mirror of
				https://gitee.com/gitea/gitea
				synced 2025-11-04 16:40:24 +08:00 
			
		
		
		
	Replace #20257 (which is stale and incomplete) Close #20255 Major changes: * Deprecate the "WHITELIST", use "ALLOWLIST" * Add wildcard support for EMAIL_DOMAIN_ALLOWLIST/EMAIL_DOMAIN_BLOCKLIST * Update example config file and document * Improve tests
		
			
				
	
	
		
			132 lines
		
	
	
		
			2.7 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			132 lines
		
	
	
		
			2.7 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
// Copyright 2018 The Gogs Authors. All rights reserved.
 | 
						|
// SPDX-License-Identifier: MIT
 | 
						|
 | 
						|
package forms
 | 
						|
 | 
						|
import (
 | 
						|
	"strconv"
 | 
						|
	"testing"
 | 
						|
 | 
						|
	auth_model "code.gitea.io/gitea/models/auth"
 | 
						|
	"code.gitea.io/gitea/modules/setting"
 | 
						|
 | 
						|
	"github.com/gobwas/glob"
 | 
						|
	"github.com/stretchr/testify/assert"
 | 
						|
)
 | 
						|
 | 
						|
func TestRegisterForm_IsDomainAllowed_Empty(t *testing.T) {
 | 
						|
	oldService := setting.Service
 | 
						|
	defer func() {
 | 
						|
		setting.Service = oldService
 | 
						|
	}()
 | 
						|
 | 
						|
	setting.Service.EmailDomainAllowList = nil
 | 
						|
 | 
						|
	form := RegisterForm{}
 | 
						|
 | 
						|
	assert.True(t, form.IsEmailDomainAllowed())
 | 
						|
}
 | 
						|
 | 
						|
func TestRegisterForm_IsDomainAllowed_InvalidEmail(t *testing.T) {
 | 
						|
	oldService := setting.Service
 | 
						|
	defer func() {
 | 
						|
		setting.Service = oldService
 | 
						|
	}()
 | 
						|
 | 
						|
	setting.Service.EmailDomainAllowList = []glob.Glob{glob.MustCompile("gitea.io")}
 | 
						|
 | 
						|
	tt := []struct {
 | 
						|
		email string
 | 
						|
	}{
 | 
						|
		{"invalid-email"},
 | 
						|
		{"gitea.io"},
 | 
						|
	}
 | 
						|
 | 
						|
	for _, v := range tt {
 | 
						|
		form := RegisterForm{Email: v.email}
 | 
						|
 | 
						|
		assert.False(t, form.IsEmailDomainAllowed())
 | 
						|
	}
 | 
						|
}
 | 
						|
 | 
						|
func TestRegisterForm_IsDomainAllowed_AllowedEmail(t *testing.T) {
 | 
						|
	oldService := setting.Service
 | 
						|
	defer func() {
 | 
						|
		setting.Service = oldService
 | 
						|
	}()
 | 
						|
 | 
						|
	setting.Service.EmailDomainAllowList = []glob.Glob{glob.MustCompile("gitea.io"), glob.MustCompile("*.allow")}
 | 
						|
 | 
						|
	tt := []struct {
 | 
						|
		email string
 | 
						|
		valid bool
 | 
						|
	}{
 | 
						|
		{"security@gitea.io", true},
 | 
						|
		{"security@gITea.io", true},
 | 
						|
		{"invalid", false},
 | 
						|
		{"seee@example.com", false},
 | 
						|
 | 
						|
		{"user@my.allow", true},
 | 
						|
		{"user@my.allow1", false},
 | 
						|
	}
 | 
						|
 | 
						|
	for _, v := range tt {
 | 
						|
		form := RegisterForm{Email: v.email}
 | 
						|
 | 
						|
		assert.Equal(t, v.valid, form.IsEmailDomainAllowed())
 | 
						|
	}
 | 
						|
}
 | 
						|
 | 
						|
func TestRegisterForm_IsDomainAllowed_BlockedEmail(t *testing.T) {
 | 
						|
	oldService := setting.Service
 | 
						|
	defer func() {
 | 
						|
		setting.Service = oldService
 | 
						|
	}()
 | 
						|
 | 
						|
	setting.Service.EmailDomainAllowList = nil
 | 
						|
	setting.Service.EmailDomainBlockList = []glob.Glob{glob.MustCompile("gitea.io"), glob.MustCompile("*.block")}
 | 
						|
 | 
						|
	tt := []struct {
 | 
						|
		email string
 | 
						|
		valid bool
 | 
						|
	}{
 | 
						|
		{"security@gitea.io", false},
 | 
						|
		{"security@gitea.example", true},
 | 
						|
		{"invalid", true},
 | 
						|
 | 
						|
		{"user@my.block", false},
 | 
						|
		{"user@my.block1", true},
 | 
						|
	}
 | 
						|
 | 
						|
	for _, v := range tt {
 | 
						|
		form := RegisterForm{Email: v.email}
 | 
						|
 | 
						|
		assert.Equal(t, v.valid, form.IsEmailDomainAllowed())
 | 
						|
	}
 | 
						|
}
 | 
						|
 | 
						|
func TestNewAccessTokenForm_GetScope(t *testing.T) {
 | 
						|
	tests := []struct {
 | 
						|
		form        NewAccessTokenForm
 | 
						|
		scope       auth_model.AccessTokenScope
 | 
						|
		expectedErr error
 | 
						|
	}{
 | 
						|
		{
 | 
						|
			form:  NewAccessTokenForm{Name: "test", Scope: []string{"repo"}},
 | 
						|
			scope: "repo",
 | 
						|
		},
 | 
						|
		{
 | 
						|
			form:  NewAccessTokenForm{Name: "test", Scope: []string{"repo", "user"}},
 | 
						|
			scope: "repo,user",
 | 
						|
		},
 | 
						|
	}
 | 
						|
 | 
						|
	for i, test := range tests {
 | 
						|
		t.Run(strconv.Itoa(i), func(t *testing.T) {
 | 
						|
			scope, err := test.form.GetScope()
 | 
						|
			assert.Equal(t, test.expectedErr, err)
 | 
						|
			assert.Equal(t, test.scope, scope)
 | 
						|
		})
 | 
						|
	}
 | 
						|
}
 |