mirror of
https://github.com/wahyd4/gitlabhq.git
synced 2026-08-11 21:56:19 +10:00
Update spec/features/security specs
This commit is contained in:
committed by
Dmitriy Zaporozhets
parent
20a871cc21
commit
1f7490a23f
@@ -6,7 +6,7 @@ describe "Profile access", feature: true do
|
||||
end
|
||||
|
||||
describe "GET /login" do
|
||||
it { expect(new_user_session_path).not_to be_404_for :visitor }
|
||||
it { expect(new_user_session_path).not_to be_not_found_for :visitor }
|
||||
end
|
||||
|
||||
describe "GET /profile/keys" do
|
||||
|
||||
+25
-42
@@ -1,30 +1,43 @@
|
||||
RSpec::Matchers.define :be_valid_commit do
|
||||
match do |actual|
|
||||
actual != nil
|
||||
actual.id == ValidCommit::ID
|
||||
actual.message == ValidCommit::MESSAGE
|
||||
actual.author_name == ValidCommit::AUTHOR_FULL_NAME
|
||||
actual &&
|
||||
actual.id == ValidCommit::ID &&
|
||||
actual.message == ValidCommit::MESSAGE &&
|
||||
actual.author_name == ValidCommit::AUTHOR_FULL_NAME
|
||||
end
|
||||
end
|
||||
|
||||
def emulate_user(user)
|
||||
user = case user
|
||||
when :user then create(:user)
|
||||
when :visitor then nil
|
||||
when :admin then create(:admin)
|
||||
else user
|
||||
end
|
||||
login_with(user) if user
|
||||
end
|
||||
|
||||
RSpec::Matchers.define :be_allowed_for do |user|
|
||||
match do |url|
|
||||
include UrlAccess
|
||||
url_allowed?(user, url)
|
||||
emulate_user(user)
|
||||
visit url
|
||||
status_code != 404 && current_path != new_user_session_path
|
||||
end
|
||||
end
|
||||
|
||||
RSpec::Matchers.define :be_denied_for do |user|
|
||||
match do |url|
|
||||
include UrlAccess
|
||||
url_denied?(user, url)
|
||||
emulate_user(user)
|
||||
visit url
|
||||
status_code == 404 || current_path == new_user_session_path
|
||||
end
|
||||
end
|
||||
|
||||
RSpec::Matchers.define :be_404_for do |user|
|
||||
RSpec::Matchers.define :be_not_found_for do |user|
|
||||
match do |url|
|
||||
include UrlAccess
|
||||
url_404?(user, url)
|
||||
emulate_user(user)
|
||||
visit url
|
||||
status_code == 404
|
||||
end
|
||||
end
|
||||
|
||||
@@ -34,7 +47,7 @@ RSpec::Matchers.define :include_module do |expected|
|
||||
end
|
||||
|
||||
description do
|
||||
"include the #{expected} module"
|
||||
"includes the #{expected} module"
|
||||
end
|
||||
|
||||
failure_message do
|
||||
@@ -42,36 +55,6 @@ RSpec::Matchers.define :include_module do |expected|
|
||||
end
|
||||
end
|
||||
|
||||
module UrlAccess
|
||||
def url_allowed?(user, url)
|
||||
emulate_user(user)
|
||||
visit url
|
||||
(status_code != 404 && current_path != new_user_session_path)
|
||||
end
|
||||
|
||||
def url_denied?(user, url)
|
||||
emulate_user(user)
|
||||
visit url
|
||||
(status_code == 404 || current_path == new_user_session_path)
|
||||
end
|
||||
|
||||
def url_404?(user, url)
|
||||
emulate_user(user)
|
||||
visit url
|
||||
status_code == 404
|
||||
end
|
||||
|
||||
def emulate_user(user)
|
||||
user = case user
|
||||
when :user then create(:user)
|
||||
when :visitor then nil
|
||||
when :admin then create(:admin)
|
||||
else user
|
||||
end
|
||||
login_with(user) if user
|
||||
end
|
||||
end
|
||||
|
||||
# Extend shoulda-matchers
|
||||
module Shoulda::Matchers::ActiveModel
|
||||
class ValidateLengthOfMatcher
|
||||
|
||||
Reference in New Issue
Block a user