# -*- coding: utf-8 -*- """ (c) 2015-2018 - Copyright Red Hat Inc Authors: Patrick Uiterwijk """ from __future__ import unicode_literals __requires__ = ['SQLAlchemy >= 0.8'] import pkg_resources import datetime import unittest import shutil import sys import tempfile import os import six import json import pygit2 from mock import patch, MagicMock sys.path.insert(0, os.path.join(os.path.dirname( os.path.abspath(__file__)), '..')) import pagure.lib.query import tests class PagureFlaskAppClonetests(tests.Modeltests): """ Tests for the clone bridging. """ def setUp(self): super(PagureFlaskAppClonetests, self).setUp() tests.create_projects(self.session) tests.create_tokens(self.session) tests.create_tokens_acl(self.session) self.create_project_full('clonetest', {"create_readme": "y"}) @patch.dict('pagure.config.config', {'ALLOW_HTTP_PULL_PUSH': False}) def test_http_clone_disabled(self): """ Test that the HTTP clone endpoint gets correctly closed. """ output = self.app.get('/clonetest.git/info/refs?service=git-upload-pack') self.assertEqual(output.status_code, 403) self.assertIn('not allowed', output.get_data(as_text=True)) @patch.dict('pagure.config.config', {'ALLOW_HTTP_PULL_PUSH': True}) def test_http_clone_invalid_service(self): """ Test that the HTTP endpoint refuses invalid services. """ output = self.app.get('/clonetest.git/info/refs?service=myservice') self.assertEqual(output.status_code, 400) self.assertIn('Unknown service', output.get_data(as_text=True)) @patch.dict('pagure.config.config', {'ALLOW_HTTP_PULL_PUSH': True}) def test_http_clone_invalid_project(self): """ Test that the HTTP endpoint refuses invalid projects. """ output = self.app.get('/nosuchrepo.git/info/refs?service=git-upload-pack') self.assertEqual(output.status_code, 404) self.assertIn('Project not found', output.get_data(as_text=True)) @patch.dict('pagure.config.config', {'ALLOW_HTTP_PULL_PUSH': True}) def test_http_clone_dumb(self): """ Test that the HTTP endpoint refuses dumb service request. """ output = self.app.get('/clonetest.git/info/refs') self.assertEqual(output.status_code, 400) self.assertIn('Please switch', output.get_data(as_text=True)) @patch.dict('pagure.config.config', { 'ALLOW_HTTP_PULL_PUSH': True, 'ALLOW_HTTP_PUSH': False, 'HTTP_REPO_ACCESS_GITOLITE': None, }) def test_http_push_disabled(self): """ Test that the HTTP push gets refused. """ output = self.app.get('/clonetest.git/info/refs?service=git-receive-pack') self.assertEqual(output.status_code, 403) self.assertIn('pushing disabled', output.get_data(as_text=True)) output = self.app.post('/clonetest.git/git-receive-pack') self.assertEqual(output.status_code, 403) self.assertIn('pushing disabled', output.get_data(as_text=True)) @patch.dict('pagure.config.config', { 'ALLOW_HTTP_PULL_PUSH': True, 'ALLOW_HTTP_PUSH': True, 'HTTP_REPO_ACCESS_GITOLITE': None, }) def test_http_push_unauthed(self): """ Test that the HTTP push gets refused unauthed. """ output = self.app.get('/clonetest.git/info/refs?service=git-receive-pack') self.assertEqual(output.status_code, 403) self.assertIn('Unauthenticated push', output.get_data(as_text=True)) @patch.dict('pagure.config.config', {'ALLOW_HTTP_PULL_PUSH': True}) def test_http_clone_private_project_unauthed(self): """ Test that the HTTP endpoint enforced project.private. """ project = pagure.lib.query._get_project(self.session, 'clonetest') project.private = True self.session.add(project) self.session.commit() output = self.app.get('/clonetest.git/info/refs?service=git-upload-pack') self.assertEqual(output.status_code, 404) self.assertIn('Project not found', output.get_data(as_text=True)) @patch.dict('pagure.config.config', { 'ALLOW_HTTP_PULL_PUSH': True, 'ALLOW_HTTP_PUSH': False, 'HTTP_REPO_ACCESS_GITOLITE': None, }) def test_http_clone(self): """ Test that HTTP cloning gives reasonable output. """ # Unfortunately, actually testing a git clone would need the app to # run on a TCP port, which the test environment doesn't do. output = self.app.get('/clonetest.git/info/refs?service=git-upload-pack') self.assertEqual(output.status_code, 200) output_text = output.get_data(as_text=True) self.assertIn("# service=git-upload-pack", output_text) self.assertIn(" refs/heads/master\n0000", output_text) output = self.app.post( '/clonetest.git/git-upload-pack', headers={'Content-Type': 'application/x-git-upload-pack-request'}, ) # Git 2.17 returns 415, older return 200 # Either means we didn't fully crash when returning the response self.assertIn(output.status_code, (200, 415)) @patch.dict('pagure.config.config', { 'ALLOW_HTTP_PULL_PUSH': True, 'ALLOW_HTTP_PUSH': False, 'HTTP_REPO_ACCESS_GITOLITE': None, }) def test_http_clone_private(self): """ Test that HTTP cloning gives reasonable output with project.private. """ # Unfortunately, actually testing a git clone would need the app to # run on a TCP port, which the test environment doesn't do. project = pagure.lib.query._get_project(self.session, 'clonetest') project.private = True self.session.add(project) self.session.commit() output = self.app.get('/clonetest.git/info/refs?service=git-upload-pack') self.assertEqual(output.status_code, 404) self.assertIn('Project not found', output.get_data(as_text=True)) output = self.app.get( '/clonetest.git/info/refs?service=git-upload-pack', environ_overrides={'REMOTE_USER': 'pingou'}, ) self.assertEqual(output.status_code, 200) output_text = output.get_data(as_text=True) self.assertIn("# service=git-upload-pack", output_text) self.assertIn(" refs/heads/master\n0000", output_text) @patch.dict('pagure.config.config', { 'ALLOW_HTTP_PULL_PUSH': True, 'ALLOW_HTTP_PUSH': True, 'HTTP_REPO_ACCESS_GITOLITE': None, }) def test_http_push(self): """ Test that the HTTP push gets accepted. """ output = self.app.get( '/clonetest.git/info/refs?service=git-receive-pack', environ_overrides={'REMOTE_USER': 'pingou'}, ) self.assertEqual(output.status_code, 200) output_text = output.get_data(as_text=True) self.assertIn("# service=git-receive-pack", output_text) self.assertIn(" refs/heads/master\x00", output_text)