314 lines
13 KiB
Ruby
314 lines
13 KiB
Ruby
require 'spec_helper'
|
|
require 'mime/types'
|
|
|
|
describe API::API, api: true do
|
|
include ApiHelpers
|
|
|
|
let(:user) { create(:user) }
|
|
let(:user2) { create(:user) }
|
|
let!(:project) { create(:project, creator_id: user.id) }
|
|
let!(:master) { create(:project_member, :master, user: user, project: project) }
|
|
let!(:guest) { create(:project_member, :guest, user: user2, project: project) }
|
|
let!(:branch_name) { 'feature' }
|
|
let!(:branch_sha) { '0b4bc9a49b562e85de7cc9e834518ea6828729b9' }
|
|
|
|
describe "GET /projects/:id/repository/branches" do
|
|
it "returns an array of project branches" do
|
|
project.repository.expire_cache
|
|
|
|
get api("/projects/#{project.id}/repository/branches", user)
|
|
expect(response).to have_http_status(200)
|
|
expect(json_response).to be_an Array
|
|
branch_names = json_response.map { |x| x['name'] }
|
|
expect(branch_names).to match_array(project.repository.branch_names)
|
|
end
|
|
end
|
|
|
|
describe "GET /projects/:id/repository/branches/:branch" do
|
|
it "returns the branch information for a single branch" do
|
|
get api("/projects/#{project.id}/repository/branches/#{branch_name}", user)
|
|
expect(response).to have_http_status(200)
|
|
|
|
expect(json_response['name']).to eq(branch_name)
|
|
expect(json_response['commit']['id']).to eq(branch_sha)
|
|
expect(json_response['protected']).to eq(false)
|
|
expect(json_response['developers_can_push']).to eq(false)
|
|
expect(json_response['developers_can_merge']).to eq(false)
|
|
end
|
|
|
|
it "returns a 403 error if guest" do
|
|
get api("/projects/#{project.id}/repository/branches", user2)
|
|
expect(response).to have_http_status(403)
|
|
end
|
|
|
|
it "returns a 404 error if branch is not available" do
|
|
get api("/projects/#{project.id}/repository/branches/unknown", user)
|
|
expect(response).to have_http_status(404)
|
|
end
|
|
end
|
|
|
|
describe 'PUT /projects/:id/repository/branches/:branch/protect' do
|
|
context "when a protected branch doesn't already exist" do
|
|
it 'protects a single branch' do
|
|
put api("/projects/#{project.id}/repository/branches/#{branch_name}/protect", user)
|
|
|
|
expect(response).to have_http_status(200)
|
|
expect(json_response['name']).to eq(branch_name)
|
|
expect(json_response['commit']['id']).to eq(branch_sha)
|
|
expect(json_response['protected']).to eq(true)
|
|
expect(json_response['developers_can_push']).to eq(false)
|
|
expect(json_response['developers_can_merge']).to eq(false)
|
|
end
|
|
|
|
it 'protects a single branch and developers can push' do
|
|
put api("/projects/#{project.id}/repository/branches/#{branch_name}/protect", user),
|
|
developers_can_push: true
|
|
|
|
expect(response).to have_http_status(200)
|
|
expect(json_response['name']).to eq(branch_name)
|
|
expect(json_response['commit']['id']).to eq(branch_sha)
|
|
expect(json_response['protected']).to eq(true)
|
|
expect(json_response['developers_can_push']).to eq(true)
|
|
expect(json_response['developers_can_merge']).to eq(false)
|
|
end
|
|
|
|
it 'protects a single branch and developers can merge' do
|
|
put api("/projects/#{project.id}/repository/branches/#{branch_name}/protect", user),
|
|
developers_can_merge: true
|
|
|
|
expect(response).to have_http_status(200)
|
|
expect(json_response['name']).to eq(branch_name)
|
|
expect(json_response['commit']['id']).to eq(branch_sha)
|
|
expect(json_response['protected']).to eq(true)
|
|
expect(json_response['developers_can_push']).to eq(false)
|
|
expect(json_response['developers_can_merge']).to eq(true)
|
|
end
|
|
|
|
it 'protects a single branch and developers can push and merge' do
|
|
put api("/projects/#{project.id}/repository/branches/#{branch_name}/protect", user),
|
|
developers_can_push: true, developers_can_merge: true
|
|
|
|
expect(response).to have_http_status(200)
|
|
expect(json_response['name']).to eq(branch_name)
|
|
expect(json_response['commit']['id']).to eq(branch_sha)
|
|
expect(json_response['protected']).to eq(true)
|
|
expect(json_response['developers_can_push']).to eq(true)
|
|
expect(json_response['developers_can_merge']).to eq(true)
|
|
end
|
|
|
|
it 'protects a single branch and developers cannot push and merge' do
|
|
put api("/projects/#{project.id}/repository/branches/#{branch_name}/protect", user),
|
|
developers_can_push: 'tru', developers_can_merge: 'tr'
|
|
|
|
expect(response).to have_http_status(200)
|
|
expect(json_response['name']).to eq(branch_name)
|
|
expect(json_response['commit']['id']).to eq(branch_sha)
|
|
expect(json_response['protected']).to eq(true)
|
|
expect(json_response['developers_can_push']).to eq(false)
|
|
expect(json_response['developers_can_merge']).to eq(false)
|
|
end
|
|
end
|
|
|
|
context 'for an existing protected branch' do
|
|
before do
|
|
project.repository.add_branch(user, protected_branch.name, 'master')
|
|
end
|
|
|
|
context "when developers can push and merge" do
|
|
let(:protected_branch) { create(:protected_branch, :developers_can_push, :developers_can_merge, project: project, name: 'protected_branch') }
|
|
|
|
it 'updates that a developer cannot push or merge' do
|
|
put api("/projects/#{project.id}/repository/branches/#{protected_branch.name}/protect", user),
|
|
developers_can_push: false, developers_can_merge: false
|
|
|
|
expect(response).to have_http_status(200)
|
|
expect(json_response['name']).to eq(protected_branch.name)
|
|
expect(json_response['protected']).to eq(true)
|
|
expect(json_response['developers_can_push']).to eq(false)
|
|
expect(json_response['developers_can_merge']).to eq(false)
|
|
end
|
|
|
|
it "doesn't result in 0 access levels when 'developers_can_push' is switched off" do
|
|
put api("/projects/#{project.id}/repository/branches/#{protected_branch.name}/protect", user),
|
|
developers_can_push: false
|
|
|
|
expect(response).to have_http_status(200)
|
|
expect(json_response['name']).to eq(protected_branch.name)
|
|
expect(protected_branch.reload.push_access_levels.first).to be_present
|
|
expect(protected_branch.reload.push_access_levels.first.access_level).to eq(Gitlab::Access::MASTER)
|
|
end
|
|
|
|
it "doesn't result in 0 access levels when 'developers_can_merge' is switched off" do
|
|
put api("/projects/#{project.id}/repository/branches/#{protected_branch.name}/protect", user),
|
|
developers_can_merge: false
|
|
|
|
expect(response).to have_http_status(200)
|
|
expect(json_response['name']).to eq(protected_branch.name)
|
|
expect(protected_branch.reload.merge_access_levels.first).to be_present
|
|
expect(protected_branch.reload.merge_access_levels.first.access_level).to eq(Gitlab::Access::MASTER)
|
|
end
|
|
end
|
|
|
|
context "when developers cannot push or merge" do
|
|
let(:protected_branch) { create(:protected_branch, project: project, name: 'protected_branch') }
|
|
|
|
it 'updates that a developer can push and merge' do
|
|
put api("/projects/#{project.id}/repository/branches/#{protected_branch.name}/protect", user),
|
|
developers_can_push: true, developers_can_merge: true
|
|
|
|
expect(response).to have_http_status(200)
|
|
expect(json_response['name']).to eq(protected_branch.name)
|
|
expect(json_response['protected']).to eq(true)
|
|
expect(json_response['developers_can_push']).to eq(true)
|
|
expect(json_response['developers_can_merge']).to eq(true)
|
|
end
|
|
end
|
|
end
|
|
|
|
context "multiple API calls" do
|
|
it "returns success when `protect` is called twice" do
|
|
put api("/projects/#{project.id}/repository/branches/#{branch_name}/protect", user)
|
|
put api("/projects/#{project.id}/repository/branches/#{branch_name}/protect", user)
|
|
|
|
expect(response).to have_http_status(200)
|
|
expect(json_response['name']).to eq(branch_name)
|
|
expect(json_response['protected']).to eq(true)
|
|
expect(json_response['developers_can_push']).to eq(false)
|
|
expect(json_response['developers_can_merge']).to eq(false)
|
|
end
|
|
|
|
it "returns success when `protect` is called twice with `developers_can_push` turned on" do
|
|
put api("/projects/#{project.id}/repository/branches/#{branch_name}/protect", user), developers_can_push: true
|
|
put api("/projects/#{project.id}/repository/branches/#{branch_name}/protect", user), developers_can_push: true
|
|
|
|
expect(response).to have_http_status(200)
|
|
expect(json_response['name']).to eq(branch_name)
|
|
expect(json_response['protected']).to eq(true)
|
|
expect(json_response['developers_can_push']).to eq(true)
|
|
expect(json_response['developers_can_merge']).to eq(false)
|
|
end
|
|
|
|
it "returns success when `protect` is called twice with `developers_can_merge` turned on" do
|
|
put api("/projects/#{project.id}/repository/branches/#{branch_name}/protect", user), developers_can_merge: true
|
|
put api("/projects/#{project.id}/repository/branches/#{branch_name}/protect", user), developers_can_merge: true
