chemlab 0.0.1 → 0.1.0

data/qa/specs/features/ee/browser_ui/3_create/repository/pull_mirroring_over_http_spec.rb

@@ -1,52 +0,0 @@
-# frozen_string_literal: true
-
-module QA
-  context 'Create' do
-    # Use Admin credentials as a workaround for a permissions bug
-    # See https://gitlab.com/gitlab-org/gitlab/issues/13769
-    describe 'Pull mirror a repository over HTTP', :requires_admin do
-      it 'configures and syncs a (pull) mirrored repository with password auth' do
-        Flow::Login.sign_in_as_admin
-
-        source = Resource::Repository::ProjectPush.fabricate! do |project_push|
-          project_push.project_name = 'pull-mirror-source-project'
-          project_push.file_name = 'README.md'
-          project_push.file_content = '# This is a pull mirroring test project'
-          project_push.commit_message = 'Add README.md'
-        end
-        source_project_uri = source.project.repository_http_location.uri
-        source_project_uri.user = CGI.escape(Runtime::User.admin_username)
-
-        target_project = Resource::Project.fabricate_via_api! do |project|
-          project.name = 'pull-mirror-target-project'
-        end
-        target_project.visit!
-
-        Page::Project::Menu.perform(&:go_to_repository_settings)
-        Page::Project::Settings::Repository.perform do |settings|
-          settings.expand_mirroring_repositories do |mirror_settings|
-            # Configure the target project to pull from the source project
-            mirror_settings.repository_url = source_project_uri
-            mirror_settings.mirror_direction = 'Pull'
-            mirror_settings.authentication_method = 'Password'
-            mirror_settings.password = Runtime::User.admin_password
-            mirror_settings.mirror_repository
-            mirror_settings.update source_project_uri
-          end
-        end
-
-        # Check that the target project has the commit from the source
-        target_project.visit!
-        expect(page).to have_content("README.md")
-        expect(page).to have_content("This is a pull mirroring test project")
-        expect(page).to have_content("Mirrored from #{masked_url(source_project_uri)}")
-      end
-
-      def masked_url(url)
-        url.password = '*****'
-        url.user = '*****'
-        url
-      end
-    end
-  end
-end

data/qa/specs/features/ee/browser_ui/3_create/repository/pull_mirroring_over_ssh_with_key_spec.rb

@@ -1,71 +0,0 @@
-# frozen_string_literal: true
-
-module QA
-  context 'Create' do
-    describe 'Pull mirror a repository over SSH with a private key', quarantine: { issue: 'https://gitlab.com/gitlab-org/gitlab/-/issues/216297', type: :investigating } do
-      let(:source) do
-        Resource::Repository::ProjectPush.fabricate! do |project_push|
-          project_push.project_name = 'pull-mirror-source-project'
-          project_push.file_name = 'README.md'
-          project_push.file_content = '# This is a pull mirroring test project'
-          project_push.commit_message = 'Add README.md'
-        end
-      end
-      let(:source_project_uri) { source.project.repository_ssh_location.uri }
-      let(:target_project) do
-        Resource::Project.fabricate_via_api! do |project|
-          project.name = 'pull-mirror-target-project'
-        end
-      end
-
-      before do
-        Flow::Login.sign_in
-
-        target_project.visit!
-      end
-
-      it 'configures and syncs a (pull) mirrored repository' do
-        # Configure the target project to pull from the source project
-        # And get the public key to be used as a deploy key
-        Page::Project::Menu.perform(&:go_to_repository_settings)
-        public_key = Page::Project::Settings::Repository.perform do |settings|
-          settings.expand_mirroring_repositories do |mirror_settings|
-            mirror_settings.repository_url = source_project_uri
-            mirror_settings.mirror_direction = 'Pull'
-            mirror_settings.authentication_method = 'SSH public key'
-            mirror_settings.detect_host_keys
-            mirror_settings.mirror_repository
-            mirror_settings.public_key source_project_uri
-          end
-        end
-
-        # Add the public key to the source project as a deploy key
-        Resource::DeployKey.fabricate! do |deploy_key|
-          deploy_key.project = source.project
-          deploy_key.title = "pull mirror key #{Time.now.to_f}"
-          deploy_key.key = public_key
-        end
-
-        # Sync the repositories
-        target_project.visit!
-        Page::Project::Menu.perform(&:go_to_repository_settings)
-        Page::Project::Settings::Repository.perform do |settings|
-          settings.expand_mirroring_repositories do |mirror_settings|
-            mirror_settings.update source_project_uri
-          end
-        end
-
-        # Check that the target project has the commit from the source
-        target_project.visit!
-        expect(page).to have_content('README.md')
-        expect(page).to have_content('This is a pull mirroring test project')
-        expect(page).to have_content("Mirrored from #{masked_url(source_project_uri)}")
-      end
-
-      def masked_url(url)
-        url.user = '*****'
-        url
-      end
-    end
-  end
-end

