debian-mirror-gitlab/spec/requests/api/internal/base_spec.rb

1209 lines
39 KiB
Ruby
Raw Normal View History

2019-12-26 22:10:19 +05:30
# frozen_string_literal: true
2014-09-02 18:07:02 +05:30
require 'spec_helper'
2019-12-04 20:38:33 +05:30
describe API::Internal::Base do
2020-04-22 19:07:51 +05:30
let_it_be(:user, reload: true) { create(:user) }
let_it_be(:project, reload: true) { create(:project, :repository, :wiki_repo) }
let_it_be(:personal_snippet) { create(:personal_snippet, :repository, author: user) }
let_it_be(:project_snippet) { create(:project_snippet, :repository, author: user, project: project) }
2014-09-02 18:07:02 +05:30
let(:key) { create(:key, user: user) }
2017-08-17 22:00:37 +05:30
let(:secret_token) { Gitlab::Shell.secret_token }
2018-03-17 18:26:18 +05:30
let(:gl_repository) { "project-#{project.id}" }
let(:reference_counter) { double('ReferenceCounter') }
2020-04-08 14:13:33 +05:30
let(:snippet_changes) { "#{TestEnv::BRANCH_SHA['snippet/single-file']} #{TestEnv::BRANCH_SHA['snippet/edit-file']} refs/heads/snippet/edit-file" }
2017-09-10 17:25:29 +05:30
describe "GET /internal/check" do
2014-09-02 18:07:02 +05:30
it do
2018-03-17 18:26:18 +05:30
expect_any_instance_of(Redis).to receive(:ping).and_return('PONG')
2019-02-15 15:39:39 +05:30
get api("/internal/check"), params: { secret_token: secret_token }
2014-09-02 18:07:02 +05:30
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:ok)
2015-04-26 12:48:37 +05:30
expect(json_response['api_version']).to eq(API::API.version)
2018-03-17 18:26:18 +05:30
expect(json_response['redis']).to be(true)
end
it 'returns false for field `redis` when redis is unavailable' do
expect_any_instance_of(Redis).to receive(:ping).and_raise(Errno::ENOENT)
2019-02-15 15:39:39 +05:30
get api("/internal/check"), params: { secret_token: secret_token }
2018-03-17 18:26:18 +05:30
expect(json_response['redis']).to be(false)
2015-04-26 12:48:37 +05:30
end
2019-07-07 11:18:12 +05:30
context 'authenticating' do
it 'authenticates using a header' do
get api("/internal/check"),
headers: { API::Helpers::GITLAB_SHARED_SECRET_HEADER => Base64.encode64(secret_token) }
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:ok)
2019-07-07 11:18:12 +05:30
end
it 'returns 401 when no credentials provided' do
get(api("/internal/check"))
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:unauthorized)
2019-07-07 11:18:12 +05:30
end
end
2015-04-26 12:48:37 +05:30
end
2016-09-29 09:46:39 +05:30
describe 'GET /internal/two_factor_recovery_codes' do
it 'returns an error message when the key does not exist' do
post api('/internal/two_factor_recovery_codes'),
2019-02-15 15:39:39 +05:30
params: {
secret_token: secret_token,
2020-04-22 19:07:51 +05:30
key_id: non_existing_record_id
2019-02-15 15:39:39 +05:30
}
2016-09-29 09:46:39 +05:30
expect(json_response['success']).to be_falsey
expect(json_response['message']).to eq('Could not find the given key')
end
it 'returns an error message when the key is a deploy key' do
deploy_key = create(:deploy_key)
post api('/internal/two_factor_recovery_codes'),
2019-02-15 15:39:39 +05:30
params: {
secret_token: secret_token,
key_id: deploy_key.id
}
2016-09-29 09:46:39 +05:30
expect(json_response['success']).to be_falsey
expect(json_response['message']).to eq('Deploy keys cannot be used to retrieve recovery codes')
end
it 'returns an error message when the user does not exist' do
key_without_user = create(:key, user: nil)
post api('/internal/two_factor_recovery_codes'),
2019-02-15 15:39:39 +05:30
params: {
secret_token: secret_token,
key_id: key_without_user.id
}
2016-09-29 09:46:39 +05:30
expect(json_response['success']).to be_falsey
expect(json_response['message']).to eq('Could not find a user for the given key')
expect(json_response['recovery_codes']).to be_nil
end
context 'when two-factor is enabled' do
it 'returns new recovery codes when the user exists' do
allow_any_instance_of(User).to receive(:two_factor_enabled?).and_return(true)
allow_any_instance_of(User)
.to receive(:generate_otp_backup_codes!).and_return(%w(119135e5a3ebce8e 34bd7b74adbc8861))
post api('/internal/two_factor_recovery_codes'),
2019-02-15 15:39:39 +05:30
params: {
secret_token: secret_token,
key_id: key.id
}
2016-09-29 09:46:39 +05:30
expect(json_response['success']).to be_truthy
expect(json_response['recovery_codes']).to match_array(%w(119135e5a3ebce8e 34bd7b74adbc8861))
end
end
context 'when two-factor is not enabled' do
it 'returns an error message' do
allow_any_instance_of(User).to receive(:two_factor_enabled?).and_return(false)
post api('/internal/two_factor_recovery_codes'),
2019-02-15 15:39:39 +05:30
params: {
secret_token: secret_token,
key_id: key.id
}
2016-09-29 09:46:39 +05:30
expect(json_response['success']).to be_falsey
expect(json_response['recovery_codes']).to be_nil
end
end
end
describe "POST /internal/lfs_authenticate" do
before do
2018-03-17 18:26:18 +05:30
project.add_developer(user)
2016-09-29 09:46:39 +05:30
end
context 'user key' do
it 'returns the correct information about the key' do
2018-11-18 11:00:15 +05:30
lfs_auth_key(key.id, project)
2016-09-29 09:46:39 +05:30
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:ok)
