Esempio n. 1
0
class GWATestCase(unittest.TestCase):
    git_root = '/tmp/test/'

    def setUp(self):
        self.app = create_app(ignore_auth=True,
                              git_root=self.git_root).test_client()

        self.admin_user = KeyAuthContext()
        self.admin_user.can_provision = True
        self.admin_user.can_create_repos = True
        self.admin_user.save()

        self.user = KeyAuthContext()
        self.user.can_create_repos = True
        self.user.save()

    def tearDown(self):
        print 'tearing down!!'
        shutil.rmtree(self.git_root)
        print os.listdir('.')
        try:
            os.remove('db_foo.pkl')
        except OSError:
            print "Failed to delete pickle."
        os.mkdir(self.git_root)
Esempio n. 2
0
class GWATestCase(unittest.TestCase):
    git_root = '/tmp/test/'

    def setUp(self):
        self.app = create_app(
            ignore_auth=True,
            git_root=self.git_root
        ).test_client()

        self.admin_user = KeyAuthContext()
        self.admin_user.can_provision = True
        self.admin_user.can_create_repos = True
        self.admin_user.save()

        self.user = KeyAuthContext()
        self.user.can_create_repos = True
        self.user.save()

    def tearDown(self):
        print 'tearing down!!'
        shutil.rmtree(self.git_root)
        print os.listdir('.')
        try:
            os.remove('db_foo.pkl')
        except OSError:
            print "Failed to delete pickle."
        os.mkdir(self.git_root)
Esempio n. 3
0
    def setUp(self):
        super(AuthTestCase, self).setUp()
        self.app = create_app().test_client()

        self.read_user = KeyAuthContext()
        self.read_user.can_create_repos = False
        self.read_user.save()

        self.second_user = KeyAuthContext()
        self.second_user.can_create_repos = True
        self.second_user.save()
Esempio n. 4
0
    def setUp(self):
        super(AuthTestCase, self).setUp()
        self.app = create_app().test_client()

        self.read_user = KeyAuthContext()
        self.read_user.can_create_repos = False
        self.read_user.save()

        self.second_user = KeyAuthContext()
        self.second_user.can_create_repos = True
        self.second_user.save()
Esempio n. 5
0
    def setUp(self):
        self.app = create_app(ignore_auth=True).test_client()

        self.admin_user = KeyAuthContext()
        self.admin_user.can_provision = True
        self.admin_user.can_create_repos = True
        self.admin_user.save()

        self.user = KeyAuthContext()
        self.user.can_create_repos = True
        self.user.save()
Esempio n. 6
0
class GWATestCase(unittest.TestCase):
    def setUp(self):
        self.app = create_app(ignore_auth=True).test_client()

        self.admin_user = KeyAuthContext()
        self.admin_user.can_provision = True
        self.admin_user.can_create_repos = True
        self.admin_user.save()

        self.user = KeyAuthContext()
        self.user.can_create_repos = True
        self.user.save()

    def tearDown(self):
        shutil.rmtree('/tmp/test')
        os.remove('db_foo.pkl')
        os.mkdir('/tmp/test')
Esempio n. 7
0
class AuthTestCase(GWATestCase):
    def _fake_file(self, content=None, filename=None):
        return StringIO(content or 'my file contents'), 'test.txt'

    def setUp(self):
        super(AuthTestCase, self).setUp()
        self.app = create_app().test_client()

        self.read_user = KeyAuthContext()
        self.read_user.can_create_repos = False
        self.read_user.save()

        self.second_user = KeyAuthContext()
        self.second_user.can_create_repos = True
        self.second_user.save()

    # Repo Creation
    ###############

    def test_create_repo_fail_anonymous(self):
        resp = self.app.put('/')

        self.assertEqual(resp.status_code, http.UNAUTHORIZED)

    def test_create_repo_fail_unauthorized(self):
        resp = self.app.put('/?key=' + self.read_user._id)

        self.assertEqual(resp.status_code, http.UNAUTHORIZED)

    def test_create_repo_authorized(self):
        resp = self.app.put('/?key=' + self.user._id)

        self.assertEqual(resp.status_code, http.OK)

    def test_create_repo_write_key(self):
        write_key = json.loads(self.app.put('/?key=' +
                                            self.user._id).data)['write_key']

        self.assertIsNotNone(write_key)

