25:29 +05:30
it_behaves_like 'repository new protected branch'
2016-11-03 12:29:30 +05:30
end
2017-09-10 17:25:29 +05:30
context 'when branch contains a slash' do
let(:branch_name) { branch_with_slash.name }
2016-11-03 12:29:30 +05:30
2017-09-10 17:25:29 +05:30
it_behaves_like '404 response' do
let(:request) { put api(route, current_user) }
end
2016-11-03 12:29:30 +05:30
end
2017-09-10 17:25:29 +05:30
context 'when branch contains an escaped slash' do
let(:branch_name) { CGI.escape(branch_with_slash.name) }
2016-11-03 12:29:30 +05:30
2017-09-10 17:25:29 +05:30
it_behaves_like 'repository new protected branch'
end
context 'requesting with the escaped project full path' do
let(:project_id) { CGI.escape(project.full_path) }
it_behaves_like 'repository new protected branch'
context 'when branch contains a dot' do
let(:branch_name) { branch_with_dot.name }
it_behaves_like 'repository new protected branch'
end
2016-11-03 12:29:30 +05:30
end
end
2017-09-10 17:25:29 +05:30
context 'when protected branch already exists' do
before do
project.repository.add_branch(user, protected_branch.name, 'master')
end
2016-11-03 12:29:30 +05:30
2017-09-10 17:25:29 +05:30
context 'when developers can push and merge' do
let(:protected_branch) { create(:protected_branch, :developers_can_push, :developers_can_merge, project: project, name: 'protected_branch') }
it 'updates that a developer cannot push or merge' do
put api("/projects/#{project.id}/repository/branches/#{protected_branch.name}/protect", user),
developers_can_push: false, developers_can_merge: false
expect(response).to have_gitlab_http_status(200)
expect(response).to match_response_schema('public_api/v4/branch')
expect(json_response['name']).to eq(protected_branch.name)
expect(json_response['protected']).to eq(true)
expect(json_response['developers_can_push']).to eq(false)
expect(json_response['developers_can_merge']).to eq(false)
expect(protected_branch.reload.push_access_levels.first.access_level).to eq(Gitlab::Access::MASTER)
expect(protected_branch.reload.merge_access_levels.first.access_level).to eq(Gitlab::Access::MASTER)
end
end
2016-11-03 12:29:30 +05:30
2017-09-10 17:25:29 +05:30
context 'when developers cannot push or merge' do
let(:protected_branch) { create(:protected_branch, project: project, name: 'protected_branch') }
it 'updates that a developer can push and merge' do
put api("/projects/#{project.id}/repository/branches/#{protected_branch.name}/protect", user),
developers_can_push: true, developers_can_merge: true
expect(response).to have_gitlab_http_status(200)
expect(response).to match_response_schema('public_api/v4/branch')
expect(json_response['name']).to eq(protected_branch.name)
expect(json_response['protected']).to eq(true)
expect(json_response['developers_can_push']).to eq(true)
expect(json_response['developers_can_merge']).to eq(true)
end
2016-11-03 12:29:30 +05:30
end
end
end
2017-09-10 17:25:29 +05:30
end
2016-11-03 12:29:30 +05:30
2017-09-10 17:25:29 +05:30
describe 'PUT /projects/:id/repository/branches/:branch/unprotect' do
let(:route) { "/projects/#{project_id}/repository/branches/#{branch_name}/unprotect" }
2016-08-24 12:49:21 +05:30
2017-09-10 17:25:29 +05:30
shared_examples_for 'repository unprotected branch' do
it 'unprotects a single branch' do
put api(route, current_user)
expect(response).to have_gitlab_http_status(200)
expect(response).to match_response_schema('public_api/v4/branch')
expect(json_response['name']).to eq(CGI.unescape(branch_name))
expect(json_response['protected']).to eq(false)
2016-08-24 12:49:21 +05:30
end
2017-09-10 17:25:29 +05:30
context 'when branch does not exist' do
let(:branch_name) { 'unknown' }
2016-08-24 12:49:21 +05:30
