2020-02-29 09:19:32 +03:00
// Copyright 2020 The Gitea Authors. All rights reserved.
// Use of this source code is governed by a MIT-style
// license that can be found in the LICENSE file.package models
package integrations
import (
"fmt"
"net/http"
"testing"
"code.gitea.io/gitea/models"
2021-09-24 14:32:56 +03:00
"code.gitea.io/gitea/models/login"
2021-11-16 11:53:21 +03:00
"code.gitea.io/gitea/models/unittest"
2020-02-29 09:19:32 +03:00
api "code.gitea.io/gitea/modules/structs"
"github.com/stretchr/testify/assert"
)
func TestOAuth2Application ( t * testing . T ) {
defer prepareTestEnv ( t ) ( )
testAPICreateOAuth2Application ( t )
testAPIListOAuth2Applications ( t )
2020-04-10 03:37:31 +03:00
testAPIGetOAuth2Application ( t )
testAPIUpdateOAuth2Application ( t )
2020-02-29 09:19:32 +03:00
testAPIDeleteOAuth2Application ( t )
}
func testAPICreateOAuth2Application ( t * testing . T ) {
2021-11-16 11:53:21 +03:00
user := unittest . AssertExistsAndLoadBean ( t , & models . User { ID : 2 } ) . ( * models . User )
2020-02-29 09:19:32 +03:00
appBody := api . CreateOAuth2ApplicationOptions {
Name : "test-app-1" ,
RedirectURIs : [ ] string {
"http://www.google.com" ,
} ,
}
req := NewRequestWithJSON ( t , "POST" , "/api/v1/user/applications/oauth2" , & appBody )
req = AddBasicAuthHeader ( req , user . Name )
resp := MakeRequest ( t , req , http . StatusCreated )
var createdApp * api . OAuth2Application
DecodeJSON ( t , resp , & createdApp )
assert . EqualValues ( t , appBody . Name , createdApp . Name )
assert . Len ( t , createdApp . ClientSecret , 44 )
assert . Len ( t , createdApp . ClientID , 36 )
assert . NotEmpty ( t , createdApp . Created )
assert . EqualValues ( t , appBody . RedirectURIs [ 0 ] , createdApp . RedirectURIs [ 0 ] )
2021-11-16 11:53:21 +03:00
unittest . AssertExistsAndLoadBean ( t , & login . OAuth2Application { UID : user . ID , Name : createdApp . Name } )
2020-02-29 09:19:32 +03:00
}
func testAPIListOAuth2Applications ( t * testing . T ) {
2021-11-16 11:53:21 +03:00
user := unittest . AssertExistsAndLoadBean ( t , & models . User { ID : 2 } ) . ( * models . User )
2020-02-29 09:19:32 +03:00
session := loginUser ( t , user . Name )
token := getTokenForLoggedInUser ( t , session )
2021-11-16 11:53:21 +03:00
existApp := unittest . AssertExistsAndLoadBean ( t , & login . OAuth2Application {
2020-02-29 09:19:32 +03:00
UID : user . ID ,
Name : "test-app-1" ,
RedirectURIs : [ ] string {
"http://www.google.com" ,
} ,
2021-09-24 14:32:56 +03:00
} ) . ( * login . OAuth2Application )
2020-02-29 09:19:32 +03:00
urlStr := fmt . Sprintf ( "/api/v1/user/applications/oauth2?token=%s" , token )
req := NewRequest ( t , "GET" , urlStr )
resp := session . MakeRequest ( t , req , http . StatusOK )
var appList api . OAuth2ApplicationList
DecodeJSON ( t , resp , & appList )
expectedApp := appList [ 0 ]
assert . EqualValues ( t , existApp . Name , expectedApp . Name )
assert . EqualValues ( t , existApp . ClientID , expectedApp . ClientID )
assert . Len ( t , expectedApp . ClientID , 36 )
assert . Empty ( t , expectedApp . ClientSecret )
assert . EqualValues ( t , existApp . RedirectURIs [ 0 ] , expectedApp . RedirectURIs [ 0 ] )
2021-11-16 11:53:21 +03:00
unittest . AssertExistsAndLoadBean ( t , & login . OAuth2Application { ID : expectedApp . ID , Name : expectedApp . Name } )
2020-02-29 09:19:32 +03:00
}
func testAPIDeleteOAuth2Application ( t * testing . T ) {
2021-11-16 11:53:21 +03:00
user := unittest . AssertExistsAndLoadBean ( t , & models . User { ID : 2 } ) . ( * models . User )
2020-02-29 09:19:32 +03:00
session := loginUser ( t , user . Name )
token := getTokenForLoggedInUser ( t , session )
2021-11-16 11:53:21 +03:00
oldApp := unittest . AssertExistsAndLoadBean ( t , & login . OAuth2Application {