2016-09-29 09:46:39 +05:30
expect(json_response['username']).to eq(user.username)
expect(json_response['repository_http_path']).to eq(project.http_url_to_repo)
2019-07-07 11:18:12 +05:30
expect(json_response['expires_in']).to eq(Gitlab::LfsToken::DEFAULT_EXPIRE_TIME)
2019-02-15 15:39:39 +05:30
expect(Gitlab::LfsToken.new(key).token_valid?(json_response['lfs_token'])).to be_truthy
2016-09-29 09:46:39 +05:30
end
2018-11-18 11:00:15 +05:30
it 'returns the correct information about the user' do
lfs_auth_user(user.id, project)
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:ok)
2018-11-18 11:00:15 +05:30
expect(json_response['username']).to eq(user.username)
expect(json_response['repository_http_path']).to eq(project.http_url_to_repo)
2019-02-15 15:39:39 +05:30
expect(Gitlab::LfsToken.new(user).token_valid?(json_response['lfs_token'])).to be_truthy
2018-11-18 11:00:15 +05:30
end
it 'returns a 404 when no key or user is provided' do
lfs_auth_project(project)
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:not_found)
2018-11-18 11:00:15 +05:30
end
2016-09-29 09:46:39 +05:30
it 'returns a 404 when the wrong key is provided' do
2020-04-22 19:07:51 +05:30
lfs_auth_key(non_existing_record_id, project)
2018-11-18 11:00:15 +05:30
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:not_found)
2018-11-18 11:00:15 +05:30
end
it 'returns a 404 when the wrong user is provided' do
2020-04-22 19:07:51 +05:30
lfs_auth_user(non_existing_record_id, project)
2016-09-29 09:46:39 +05:30
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:not_found)
2016-09-29 09:46:39 +05:30
end
end
context 'deploy key' do
let(:key) { create(:deploy_key) }
it 'returns the correct information about the key' do
2018-11-18 11:00:15 +05:30
lfs_auth_key(key.id, project)
2016-09-29 09:46:39 +05:30
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:ok)
2016-09-29 09:46:39 +05:30
expect(json_response['username']).to eq("lfs+deploy-key-#{key.id}")
expect(json_response['repository_http_path']).to eq(project.http_url_to_repo)
2019-02-15 15:39:39 +05:30
expect(Gitlab::LfsToken.new(key).token_valid?(json_response['lfs_token'])).to be_truthy
2016-09-29 09:46:39 +05:30
end
end
end
2014-09-02 18:07:02 +05:30
describe "GET /internal/discover" do
2018-11-18 11:00:15 +05:30
it "finds a user by key id" do
2019-02-15 15:39:39 +05:30
get(api("/internal/discover"), params: { key_id: key.id, secret_token: secret_token })
2014-09-02 18:07:02 +05:30
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:ok)
2014-09-02 18:07:02 +05:30
2015-04-26 12:48:37 +05:30
expect(json_response['name']).to eq(user.name)
2014-09-02 18:07:02 +05:30
end
2018-11-18 11:00:15 +05:30
it "finds a user by username" do
2019-02-15 15:39:39 +05:30
get(api("/internal/discover"), params: { username: user.username, secret_token: secret_token })
2018-11-18 11:00:15 +05:30
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:ok)
2018-11-18 11:00:15 +05:30
expect(json_response['name']).to eq(user.name)
end
2019-07-07 11:18:12 +05:30
it 'responds successfully when a user is not found' do
2020-01-01 13:55:28 +05:30
get(api('/internal/discover'), params: { username: 'noone', secret_token: secret_token })
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:ok)
2020-01-01 13:55:28 +05:30
expect(response.body).to eq('null')
end
it 'response successfully when passing invalid params' do
get(api('/internal/discover'), params: { nothing: 'to find a user', secret_token: secret_token })
2019-07-07 11:18:12 +05:30
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:ok)
2019-07-07 11:18:12 +05:30
expect(response.body).to eq('null')
end
2014-09-02 18:07:02 +05:30
end
2018-03-17 18:26:18 +05:30
describe "GET /internal/authorized_keys" do
context "using an existing key's fingerprint" do
it "finds the key" do
2019-02-15 15:39:39 +05:30
get(api('/internal/authorized_keys'), params: { fingerprint: key.fingerprint, secret_token: secret_token })
2018-03-17 18:26:18 +05:30
2020-04-22 19:07:51 +05:30
expect(response).to have_gitlab_http_status(:ok)
2018-03-17 18:26:18 +05:30
expect(json_response["key"]).to eq(key.key)
end
end
context "non existing key's fingerprint" do
it "returns 404" do
2019-02-15 15:39:39 +05:30
get(api('/internal/authorized_keys'), params: { fingerprint: "no:t-:va:li:d0", secret_token: secret_token })
2018-03-17 18:26:18 +05:30
2020-04-22 19:07:51 +05:30
expect(response).to have_gitlab_http_status(:not_found)
2018-03-17 18:26:18 +05:30
end
end
context "using a partial fingerprint" do
it "returns 404" do
2019-02-15 15:39:39 +05:30
get(api('/internal/authorized_keys'), params: { fingerprint: "#{key.fingerprint[0..5]}%", secret_token: secret_token })
2018-03-17 18:26:18 +05:30
2020-04-22 19:07:51 +05:30
expect(response).to have_gitlab_http_status(:not_found)
2018-03-17 18:26:18 +05:30
end
end
context "sending the key" do
it "finds the key" do
2019-02-15 15:39:39 +05:30
get(api('/internal/authorized_keys'), params: { key: key.key.split[1], secret_token: secret_token })
2018-03-17 18:26:18 +05:30
2020-04-22 19:07:51 +05:30
expect(response).to have_gitlab_http_status(:ok)
2018-03-17 18:26:18 +05:30
expect(json_response["key"]).to eq(key.key)
end