    # Repo Listing
    ##############

    def test_list_private_repo_anonymous(self):
        json.loads(self.app.put('/?key=' + self.user._id).data).get('url')

        self.assertEqual(json.loads(self.app.get('/').data).get('repos'), [])

    def test_list_private_repo_authorized(self):
        json.loads(self.app.put('/?key=' + self.user._id).data).get('url')

        repos = json.loads(self.app.get('/?key=' +
                                        self.user._id).data).get('repos')

        self.assertEqual(len(repos), 1)

    def test_list_private_repo_unauthorized(self):
        json.loads(self.app.put('/?key=' + self.user._id).data).get('url')

        repos = json.loads(
            self.app.get('/?key=' + self.second_user._id).data).get('repos')

        self.assertEqual(len(repos), 0)

    def test_list_public_repo(self):

        self.app.put('/?key=' + self.user._id, data={'is_public': 1})

        repos = json.loads(self.app.get('/').data).get('repos')

        self.assertEqual(len(repos), 1)

    # Repo Read
    ###########

    def test_read_repo_private_authorized(self):

        repo_url = json.loads(self.app.put('/?key=' +
                                           self.user._id).data).get('url')

        resp = self.app.get(repo_url + '?key={}'.format(self.user._id))

        self.assertEqual(resp.status_code, http.OK)

    def test_read_repo_private_unauthorized(self):

        repo_url = json.loads(self.app.put('/?key=' +
                                           self.user._id).data).get('url')

        resp = self.app.get(repo_url + '?key={}'.format(self.second_user._id))

        self.assertEqual(resp.status_code, http.UNAUTHORIZED)

    def test_read_repo_private_anonymous(self):

        repo_url = json.loads(self.app.put('/?key=' +
                                           self.user._id).data).get('url')

        resp = self.app.get(repo_url)

        self.assertEqual(resp.status_code, http.UNAUTHORIZED)

    # File Creation
    ###############

    def test_create_file_private_authorized(self):
        repo_url = json.loads(self.app.put('/?key=' +
                                           self.user._id).data).get('url')

        resp = self.app.put(repo_url + 'foo.txt?key={}'.format(self.user._id),
                            data={
                                'file': self._fake_file(),
                                'full_name': 'Test User',
                                'email': '*****@*****.**',
                            })

        self.assertEqual(resp.status_code, http.OK)

    def test_create_file_private_unauthorized(self):
        repo_url = json.loads(self.app.put('/?key=' +
                                           self.user._id).data).get('url')

        resp = self.app.put(repo_url +
                            'foo.txt?key={}'.format(self.second_user._id),
                            data={'file': self._fake_file()})

        self.assertEqual(resp.status_code, http.UNAUTHORIZED)

    def test_create_file_private_anonymous(self):
        repo_url = json.loads(self.app.put('/?key=' +
                                           self.user._id).data).get('url')

        resp = self.app.put(repo_url + 'foo.txt',
                            data={'file': self._fake_file()})

        self.assertEqual(resp.status_code, http.UNAUTHORIZED)

    # File Read
    ###########

    def test_read_file_private_authorized(self):

        repo_url = json.loads(self.app.put('/?key=' +
                                           self.user._id).data).get('url')

        file_url = json.loads(
            self.app.put(repo_url + 'foo.txt?key={}'.format(self.user._id),
                         data={
                             'file': self._fake_file()
                         }).data)['url']

        resp = self.app.get(file_url + '?key={}'.format(self.user._id))

        self.assertEqual(resp.status_code, http.OK)

    def test_read_file_private_unauthorized(self):

        repo_url = json.loads(self.app.put('/?key=' +
                                           self.user._id).data).get('url')

        file_url = json.loads(
            self.app.put(repo_url + 'foo.txt?key={}'.format(self.user._id),
                         data={
                             'file': self._fake_file()
                         }).data)['url']

        resp = self.app.get(file_url + '?key={}'.format(self.second_user._id))

        self.assertEqual(resp.status_code, http.UNAUTHORIZED)

    def test_read_file_private_anonymous(self):

