Commit 8cdc575d authored by Rémy Coutable's avatar Rémy Coutable

Fix a nested-group related failure failing with MySQL

Signed-off-by: default avatarRémy Coutable <remy@rymai.me>
parent 643fdffd
...@@ -6,6 +6,7 @@ describe EE::RoutableActions::SsoEnforcementRedirect do ...@@ -6,6 +6,7 @@ describe EE::RoutableActions::SsoEnforcementRedirect do
let(:saml_provider) { create(:saml_provider, enforced_sso: true) } let(:saml_provider) { create(:saml_provider, enforced_sso: true) }
let(:root_group) { saml_provider.group } let(:root_group) { saml_provider.group }
let(:nested_group) { create(:group, :private, parent: root_group) } let(:nested_group) { create(:group, :private, parent: root_group) }
let(:project) { create(:project, :private, group: root_group) }
let(:nested_project) { create(:project, :private, group: nested_group) } let(:nested_project) { create(:project, :private, group: nested_group) }
describe '#should_redirect_to_group_saml_sso?' do describe '#should_redirect_to_group_saml_sso?' do
...@@ -26,58 +27,86 @@ describe EE::RoutableActions::SsoEnforcementRedirect do ...@@ -26,58 +27,86 @@ describe EE::RoutableActions::SsoEnforcementRedirect do
expect(subject.should_redirect_to_group_saml_sso?(double, double)).to eq(false) expect(subject.should_redirect_to_group_saml_sso?(double, double)).to eq(false)
end end
context 'with a project' do shared_examples 'a routable with SSO enforcement redirect' do
subject { described_class.new(nested_project) }
it 'is false when a new sso session is not needed' do it 'is false when a new sso session is not needed' do
allow_any_instance_of(ProjectPolicy).to receive(:needs_new_sso_session?).and_return(false) expect_next_instance_of(BasePolicy) do |policy|
expect(policy).to receive(:needs_new_sso_session?).and_return(false)
end
expect(subject.should_redirect_to_group_saml_sso?(user, request)).to eq false expect(subject.should_redirect_to_group_saml_sso?(user, request)).to eq false
end end
it 'is true when a new sso session is needed' do it 'is true when a new sso session is needed' do
allow_any_instance_of(ProjectPolicy).to receive(:needs_new_sso_session?).and_return(true) expect_next_instance_of(BasePolicy) do |policy|
expect(policy).to receive(:needs_new_sso_session?).and_return(true)
end
expect(subject.should_redirect_to_group_saml_sso?(user, request)).to eq true expect(subject.should_redirect_to_group_saml_sso?(user, request)).to eq true
end end
end
context 'in a personal namespace' do context 'with a project' do
subject { described_class.new(create(:project)) } subject { described_class.new(project) }
it 'returns false' do it_behaves_like 'a routable with SSO enforcement redirect'
expect(subject.should_redirect_to_group_saml_sso?(user, double)).to eq false end
end
context 'with a nested project' do
subject { described_class.new(nested_project) }
it_behaves_like 'a routable with SSO enforcement redirect'
end
context 'with a project in a personal namespace' do
subject { described_class.new(create(:project)) }
it 'returns false' do
expect(subject.should_redirect_to_group_saml_sso?(user, double)).to eq false
end end
end end
context 'with a group' do context 'with a group' do
subject { described_class.new(root_group) }
it_behaves_like 'a routable with SSO enforcement redirect'
end
context 'with a nested group' do
subject { described_class.new(nested_group) } subject { described_class.new(nested_group) }
it 'is false when a new sso session is not needed' do it_behaves_like 'a routable with SSO enforcement redirect'
allow_any_instance_of(GroupPolicy).to receive(:needs_new_sso_session?).and_return(false) end
end
expect(subject.should_redirect_to_group_saml_sso?(user, request)).to eq false describe '#sso_redirect_url' do
shared_examples 'a routable SSO url' do
it 'returns the SSO url for the root group' do
expect(subject.sso_redirect_url).to match(/groups\/#{root_group.to_param}\/-\/saml\/sso\?token=/)
end end
end
it 'is true when a new sso session is needed' do context 'with a group' do
allow_any_instance_of(GroupPolicy).to receive(:needs_new_sso_session?).and_return(true) subject { described_class.new(root_group) }
expect(subject.should_redirect_to_group_saml_sso?(user, request)).to eq true it_behaves_like 'a routable SSO url'
end
end end
end
describe '#sso_redirect_url' do context 'with a nested group', :nested_groups do
it 'returns the SSO url for a group' do subject { described_class.new(nested_group) }
subject = described_class.new(nested_group)
expect(subject.sso_redirect_url).to match(/groups\/#{root_group.to_param}\/-\/saml\/sso\?token=/) it_behaves_like 'a routable SSO url'
end end
it "returns the SSO url for a project's root group" do context 'with a project' do
subject = described_class.new(nested_project) subject { described_class.new(project) }
it_behaves_like 'a routable SSO url'
end
context 'with a nested project', :nested_groups do
subject { described_class.new(nested_project) }
expect(subject.sso_redirect_url).to match(/groups\/#{root_group.to_param}\/-\/saml\/sso\?token=/) it_behaves_like 'a routable SSO url'
end end
end end
end end
...@@ -53,6 +53,12 @@ describe RoutableActions do ...@@ -53,6 +53,12 @@ describe RoutableActions do
end end
describe 'for a group' do describe 'for a group' do
let(:routable) { root_group }
include_examples 'sso redirects'
end
describe 'for a nested group', :nested_groups do
let(:routable) { create(:group, :private, parent: root_group) } let(:routable) { create(:group, :private, parent: root_group) }
include_examples 'sso redirects' include_examples 'sso redirects'
...@@ -63,6 +69,12 @@ describe RoutableActions do ...@@ -63,6 +69,12 @@ describe RoutableActions do
include_examples 'sso redirects' include_examples 'sso redirects'
end end
describe 'for a nested project', :nested_groups do
let(:routable) { create(:project, :private, group: create(:group, :private, parent: root_group)) }
include_examples 'sso redirects'
end
end end
end end
end end
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment