harbor/src/core/api/robot_test.go

// Copyright 2018 Project Harbor Authors
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//    http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package api

import (
	"fmt"
	"github.com/goharbor/harbor/src/common/models"
	"net/http"
	"testing"
)

var (
	robotPath = "/api/projects/1/robots"
	robotID   int64
)

func TestRobotAPIPost(t *testing.T) {
	cases := []*codeCheckingCase{
		// 401
		{
			request: &testingRequest{
				method: http.MethodPost,
				url:    robotPath,
			},
			code: http.StatusUnauthorized,
		},

		// 403
		{
			request: &testingRequest{
				method:     http.MethodPost,
				url:        robotPath,
				bodyJSON:   &models.Robot{},
				credential: nonSysAdmin,
			},
			code: http.StatusForbidden,
		},
		// 201
		{
			request: &testingRequest{
				method: http.MethodPost,
				url:    robotPath,
				bodyJSON: &models.Robot{
					Name:        "test",
					Description: "test desc",
				},
				credential: projAdmin4Robot,
			},
			code: http.StatusCreated,
		},
		// 403 -- developer
		{
			request: &testingRequest{
				method: http.MethodPost,
				url:    robotPath,
				bodyJSON: &models.Robot{
					Name:        "test2",
					Description: "test2 desc",
				},
				credential: projDeveloper,
			},
			code: http.StatusForbidden,
		},

		// 409
		{
			request: &testingRequest{
				method: http.MethodPost,
				url:    robotPath,
				bodyJSON: &models.Robot{
					Name:        "test",
					Description: "test desc",
					ProjectID:   1,
				},
				credential: projAdmin4Robot,
			},
			code: http.StatusConflict,
		},
	}
	runCodeCheckingCases(t, cases...)
}

func TestRobotAPIGet(t *testing.T) {
	cases := []*codeCheckingCase{
		// 400
		{
			request: &testingRequest{
				method: http.MethodGet,
				url:    fmt.Sprintf("%s/%d", robotPath, 0),
			},
			code: http.StatusUnauthorized,
		},

		// 404
		{
			request: &testingRequest{
				method:     http.MethodGet,
				url:        fmt.Sprintf("%s/%d", robotPath, 1000),
				credential: projDeveloper,
			},
			code: http.StatusNotFound,
		},

		// 200
		{
			request: &testingRequest{
				method:     http.MethodGet,
				url:        fmt.Sprintf("%s/%d", robotPath, 1),
				credential: projDeveloper,
			},
			code: http.StatusOK,
		},

		// 200
		{
			request: &testingRequest{
				method:     http.MethodGet,
				url:        fmt.Sprintf("%s/%d", robotPath, 1),
				credential: projAdmin4Robot,
			},
			code: http.StatusOK,
		},
	}
	runCodeCheckingCases(t, cases...)
}

func TestRobotAPIList(t *testing.T) {
	cases := []*codeCheckingCase{
		// 401
		{
			request: &testingRequest{
				method: http.MethodGet,
				url:    robotPath,
			},
			code: http.StatusUnauthorized,
		},

		// 400
		{
			request: &testingRequest{
				method:     http.MethodGet,
				url:        "/api/projects/0/robots",
				credential: projAdmin4Robot,
			},
			code: http.StatusBadRequest,
		},

		// 200
		{
			request: &testingRequest{
				method:     http.MethodGet,
				url:        robotPath,
				credential: projDeveloper,
			},
			code: http.StatusOK,
		},

		// 200
		{
			request: &testingRequest{
				method:     http.MethodGet,
				url:        robotPath,
				credential: projAdmin4Robot,
			},
			code: http.StatusOK,
		},
	}
	runCodeCheckingCases(t, cases...)
}

func TestRobotAPIPut(t *testing.T) {
	cases := []*codeCheckingCase{
		// 401
		{
			request: &testingRequest{
				method: http.MethodPut,
				url:    fmt.Sprintf("%s/%d", robotPath, 1),
			},
			code: http.StatusUnauthorized,
		},

		// 400
		{
			request: &testingRequest{
				method:     http.MethodPut,
				url:        fmt.Sprintf("%s/%d", robotPath, 0),
				credential: projAdmin4Robot,
			},
			code: http.StatusBadRequest,
		},

		// 404
		{
			request: &testingRequest{
				method:     http.MethodPut,
				url:        fmt.Sprintf("%s/%d", robotPath, 10000),
				credential: projAdmin4Robot,
			},
			code: http.StatusNotFound,
		},

		// 403 non-member user
		{
			request: &testingRequest{
				method:     http.MethodPut,
				url:        fmt.Sprintf("%s/%d", robotPath, 1),
				credential: nonSysAdmin,
			},
			code: http.StatusForbidden,
		},

		// 403 developer
		{
			request: &testingRequest{
				method:     http.MethodPut,
				url:        fmt.Sprintf("%s/%d", robotPath, 1),
				credential: projDeveloper,
			},
			code: http.StatusForbidden,
		},

		// 200
		{
			request: &testingRequest{
				method: http.MethodPut,
				url:    fmt.Sprintf("%s/%d", robotPath, 1),
				bodyJSON: &models.Robot{
					Disabled: true,
				},
				credential: projAdmin4Robot,
			},
			code: http.StatusOK,
		},
	}

	runCodeCheckingCases(t, cases...)
}

func TestRobotAPIDelete(t *testing.T) {
	cases := []*codeCheckingCase{
		// 401
		{
			request: &testingRequest{
				method: http.MethodDelete,
				url:    fmt.Sprintf("%s/%d", robotPath, 1),
			},
			code: http.StatusUnauthorized,
		},

		// 400
		{
			request: &testingRequest{
				method:     http.MethodDelete,
				url:        fmt.Sprintf("%s/%d", robotPath, 0),
				credential: projAdmin4Robot,
			},
			code: http.StatusBadRequest,
		},

		// 404
		{
			request: &testingRequest{
				method:     http.MethodDelete,
				url:        fmt.Sprintf("%s/%d", robotPath, 10000),
				credential: projAdmin4Robot,
			},
			code: http.StatusNotFound,
		},

		// 403 non-member user
		{
			request: &testingRequest{
				method:     http.MethodDelete,
				url:        fmt.Sprintf("%s/%d", robotPath, 1),
				credential: nonSysAdmin,
			},
			code: http.StatusForbidden,
		},

		// 403 developer
		{
			request: &testingRequest{
				method:     http.MethodDelete,
				url:        fmt.Sprintf("%s/%d", robotPath, 1),
				credential: projDeveloper,
			},
			code: http.StatusForbidden,
		},

		// 200
		{
			request: &testingRequest{
				method:     http.MethodDelete,
				url:        fmt.Sprintf("%s/%d", robotPath, 1),
				credential: projAdmin4Robot,
			},
			code: http.StatusOK,
		},
	}

	runCodeCheckingCases(t, cases...)
}