        repo_url = json.loads(self.app.put('/?key=' +
                                           self.user._id).data).get('url')

        file_url = json.loads(
            self.app.put(repo_url + 'foo.txt?key={}'.format(self.user._id),
                         data={
                             'file': self._fake_file()
                         }).data)['url']

        resp = self.app.get(file_url)

        self.assertEqual(resp.status_code, http.UNAUTHORIZED)

    def test_read_file_info_private_authorized(self):

        repo_url = json.loads(self.app.put('/?key=' +
                                           self.user._id).data).get('url')

        file_url = json.loads(
            self.app.put(repo_url + 'foo.txt?key={}'.format(self.user._id),
                         data={
                             'file': self._fake_file()
                         }).data)['url']

        resp = self.app.get(file_url + '?info=1&key={}'.format(self.user._id))

        self.assertEqual(resp.status_code, http.OK)

    def test_read_file_info_private_unauthorized(self):

        repo_url = json.loads(self.app.put('/?key=' +
                                           self.user._id).data).get('url')

        file_url = json.loads(
            self.app.put(repo_url + 'foo.txt?key={}'.format(self.user._id),
                         data={
                             'file': self._fake_file()
                         }).data)['url']

        resp = self.app.get(file_url +
                            '?info=1&key={}'.format(self.second_user._id))

        self.assertEqual(resp.status_code, http.UNAUTHORIZED)

    def test_read_file_info_private_anonymous(self):

        repo_url = json.loads(self.app.put('/?key=' +
                                           self.user._id).data).get('url')

        file_url = json.loads(
            self.app.put(repo_url + 'foo.txt?key={}'.format(self.user._id),
                         data={
                             'file': self._fake_file()
                         }).data)['url']

        resp = self.app.get(file_url + '?info=1')

        self.assertEqual(resp.status_code, http.UNAUTHORIZED)

    def test_read_file_version_private_authorized(self):

        repo_url = json.loads(self.app.put('/?key=' +
                                           self.user._id).data).get('url')

        file_url = json.loads(
            self.app.put(repo_url + 'foo.txt?key={}'.format(self.user._id),
                         data={
                             'file': self._fake_file()
                         }).data)['url']

        sha = json.loads(
            self.app.get(
                file_url +
                '?info=1&key={}'.format(self.user._id)).data)['versions'][0]

        resp = self.app.get(file_url +
                            '?version={}1&key={}'.format(sha, self.user._id))

        self.assertEqual(resp.status_code, http.OK)

    def test_read_file_version_private_unauthorized(self):

        repo_url = json.loads(self.app.put('/?key=' +
                                           self.user._id).data).get('url')

        file_url = json.loads(
            self.app.put(repo_url + 'foo.txt?key={}'.format(self.user._id),
                         data={
                             'file': self._fake_file()
                         }).data)['url']

        sha = json.loads(
            self.app.get(
                file_url +
                '?info=1&key={}'.format(self.user._id)).data)['versions'][0]

        resp = self.app.get(
            file_url + '?version={}1&key={}'.format(sha, self.second_user._id))

        self.assertEqual(resp.status_code, http.UNAUTHORIZED)

    def test_read_file_version_private_anonymous(self):

        repo_url = json.loads(self.app.put('/?key=' +
                                           self.user._id).data).get('url')

        file_url = json.loads(
            self.app.put(repo_url + 'foo.txt?key={}'.format(self.user._id),
                         data={
                             'file': self._fake_file()
                         }).data)['url']

        sha = json.loads(
            self.app.get(
                file_url +
                '?info=1&key={}'.format(self.user._id)).data)['versions'][0]

        resp = self.app.get(file_url + '?version={}1'.format(sha))

        self.assertEqual(resp.status_code, http.UNAUTHORIZED)

