dehub/commit_test.go

package dehub

import (
	"testing"

	"dehub.dev/src/dehub.git/accessctl"
	"dehub.dev/src/dehub.git/sigcred"

	"gopkg.in/src-d/go-git.v4/plumbing"
)

func TestConfigChange(t *testing.T) {
	h := newHarness(t)

	var gitCommits []GitCommit

	// commit the initial staged changes, which merely include the config and
	// public key
	gitCommit := h.changeCommit("commit configuration", h.sig)
	gitCommits = append(gitCommits, gitCommit)

	// create a new account and add it to the configuration. That commit should
	// not be verifiable, though
	newSig, newPubKeyBody := sigcred.TestSignifierPGP("toot", false, h.rand)
	h.cfg.Accounts = append(h.cfg.Accounts, Account{
		ID: "toot",
		Signifiers: []sigcred.Signifier{{PGPPublicKey: &sigcred.SignifierPGP{
			Body: string(newPubKeyBody),
		}}},
	})

	h.stageCfg()
	badCommit, err := h.repo.NewCommitChange("add toot user")
	if err != nil {
		t.Fatalf("creating CommitChange: %v", err)
	}
	h.tryCommit(false, badCommit, newSig)

	// now add with the root user, this should work.
	h.stageCfg()
	gitCommit = h.changeCommit("add toot user", h.sig)
	gitCommits = append(gitCommits, gitCommit)

	// _now_ the toot user should be able to do things.
	h.stage(map[string]string{"foo/bar": "what a cool file"})
	gitCommit = h.changeCommit("add a cool file", newSig)
	gitCommits = append(gitCommits, gitCommit)

	if err := h.repo.VerifyCommits(MainRefName, gitCommits); err != nil {
		t.Fatal(err)
	}
}

func TestMainAncestryRequirement(t *testing.T) {
	otherBranch := plumbing.NewBranchReferenceName("other")
	t.Run("empty repo", func(t *testing.T) {
		h := newHarness(t)
		h.checkout(otherBranch)

		// stage and try to add to the "other" branch, it shouldn't work though
		h.stageCfg()
		badCommit, err := h.repo.NewCommitChange("starting new branch at other")
		if err != nil {
			t.Fatalf("creating CommitChange: %v", err)
		}
		h.tryCommit(false, badCommit, h.sig)
	})

	t.Run("new branch, single commit", func(t *testing.T) {
		h := newHarness(t)
		h.stageCfg()
		h.changeCommit("add cfg", h.sig)

		// set HEAD to this other branch which doesn't really exist
		ref := plumbing.NewSymbolicReference(plumbing.HEAD, otherBranch)
		if err := h.repo.GitRepo.Storer.SetReference(ref); err != nil {
			h.t.Fatal(err)
		}

		h.stageCfg()
		badCommit, err := h.repo.NewCommitChange("starting new branch at other")
		if err != nil {
			t.Fatalf("creating CommitChange: %v", err)
		}
		h.tryCommit(false, badCommit, h.sig)
	})
}

func TestAnonymousCommits(t *testing.T) {
	h := newHarness(t)
	anonSig, _ := sigcred.TestSignifierPGP("anon", true, h.rand)

	h.cfg.AccessControls = []accessctl.AccessControl{{
		Action: accessctl.ActionAllow,
		Filters: []accessctl.Filter{
			{Signature: &accessctl.FilterSignature{Any: true}},
		},
	}}
	h.stageCfg()
	h.changeCommit("this will work", anonSig)
}