it "returns 404 with a partial key" do
2019-02-15 15:39:39 +05:30
get(api('/internal/authorized_keys'), params: { key: key.key.split[1][0...-3], secret_token: secret_token })
2018-03-17 18:26:18 +05:30
2020-04-22 19:07:51 +05:30
expect(response).to have_gitlab_http_status(:not_found)
2018-03-17 18:26:18 +05:30
end
it "returns 404 with an not valid base64 string" do
2019-02-15 15:39:39 +05:30
get(api('/internal/authorized_keys'), params: { key: "whatever!", secret_token: secret_token })
2018-03-17 18:26:18 +05:30
2020-04-22 19:07:51 +05:30
expect(response).to have_gitlab_http_status(:not_found)
2018-03-17 18:26:18 +05:30
end
end
end
2017-09-10 17:25:29 +05:30
describe "POST /internal/allowed", :clean_gitlab_redis_shared_state do
2014-09-02 18:07:02 +05:30
context "access granted" do
2020-04-08 14:13:33 +05:30
let(:env) { {} }
2018-03-17 18:26:18 +05:30
around do |example|
Timecop.freeze { example.run }
2017-08-17 22:00:37 +05:30
end
2018-03-17 18:26:18 +05:30
before do
project.add_developer(user)
2017-08-17 22:00:37 +05:30
end
2020-04-08 14:13:33 +05:30
shared_examples 'sets hook env' do
context 'with env passed as a JSON' do
let(:obj_dir_relative) { './objects' }
let(:alt_obj_dirs_relative) { ['./alt-objects-1', './alt-objects-2'] }
let(:env) do
{
GIT_OBJECT_DIRECTORY_RELATIVE: obj_dir_relative,
GIT_ALTERNATE_OBJECT_DIRECTORIES_RELATIVE: alt_obj_dirs_relative
}
end
2018-03-17 18:26:18 +05:30
2020-04-08 14:13:33 +05:30
it 'sets env in RequestStore' do
expect(Gitlab::Git::HookEnv).to receive(:set).with(gl_repository, env.stringify_keys)
2018-03-17 18:26:18 +05:30
2020-04-08 14:13:33 +05:30
subject
2018-05-09 12:01:36 +05:30
2020-04-08 14:13:33 +05:30
expect(response).to have_gitlab_http_status(:ok)
end
2017-08-17 22:00:37 +05:30
end
2014-09-02 18:07:02 +05:30
end
2016-06-02 11:05:42 +05:30
context "git push with project.wiki" do
2020-04-08 14:13:33 +05:30
subject { push(key, project.wiki, env: env.to_json) }
2016-06-02 11:05:42 +05:30
it 'responds with success' do
2020-04-08 14:13:33 +05:30
subject
2016-08-24 12:49:21 +05:30
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:ok)
2016-08-24 12:49:21 +05:30
expect(json_response["status"]).to be_truthy
2019-07-07 11:18:12 +05:30
expect(json_response["gl_project_path"]).to eq(project.wiki.full_path)
2017-08-17 22:00:37 +05:30
expect(json_response["gl_repository"]).to eq("wiki-#{project.id}")
2018-11-18 11:00:15 +05:30
expect(user.reload.last_activity_on).to be_nil
2016-08-24 12:49:21 +05:30
end
2020-04-08 14:13:33 +05:30
it_behaves_like 'sets hook env' do
let(:gl_repository) { Gitlab::GlRepository::WIKI.identifier_for_container(project) }
end
2016-08-24 12:49:21 +05:30
end
2016-06-02 11:05:42 +05:30
2016-08-24 12:49:21 +05:30
context "git pull with project.wiki" do
it 'responds with success' do
pull(key, project.wiki)
2016-06-02 11:05:42 +05:30
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:ok)
2016-06-02 11:05:42 +05:30
expect(json_response["status"]).to be_truthy
2019-07-07 11:18:12 +05:30
expect(json_response["gl_project_path"]).to eq(project.wiki.full_path)
2017-08-17 22:00:37 +05:30
expect(json_response["gl_repository"]).to eq("wiki-#{project.id}")
2018-11-18 11:00:15 +05:30
expect(user.reload.last_activity_on).to eql(Date.today)
2016-06-02 11:05:42 +05:30
end
end
2020-04-08 14:13:33 +05:30
shared_examples 'snippets with disabled feature flag' do
context 'when feature flag :version_snippets is disabled' do
2020-04-22 19:07:51 +05:30
it 'returns 401' do
2020-04-08 14:13:33 +05:30
stub_feature_flags(version_snippets: false)
subject
2020-04-22 19:07:51 +05:30
expect(response).to have_gitlab_http_status(:unauthorized)
end
end
end
shared_examples 'snippet success' do
it 'responds with success' do
subject
expect(response).to have_gitlab_http_status(:ok)
expect(json_response['status']).to be_truthy
end
end
shared_examples 'snippets with web protocol' do
it_behaves_like 'snippet success'
context 'with disabled version flag' do
before do
stub_feature_flags(version_snippets: false)
2020-04-08 14:13:33 +05:30
end
2020-04-22 19:07:51 +05:30
it_behaves_like 'snippet success'
2020-04-08 14:13:33 +05:30
end
end
context 'git push with personal snippet' do
subject { push(key, personal_snippet, env: env.to_json, changes: snippet_changes) }
it 'responds with success' do
subject
expect(response).to have_gitlab_http_status(:ok)
expect(json_response["status"]).to be_truthy
expect(json_response["gl_project_path"]).to eq(personal_snippet.repository.full_path)
expect(json_response["gl_repository"]).to eq("snippet-#{personal_snippet.id}")
expect(user.reload.last_activity_on).to be_nil
end
it_behaves_like 'snippets with disabled feature flag'
2020-04-22 19:07:51 +05:30
it_behaves_like 'snippets with web protocol' do
subject { push(key, personal_snippet, 'web', env: env.to_json, changes: snippet_changes) }
end
2020-04-08 14:13:33 +05:30
it_behaves_like 'sets hook env' do
let(:gl_repository) { Gitlab::GlRepository::SNIPPET.identifier_for_container(personal_snippet) }
end
end
context 'git pull with personal snippet' do
2020-04-22 19:07:51 +05:30
subject { pull(key, personal_snippet) }
2020-04-08 14:13:33 +05:30
it 'responds with success' do
2020-04-22 19:07:51 +05:30