    # File Deletion
    ###############

    def test_delete_file_private_authorized(self):

        repo_url = json.loads(self.app.put('/?key=' +
                                           self.user._id).data).get('url')

        file_url = json.loads(
            self.app.put(repo_url + 'foo.txt?key={}'.format(self.user._id),
                         data={
                             'file': self._fake_file()
                         }).data)['url']

        resp = self.app.delete(file_url + '?key={}'.format(self.user._id))

        self.assertEqual(resp.status_code, http.NO_CONTENT)

    def test_delete_file_private_unauthorized(self):

        repo_url = json.loads(self.app.put('/?key=' +
                                           self.user._id).data).get('url')

        file_url = json.loads(
            self.app.put(repo_url + 'foo.txt?key={}'.format(self.user._id),
                         data={
                             'file': self._fake_file()
                         }).data)['url']

        resp = self.app.delete(file_url +
                               '?key={}'.format(self.second_user._id))

        self.assertEqual(resp.status_code, http.UNAUTHORIZED)

    def test_delete_file_private_anonymous(self):

        repo_url = json.loads(self.app.put('/?key=' +
                                           self.user._id).data).get('url')

        file_url = json.loads(
            self.app.put(repo_url + 'foo.txt?key={}'.format(self.user._id),
                         data={
                             'file': self._fake_file()
                         }).data)['url']

        resp = self.app.delete(file_url)

        self.assertEqual(resp.status_code, http.UNAUTHORIZED)

    def test_delete_file_success_via_post(self):
        resp = json.loads(self.app.put('/?key=' + self.user._id).data)

        repo_url = resp.get('url')
        writer = resp.get('write_key')

        self.app.put(repo_url + 'foo.txt?key=' + writer,
                     data={'file': self._fake_file()})

        resp = self.app.post(
            repo_url + 'foo.txt?key=' + writer,
            data={
                'action': 'delete',
                'full_name': 'Test User',
                'email': '*****@*****.**',
            },
        )

        self.assertEqual(resp.status_code, http.NO_CONTENT)
Esempio n. 8
0
class AuthTestCase(GWATestCase):
    def _fake_file(self, content=None, filename=None):
        return StringIO(content or 'my file contents'), 'test.txt'

    def setUp(self):
        super(AuthTestCase, self).setUp()
        self.app = create_app().test_client()

        self.read_user = KeyAuthContext()
        self.read_user.can_create_repos = False
        self.read_user.save()

        self.second_user = KeyAuthContext()
        self.second_user.can_create_repos = True
        self.second_user.save()

    # Repo Creation
    ###############

    def test_create_repo_fail_anonymous(self):
        resp = self.app.put('/')

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    def test_create_repo_fail_unauthorized(self):
        resp = self.app.put('/?key=' + self.read_user._id)

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    def test_create_repo_authorized(self):
        resp = self.app.put('/?key=' + self.user._id)

        self.assertEqual(
            resp.status_code,
            http.OK
        )

    def test_create_repo_write_key(self):
        write_key = json.loads(
            self.app.put('/?key=' + self.user._id).data
        )['write_key']

        self.assertIsNotNone(
            write_key
        )

    # Repo Listing
    ##############

    def test_list_private_repo_anonymous(self):
        json.loads(
            self.app.put('/?key=' + self.user._id).data
        ).get('url')

        self.assertEqual(
            json.loads(self.app.get('/').data).get('repos'),
            []
        )

    def test_list_private_repo_authorized(self):
        json.loads(
            self.app.put('/?key=' + self.user._id).data
        ).get('url')

        repos = json.loads(
            self.app.get('/?key=' + self.user._id).data
        ).get('repos')

        self.assertEqual(len(repos), 1)

    def test_list_private_repo_unauthorized(self):
        json.loads(
            self.app.put('/?key=' + self.user._id).data
        ).get('url')

        repos = json.loads(
            self.app.get('/?key=' + self.second_user._id).data
        ).get('repos')

        self.assertEqual(len(repos), 0)

    def test_list_public_repo(self):

        self.app.put(
            '/?key=' + self.user._id,
            data={'is_public': 1}
        )

        repos = json.loads(
            self.app.get('/').data
        ).get('repos')

        self.assertEqual(len(repos), 1)

    # Repo Read
    ###########

    def test_read_repo_private_authorized(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        resp = self.app.get(
            repo_url + '?key={}'.format(self.user._id)
        )

        self.assertEqual(
            resp.status_code,
            http.OK
        )

    def test_read_repo_private_unauthorized(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        resp = self.app.get(repo_url + '?key={}'.format(self.second_user._id))