|
|
|
|
expect(response).to have_http_status(200)
|
|
expect(json_response['name']).to eq(branch_name)
|
|
expect(json_response['protected']).to eq(true)
|
|
expect(json_response['developers_can_push']).to eq(false)
|
|
expect(json_response['developers_can_merge']).to eq(true)
|
|
end
|
|
end
|
|
|
|
it "returns a 404 error if branch not found" do
|
|
put api("/projects/#{project.id}/repository/branches/unknown/protect", user)
|
|
expect(response).to have_http_status(404)
|
|
end
|
|
|
|
it "returns a 403 error if guest" do
|
|
put api("/projects/#{project.id}/repository/branches/#{branch_name}/protect", user2)
|
|
expect(response).to have_http_status(403)
|
|
end
|
|
end
|
|
|
|
describe "PUT /projects/:id/repository/branches/:branch/unprotect" do
|
|
it "unprotects a single branch" do
|
|
put api("/projects/#{project.id}/repository/branches/#{branch_name}/unprotect", user)
|
|
expect(response).to have_http_status(200)
|
|
|
|
expect(json_response['name']).to eq(branch_name)
|
|
expect(json_response['commit']['id']).to eq(branch_sha)
|
|
expect(json_response['protected']).to eq(false)
|
|
end
|
|
|
|
it "returns success when unprotect branch" do
|
|
put api("/projects/#{project.id}/repository/branches/unknown/unprotect", user)
|
|
expect(response).to have_http_status(404)
|
|
end
|
|
|
|
it "returns success when unprotect branch again" do
|
|
put api("/projects/#{project.id}/repository/branches/#{branch_name}/unprotect", user)
|
|
put api("/projects/#{project.id}/repository/branches/#{branch_name}/unprotect", user)
|
|
expect(response).to have_http_status(200)
|
|
end
|
|
end
|
|
|
|
describe "POST /projects/:id/repository/branches" do
|
|
it "creates a new branch" do
|
|
post api("/projects/#{project.id}/repository/branches", user),
|
|
branch_name: 'feature1',
|
|
ref: branch_sha
|
|
|
|
expect(response).to have_http_status(201)
|
|
|
|
expect(json_response['name']).to eq('feature1')
|
|
expect(json_response['commit']['id']).to eq(branch_sha)
|
|
end
|
|
|
|
it "denies for user without push access" do
|
|
post api("/projects/#{project.id}/repository/branches", user2),
|
|
branch_name: branch_name,
|
|
ref: branch_sha
|
|
expect(response).to have_http_status(403)
|
|
end
|
|
|
|
it 'returns 400 if branch name is invalid' do
|
|
post api("/projects/#{project.id}/repository/branches", user),
|
|
branch_name: 'new design',
|
|
ref: branch_sha
|
|
expect(response).to have_http_status(400)
|
|
expect(json_response['message']).to eq('Branch name is invalid')
|
|
end
|
|
|
|
it 'returns 400 if branch already exists' do
|
|
post api("/projects/#{project.id}/repository/branches", user),
|
|
branch_name: 'new_design1',
|
|
ref: branch_sha
|
|
expect(response).to have_http_status(201)
|
|
|
|
post api("/projects/#{project.id}/repository/branches", user),
|
|
branch_name: 'new_design1',
|
|
ref: branch_sha
|
|
expect(response).to have_http_status(400)
|
|
expect(json_response['message']).to eq('Branch already exists')
|
|
end
|
|
|
|
it 'returns 400 if ref name is invalid' do
|
|
post api("/projects/#{project.id}/repository/branches", user),
|
|
branch_name: 'new_design3',
|
|
ref: 'foo'
|
|
expect(response).to have_http_status(400)
|
|
expect(json_response['message']).to eq('Invalid reference name')
|
|
end
|
|
end
|
|
|
|
describe "DELETE /projects/:id/repository/branches/:branch" do
|
|
before do
|
|
allow_any_instance_of(Repository).to receive(:rm_branch).and_return(true)
|
|
end
|
|
|
|
it "removes branch" do
|
|
delete api("/projects/#{project.id}/repository/branches/#{branch_name}", user)
|
|
expect(response).to have_http_status(200)
|
|
expect(json_response['branch_name']).to eq(branch_name)
|
|
end
|
|
|
|
it 'returns 404 if branch not exists' do
|
|
delete api("/projects/#{project.id}/repository/branches/foobar", user)
|
|
expect(response).to have_http_status(404)
|
|
end
|
|
|
|
it "removes protected branch" do
|
|
create(:protected_branch, project: project, name: branch_name)
|
|
delete api("/projects/#{project.id}/repository/branches/#{branch_name}", user)
|
|
expect(response).to have_http_status(405)
|
|
expect(json_response['message']).to eq('Protected branch cant be removed')
|
|
end
|
|
|
|
it "does not remove HEAD branch" do
|
|
delete api("/projects/#{project.id}/repository/branches/master", user)
|
|
expect(response).to have_http_status(405)
|
|
expect(json_response['message']).to eq('Cannot remove HEAD branch')
|
|
end
|
|
end
|
|
end
|