subject
2020-04-08 14:13:33 +05:30
expect(response).to have_gitlab_http_status(:ok)
expect(json_response["status"]).to be_truthy
expect(json_response["gl_project_path"]).to eq(personal_snippet.repository.full_path)
expect(json_response["gl_repository"]).to eq("snippet-#{personal_snippet.id}")
expect(user.reload.last_activity_on).to eql(Date.today)
end
2020-04-22 19:07:51 +05:30
it_behaves_like 'snippets with disabled feature flag'
it_behaves_like 'snippets with web protocol' do
subject { pull(key, personal_snippet, 'web') }
2020-04-08 14:13:33 +05:30
end
end
context 'git push with project snippet' do
subject { push(key, project_snippet, env: env.to_json, changes: snippet_changes) }
it 'responds with success' do
subject
expect(response).to have_gitlab_http_status(:ok)
expect(json_response["status"]).to be_truthy
expect(json_response["gl_project_path"]).to eq(project_snippet.repository.full_path)
expect(json_response["gl_repository"]).to eq("snippet-#{project_snippet.id}")
expect(user.reload.last_activity_on).to be_nil
end
it_behaves_like 'snippets with disabled feature flag'
2020-04-22 19:07:51 +05:30
it_behaves_like 'snippets with web protocol' do
subject { push(key, project_snippet, 'web', env: env.to_json, changes: snippet_changes) }
end
2020-04-08 14:13:33 +05:30
it_behaves_like 'sets hook env' do
let(:gl_repository) { Gitlab::GlRepository::SNIPPET.identifier_for_container(project_snippet) }
end
end
context 'git pull with project snippet' do
it 'responds with success' do
pull(key, project_snippet)
expect(response).to have_gitlab_http_status(:ok)
expect(json_response["status"]).to be_truthy
expect(json_response["gl_project_path"]).to eq(project_snippet.repository.full_path)
expect(json_response["gl_repository"]).to eq("snippet-#{project_snippet.id}")
expect(user.reload.last_activity_on).to eql(Date.today)
end
it_behaves_like 'snippets with disabled feature flag' do
subject { pull(key, project_snippet) }
end
2020-04-22 19:07:51 +05:30
it_behaves_like 'snippets with web protocol' do
subject { pull(key, project_snippet, 'web') }
end
2020-04-08 14:13:33 +05:30
end
2014-09-02 18:07:02 +05:30
context "git pull" do
2020-03-13 15:44:24 +05:30
before do
allow(Feature).to receive(:persisted_names).and_return(%w[gitaly_mep_mep])
end
2018-03-17 18:26:18 +05:30
it "has the correct payload" do
pull(key, project)
2017-09-10 17:25:29 +05:30
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:ok)
2018-03-17 18:26:18 +05:30
expect(json_response["status"]).to be_truthy
expect(json_response["gl_repository"]).to eq("project-#{project.id}")
2019-07-07 11:18:12 +05:30
expect(json_response["gl_project_path"]).to eq(project.full_path)
2018-03-17 18:26:18 +05:30
expect(json_response["gitaly"]).not_to be_nil
expect(json_response["gitaly"]["repository"]).not_to be_nil
expect(json_response["gitaly"]["repository"]["storage_name"]).to eq(project.repository.gitaly_repository.storage_name)
expect(json_response["gitaly"]["repository"]["relative_path"]).to eq(project.repository.gitaly_repository.relative_path)
expect(json_response["gitaly"]["address"]).to eq(Gitlab::GitalyClient.address(project.repository_storage))
expect(json_response["gitaly"]["token"]).to eq(Gitlab::GitalyClient.token(project.repository_storage))
2020-03-13 15:44:24 +05:30
expect(json_response["gitaly"]["features"]).to eq('gitaly-feature-mep-mep' => 'true')
2018-11-18 11:00:15 +05:30
expect(user.reload.last_activity_on).to eql(Date.today)
2014-09-02 18:07:02 +05:30
end
end
context "git push" do
2018-03-27 19:54:05 +05:30
context 'project as namespace/project' do
it do
2017-09-10 17:25:29 +05:30
push(key, project)
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:ok)
2017-09-10 17:25:29 +05:30
expect(json_response["status"]).to be_truthy
expect(json_response["gl_repository"]).to eq("project-#{project.id}")
2019-07-07 11:18:12 +05:30
expect(json_response["gl_project_path"]).to eq(project.full_path)
2017-09-10 17:25:29 +05:30
expect(json_response["gitaly"]).not_to be_nil
expect(json_response["gitaly"]["repository"]).not_to be_nil
expect(json_response["gitaly"]["repository"]["storage_name"]).to eq(project.repository.gitaly_repository.storage_name)
expect(json_response["gitaly"]["repository"]["relative_path"]).to eq(project.repository.gitaly_repository.relative_path)
expect(json_response["gitaly"]["address"]).to eq(Gitlab::GitalyClient.address(project.repository_storage))
expect(json_response["gitaly"]["token"]).to eq(Gitlab::GitalyClient.token(project.repository_storage))
2018-11-18 11:00:15 +05:30
expect(user.reload.last_activity_on).to be_nil
2017-09-10 17:25:29 +05:30
end
2017-08-17 22:00:37 +05:30
end
2018-11-20 20:47:30 +05:30
context 'when receive_max_input_size has been updated' do
2019-12-21 20:55:43 +05:30
before do
2018-11-20 20:47:30 +05:30
allow(Gitlab::CurrentSettings).to receive(:receive_max_input_size) { 1 }
2019-12-21 20:55:43 +05:30
end
2018-11-20 20:47:30 +05:30
2019-12-21 20:55:43 +05:30
it 'returns custom git config' do
2018-11-20 20:47:30 +05:30
push(key, project)
expect(json_response["git_config_options"]).to be_present
2019-12-21 20:55:43 +05:30
expect(json_response["git_config_options"]).to include("uploadpack.allowFilter=true")