data/qa/specs/features/ee/browser_ui/3_create/repository/push_rules_spec.rb

@@ -1,202 +0,0 @@
-# frozen_string_literal: true
-
-module QA
-  context 'Create' do
-    context 'Push Rules' do
-      describe 'using non signed commits' do
-        before(:context) do
-          prepare
-
-          @file_name_limitation = 'denied_file'
-          @file_size_limitation = 1
-          @authors_email_limitation = %{(#{Regexp.escape(@creator.email)}|#{@root.email})}
-          @branch_name_limitation = 'master'
-          @needed_phrase_limitation = 'allowed commit'
-          @deny_message_phrase_limitation = 'denied commit'
-
-          Page::Project::Settings::Repository.perform do |repository|
-            repository.expand_push_rules do |push_rules|
-              push_rules.fill_file_name(@file_name_limitation)
-              push_rules.fill_file_size(@file_size_limitation)
-              push_rules.fill_author_email(@authors_email_limitation)
-              push_rules.fill_branch_name(@branch_name_limitation)
-              push_rules.fill_commit_message_rule(@needed_phrase_limitation)
-              push_rules.fill_deny_commit_message_rule(@deny_message_phrase_limitation)
-              push_rules.check_prevent_secrets
-              push_rules.check_restrict_author
-              push_rules.check_deny_delete_tag
-              push_rules.click_submit
-            end
-          end
-        end
-
-        it 'allows an unrestricted push' do
-          expect_no_error_on_push(file: standard_file)
-        end
-
-        it 'restricts files by name and size' do
-          large_file = [{
-            name: 'file',
-            content: SecureRandom.hex(1000000)
-          }]
-          wrongly_named_file = [{
-            name: @file_name_limitation,
-            content: SecureRandom.hex(100)
-          }]
-
-          expect_error_on_push(file: large_file,
-            error: 'File "file" is larger than the allowed size of 1 MB')
-          expect_error_on_push(file: wrongly_named_file,
-            error: Regexp.escape("File name #{@file_name_limitation} was blacklisted by the pattern #{@file_name_limitation}"))
-        end
-
-        it 'restricts users by email format' do
-          gitlab_user = Resource::User.fabricate_or_use(Runtime::Env.gitlab_qa_username_2, Runtime::Env.gitlab_qa_password_2)
-          @project.add_member(gitlab_user, Resource::Members::AccessLevel::MAINTAINER)
-
-          expect_error_on_push(file: standard_file, user: gitlab_user,
-            error: Regexp.escape("Committer's email '#{gitlab_user.email}' does not follow the pattern '#{@authors_email_limitation}'"))
-        end
-
-        it 'restricts branches by branch name' do
-          expect_error_on_push(file: standard_file, branch: 'forbidden_branch',
-            error: Regexp.escape("Branch name does not follow the pattern '#{@branch_name_limitation}'"))
-        end
-
-        it 'restricts commit by message format' do
-          expect_no_error_on_push(file: standard_file, commit_message: @needed_phrase_limitation)
-          expect_error_on_push(file: standard_file, commit_message: 'forbidden message',
-            error: Regexp.escape("Commit message does not follow the pattern '#{@needed_phrase_limitation}'"))
-          expect_error_on_push(file: standard_file, commit_message: "#{@needed_phrase_limitation} - #{@deny_message_phrase_limitation}",
-            error: Regexp.escape("Commit message contains the forbidden pattern '#{@deny_message_phrase_limitation}'"))
-        end
-
-        it 'restricts committing files with secrets' do
-          secret_file = [{
-            name: 'id_rsa',
-            content: SecureRandom.hex(100)
-          }]
-
-          expect_error_on_push(file: secret_file,
-            error: Regexp.escape('File name id_rsa was blacklisted by the pattern id_rsa$'))
-        end
-
-        it 'restricts commits by user' do
-          expect_error_on_push(file: standard_file, user: @root,