2020-02-29 09:19:32 +03:00
UID : user . ID ,
Name : "test-app-1" ,
2021-09-24 14:32:56 +03:00
} ) . ( * login . OAuth2Application )
2020-02-29 09:19:32 +03:00
urlStr := fmt . Sprintf ( "/api/v1/user/applications/oauth2/%d?token=%s" , oldApp . ID , token )
req := NewRequest ( t , "DELETE" , urlStr )
session . MakeRequest ( t , req , http . StatusNoContent )
2021-11-16 11:53:21 +03:00
unittest . AssertNotExistsBean ( t , & login . OAuth2Application { UID : oldApp . UID , Name : oldApp . Name } )
2021-04-10 23:49:10 +03:00
// Delete again will return not found
req = NewRequest ( t , "DELETE" , urlStr )
session . MakeRequest ( t , req , http . StatusNotFound )
2020-02-29 09:19:32 +03:00
}
2020-04-10 03:37:31 +03:00
func testAPIGetOAuth2Application ( t * testing . T ) {
2021-11-16 11:53:21 +03:00
user := unittest . AssertExistsAndLoadBean ( t , & models . User { ID : 2 } ) . ( * models . User )
2020-04-10 03:37:31 +03:00
session := loginUser ( t , user . Name )
token := getTokenForLoggedInUser ( t , session )
2021-11-16 11:53:21 +03:00
existApp := unittest . AssertExistsAndLoadBean ( t , & login . OAuth2Application {
2020-04-10 03:37:31 +03:00
UID : user . ID ,
Name : "test-app-1" ,
RedirectURIs : [ ] string {
"http://www.google.com" ,
} ,
2021-09-24 14:32:56 +03:00
} ) . ( * login . OAuth2Application )
2020-04-10 03:37:31 +03:00
urlStr := fmt . Sprintf ( "/api/v1/user/applications/oauth2/%d?token=%s" , existApp . ID , token )
req := NewRequest ( t , "GET" , urlStr )
resp := session . MakeRequest ( t , req , http . StatusOK )
var app api . OAuth2Application
DecodeJSON ( t , resp , & app )
expectedApp := app
assert . EqualValues ( t , existApp . Name , expectedApp . Name )
assert . EqualValues ( t , existApp . ClientID , expectedApp . ClientID )
assert . Len ( t , expectedApp . ClientID , 36 )
assert . Empty ( t , expectedApp . ClientSecret )
2021-06-07 08:27:09 +03:00
assert . Len ( t , expectedApp . RedirectURIs , 1 )
2020-04-10 03:37:31 +03:00
assert . EqualValues ( t , existApp . RedirectURIs [ 0 ] , expectedApp . RedirectURIs [ 0 ] )
2021-11-16 11:53:21 +03:00
unittest . AssertExistsAndLoadBean ( t , & login . OAuth2Application { ID : expectedApp . ID , Name : expectedApp . Name } )
2020-04-10 03:37:31 +03:00
}
func testAPIUpdateOAuth2Application ( t * testing . T ) {
2021-11-16 11:53:21 +03:00
user := unittest . AssertExistsAndLoadBean ( t , & models . User { ID : 2 } ) . ( * models . User )
2020-04-10 03:37:31 +03:00
2021-11-16 11:53:21 +03:00
existApp := unittest . AssertExistsAndLoadBean ( t , & login . OAuth2Application {
2020-04-10 03:37:31 +03:00
UID : user . ID ,
Name : "test-app-1" ,
RedirectURIs : [ ] string {
"http://www.google.com" ,
} ,
2021-09-24 14:32:56 +03:00
} ) . ( * login . OAuth2Application )
2020-04-10 03:37:31 +03:00
appBody := api . CreateOAuth2ApplicationOptions {
Name : "test-app-1" ,
RedirectURIs : [ ] string {
"http://www.google.com/" ,
"http://www.github.com/" ,
} ,
}
urlStr := fmt . Sprintf ( "/api/v1/user/applications/oauth2/%d" , existApp . ID )
req := NewRequestWithJSON ( t , "PATCH" , urlStr , & appBody )
req = AddBasicAuthHeader ( req , user . Name )
resp := MakeRequest ( t , req , http . StatusOK )
var app api . OAuth2Application
DecodeJSON ( t , resp , & app )
expectedApp := app
2021-06-07 08:27:09 +03:00
assert . Len ( t , expectedApp . RedirectURIs , 2 )
2020-04-10 03:37:31 +03:00
assert . EqualValues ( t , expectedApp . RedirectURIs [ 0 ] , appBody . RedirectURIs [ 0 ] )
assert . EqualValues ( t , expectedApp . RedirectURIs [ 1 ] , appBody . RedirectURIs [ 1 ] )
2021-11-16 11:53:21 +03:00
unittest . AssertExistsAndLoadBean ( t , & login . OAuth2Application { ID : expectedApp . ID , Name : expectedApp . Name } )
2020-04-10 03:37:31 +03:00
}