expect(json_response["git_config_options"]).to include("uploadpack.allowAnySHA1InWant=true")
end
context 'when gitaly_upload_pack_filter feature flag is disabled' do
before do
stub_feature_flags(gitaly_upload_pack_filter: { enabled: false, thing: project })
end
it 'does not include allowFilter and allowAnySha1InWant in the git config options' do
push(key, project)
expect(json_response["git_config_options"]).to be_present
expect(json_response["git_config_options"]).not_to include("uploadpack.allowFilter=true")
expect(json_response["git_config_options"]).not_to include("uploadpack.allowAnySHA1InWant=true")
end
2018-11-20 20:47:30 +05:30
end
end
context 'when receive_max_input_size is empty' do
it 'returns an empty git config' do
allow(Gitlab::CurrentSettings).to receive(:receive_max_input_size) { nil }
push(key, project)
expect(json_response["git_config_options"]).to be_empty
end
end
2014-09-02 18:07:02 +05:30
end
2020-03-13 15:44:24 +05:30
2020-04-08 14:13:33 +05:30
context 'with Project' do
it_behaves_like 'storing arguments in the application context' do
let(:expected_params) { { user: key.user.username, project: project.full_path } }
subject { push(key, project) }
end
end
context 'with PersonalSnippet' do
it_behaves_like 'storing arguments in the application context' do
let(:expected_params) { { user: key.user.username } }
subject { push(key, personal_snippet) }
end
end
context 'with ProjectSnippet' do
it_behaves_like 'storing arguments in the application context' do
let(:expected_params) { { user: key.user.username, project: project_snippet.project.full_path } }
2020-03-13 15:44:24 +05:30
2020-04-08 14:13:33 +05:30
subject { push(key, project_snippet) }
end
2020-03-13 15:44:24 +05:30
end
2014-09-02 18:07:02 +05:30
end
context "access denied" do
before do
2018-03-17 18:26:18 +05:30
project.add_guest(user)
2014-09-02 18:07:02 +05:30
end
context "git pull" do
it do
pull(key, project)
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:unauthorized)
2015-04-26 12:48:37 +05:30
expect(json_response["status"]).to be_falsey
2018-11-18 11:00:15 +05:30
expect(user.reload.last_activity_on).to be_nil
2014-09-02 18:07:02 +05:30
end
end
context "git push" do
it do
push(key, project)
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:unauthorized)
2015-04-26 12:48:37 +05:30
expect(json_response["status"]).to be_falsey
2018-11-18 11:00:15 +05:30
expect(user.reload.last_activity_on).to be_nil
2014-09-02 18:07:02 +05:30
end
end
end
2018-11-20 20:47:30 +05:30
context "custom action" do
let(:access_checker) { double(Gitlab::GitAccess) }
let(:payload) do
{
'action' => 'geo_proxy_to_primary',
'data' => {
2020-04-22 19:07:51 +05:30
'api_endpoints' => %w{geo/proxy_git_ssh/info_refs_receive_pack geo/proxy_git_ssh/receive_pack},
2018-11-20 20:47:30 +05:30
'gl_username' => 'testuser',
'primary_repo' => 'http://localhost:3000/testuser/repo.git'
}
}
end
2019-12-26 22:10:19 +05:30
let(:console_messages) { ['informational message'] }
let(:custom_action_result) { Gitlab::GitAccessResult::CustomAction.new(payload, console_messages) }
2018-11-20 20:47:30 +05:30
before do
project.add_guest(user)
expect(Gitlab::GitAccess).to receive(:new).with(
key,
project,
'ssh',
{
authentication_abilities: [:read_project, :download_code, :push_code],
2019-09-30 21:07:59 +05:30
namespace_path: project.namespace.path,
2020-04-08 14:13:33 +05:30
repository_path: project.path,
2018-11-20 20:47:30 +05:30
redirected_path: nil
}
).and_return(access_checker)
expect(access_checker).to receive(:check).with(
'git-receive-pack',
'd14d6c0abdd253381df51a723d58691b2ee1ab08 570e7b2abdd848b95f2f578043fc23bd6f6fd24d refs/heads/master'
).and_return(custom_action_result)
end
context "git push" do
it do
push(key, project)
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:multiple_choices)
2018-11-20 20:47:30 +05:30
expect(json_response['status']).to be_truthy
expect(json_response['payload']).to eql(payload)
2019-12-26 22:10:19 +05:30
expect(json_response['gl_console_messages']).to eql(console_messages)
2018-11-20 20:47:30 +05:30
expect(user.reload.last_activity_on).to be_nil
end
end
end
2019-07-07 11:18:12 +05:30
context "console message" do
before do
project.add_developer(user)
end
2020-04-08 14:13:33 +05:30
context 'git pull' do
context 'with a key that has expired' do
let(:key) { create(:key, user: user, expires_at: 2.days.ago) }
it 'includes the `key expired` message in the response' do
2019-07-07 11:18:12 +05:30
pull(key, project)
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:ok)
2020-04-08 14:13:33 +05:30
expect(json_response['gl_console_messages']).to eq(['INFO: Your SSH key has expired. Please generate a new key.'])
2019-07-07 11:18:12 +05:30
end
end
2020-04-08 14:13:33 +05:30
context 'with a key that will expire in the next 7 days' do
let(:key) { create(:key, user: user, expires_at: 2.days.from_now) }
2019-07-07 11:18:12 +05:30
2020-04-08 14:13:33 +05:30
it 'includes the `key expiring soon` message in the response' do
pull(key, project)
expect(response).to have_gitlab_http_status(:ok)
expect(json_response['gl_console_messages']).to eq(['INFO: Your SSH key is expiring soon. Please generate a new key.'])
