68 lines
1.6 KiB
Ruby
68 lines
1.6 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
require 'spec_helper'
|
|
|
|
describe GraphqlController do
|
|
before do
|
|
stub_feature_flags(graphql: true)
|
|
end
|
|
|
|
describe 'ArgumentError' do
|
|
let(:user) { create(:user) }
|
|
let(:message) { 'green ideas sleep furiously' }
|
|
|
|
before do
|
|
sign_in(user)
|
|
end
|
|
|
|
it 'handles argument errors' do
|
|
allow(subject).to receive(:execute) do
|
|
raise Gitlab::Graphql::Errors::ArgumentError, message
|
|
end
|
|
|
|
post :execute
|
|
|
|
expect(json_response).to include(
|
|
'errors' => include(a_hash_including('message' => message))
|
|
)
|
|
end
|
|
end
|
|
|
|
describe 'POST #execute' do
|
|
context 'when user is logged in' do
|
|
let(:user) { create(:user) }
|
|
|
|
before do
|
|
sign_in(user)
|
|
end
|
|
|
|
it 'returns 200 when user can access API' do
|
|
post :execute
|
|
|
|
expect(response).to have_gitlab_http_status(:ok)
|
|
end
|
|
|
|
it 'returns access denied template when user cannot access API' do
|
|
# User cannot access API in a couple of cases
|
|
# * When user is internal(like ghost users)
|
|
# * When user is blocked
|
|
expect(Ability).to receive(:allowed?).with(user, :log_in, :global).and_call_original
|
|
expect(Ability).to receive(:allowed?).with(user, :access_api, :global).and_return(false)
|
|
|
|
post :execute
|
|
|
|
expect(response).to have_gitlab_http_status(:forbidden)
|
|
expect(response).to render_template('errors/access_denied')
|
|
end
|
|
end
|
|
|
|
context 'when user is not logged in' do
|
|
it 'returns 200' do
|
|
post :execute
|
|
|
|
expect(response).to have_gitlab_http_status(:ok)
|
|
end
|
|
end
|
|
end
|
|
end
|