2017-09-10 17:25:29 +05:30
it_behaves_like '404 response' do
let(:request) { put api(route, current_user) }
let(:message) { '404 Branch Not Found' }
end
2016-11-03 12:29:30 +05:30
end
2018-03-17 18:26:18 +05:30
context 'when the branch refname is invalid' do
let(:branch_name) { 'branch*' }
let(:message) { 'The branch refname is invalid' }
it_behaves_like '400 response' do
let(:request) { put api(route, current_user) }
end
end
2017-09-10 17:25:29 +05:30
context 'when repository is disabled' do
include_context 'disabled repository'
2016-11-03 12:29:30 +05:30
2017-09-10 17:25:29 +05:30
it_behaves_like '403 response' do
let(:request) { put api(route, current_user) }
end
2016-08-24 12:49:21 +05:30
end
2014-09-02 18:07:02 +05:30
end
2017-09-10 17:25:29 +05:30
context 'when unauthenticated', 'and project is private' do
it_behaves_like '404 response' do
let(:request) { put api(route) }
let(:message) { '404 Project Not Found' }
end
2014-09-02 18:07:02 +05:30
end
2017-09-10 17:25:29 +05:30
context 'when authenticated', 'as a guest' do
it_behaves_like '403 response' do
let(:request) { put api(route, guest) }
end
2014-09-02 18:07:02 +05:30
end
2017-09-10 17:25:29 +05:30
context 'when authenticated', 'as a master' do
let(:current_user) { user }
context "when a protected branch doesn't already exist" do
it_behaves_like 'repository unprotected branch'
context 'when branch contains a dot' do
let(:branch_name) { branch_with_dot.name }
it_behaves_like 'repository unprotected branch'
end
context 'when branch contains a slash' do
let(:branch_name) { branch_with_slash.name }
it_behaves_like '404 response' do
let(:request) { put api(route, current_user) }
end
end
context 'when branch contains an escaped slash' do
let(:branch_name) { CGI.escape(branch_with_slash.name) }
it_behaves_like 'repository unprotected branch'
end
context 'requesting with the escaped project full path' do
let(:project_id) { CGI.escape(project.full_path) }
it_behaves_like 'repository unprotected branch'
context 'when branch contains a dot' do
let(:branch_name) { branch_with_dot.name }
2014-09-02 18:07:02 +05:30
2017-09-10 17:25:29 +05:30
it_behaves_like 'repository unprotected branch'
end
end
end
2014-09-02 18:07:02 +05:30
end
2017-09-10 17:25:29 +05:30
end
describe 'POST /projects/:id/repository/branches' do
let(:route) { "/projects/#{project_id}/repository/branches" }
shared_examples_for 'repository new branch' do
it 'creates a new branch' do
post api(route, current_user), branch: 'feature1', ref: branch_sha
2014-09-02 18:07:02 +05:30
2017-09-10 17:25:29 +05:30
expect(response).to have_gitlab_http_status(201)
expect(response).to match_response_schema('public_api/v4/branch')
expect(json_response['name']).to eq('feature1')
expect(json_response['commit']['id']).to eq(branch_sha)
end
2017-08-17 22:00:37 +05:30
2017-09-10 17:25:29 +05:30
context 'when repository is disabled' do
include_context 'disabled repository'
it_behaves_like '403 response' do
let(:request) { post api(route, current_user) }
end
end
2017-08-17 22:00:37 +05:30
end
2017-09-10 17:25:29 +05:30
context 'when unauthenticated', 'and project is private' do
it_behaves_like '404 response' do
let(:request) { post api(route) }
let(:message) { '404 Project Not Found' }
end
2014-09-02 18:07:02 +05:30
end
2017-09-10 17:25:29 +05:30
context 'when authenticated', 'as a guest' do
it_behaves_like '403 response' do
let(:request) { post api(route, guest) }
end
2014-09-02 18:07:02 +05:30
end
2017-09-10 17:25:29 +05:30
context 'when authenticated', 'as a master' do
let(:current_user) { user }
2014-09-02 18:07:02 +05:30
2017-09-10 17:25:29 +05:30
context "when a protected branch doesn't already exist" do
it_behaves_like 'repository new branch'
