gcloud 0.0.7 → 0.1.0

data/test/gcloud/storage/test_default_acl.rb

@@ -0,0 +1,256 @@
+# Copyright 2015 Google Inc. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+require "helper"
+require "json"
+require "uri"
+
+describe Gcloud::Storage::Bucket, :default_acl, :mock_storage do
+  # Create a bucket object with the project's mocked connection object
+  let(:bucket) { Gcloud::Storage::Bucket.from_gapi random_bucket_hash,
+                                                   storage.connection }
+
+  it "retrieves the default ACL" do
+    bucket_name = "found-bucket"
+
+    mock_connection.get "/storage/v1/b/#{bucket_name}" do |env|
+      [200, {"Content-Type"=>"application/json"},
+       random_bucket_hash(bucket_name).to_json]
+    end
+
+    mock_connection.get "/storage/v1/b/#{bucket_name}/defaultObjectAcl" do |env|
+      [200, {"Content-Type"=>"application/json"},
+       random_default_acl_hash(bucket_name).to_json]
+    end
+
+    bucket = storage.find_bucket bucket_name
+    bucket.name.must_equal bucket_name
+    bucket.default_acl.owners.wont_be  :empty?
+    bucket.default_acl.writers.must_be :empty?
+    bucket.default_acl.readers.wont_be :empty?
+  end
+
+  it "adds to the default ACL" do
+    bucket_name = "found-bucket"
+
+    mock_connection.get "/storage/v1/b/#{bucket_name}" do |env|
+      [200, {"Content-Type"=>"application/json"},
+       random_bucket_hash(bucket_name).to_json]
+    end
+
+    mock_connection.get "/storage/v1/b/#{bucket_name}/defaultObjectAcl" do |env|
+      [200, {"Content-Type"=>"application/json"},
+       random_default_acl_hash(bucket_name).to_json]
+    end
+
+    bucket = storage.find_bucket bucket_name
+    bucket.name.must_equal bucket_name
+    bucket.default_acl.owners.wont_be  :empty?
+    bucket.default_acl.writers.must_be :empty?
+    bucket.default_acl.readers.wont_be :empty?
+
+    writer_entity = "user-user@example.net"
+    writer_acl = {
+       "kind" => "storage#bucketAccessControl",
+       "id" => "#{bucket_name}-UUID/#{writer_entity}",
+       "selfLink" => "https://www.googleapis.com/storage/v1/b/#{bucket_name}-UUID/defaultObjectAcl/#{writer_entity}",
+       "bucket" => "#{bucket_name}-UUID",
+       "entity" => writer_entity,
+       "email" => "user@example.net",
+       "role" => "WRITER",
+       "etag" => "CAE="
+      }
+
+    mock_connection.post "/storage/v1/b/#{bucket_name}/defaultObjectAcl" do |env|
+      [200, {"Content-Type"=>"application/json"},
+       writer_acl.to_json]
+    end
+
+    bucket.default_acl.add_writer writer_entity
+    bucket.default_acl.owners.wont_be  :empty?
+    bucket.default_acl.writers.wont_be :empty?
+    bucket.default_acl.readers.wont_be :empty?
+    bucket.default_acl.writers.must_include writer_entity
+  end
+
+  it "removes from the default ACL" do
+    bucket_name = "found-bucket"
+
+    mock_connection.get "/storage/v1/b/#{bucket_name}" do |env|
+      [200, {"Content-Type"=>"application/json"},
+       random_bucket_hash(bucket_name).to_json]
+    end
+
+    mock_connection.get "/storage/v1/b/#{bucket_name}/defaultObjectAcl" do |env|
+      [200, {"Content-Type"=>"application/json"},
+       random_default_acl_hash(bucket_name).to_json]
+    end
+
+    bucket = storage.find_bucket bucket_name
+    bucket.name.must_equal bucket_name
+    bucket.default_acl.owners.wont_be  :empty?
+    bucket.default_acl.writers.must_be :empty?
+    bucket.default_acl.readers.wont_be :empty?
+
+    reader_entity = bucket.default_acl.readers.first
+
+    mock_connection.delete "/storage/v1/b/#{bucket_name}/defaultObjectAcl/#{reader_entity}" do |env|
+      [200, {"Content-Type"=>"application/json"}, ""]
+    end
+
+    bucket.default_acl.delete reader_entity
+
+    bucket.default_acl.owners.wont_be  :empty?