-            error: Regexp.escape("Author '#{@root.email}' is not a member of team"))
-        end
-
-        it 'restricts removal of tag' do
-          tag = Resource::Tag.fabricate_via_api! do |tag|
-            tag.project = @project
-            tag.ref = 'master'
-            tag.name = 'test_tag'
-          end
-
-          expect_error_on_push(file: standard_file, tag: tag.name,
-            error: 'You cannot delete a tag')
-        end
-      end
-
-      describe 'with commits restricted to verified emails' do
-        before do
-          prepare
-
-          Page::Project::Settings::Repository.perform do |repository|
-            repository.expand_push_rules do |push_rules|
-              push_rules.check_committer_restriction
-              push_rules.click_submit
-            end
-          end
-        end
-
-        it 'rejects unverified emails' do
-          expect_no_error_on_push(file: standard_file)
-          expect_error_on_push(file: standard_file, user: @root,
-            error: 'You can only push commits that were committed with one of your own verified emails')
-        end
-      end
-
-      describe 'using signed commits' do
-        before do
-          prepare
-
-          Page::Project::Settings::Repository.perform do |repository|
-            repository.expand_push_rules do |push_rules|
-              push_rules.check_reject_unsigned_commits
-              push_rules.click_submit
-            end
-          end
-
-          @gpg = Resource::UserGPG.fabricate_via_api!
-        end
-
-        it 'restricts to signed commits' do
-          expect_no_error_on_push(file: standard_file, gpg: @gpg)
-          expect_error_on_push(file: standard_file, error: 'Commit must be signed with a GPG key')
-        end
-      end
-
-      def standard_file
-        [{
-           name: 'file',
-           content: SecureRandom.hex(100)
-         }]
-      end
-
-      def push(commit_message:, branch:, file:, user:, tag:, gpg:)
-        Resource::Repository::ProjectPush.fabricate! do |push|
-          push.project = @project
-          push.commit_message = commit_message
-          push.new_branch = branch != 'master'
-          push.branch_name = branch
-          push.user = user if user != @root
-          push.files = file if tag.nil?
-          push.tag_name = tag unless tag.nil?
-          push.gpg_key_id = gpg.key_id unless gpg.nil?
-        end
-      end
-
-      def expect_no_error_on_push(commit_message: 'allowed commit', branch: 'master', file:, user: @creator, tag: nil, gpg: nil)
-        expect do
-          push commit_message: commit_message, branch: branch, file: file, user: user, tag: tag, gpg: gpg
-        end.not_to raise_error
-      end
-
-      def expect_error_on_push(commit_message: 'allowed commit', branch: 'master', file:, user: @creator, tag: nil, gpg: nil, error: nil)
-        expect do
-          push commit_message: commit_message, branch: branch, file: file, user: user, tag: tag, gpg: gpg
-        end.to raise_error(QA::Git::Repository::RepositoryCommandError, /#{error}/)
-      end
-
-      def prepare
-        Flow::Login.sign_in
-
-        @creator = Resource::User.fabricate_via_api! do |user|
-          user.username = Runtime::User.username
-          user.password = Runtime::User.password
-        end
-
-        @root = Resource::User.new.tap do |user|
-          user.username = 'root'
-          user.name = 'GitLab QA'
-          user.email = 'root@gitlab.com'
-          user.password = nil
-        end
-
-        @project = Resource::Project.fabricate_via_api! do |project|
-          project.name = 'push_rules'
-        end
-
-        Resource::Repository::ProjectPush.fabricate! do |push|
-          push.project = @project
-          push.files = standard_file
-        end
-
-        @project.visit!
-
-        Page::Project::Menu.perform(&:go_to_repository_settings)
-      end
-    end
-  end
-end

