Something went wrong. Try again.
Monorepo for Tangled forked from tangled.org/core
Something went wrong. Try again.
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133package spindle
import ( "testing" "time"
"github.com/bluesky-social/indigo/atproto/syntax"
"tangled.org/core/spindle/config" "tangled.org/core/spindle/db")
const pausedOwner = syntax.DID("did:plc:thespindleowner")
// enroll runs before seed, a repo only gets served if its owner is already admittedfunc newClosedPushEnv(t *testing.T, asAdmin bool, enroll func(*db.DB) error) *pushEnv { t.Helper() w := newWorld(t) w.admission = config.AdmissionClosed if !asAdmin { w.owner = pausedOwner } repo := w.serveGitRepo(testRepoDid) n := w.boot() if enroll != nil { if err := enroll(n.s.db); err != nil { t.Fatal(err) } // the allowlist xrpc tracks the owner too, or hydrant never backfills them n.s.backfill.Track(testOwner) } w.seed(n, testBob) return &pushEnv{w: w, n: n, repo: repo}}
func listOwner(d *db.DB) error { return db.AddToAllowlist(d, testOwner) }
func inviteOwner(d *db.DB) error { code, _, err := d.MintInvite("did:plc:someadmin", time.Now()) if err != nil { return err } return d.RedeemInvite(code, testOwner, time.Now())}
func (e *pushEnv) allow(t *testing.T) { t.Helper() if err := db.AddToAllowlist(e.n.s.db, testOwner); err != nil { t.Fatal(err) }}
func (e *pushEnv) disallow(t *testing.T) { t.Helper() if err := db.RemoveFromAllowlist(e.n.s.db, testOwner); err != nil { t.Fatal(err) }}
func (e *pushEnv) pushNext(t *testing.T) string { t.Helper() uri, err := e.notify(e.n.s, e.firstPush(t)) if err != nil { t.Fatalf("notify: %v", err) } return string(uri)}
func TestRemovedFromTheAllowlistPausesTheOwnersRepos(t *testing.T) { e := newClosedPushEnv(t, false, listOwner) addTestSecret(t, e.n.s, testRepoDid)
if e.pushNext(t) == "" { t.Fatal("setup: an admitted owner's push made no pipeline") } e.disallow(t) if uri := e.pushNext(t); uri != "" { t.Fatalf("a push of an owner who was removed from the allow-list made pipeline %q", uri) } e.wantPipelines(t, 1, "after the owner was removed") if got := secretCount(t, e.n.s, testRepoDid); got != 1 { t.Fatalf("%d secrets after the owner was removed, want the 1 that was there", got) } if len(repoRows(t, e.n.s, testRepoDid)) != 1 { t.Fatal("the repo row went away with the allow-list entry") }
e.allow(t) if e.pushNext(t) == "" { t.Fatal("a push made no pipeline after the owner was added back") } e.wantPipelines(t, 2, "after the owner was added back")}
func TestOwnerEnrolledByInviteIsPausedAndResumedToo(t *testing.T) { e := newClosedPushEnv(t, false, inviteOwner) if e.pushNext(t) == "" { t.Fatal("setup: an owner enrolled by invite made no pipeline") }
e.disallow(t) if uri := e.pushNext(t); uri != "" { t.Fatalf("a push of an invited owner who was removed made pipeline %q", uri) } e.allow(t) if e.pushNext(t) == "" { t.Fatal("a push made no pipeline after the invited owner was added back") }}
func TestAdminOwnerIsNeverPaused(t *testing.T) { e := newClosedPushEnv(t, true, nil) if e.pushNext(t) == "" { t.Fatal("an admin owner who isn't on the allow-list made no pipeline under closed admission") }}
func TestOpeningAdmissionResumesAPausedOwner(t *testing.T) { e := newClosedPushEnv(t, false, listOwner) e.disallow(t) if uri := e.pushNext(t); uri != "" { t.Fatalf("an owner who isn't admitted made pipeline %q", uri) }
// admission is read at boot, opening it takes a restart e.n.stop() e.w.admission = config.AdmissionOpen e.n = e.w.boot() if e.pushNext(t) == "" { t.Fatal("a push made no pipeline after admission opened") }}