+    bucket.default_acl.writers.must_be :empty?
+    bucket.default_acl.readers.must_be :empty?
+  end
+
+  it "sets the predefined ACL rule authenticatedRead" do
+    predefined_default_acl_update "authenticatedRead" do |acl|
+      acl.authenticatedRead!
+    end
+  end
+
+  it "sets the predefined ACL rule auth" do
+    predefined_default_acl_update "authenticatedRead" do |acl|
+      acl.auth!
+    end
+  end
+
+  it "sets the predefined ACL rule auth_read" do
+    predefined_default_acl_update "authenticatedRead" do |acl|
+      acl.auth_read!
+    end
+  end
+
+  it "sets the predefined ACL rule authenticated" do
+    predefined_default_acl_update "authenticatedRead" do |acl|
+      acl.authenticated!
+    end
+  end
+
+  it "sets the predefined ACL rule authenticated_read" do
+    predefined_default_acl_update "authenticatedRead" do |acl|
+      acl.authenticated_read!
+    end
+  end
+
+  it "sets the predefined ACL rule bucketOwnerFullControl" do
+    predefined_default_acl_update "bucketOwnerFullControl" do |acl|
+      acl.bucketOwnerFullControl!
+    end
+  end
+
+  it "sets the predefined ACL rule owner_full" do
+    predefined_default_acl_update "bucketOwnerFullControl" do |acl|
+      acl.owner_full!
+    end
+  end
+
+  it "sets the predefined ACL rule bucketOwnerRead" do
+    predefined_default_acl_update "bucketOwnerRead" do |acl|
+      acl.bucketOwnerRead!
+    end
+  end
+
+  it "sets the predefined ACL rule owner_read" do
+    predefined_default_acl_update "bucketOwnerRead" do |acl|
+      acl.owner_read!
+    end
+  end
+
+  it "sets the predefined ACL rule private" do
+    predefined_default_acl_update "private" do |acl|
+      acl.private!
+    end
+  end
+
+  it "sets the predefined ACL rule projectPrivate" do
+    predefined_default_acl_update "projectPrivate" do |acl|
+      acl.projectPrivate!
+    end
+  end
+
+  it "sets the predefined ACL rule project_private" do
+    predefined_default_acl_update "projectPrivate" do |acl|
+      acl.project_private!
+    end
+  end
+
+  it "sets the predefined ACL rule publicRead" do
+    predefined_default_acl_update "publicRead" do |acl|
+      acl.publicRead!
+    end
+  end
+
+  it "sets the predefined ACL rule public" do
+    predefined_default_acl_update "publicRead" do |acl|
+      acl.public!
+    end
+  end
+
+  it "sets the predefined ACL rule public_read" do
+    predefined_default_acl_update "publicRead" do |acl|
+      acl.public_read!
+    end
+  end
+
+  def predefined_default_acl_update acl_role
+    mock_connection.patch "/storage/v1/b/#{bucket.name}" do |env|
+      env.params["predefinedDefaultObjectAcl"].must_equal acl_role
+      [200, {"Content-Type"=>"application/json"},
+       random_bucket_hash(bucket.name).to_json]
+    end
+
+    yield bucket.default_acl
+  end
+
+  def random_default_acl_hash bucket_name
+    {
+     "kind" => "storage#objectAccessControls",
+     "items" => [
+      {
+       "kind" => "storage#objectAccessControl",
+       "entity" => "project-owners-1234567890",
+       "role" => "OWNER",
+       "projectTeam" => {
+        "projectNumber" => "1234567890",
+        "team" => "owners"
+       },
+       "etag" => "CAE="
+      },
+      {
+       "kind" => "storage#objectAccessControl",
+       "entity" => "project-editors-1234567890",
+       "role" => "OWNER",
+       "projectTeam" => {
+        "projectNumber" => "1234567890",
+        "team" => "editors"
+       },
+       "etag" => "CAE="
+      },
+      {
+       "kind" => "storage#objectAccessControl",
+       "entity" => "project-viewers-1234567890",
+       "role" => "READER",
+       "projectTeam" => {
+        "projectNumber" => "1234567890",
+        "team" => "viewers"
+       },
+       "etag" => "CAE="
+      }
+     ]
+    }
+  end
+end

data/test/gcloud/storage/test_file.rb

@@ -0,0 +1,221 @@
+# Copyright 2014 Google Inc. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+require "helper"
+require "json"
+require "uri"
+
+describe Gcloud::Storage::File, :mock_storage do
+  # Create a bucket object with the project's mocked connection object
+  let(:bucket) { Gcloud::Storage::Bucket.from_gapi random_bucket_hash("bucket"),
+                                                   storage.connection }
+
+  # Create a file object with the project's mocked connection object
+  let(:file) { Gcloud::Storage::File.from_gapi random_file_hash(bucket.name, "file.ext"),
+                                               storage.connection }
+
+  it "can delete itself" do
+    mock_connection.delete "/storage/v1/b/#{bucket.name}/o/#{file.name}" do |env|
+      [200, {"Content-Type"=>"application/json"}, ""]
+    end
+
+    file.delete
+  end
+
+  it "can download itself" do
+    # Stub the md5 to match.