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    def test_read_repo_private_anonymous(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        resp = self.app.get(repo_url)

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    # File Creation
    ###############

    def test_create_file_private_authorized(self):
        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        resp = self.app.put(
            repo_url + 'foo.txt?key={}'.format(self.user._id),
            data={
                'file': self._fake_file(),
                'full_name': 'Test User',
                'email': '*****@*****.**',
            }
        )

        self.assertEqual(
            resp.status_code,
            http.OK
        )

    def test_create_file_private_unauthorized(self):
        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        resp = self.app.put(
            repo_url + 'foo.txt?key={}'.format(self.second_user._id),
            data={'file': self._fake_file()}
        )

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    def test_create_file_private_anonymous(self):
        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        resp = self.app.put(
            repo_url + 'foo.txt',
            data={'file': self._fake_file()}
        )

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    # File Read
    ###########

    def test_read_file_private_authorized(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        file_url = json.loads(
            self.app.put(
                repo_url + 'foo.txt?key={}'.format(self.user._id),
                data={'file': self._fake_file()}
            ).data
        )['url']

        resp = self.app.get(file_url + '?key={}'.format(self.user._id))

        self.assertEqual(
            resp.status_code,
            http.OK
        )

    def test_read_file_private_unauthorized(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        file_url = json.loads(
            self.app.put(
                repo_url + 'foo.txt?key={}'.format(self.user._id),
                data={'file': self._fake_file()}
            ).data
        )['url']

        resp = self.app.get(file_url + '?key={}'.format(self.second_user._id))

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    def test_read_file_private_anonymous(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        file_url = json.loads(
            self.app.put(
                repo_url + 'foo.txt?key={}'.format(self.user._id),
                data={'file': self._fake_file()}
            ).data
        )['url']

        resp = self.app.get(file_url)

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    def test_read_file_info_private_authorized(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        file_url = json.loads(
            self.app.put(
                repo_url + 'foo.txt?key={}'.format(self.user._id),
                data={'file': self._fake_file()}
            ).data
        )['url']

        resp = self.app.get(file_url + '?info=1&key={}'.format(self.user._id))

        self.assertEqual(
            resp.status_code,
            http.OK
        )

    def test_read_file_info_private_unauthorized(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        file_url = json.loads(
            self.app.put(
                repo_url + 'foo.txt?key={}'.format(self.user._id),
                data={'file': self._fake_file()}
            ).data
        )['url']

        resp = self.app.get(file_url + '?info=1&key={}'.format(self.second_user._id))

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    def test_read_file_info_private_anonymous(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        file_url = json.loads(
            self.app.put(
                repo_url + 'foo.txt?key={}'.format(self.user._id),
                data={'file': self._fake_file()}
            ).data
        )['url']

        resp = self.app.get(file_url + '?info=1')

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    def test_read_file_version_private_authorized(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        file_url = json.loads(
            self.app.put(
                repo_url + 'foo.txt?key={}'.format(self.user._id),
                data={'file': self._fake_file()}
            ).data
        )['url']

        sha = json.loads(
            self.app.get(file_url + '?info=1&key={}'.format(self.user._id)).data
        )['versions'][0]

        resp = self.app.get(
            file_url + '?version={}1&key={}'.format(sha, self.user._id)
        )

        self.assertEqual(
            resp.status_code,
            http.OK
        )

    def test_read_file_version_private_unauthorized(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        file_url = json.loads(
            self.app.put(
                repo_url + 'foo.txt?key={}'.format(self.user._id),
                data={'file': self._fake_file()}
            ).data
        )['url']

        sha = json.loads(
            self.app.get(file_url + '?info=1&key={}'.format(self.user._id)).data
        )['versions'][0]

        resp = self.app.get(
            file_url + '?version={}1&key={}'.format(sha, self.second_user._id)
        )

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    def test_read_file_version_private_anonymous(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        file_url = json.loads(
            self.app.put(
                repo_url + 'foo.txt?key={}'.format(self.user._id),
                data={'file': self._fake_file()}
            ).data
        )['url']

        sha = json.loads(
            self.app.get(file_url + '?info=1&key={}'.format(self.user._id)).data
        )['versions'][0]

        resp = self.app.get(
            file_url + '?version={}1'.format(sha)
        )