end
end
2019-07-07 11:18:12 +05:30
2020-04-08 14:13:33 +05:30
context 'with a key that has no expiry' do
it 'does not include any message in the response' do
2019-07-07 11:18:12 +05:30
pull(key, project)
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:ok)
2020-04-08 14:13:33 +05:30
expect(json_response['gl_console_messages']).to eq([])
2019-07-07 11:18:12 +05:30
end
end
end
end
2014-09-02 18:07:02 +05:30
context "blocked user" do
2017-09-10 17:25:29 +05:30
let(:personal_project) { create(:project, namespace: user.namespace) }
2014-09-02 18:07:02 +05:30
before do
user.block
end
context "git pull" do
it do
pull(key, personal_project)
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:unauthorized)
2015-04-26 12:48:37 +05:30
expect(json_response["status"]).to be_falsey
2018-11-18 11:00:15 +05:30
expect(user.reload.last_activity_on).to be_nil
2014-09-02 18:07:02 +05:30
end
end
context "git push" do
it do
push(key, personal_project)
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:unauthorized)
2015-04-26 12:48:37 +05:30
expect(json_response["status"]).to be_falsey
2018-11-18 11:00:15 +05:30
expect(user.reload.last_activity_on).to be_nil
2018-12-13 13:39:08 +05:30
end
end
end
context 'request times out' do
context 'git push' do
it 'responds with a gateway timeout' do
personal_project = create(:project, namespace: user.namespace)
expect_next_instance_of(Gitlab::GitAccess) do |access|
expect(access).to receive(:check).and_raise(Gitlab::GitAccess::TimeoutError, "Foo")
end
push(key, personal_project)
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:service_unavailable)
2018-12-13 13:39:08 +05:30
expect(json_response['status']).to be_falsey
expect(json_response['message']).to eq("Foo")
expect(user.reload.last_activity_on).to be_nil
2014-09-02 18:07:02 +05:30
end
end
end
context "archived project" do
before do
2018-03-17 18:26:18 +05:30
project.add_developer(user)
2018-11-18 11:00:15 +05:30
::Projects::UpdateService.new(project, user, archived: true).execute
2014-09-02 18:07:02 +05:30
end
context "git pull" do
it do
pull(key, project)
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:ok)
2015-04-26 12:48:37 +05:30
expect(json_response["status"]).to be_truthy
2014-09-02 18:07:02 +05:30
end
end
context "git push" do
it do
push(key, project)
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:unauthorized)
2015-04-26 12:48:37 +05:30
expect(json_response["status"]).to be_falsey
2014-09-02 18:07:02 +05:30
end
end
end
context "deploy key" do
let(:key) { create(:deploy_key) }
context "added to project" do
before do
key.projects << project
end
it do
archive(key, project)
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:ok)
2015-04-26 12:48:37 +05:30
expect(json_response["status"]).to be_truthy
2018-05-09 12:01:36 +05:30
expect(json_response["gitaly"]).not_to be_nil
expect(json_response["gitaly"]["repository"]).not_to be_nil
expect(json_response["gitaly"]["repository"]["storage_name"]).to eq(project.repository.gitaly_repository.storage_name)
expect(json_response["gitaly"]["repository"]["relative_path"]).to eq(project.repository.gitaly_repository.relative_path)
expect(json_response["gitaly"]["address"]).to eq(Gitlab::GitalyClient.address(project.repository_storage))
expect(json_response["gitaly"]["token"]).to eq(Gitlab::GitalyClient.token(project.repository_storage))
2014-09-02 18:07:02 +05:30
end
end
context "not added to project" do
it do
archive(key, project)
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:not_found)
2015-04-26 12:48:37 +05:30
expect(json_response["status"]).to be_falsey
2014-09-02 18:07:02 +05:30
end
end
end
2015-04-26 12:48:37 +05:30
context 'project does not exist' do
2020-04-25 10:58:03 +05:30
context 'git pull' do
it 'returns a 200 response with status: false' do
project.destroy
2018-03-27 19:54:05 +05:30
2020-04-25 10:58:03 +05:30
pull(key, project)
2015-04-26 12:48:37 +05:30
2020-04-25 10:58:03 +05:30
expect(response).to have_gitlab_http_status(:not_found)
expect(json_response["status"]).to be_falsey
end
it 'returns a 200 response when using a project path that does not exist' do
post(
api("/internal/allowed"),
params: {
key_id: key.id,
project: 'project/does-not-exist.git',
action: 'git-upload-pack',
secret_token: secret_token,
protocol: 'ssh'
}
)
expect(response).to have_gitlab_http_status(:not_found)
expect(json_response["status"]).to be_falsey
end
2015-04-26 12:48:37 +05:30
end
2019-07-07 11:18:12 +05:30
2020-04-25 10:58:03 +05:30
context 'git push' do
before do
stub_const('Gitlab::QueryLimiting::Transaction::THRESHOLD', 120)
end
2019-07-07 11:18:12 +05:30
2020-04-25 10:58:03 +05:30
subject { push_with_path(key, full_path: path, changes: '_any') }
context 'from a user/group namespace' do
let!(:path) { "#{user.namespace.path}/notexist.git" }
it 'creates the project' do
expect do
subject
end.to change { Project.count }.by(1)
expect(response).to have_gitlab_http_status(:ok)
expect(json_response['status']).to be_truthy
end
end
context 'from the personal snippet path' do
let!(:path) { 'snippets/notexist.git' }
it 'does not create snippet' do
expect do
subject
end.not_to change { Snippet.count }
expect(response).to have_gitlab_http_status(:not_found)
end
end
context 'from a project path' do
context 'from an non existent project path' do
let!(:path) { "#{user.namespace.path}/notexist/snippets/notexist.git" }
it 'does not create project' do
expect do
subject
end.not_to change { Project.count }
expect(response).to have_gitlab_http_status(:not_found)
end
it 'does not create snippet' do
expect do
subject
end.not_to change { Snippet.count }
expect(response).to have_gitlab_http_status(:not_found)
end
end
context 'from an existent project path' do
let!(:path) { "#{project.full_path}/notexist/snippets/notexist.git" }
it 'does not create snippet' do
expect do
subject
end.not_to change { Snippet.count }
expect(response).to have_gitlab_http_status(:not_found)
end
end
end
2019-07-07 11:18:12 +05:30
end
2015-04-26 12:48:37 +05:30
end
context 'user does not exist' do
it do
pull(OpenStruct.new(id: 0), project)
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:not_found)
2015-04-26 12:48:37 +05:30
expect(json_response["status"]).to be_falsey
end
end
2016-08-24 12:49:21 +05:30
context 'ssh access has been disabled' do
before do
2017-08-17 22:00:37 +05:30
stub_application_setting(enabled_git_access_protocol: 'http')
2016-08-24 12:49:21 +05:30
end
it 'rejects the SSH push' do
push(key, project)
2020-04-08 14:13:33 +05:30
expect(response).to have_gitlab_http_status(:unauthorized)
2016-08-24 12:49:21 +05:30
expect(json_response['status']).to be_falsey
expect(json_response['message']).to eq 'Git access over SSH is not allowed'
end
it 'rejects the SSH pull' do
pull(key, project)
2020-04-08 14:13:33 +05:30
expect(response).to have_gitlab_http_status(:unauthorized)
2016-08-24 12:49:21 +05:30
expect(json_response['status']).to be_falsey
expect(json_response['message']).to eq 'Git access over SSH is not allowed'
end
end
context 'http access has been disabled' do
before do
2017-08-17 22:00:37 +05:30
stub_application_setting(enabled_git_access_protocol: 'ssh')
2016-08-24 12:49:21 +05:30
end
it 'rejects the HTTP push' do
push(key, project, 'http')
2020-04-08 14:13:33 +05:30
expect(response).to have_gitlab_http_status(:unauthorized)
2016-08-24 12:49:21 +05:30
expect(json_response['status']).to be_falsey
expect(json_response['message']).to eq 'Git access over HTTP is not allowed'
end
it 'rejects the HTTP pull' do
pull(key, project, 'http')
2020-04-08 14:13:33 +05:30
expect(response).to have_gitlab_http_status(:unauthorized)
2016-08-24 12:49:21 +05:30
expect(json_response['status']).to be_falsey
expect(json_response['message']).to eq 'Git access over HTTP is not allowed'
end
end
context 'web actions are always allowed' do
it 'allows WEB push' do
2017-08-17 22:00:37 +05:30
stub_application_setting(enabled_git_access_protocol: 'ssh')
2018-03-17 18:26:18 +05:30
project.add_developer(user)
2016-08-24 12:49:21 +05:30
push(key, project, 'web')
2020-04-22 19:07:51 +05:30
expect(response).to have_gitlab_http_status(:ok)
2016-08-24 12:49:21 +05:30
expect(json_response['status']).to be_truthy
end
end
2017-09-10 17:25:29 +05:30
context 'the project path was changed' do
2018-03-27 19:54:05 +05:30
let(:project) { create(:project, :repository, :legacy_storage) }
2018-03-17 18:26:18 +05:30
let!(:repository) { project.repository }
2017-09-10 17:25:29 +05:30
before do
2018-03-17 18:26:18 +05:30
project.add_developer(user)
2017-09-10 17:25:29 +05:30
project.path = 'new_path'
project.save!
