forge/tests/integration/api_repo_git_hook_test.go at main

mirror of https://github.com/hanzoai/forge.git synced 2026-10-30 15:00:39 +00:00

Files

T

zeekayandHanzo Dev aa87442fdd Record upstream authorship centrally in NOTICE instead of in every file header

Source files keep their SPDX-License-Identifier and Hanzo copyright line; the
Gitea, Gogs and LFS Test Server copyrights they used to repeat now live once in
NOTICE, alongside LICENSE. The header lint accepts any copyright line above the
SPDX line, so it no longer demands an upstream one.

Co-authored-by: Hanzo Dev <[email protected]>

2026-09-10 17:50:35 -07:00

196 lines

7.2 KiB

Go

Raw Permalink Blame History

 // Copyright 2026 Hanzo AI, Inc. All rights reserved.
 // SPDX-License-Identifier: MIT
 package integration
 import (
 	"fmt"
 	"net/http"
 	"testing"
 	auth_model "github.com/hanzoai/git/models/auth"
 	repo_model "github.com/hanzoai/git/models/repo"
 	"github.com/hanzoai/git/models/unittest"
 	user_model "github.com/hanzoai/git/models/user"
 	"github.com/hanzoai/git/modules/setting"
 	api "github.com/hanzoai/git/modules/structs"
 	"github.com/hanzoai/git/modules/test"
 	"github.com/hanzoai/git/tests"
 	"github.com/stretchr/testify/assert"
 )
 func TestAPIGitHooks(t *testing.T) {
 	defer tests.PrepareTestEnv(t)()
 	defer test.MockVariableValue(&setting.DisableGitHooks, false)()
 	const testHookContent = `#!/bin/bash
 echo "TestGitHookScript"
 `
 	t.Run("ListGitHooks", func(t *testing.T) {
 		defer tests.PrintCurrentTest(t)()
 		repo := unittest.AssertExistsAndLoadBean(t, &repo_model.Repository{ID: 37})
 		owner := unittest.AssertExistsAndLoadBean(t, &user_model.User{ID: repo.OwnerID})
 		// user1 is an admin user
 		session := loginUser(t, "user1")
 		token := getTokenForLoggedInUser(t, session, auth_model.AccessTokenScopeReadRepository)
 		req := NewRequestf(t, "GET", "/v1/repos/%s/%s/hooks/git", owner.Name, repo.Name).
 			AddTokenAuth(token)
 		resp := MakeRequest(t, req, http.StatusOK)
 		apiGitHooks := DecodeJSON(t, resp, []*api.GitHook{})
 		assert.Len(t, apiGitHooks, 3)
 		for _, apiGitHook := range apiGitHooks {
 			if apiGitHook.Name == "pre-receive" {
 				assert.True(t, apiGitHook.IsActive)
 				assert.Equal(t, testHookContent, apiGitHook.Content)
 			} else {
 				assert.False(t, apiGitHook.IsActive)
 				assert.Empty(t, apiGitHook.Content)
 			}
 		}
 	})
 	t.Run("NoGitHooks", func(t *testing.T) {
 		defer tests.PrintCurrentTest(t)()
 		repo := unittest.AssertExistsAndLoadBean(t, &repo_model.Repository{ID: 1})
 		owner := unittest.AssertExistsAndLoadBean(t, &user_model.User{ID: repo.OwnerID})
 		// user1 is an admin user
 		session := loginUser(t, "user1")
 		token := getTokenForLoggedInUser(t, session, auth_model.AccessTokenScopeReadRepository)
 		req := NewRequestf(t, "GET", "/v1/repos/%s/%s/hooks/git", owner.Name, repo.Name).
 			AddTokenAuth(token)
 		resp := MakeRequest(t, req, http.StatusOK)
 		apiGitHooks := DecodeJSON(t, resp, []*api.GitHook{})
 		assert.Len(t, apiGitHooks, 3)
 		for _, apiGitHook := range apiGitHooks {
 			assert.False(t, apiGitHook.IsActive)
 			assert.Empty(t, apiGitHook.Content)
 		}
 	})
 	t.Run("ListGitHooksNoAccess", func(t *testing.T) {
 		defer tests.PrintCurrentTest(t)()
 		repo := unittest.AssertExistsAndLoadBean(t, &repo_model.Repository{ID: 1})
 		owner := unittest.AssertExistsAndLoadBean(t, &user_model.User{ID: repo.OwnerID})
 		session := loginUser(t, owner.Name)
 		token := getTokenForLoggedInUser(t, session, auth_model.AccessTokenScopeReadRepository)
 		req := NewRequestf(t, "GET", "/v1/repos/%s/%s/hooks/git", owner.Name, repo.Name).
 			AddTokenAuth(token)
 		MakeRequest(t, req, http.StatusForbidden)
 	})
 	t.Run("GetGitHook", func(t *testing.T) {
 		defer tests.PrintCurrentTest(t)()
 		repo := unittest.AssertExistsAndLoadBean(t, &repo_model.Repository{ID: 37})
 		owner := unittest.AssertExistsAndLoadBean(t, &user_model.User{ID: repo.OwnerID})
 		// user1 is an admin user
 		session := loginUser(t, "user1")
 		token := getTokenForLoggedInUser(t, session, auth_model.AccessTokenScopeReadRepository)
 		req := NewRequestf(t, "GET", "/v1/repos/%s/%s/hooks/git/pre-receive", owner.Name, repo.Name).