+    def file.md5
+      "X7A8HRvZUCT5gbq0KNDL8Q=="
+    end
+    mock_connection.get "/storage/v1/b/#{bucket.name}/o/#{file.name}?alt=media" do |env|
+      [200, {"Content-Type"=>"text/plain"},
+       "yay!"]
+    end
+
+    Tempfile.open "gcloud-ruby" do |tmpfile|
+      file.download tmpfile
+      File.read(tmpfile).must_equal "yay!"
+    end
+  end
+
+  describe "verified downloads" do
+    before do
+      # Stub these values
+      def file.md5; "md5="; end
+      def file.crc32c; "crc32c="; end
+      # Mock the download
+      mock_connection.get "/storage/v1/b/#{bucket.name}/o/#{file.name}?alt=media" do |env|
+        [200, {"Content-Type"=>"text/plain"},
+         "The quick brown fox jumps over the lazy dog."]
+      end
+    end
+
+    it "verifies m5d by default" do
+      mocked_md5 = Minitest::Mock.new
+      mocked_md5.expect :md5_mock, file.md5
+      stubbed_md5 = lambda { |_| mocked_md5.md5_mock }
+      stubbed_crc32c = lambda { |_| fail "Should not be called!" }
+
+      Gcloud::Storage::File::Verifier.stub :md5_for, stubbed_md5 do
+        Gcloud::Storage::File::Verifier.stub :crc32c_for, stubbed_crc32c do
+          Tempfile.open "gcloud-ruby" do |tmpfile|
+            file.download tmpfile
+          end
+        end
+      end
+      mocked_md5.verify
+    end
+
+    it "verifies m5d when specified" do
+      mocked_md5 = Minitest::Mock.new
+      mocked_md5.expect :md5_mock, file.md5
+      stubbed_md5 = lambda { |_| mocked_md5.md5_mock }
+      stubbed_crc32c = lambda { |_| fail "Should not be called!" }
+
+      Gcloud::Storage::File::Verifier.stub :md5_for, stubbed_md5 do
+        Gcloud::Storage::File::Verifier.stub :crc32c_for, stubbed_crc32c do
+          Tempfile.open "gcloud-ruby" do |tmpfile|
+            file.download tmpfile, verify: :md5
+          end
+        end
+      end
+      mocked_md5.verify
+    end
+
+    it "verifies crc32c when specified" do
+      stubbed_md5 = lambda { |_| fail "Should not be called!" }
+      mocked_crc32c = Minitest::Mock.new
+      mocked_crc32c.expect :crc32c_mock, file.crc32c
+      stubbed_crc32c = lambda { |_| mocked_crc32c.crc32c_mock }
+
+      Gcloud::Storage::File::Verifier.stub :md5_for, stubbed_md5 do
+        Gcloud::Storage::File::Verifier.stub :crc32c_for, stubbed_crc32c do
+          Tempfile.open "gcloud-ruby" do |tmpfile|
+            file.download tmpfile, verify: :crc32c
+          end
+        end
+      end
+      mocked_crc32c.verify
+    end
+
+    it "verifies m5d and crc32c when specified" do
+      mocked_md5 = Minitest::Mock.new
+      mocked_md5.expect :md5_mock, file.md5
+      stubbed_md5 = lambda { |_| mocked_md5.md5_mock }
+
+      mocked_crc32c = Minitest::Mock.new
+      mocked_crc32c.expect :crc32c_mock, file.crc32c
+      stubbed_crc32c = lambda { |_| mocked_crc32c.crc32c_mock }
+
+      Gcloud::Storage::File::Verifier.stub :md5_for, stubbed_md5 do
+        Gcloud::Storage::File::Verifier.stub :crc32c_for, stubbed_crc32c do
+          Tempfile.open "gcloud-ruby" do |tmpfile|
+            file.download tmpfile, verify: :all
+          end
+        end
+      end
+      mocked_md5.verify
+      mocked_crc32c.verify
+    end
+
+    it "doesn't verify at all when specified" do