data/qa/specs/features/ee/browser_ui/3_create/repository/restrict_push_protected_branch_spec.rb

@@ -1,120 +0,0 @@
-# frozen_string_literal: true
-
-module QA
-  context 'Create' do
-    describe 'Restricted protected branch push and merge' do
-      let(:user_developer) { Resource::User.fabricate_or_use(Runtime::Env.gitlab_qa_username_1, Runtime::Env.gitlab_qa_password_1) }
-      let(:user_maintainer) { Resource::User.fabricate_or_use(Runtime::Env.gitlab_qa_username_2, Runtime::Env.gitlab_qa_password_2) }
-      let(:branch_name) { 'protected-branch' }
-      let(:commit_message) { 'Protected push commit message' }
-
-      shared_examples 'only user with access pushes and merges' do
-        it 'unselected maintainer user fails to push' do
-          expect { push_new_file(branch_name, as_user: user_maintainer) }.to raise_error(
-            QA::Git::Repository::RepositoryCommandError,
-            /remote: GitLab: You are not allowed to push code to protected branches on this project\.([\s\S]+)\[remote rejected\] #{branch_name} -> #{branch_name} \(pre-receive hook declined\)/)
-        end
-
-        it 'selected developer user pushes and merges' do
-          push = push_new_file(branch_name, as_user: user_developer)
-
-          expect(push.output).to match(/remote: To create a merge request for protected-branch, visit/)
-
-          Resource::MergeRequest.fabricate_via_api! do |merge_request|
-            merge_request.project = project
-            merge_request.target_new_branch = false
-            merge_request.source_branch = branch_name
-            merge_request.no_preparation = true
-          end.visit!
-
-          Page::MergeRequest::Show.perform(&:merge!)
-
-          expect(page).to have_content('The changes were merged')
-        end
-      end
-
-      context 'when only one user is allowed to merge and push to a protected branch' do
-        let(:project) do
-          Resource::Project.fabricate_via_api! do |resource|
-            resource.name = 'user-with-access-to-protected-branch'
-            resource.initialize_with_readme = true
-          end
-        end
-
-        before do
-          project.add_member(user_developer, Resource::Members::AccessLevel::DEVELOPER)
-          project.add_member(user_maintainer, Resource::Members::AccessLevel::MAINTAINER)
-
-          login
-
-          Resource::ProtectedBranch.fabricate! do |protected_branch|
-            protected_branch.branch_name = branch_name
-            protected_branch.project = project
-            protected_branch.allowed_to_merge = {
-              users: [user_developer]
-            }
-            protected_branch.allowed_to_push = {
-              users: [user_developer]
-            }
-          end
-        end
-
-        it_behaves_like 'only user with access pushes and merges'
-      end
-
-      context 'when only one group is allowed to merge and push to a protected branch' do
-        let(:group) do
-          Resource::Group.fabricate_via_api! do |group|
-            group.path = "access-to-protected-branch-#{SecureRandom.hex(8)}"
-          end
-        end
-        let(:project) do
-          Resource::Project.fabricate_via_api! do |resource|
-            resource.name = 'group-with-access-to-protected-branch'
-            resource.initialize_with_readme = true
-          end
-        end
-
-        before do
-          login
-
-          group.add_member(user_developer, Resource::Members::AccessLevel::DEVELOPER)
-          project.share_with_group(group, Resource::Members::AccessLevel::DEVELOPER)
-
-          project.add_member(user_maintainer, Resource::Members::AccessLevel::MAINTAINER)
-
-          Resource::ProtectedBranch.fabricate! do |protected_branch|
-            protected_branch.branch_name = branch_name
-            protected_branch.project = project
-            protected_branch.allowed_to_merge = {
-              groups: [group]
-            }
-            protected_branch.allowed_to_push = {
-              groups: [group]
-            }
-          end
-        end
-
-        it_behaves_like 'only user with access pushes and merges'
-      end
-
-      def login(as_user: Runtime::User)
-        Page::Main::Menu.perform(&:sign_out_if_signed_in)
-
-        Runtime::Browser.visit(:gitlab, Page::Main::Login)
-        Page::Main::Login.perform do |login|
-          login.sign_in_using_credentials(user: as_user)
-        end
-      end
-
-      def push_new_file(branch, as_user: user)
-        Resource::Repository::Push.fabricate! do |push|
-          push.repository_http_uri = project.repository_http_location.uri
-          push.branch_name = branch_name
-          push.new_branch = false
-          push.user = as_user
-        end
-      end
-    end
-  end
-end