2014-09-02 18:07:02 +05:30
2017-09-10 17:25:29 +05:30
context 'requesting with the escaped project full path' do
let(:project_id) { CGI.escape(project.full_path) }
2014-09-02 18:07:02 +05:30
2017-09-10 17:25:29 +05:30
it_behaves_like 'repository new branch'
end
end
2015-04-26 12:48:37 +05:30
end
2016-09-13 17:45:13 +05:30
it 'returns 400 if branch name is invalid' do
2017-09-10 17:25:29 +05:30
post api(route, user), branch: 'new design', ref: branch_sha
expect(response).to have_gitlab_http_status(400)
expect(json_response['message']).to eq('Branch name is invalid')
2015-04-26 12:48:37 +05:30
end
2016-09-13 17:45:13 +05:30
it 'returns 400 if branch already exists' do
2017-09-10 17:25:29 +05:30
post api(route, user), branch: 'new_design1', ref: branch_sha
expect(response).to have_gitlab_http_status(201)
post api(route, user), branch: 'new_design1', ref: branch_sha
expect(response).to have_gitlab_http_status(400)
2015-04-26 12:48:37 +05:30
expect(json_response['message']).to eq('Branch already exists')
end
2016-09-13 17:45:13 +05:30
it 'returns 400 if ref name is invalid' do
2017-09-10 17:25:29 +05:30
post api(route, user), branch: 'new_design3', ref: 'foo'
expect(response).to have_gitlab_http_status(400)
2015-04-26 12:48:37 +05:30
expect(json_response['message']).to eq('Invalid reference name')
2014-09-02 18:07:02 +05:30
end
end
2017-09-10 17:25:29 +05:30
describe 'DELETE /projects/:id/repository/branches/:branch' do
2015-09-11 14:41:01 +05:30
before do
allow_any_instance_of(Repository).to receive(:rm_branch).and_return(true)
end
2014-09-02 18:07:02 +05:30
2017-09-10 17:25:29 +05:30
it 'removes branch' do
2014-09-02 18:07:02 +05:30
delete api("/projects/#{project.id}/repository/branches/#{branch_name}", user)
2017-08-17 22:00:37 +05:30
2017-09-10 17:25:29 +05:30
expect(response).to have_gitlab_http_status(204)
2017-08-17 22:00:37 +05:30
end
2017-09-10 17:25:29 +05:30
it 'removes a branch with dots in the branch name' do
2017-08-17 22:00:37 +05:30
delete api("/projects/#{project.id}/repository/branches/#{branch_with_dot.name}", user)
2017-09-10 17:25:29 +05:30
expect(response).to have_gitlab_http_status(204)
2015-04-26 12:48:37 +05:30
end
2016-09-13 17:45:13 +05:30
it 'returns 404 if branch not exists' do
2015-04-26 12:48:37 +05:30
delete api("/projects/#{project.id}/repository/branches/foobar", user)
2014-09-02 18:07:02 +05:30
2017-09-10 17:25:29 +05:30
expect(response).to have_gitlab_http_status(404)
2014-09-02 18:07:02 +05:30
end
2018-03-17 18:26:18 +05:30
context 'when the branch refname is invalid' do
let(:branch_name) { 'branch*' }
let(:message) { 'The branch refname is invalid' }
it_behaves_like '400 response' do
let(:request) { delete api("/projects/#{project.id}/repository/branches/#{branch_name}", user) }
end
end
it_behaves_like '412 response' do
let(:request) { api("/projects/#{project.id}/repository/branches/#{branch_name}", user) }
end
2014-09-02 18:07:02 +05:30
end
2017-08-17 22:00:37 +05:30
2017-09-10 17:25:29 +05:30
describe 'DELETE /projects/:id/repository/merged_branches' do
2017-08-17 22:00:37 +05:30
before do
allow_any_instance_of(Repository).to receive(:rm_branch).and_return(true)
end
it 'returns 202 with json body' do
delete api("/projects/#{project.id}/repository/merged_branches", user)
2017-09-10 17:25:29 +05:30
expect(response).to have_gitlab_http_status(202)
2017-08-17 22:00:37 +05:30
expect(json_response['message']).to eql('202 Accepted')
end
it 'returns a 403 error if guest' do
delete api("/projects/#{project.id}/repository/merged_branches", guest)
2017-09-10 17:25:29 +05:30
expect(response).to have_gitlab_http_status(403)
2017-08-17 22:00:37 +05:30
end
end
2014-09-02 18:07:02 +05:30
end