mirror of https://github.com/go-gitea/gitea.git
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
54 lines
1.7 KiB
54 lines
1.7 KiB
// Copyright 2025 The Gitea Authors. All rights reserved. |
|
// SPDX-License-Identifier: MIT |
|
|
|
package integration |
|
|
|
import ( |
|
"net/http" |
|
"testing" |
|
|
|
"code.gitea.io/gitea/modules/setting" |
|
api "code.gitea.io/gitea/modules/structs" |
|
"code.gitea.io/gitea/modules/test" |
|
"code.gitea.io/gitea/tests" |
|
|
|
"github.com/stretchr/testify/assert" |
|
) |
|
|
|
func testActionUserSignIn(t *testing.T) { |
|
req := NewRequest(t, "GET", "/api/v1/user"). |
|
AddTokenAuth("8061e833a55f6fc0157c98b883e91fcfeeb1a71a") |
|
resp := MakeRequest(t, req, http.StatusOK) |
|
|
|
var u api.User |
|
DecodeJSON(t, resp, &u) |
|
assert.Equal(t, "gitea-actions", u.UserName) |
|
} |
|
|
|
func testActionUserAccessPublicRepo(t *testing.T) { |
|
req := NewRequestf(t, "GET", "/api/v1/repos/user2/repo1/raw/README.md"). |
|
AddTokenAuth("8061e833a55f6fc0157c98b883e91fcfeeb1a71a") |
|
resp := MakeRequest(t, req, http.StatusOK) |
|
assert.Equal(t, "file", resp.Header().Get("x-gitea-object-type")) |
|
|
|
defer test.MockVariableValue(&setting.Service.RequireSignInViewStrict, true)() |
|
|
|
req = NewRequestf(t, "GET", "/api/v1/repos/user2/repo1/raw/README.md"). |
|
AddTokenAuth("8061e833a55f6fc0157c98b883e91fcfeeb1a71a") |
|
resp = MakeRequest(t, req, http.StatusOK) |
|
assert.Equal(t, "file", resp.Header().Get("x-gitea-object-type")) |
|
} |
|
|
|
func testActionUserNoAccessOtherPrivateRepo(t *testing.T) { |
|
req := NewRequestf(t, "GET", "/api/v1/repos/user2/repo2/raw/README.md"). |
|
AddTokenAuth("8061e833a55f6fc0157c98b883e91fcfeeb1a71a") |
|
MakeRequest(t, req, http.StatusNotFound) |
|
} |
|
|
|
func TestActionUserAccessPermission(t *testing.T) { |
|
defer tests.PrepareTestEnv(t)() |
|
|
|
t.Run("ActionUserSignIn", testActionUserSignIn) |
|
t.Run("ActionUserAccessPublicRepo", testActionUserAccessPublicRepo) |
|
t.Run("ActionUserNoAccessOtherPrivateRepo", testActionUserNoAccessOtherPrivateRepo) |
|
}
|
|
|