data/qa/specs/features/ee/browser_ui/3_create/web_ide/web_terminal_spec.rb

@@ -1,80 +0,0 @@
-# frozen_string_literal: true
-
-module QA
-  # This test was quarantined because relative URL isn't supported
-  # See https://gitlab.com/gitlab-org/gitlab/issues/13833
-  context 'Create', :runner, :quarantine do
-    describe 'Web IDE web terminal', :docker do
-      before do
-        project = Resource::Project.fabricate_via_api! do |project|
-          project.name = 'web-terminal-project'
-        end
-
-        Resource::Repository::Commit.fabricate_via_api! do |commit|
-          commit.project = project
-          commit.commit_message = 'Add .gitlab/.gitlab-webide.yml'
-          commit.add_files(
-            [
-              {
-                file_path: '.gitlab/.gitlab-webide.yml',
-                content: <<~YAML
-                  terminal:
-                    tags: ["web-ide"]
-                    script: sleep 60
-                YAML
-              }
-            ]
-          )
-        end
-
-        @runner = Resource::Runner.fabricate_via_api! do |runner|
-          runner.project = project
-          runner.name = "qa-runner-#{Time.now.to_i}"
-          runner.tags = %w[web-ide]
-          runner.image = 'gitlab/gitlab-runner:latest'
-          runner.config = <<~END
-            concurrent = 1
-
-            [session_server]
-              listen_address = "0.0.0.0:8093"
-              advertise_address = "localhost:8093"
-              session_timeout = 120
-          END
-        end
-
-        Flow::Login.sign_in
-
-        project.visit!
-      end
-
-      after do
-        @runner.remove_via_api! if @runner
-      end
-
-      it 'user starts the web terminal' do
-        Page::Project::Show.perform(&:open_web_ide!)
-
-        # Start the web terminal and check that there were no errors
-        # The terminal screen is a canvas element, so we can't read its content,
-        # so we infer that it's working if:
-        #  a) The terminal JS package has loaded, and
-        #  b) It's not stuck in a "Loading/Starting" state, and
-        #  c) There's no alert stating there was a problem
-        #
-        # The terminal itself is a third-party package so we assume it is
-        # adequately tested elsewhere.
-        #
-        # There are also FE specs
-        # * ee/spec/javascripts/ide/components/terminal/terminal_spec.js
-        # * ee/spec/frontend/ide/components/terminal/terminal_controls_spec.js
-        Page::Project::WebIDE::Edit.perform do |edit|
-          edit.start_web_terminal
-
-          expect(edit).to have_no_alert
-          expect(edit).to have_finished_loading
-          expect(edit).to have_terminal_screen
-        end
-      end
-    end
-  end
-end