 			AddTokenAuth(token)
 		resp := MakeRequest(t, req, http.StatusOK)
 		apiGitHook := DecodeJSON(t, resp, &api.GitHook{})
 		assert.True(t, apiGitHook.IsActive)
 		assert.Equal(t, testHookContent, apiGitHook.Content)
 	})
 	t.Run("GetGitHookNoAccess", func(t *testing.T) {
 		defer tests.PrintCurrentTest(t)()
 		repo := unittest.AssertExistsAndLoadBean(t, &repo_model.Repository{ID: 1})
 		owner := unittest.AssertExistsAndLoadBean(t, &user_model.User{ID: repo.OwnerID})
 		session := loginUser(t, owner.Name)
 		token := getTokenForLoggedInUser(t, session, auth_model.AccessTokenScopeReadRepository)
 		req := NewRequestf(t, "GET", "/v1/repos/%s/%s/hooks/git/pre-receive", owner.Name, repo.Name).
 			AddTokenAuth(token)
 		MakeRequest(t, req, http.StatusForbidden)
 	})
 	t.Run("EditGitHook", func(t *testing.T) {
 		defer tests.PrintCurrentTest(t)()
 		repo := unittest.AssertExistsAndLoadBean(t, &repo_model.Repository{ID: 1})
 		owner := unittest.AssertExistsAndLoadBean(t, &user_model.User{ID: repo.OwnerID})
 		// user1 is an admin user
 		session := loginUser(t, "user1")
 		token := getTokenForLoggedInUser(t, session, auth_model.AccessTokenScopeWriteRepository)
 		urlStr := fmt.Sprintf("/v1/repos/%s/%s/hooks/git/pre-receive",
 			owner.Name, repo.Name)
 		req := NewRequestWithJSON(t, "PATCH", urlStr, &api.EditGitHookOption{
 			Content: testHookContent,
 		}).AddTokenAuth(token)
 		resp := MakeRequest(t, req, http.StatusOK)
 		apiGitHook := DecodeJSON(t, resp, &api.GitHook{})
 		assert.True(t, apiGitHook.IsActive)
 		assert.Equal(t, testHookContent, apiGitHook.Content)
 		req = NewRequestf(t, "GET", "/v1/repos/%s/%s/hooks/git/pre-receive", owner.Name, repo.Name).
 			AddTokenAuth(token)
 		resp = MakeRequest(t, req, http.StatusOK)
 		apiGitHook2 := DecodeJSON(t, resp, &api.GitHook{})
 		assert.True(t, apiGitHook2.IsActive)
 		assert.Equal(t, testHookContent, apiGitHook2.Content)
 	})
 	t.Run("EditGitHookNoAccess", func(t *testing.T) {
 		defer tests.PrintCurrentTest(t)()
 		repo := unittest.AssertExistsAndLoadBean(t, &repo_model.Repository{ID: 1})
 		owner := unittest.AssertExistsAndLoadBean(t, &user_model.User{ID: repo.OwnerID})
 		session := loginUser(t, owner.Name)
 		token := getTokenForLoggedInUser(t, session, auth_model.AccessTokenScopeWriteRepository)
 		urlStr := fmt.Sprintf("/v1/repos/%s/%s/hooks/git/pre-receive", owner.Name, repo.Name)
 		req := NewRequestWithJSON(t, "PATCH", urlStr, &api.EditGitHookOption{
 			Content: testHookContent,
 		}).AddTokenAuth(token)
 		MakeRequest(t, req, http.StatusForbidden)
 	})
 	t.Run("DeleteGitHook", func(t *testing.T) {
 		defer tests.PrintCurrentTest(t)()
 		repo := unittest.AssertExistsAndLoadBean(t, &repo_model.Repository{ID: 37})
 		owner := unittest.AssertExistsAndLoadBean(t, &user_model.User{ID: repo.OwnerID})
 		// user1 is an admin user
 		session := loginUser(t, "user1")
 		token := getTokenForLoggedInUser(t, session, auth_model.AccessTokenScopeWriteRepository)
 		req := NewRequestf(t, "DELETE", "/v1/repos/%s/%s/hooks/git/pre-receive", owner.Name, repo.Name).
 			AddTokenAuth(token)
 		MakeRequest(t, req, http.StatusNoContent)
 		req = NewRequestf(t, "GET", "/v1/repos/%s/%s/hooks/git/pre-receive", owner.Name, repo.Name).
 			AddTokenAuth(token)
 		resp := MakeRequest(t, req, http.StatusOK)
 		apiGitHook2 := DecodeJSON(t, resp, &api.GitHook{})
 		assert.False(t, apiGitHook2.IsActive)
 		assert.Empty(t, apiGitHook2.Content)
 	})
 	t.Run("DeleteGitHookNoAccess", func(t *testing.T) {
 		defer tests.PrintCurrentTest(t)()
 		repo := unittest.AssertExistsAndLoadBean(t, &repo_model.Repository{ID: 1})
 		owner := unittest.AssertExistsAndLoadBean(t, &user_model.User{ID: repo.OwnerID})
 		session := loginUser(t, owner.Name)
 		token := getTokenForLoggedInUser(t, session, auth_model.AccessTokenScopeWriteRepository)
 		req := NewRequestf(t, "DELETE", "/v1/repos/%s/%s/hooks/git/pre-receive", owner.Name, repo.Name).
 			AddTokenAuth(token)
 		MakeRequest(t, req, http.StatusForbidden)
 	})
 }

196 lines 7.2 KiB Go Raw Permalink Blame History

196 lines

7.2 KiB

Go

Raw Permalink Blame History