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    # File Deletion
    ###############

    def test_delete_file_private_authorized(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        file_url = json.loads(
            self.app.put(
                repo_url + 'foo.txt?key={}'.format(self.user._id),
                data={'file': self._fake_file()}
            ).data
        )['url']

        resp = self.app.delete(
            file_url + '?key={}'.format(self.user._id)
        )

        self.assertEqual(
            resp.status_code,
            http.NO_CONTENT
        )

    def test_delete_file_private_unauthorized(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        file_url = json.loads(
            self.app.put(
                repo_url + 'foo.txt?key={}'.format(self.user._id),
                data={'file': self._fake_file()}
            ).data
        )['url']

        resp = self.app.delete(
            file_url + '?key={}'.format(self.second_user._id)
        )

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    def test_delete_file_private_anonymous(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        file_url = json.loads(
            self.app.put(
                repo_url + 'foo.txt?key={}'.format(self.user._id),
                data={'file': self._fake_file()}
            ).data
        )['url']

        resp = self.app.delete(file_url)

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    def test_delete_file_success_via_post(self):
        resp = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        )

        repo_url = resp.get('url')
        writer = resp.get('write_key')

        self.app.put(
            repo_url + 'foo.txt?key=' + writer,
            data={
                'file': self._fake_file()
            }
        )

        resp = self.app.post(
            repo_url + 'foo.txt?key=' + writer,
            data={
                'action': 'delete',
                'full_name': 'Test User',
                'email': '*****@*****.**',
            },
        )

        self.assertEqual(
            resp.status_code,
            http.NO_CONTENT
        )
Esempio n. 9
0
class AuthTestCase(GWATestCase):
    def _fake_file(self, content=None, filename=None):
        return StringIO(content or 'my file contents'), 'test.txt'

    def setUp(self):
        super(AuthTestCase, self).setUp()
        self.app = create_app().test_client()

        self.read_user = KeyAuthContext()
        self.read_user.can_create_repos = False
        self.read_user.save()

        self.second_user = KeyAuthContext()
        self.second_user.can_create_repos = True
        self.second_user.save()

    # Repo Creation
    ###############

    def test_create_repo_fail_anonymous(self):
        resp = self.app.put('/')

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    def test_create_repo_fail_unauthorized(self):
        resp = self.app.put('/?key=' + self.read_user._id)

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    def test_create_repo_authorized(self):
        resp = self.app.put('/?key=' + self.user._id)

        self.assertEqual(
            resp.status_code,
            http.OK
        )

    # Repo Listing
    ##############

    def test_list_private_repo_anonymous(self):
        json.loads(
            self.app.put('/?key=' + self.user._id).data
        ).get('url')

        self.assertEqual(
            json.loads(self.app.get('/').data).get('repos'),
            []
        )

    def test_list_private_repo_authorized(self):
        json.loads(
            self.app.put('/?key=' + self.user._id).data
        ).get('url')

        repos = json.loads(
            self.app.get('/?key=' + self.user._id).data
        ).get('repos')

        self.assertEqual(len(repos), 1)

    def test_list_private_repo_unauthorized(self):
        json.loads(
            self.app.put('/?key=' + self.user._id).data
        ).get('url')

        repos = json.loads(
            self.app.get('/?key=' + self.second_user._id).data
        ).get('repos')

        self.assertEqual(len(repos), 0)

    def test_list_public_repo(self):

        self.app.put(
            '/?key=' + self.user._id,
            data={'is_public': 1}
        )

        repos = json.loads(
            self.app.get('/').data
        ).get('repos')

        self.assertEqual(len(repos), 1)

    # Repo Read
    ###########

    def test_read_repo_private_authorized(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        resp = self.app.get(
            repo_url + '?key={}'.format(self.user._id)
        )

        self.assertEqual(
            resp.status_code,
            http.OK
        )

    def test_read_repo_private_unauthorized(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        resp = self.app.get(repo_url + '?key={}'.format(self.second_user._id))

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    def test_read_repo_private_anonymous(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        resp = self.app.get(repo_url)