end
it 'rejects the push' do
2018-03-17 18:26:18 +05:30
push(key, project)
2017-09-10 17:25:29 +05:30
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:not_found)
2018-03-17 18:26:18 +05:30
expect(json_response['status']).to be_falsy
2017-09-10 17:25:29 +05:30
end
it 'rejects the SSH pull' do
2018-03-17 18:26:18 +05:30
pull(key, project)
2017-09-10 17:25:29 +05:30
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:not_found)
2018-03-17 18:26:18 +05:30
expect(json_response['status']).to be_falsy
2017-09-10 17:25:29 +05:30
end
end
2014-09-02 18:07:02 +05:30
end
2018-03-17 18:26:18 +05:30
describe 'POST /internal/post_receive', :clean_gitlab_redis_shared_state do
let(:identifier) { 'key-123' }
2020-03-13 15:44:24 +05:30
let(:branch_name) { 'feature' }
let(:push_options) { ['ci.skip', 'another push option'] }
2018-03-17 18:26:18 +05:30
let(:valid_params) do
{
gl_repository: gl_repository,
secret_token: secret_token,
identifier: identifier,
2019-02-15 15:39:39 +05:30
changes: changes,
push_options: push_options
2018-03-17 18:26:18 +05:30
}
end
let(:changes) do
2019-07-07 11:18:12 +05:30
"#{Gitlab::Git::BLANK_SHA} 570e7b2abdd848b95f2f578043fc23bd6f6fd24d refs/heads/#{branch_name}"
2018-03-17 18:26:18 +05:30
end
2020-03-13 15:44:24 +05:30
subject { post api('/internal/post_receive'), params: valid_params }
2019-02-15 15:39:39 +05:30
2018-03-17 18:26:18 +05:30
before do
project.add_developer(user)
allow_any_instance_of(Gitlab::Identifier).to receive(:identify).and_return(user)
end
2020-04-08 14:13:33 +05:30
context 'with Project' do
it 'executes PostReceiveService' do
message = <<~MESSAGE.strip
To create a merge request for #{branch_name}, visit:
http://#{Gitlab.config.gitlab.host}/#{project.full_path}/-/merge_requests/new?merge_request%5Bsource_branch%5D=#{branch_name}
MESSAGE
subject
2019-12-04 20:38:33 +05:30
2020-04-08 14:13:33 +05:30
expect(json_response).to eq({
'messages' => [{ 'message' => message, 'type' => 'basic' }],
'reference_counter_decreased' => true
})
end
2018-03-17 18:26:18 +05:30
2020-04-08 14:13:33 +05:30
it_behaves_like 'storing arguments in the application context' do
let(:expected_params) { { user: user.username, project: project.full_path } }
end
2019-12-21 20:55:43 +05:30
end
2020-04-08 14:13:33 +05:30
context 'with PersonalSnippet' do
let(:gl_repository) { "snippet-#{personal_snippet.id}" }
it 'executes PostReceiveService' do
subject
expect(json_response).to eq({
'messages' => [],
'reference_counter_decreased' => true
})
end
it_behaves_like 'storing arguments in the application context' do
let(:expected_params) { { user: key.user.username } }
let(:gl_repository) { "snippet-#{personal_snippet.id}" }
end
end
context 'with ProjectSnippet' do
let(:gl_repository) { "snippet-#{project_snippet.id}" }
it 'executes PostReceiveService' do
subject
expect(json_response).to eq({
'messages' => [],
'reference_counter_decreased' => true
})
end
it_behaves_like 'storing arguments in the application context' do
let(:expected_params) { { user: key.user.username, project: project_snippet.project.full_path } }
let(:gl_repository) { "snippet-#{project_snippet.id}" }
end
2018-03-17 18:26:18 +05:30
end
2020-03-13 15:44:24 +05:30
context 'with an orphaned write deploy key' do
it 'does not try to notify that project moved' do
allow_any_instance_of(Gitlab::Identifier).to receive(:identify).and_return(nil)
2018-03-17 18:26:18 +05:30
2020-03-13 15:44:24 +05:30
expect(Gitlab::Checks::ProjectMoved).not_to receive(:fetch_message)
2018-03-17 18:26:18 +05:30
2020-03-13 15:44:24 +05:30
subject
2018-03-17 18:26:18 +05:30
2020-03-13 15:44:24 +05:30
expect(response).to have_gitlab_http_status(:ok)
2018-03-17 18:26:18 +05:30
end
end
2020-03-13 15:44:24 +05:30
context 'when project is nil' do
2020-04-08 14:13:33 +05:30
context 'with Project' do
let(:gl_repository) { 'project-foo' }
2018-03-17 18:26:18 +05:30
2020-04-08 14:13:33 +05:30
it 'does not try to notify that project moved' do
allow(Gitlab::GlRepository).to receive(:parse).and_return([nil, nil, Gitlab::GlRepository::PROJECT])
2020-03-13 15:44:24 +05:30
2020-04-08 14:13:33 +05:30
expect(Gitlab::Checks::ProjectMoved).not_to receive(:fetch_message)
2018-03-17 18:26:18 +05:30
2020-04-08 14:13:33 +05:30
subject
2018-03-17 18:26:18 +05:30
2020-04-08 14:13:33 +05:30
expect(response).to have_gitlab_http_status(:ok)
end
end
context 'with PersonalSnippet' do