+      stubbed_md5 = lambda { |_| fail "Should not be called!" }
+      stubbed_crc32c = lambda { |_| fail "Should not be called!" }
+
+      Gcloud::Storage::File::Verifier.stub :md5_for, stubbed_md5 do
+        Gcloud::Storage::File::Verifier.stub :crc32c_for, stubbed_crc32c do
+          Tempfile.open "gcloud-ruby" do |tmpfile|
+            file.download tmpfile, verify: :none
+          end
+        end
+      end
+    end
+
+    it "raises when verification fails" do
+      mocked_md5 = Minitest::Mock.new
+      mocked_md5.expect :md5_mock, "NOPE="
+      stubbed_md5 = lambda { |_| mocked_md5.md5_mock }
+      stubbed_crc32c = lambda { |_| fail "Should not be called!" }
+
+      Gcloud::Storage::File::Verifier.stub :md5_for, stubbed_md5 do
+        Gcloud::Storage::File::Verifier.stub :crc32c_for, stubbed_crc32c do
+          Tempfile.open "gcloud-ruby" do |tmpfile|
+            assert_raises Gcloud::Storage::FileVerificationError do
+              file.download tmpfile
+            end
+          end
+        end
+      end
+      mocked_md5.verify
+    end
+  end
+
+  it "can copy itself in the same bucket" do
+    mock_connection.post "/storage/v1/b/#{bucket.name}/o/#{file.name}/copyTo/b/#{bucket.name}/o/new-file.ext" do |env|
+      [200, {"Content-Type"=>"application/json"},
+       file.gapi.to_json]
+    end
+
+    file.copy "new-file.ext"
+  end
+
+  it "can copy itself in the same bucket with predefined ACL" do
+    mock_connection.post "/storage/v1/b/#{bucket.name}/o/#{file.name}/copyTo/b/#{bucket.name}/o/new-file.ext" do |env|
+      env.params["predefinedAcl"].must_equal "private"
+      [200, {"Content-Type"=>"application/json"},
+       file.gapi.to_json]
+    end
+
+    file.copy "new-file.ext", acl: "private"
+  end
+
+  it "can copy itself in the same bucket with ACL alias" do
+    mock_connection.post "/storage/v1/b/#{bucket.name}/o/#{file.name}/copyTo/b/#{bucket.name}/o/new-file.ext" do |env|
+      env.params["predefinedAcl"].must_equal "publicRead"
+      [200, {"Content-Type"=>"application/json"},
+       file.gapi.to_json]
+    end
+
+    file.copy "new-file.ext", acl: :public
+  end
+
+  it "can copy itself to a different bucket" do
+    mock_connection.post "/storage/v1/b/#{bucket.name}/o/#{file.name}/copyTo/b/new-bucket/o/new-file.ext" do |env|
+      [200, {"Content-Type"=>"application/json"},
+       file.gapi.to_json]
+    end
+
+    file.copy "new-bucket", "new-file.ext"
+  end
+
+  it "can copy itself to a different bucket with predefined ACL" do
+    mock_connection.post "/storage/v1/b/#{bucket.name}/o/#{file.name}/copyTo/b/new-bucket/o/new-file.ext" do |env|
+      env.params["predefinedAcl"].must_equal "private"
+      [200, {"Content-Type"=>"application/json"},
+       file.gapi.to_json]
+    end
+
+    file.copy "new-bucket", "new-file.ext", acl: "private"
+  end
+
+  it "can copy itself to a different bucket with ACL alias" do
+    mock_connection.post "/storage/v1/b/#{bucket.name}/o/#{file.name}/copyTo/b/new-bucket/o/new-file.ext" do |env|
+      env.params["predefinedAcl"].must_equal "publicRead"
+      [200, {"Content-Type"=>"application/json"},
+       file.gapi.to_json]
+    end
+
+    file.copy "new-bucket", "new-file.ext", acl: :public
+  end
+end