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    # File Read
    ###########

    def test_create_file_private_authorized(self):
        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        resp = self.app.put(
            repo_url + 'foo.txt?key={}'.format(self.user._id),
            data={'file': self._fake_file()}
        )

        self.assertEqual(
            resp.status_code,
            http.OK
        )

    def test_create_file_private_unauthorized(self):
        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        resp = self.app.put(
            repo_url + 'foo.txt?key={}'.format(self.second_user._id),
            data={'file': self._fake_file()}
        )

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    def test_create_file_private_anonymous(self):
        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        resp = self.app.put(
            repo_url + 'foo.txt',
            data={'file': self._fake_file()}
        )

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    def test_read_file_private_authorized(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        file_url = json.loads(
            self.app.put(
                repo_url + 'foo.txt?key={}'.format(self.user._id),
                data={'file': self._fake_file()}
            ).data
        )['url']

        resp = self.app.get(file_url + '?key={}'.format(self.user._id))

        self.assertEqual(
            resp.status_code,
            http.OK
        )

    def test_read_file_private_unauthorized(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        file_url = json.loads(
            self.app.put(
                repo_url + 'foo.txt?key={}'.format(self.user._id),
                data={'file': self._fake_file()}
            ).data
        )['url']

        resp = self.app.get(file_url + '?key={}'.format(self.second_user._id))

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    def test_read_file_private_anonymous(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        file_url = json.loads(
            self.app.put(
                repo_url + 'foo.txt?key={}'.format(self.user._id),
                data={'file': self._fake_file()}
            ).data
        )['url']

        resp = self.app.get(file_url)

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    def test_read_file_info_private_authorized(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        file_url = json.loads(
            self.app.put(
                repo_url + 'foo.txt?key={}'.format(self.user._id),
                data={'file': self._fake_file()}
            ).data
        )['url']

        resp = self.app.get(file_url + '?info=1&key={}'.format(self.user._id))

        self.assertEqual(
            resp.status_code,
            http.OK
        )

    def test_read_file_info_private_unauthorized(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        file_url = json.loads(
            self.app.put(
                repo_url + 'foo.txt?key={}'.format(self.user._id),
                data={'file': self._fake_file()}
            ).data
        )['url']

        resp = self.app.get(file_url + '?info=1&key={}'.format(self.second_user._id))

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    def test_read_file_info_private_anonymous(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        file_url = json.loads(
            self.app.put(
                repo_url + 'foo.txt?key={}'.format(self.user._id),
                data={'file': self._fake_file()}
            ).data
        )['url']

        resp = self.app.get(file_url + '?info=1')

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    def test_read_file_version_private_authorized(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        file_url = json.loads(
            self.app.put(
                repo_url + 'foo.txt?key={}'.format(self.user._id),
                data={'file': self._fake_file()}
            ).data
        )['url']

        sha = json.loads(
            self.app.get(file_url + '?info=1&key={}'.format(self.user._id)).data
        )['versions'][0]

        resp = self.app.get(
            file_url + '?version={}1&key={}'.format(sha, self.user._id)
        )

        self.assertEqual(
            resp.status_code,
            http.OK
        )

    def test_read_file_version_private_unauthorized(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        file_url = json.loads(
            self.app.put(
                repo_url + 'foo.txt?key={}'.format(self.user._id),
                data={'file': self._fake_file()}
            ).data
        )['url']

        sha = json.loads(
            self.app.get(file_url + '?info=1&key={}'.format(self.user._id)).data
        )['versions'][0]

        resp = self.app.get(
            file_url + '?version={}1&key={}'.format(sha, self.second_user._id)
        )

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )

    def test_read_file_version_private_anonymous(self):

        repo_url = json.loads(
            self.app.put(
                '/?key=' + self.user._id
            ).data
        ).get('url')

        file_url = json.loads(
            self.app.put(
                repo_url + 'foo.txt?key={}'.format(self.user._id),
                data={'file': self._fake_file()}
            ).data
        )['url']

        sha = json.loads(
            self.app.get(file_url + '?info=1&key={}'.format(self.user._id)).data
        )['versions'][0]

        resp = self.app.get(
            file_url + '?version={}1'.format(sha)
        )

        self.assertEqual(
            resp.status_code,
            http.UNAUTHORIZED
        )