let(:gl_repository) { "snippet-#{personal_snippet.id}" }
it 'does not try to notify that project moved' do
allow(Gitlab::GlRepository).to receive(:parse).and_return([personal_snippet, nil, Gitlab::GlRepository::PROJECT])
expect(Gitlab::Checks::ProjectMoved).not_to receive(:fetch_message)
subject
expect(response).to have_gitlab_http_status(:ok)
end
2018-03-17 18:26:18 +05:30
end
end
end
describe 'POST /internal/pre_receive' do
let(:valid_params) do
{ gl_repository: gl_repository, secret_token: secret_token }
end
it 'decreases the reference counter and returns the result' do
expect(Gitlab::ReferenceCounter).to receive(:new).with(gl_repository)
.and_return(reference_counter)
expect(reference_counter).to receive(:increase).and_return(true)
2019-02-15 15:39:39 +05:30
post api("/internal/pre_receive"), params: valid_params
2018-03-17 18:26:18 +05:30
expect(json_response['reference_counter_increased']).to be(true)
end
end
2020-04-08 14:13:33 +05:30
def gl_repository_for(container)
case container
2018-03-27 19:54:05 +05:30
when ProjectWiki
2020-04-08 14:13:33 +05:30
Gitlab::GlRepository::WIKI.identifier_for_container(container.project)
2018-03-27 19:54:05 +05:30
when Project
2020-04-08 14:13:33 +05:30
Gitlab::GlRepository::PROJECT.identifier_for_container(container)
when Snippet
Gitlab::GlRepository::SNIPPET.identifier_for_container(container)
2018-03-27 19:54:05 +05:30
else
nil
2017-08-17 22:00:37 +05:30
end
2016-09-13 17:45:13 +05:30
end
2020-04-08 14:13:33 +05:30
def full_path_for(container)
case container
when PersonalSnippet
"snippets/#{container.id}"
when ProjectSnippet
"#{container.project.full_path}/snippets/#{container.id}"
else
container.full_path
end
end
def pull(key, container, protocol = 'ssh')
2015-04-26 12:48:37 +05:30
post(
2014-09-02 18:07:02 +05:30
api("/internal/allowed"),
2019-02-15 15:39:39 +05:30
params: {
key_id: key.id,
2020-04-08 14:13:33 +05:30
project: full_path_for(container),
gl_repository: gl_repository_for(container),
2019-02-15 15:39:39 +05:30
action: 'git-upload-pack',
secret_token: secret_token,
protocol: protocol
}
2017-09-10 17:25:29 +05:30
)
end
2020-04-08 14:13:33 +05:30
def push(key, container, protocol = 'ssh', env: nil, changes: nil)
2020-04-25 10:58:03 +05:30
push_with_path(key,
full_path: full_path_for(container),
gl_repository: gl_repository_for(container),
protocol: protocol,
env: env,
changes: changes)
end
def push_with_path(key, full_path:, gl_repository: nil, protocol: 'ssh', env: nil, changes: nil)
2020-04-08 14:13:33 +05:30
changes ||= 'd14d6c0abdd253381df51a723d58691b2ee1ab08 570e7b2abdd848b95f2f578043fc23bd6f6fd24d refs/heads/master'
2018-11-08 19:23:39 +05:30
params = {
2020-04-08 14:13:33 +05:30
changes: changes,
2014-09-02 18:07:02 +05:30
key_id: key.id,
2020-04-25 10:58:03 +05:30
project: full_path,
2017-09-10 17:25:29 +05:30
action: 'git-receive-pack',
secret_token: secret_token,
protocol: protocol,
env: env
2018-11-08 19:23:39 +05:30
}
2020-04-25 10:58:03 +05:30
params[:gl_repository] = gl_repository if gl_repository
2018-11-08 19:23:39 +05:30
2019-02-15 15:39:39 +05:30
post(
api("/internal/allowed"),
params: params
)
2017-09-10 17:25:29 +05:30
end
2020-04-08 14:13:33 +05:30
def archive(key, container)
2015-04-26 12:48:37 +05:30
post(
2014-09-02 18:07:02 +05:30
api("/internal/allowed"),
2019-02-15 15:39:39 +05:30
params: {
ref: 'master',
key_id: key.id,
2020-04-08 14:13:33 +05:30
project: full_path_for(container),
gl_repository: gl_repository_for(container),
2019-02-15 15:39:39 +05:30
action: 'git-upload-archive',
secret_token: secret_token,
protocol: 'ssh'
}
2014-09-02 18:07:02 +05:30
)
end
2016-09-29 09:46:39 +05:30
2018-11-18 11:00:15 +05:30
def lfs_auth_project(project)
post(
api("/internal/lfs_authenticate"),
2019-02-15 15:39:39 +05:30
params: {
secret_token: secret_token,
project: project.full_path
}
2018-11-18 11:00:15 +05:30
)
end
def lfs_auth_key(key_id, project)
2016-09-29 09:46:39 +05:30
post(
api("/internal/lfs_authenticate"),
2019-02-15 15:39:39 +05:30
params: {
key_id: key_id,
secret_token: secret_token,
project: project.full_path
}
2016-09-29 09:46:39 +05:30
)
end
2018-11-18 11:00:15 +05:30
def lfs_auth_user(user_id, project)
post(
api("/internal/lfs_authenticate"),
2019-02-15 15:39:39 +05:30
params: {
user_id: user_id,
secret_token: secret_token,
project: project.full_path
}
2018-11-18 11:00:15 +05:30
)
end
2014-09-02 18:07:02 +05:30
end