mirror of
https://github.com/coollabsio/coolify.git
synced 2026-11-12 15:53:46 -04:00
Andras Bacsai
c75e7078b7
- Require the write permission and update policy to open a preview or change its pull request URL, git type, or docker tag via the API; deploy-only tokens can only redeploy an existing preview - Reject rollbacks to commits that are neither a listed rollback image nor a successful production deployment (GetRollbackImages::allows) - Validate git_repository with ValidGitRepositoryUrl when it changes on application update - Add RejectPublishedAppKey global middleware - Show a "still starting" message when the root setup window is pending - Document the new 403 responses and constraints in the OpenAPI spec - Add tests for the new checks
71 lines
1.9 KiB
PHP
71 lines
1.9 KiB
PHP
<?php
|
|
|
|
use App\Models\InstanceSettings;
|
|
use App\Models\User;
|
|
use App\Support\RootSetupWindow;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
use Illuminate\Testing\TestResponse;
|
|
|
|
uses(RefreshDatabase::class);
|
|
|
|
beforeEach(function () {
|
|
config()->set('app.maintenance.store', 'array');
|
|
|
|
InstanceSettings::query()->forceCreate([
|
|
'id' => 0,
|
|
'is_registration_enabled' => true,
|
|
]);
|
|
});
|
|
|
|
function registerRootAccount(): TestResponse
|
|
{
|
|
return test()->post('/register', [
|
|
'name' => 'Root User',
|
|
'email' => 'root@example.com',
|
|
'password' => 'Password1!@',
|
|
'password_confirmation' => 'Password1!@',
|
|
]);
|
|
}
|
|
|
|
it('blocks the root registration when the setup window was never opened', function () {
|
|
registerRootAccount()->assertSessionHasErrors('email');
|
|
|
|
expect(User::count())->toBe(0);
|
|
});
|
|
|
|
it('blocks the root registration after the setup window ends', function () {
|
|
RootSetupWindow::openIfNoUserExists();
|
|
$this->travel(RootSetupWindow::MINUTES * 60 + 1)->seconds();
|
|
|
|
registerRootAccount()->assertSessionHasErrors('email');
|
|
|
|
expect(User::count())->toBe(0);
|
|
});
|
|
|
|
it('creates the root user during the setup window', function () {
|
|
RootSetupWindow::openIfNoUserExists();
|
|
$this->travel(RootSetupWindow::MINUTES - 1)->minutes();
|
|
|
|
registerRootAccount()->assertSessionHasNoErrors();
|
|
|
|
expect(User::find(0)?->email)->toBe('root@example.com');
|
|
});
|
|
|
|
it('shows how to open the setup window again when it is closed', function () {
|
|
RootSetupWindow::openIfNoUserExists();
|
|
$this->travel(RootSetupWindow::MINUTES * 60 + 1)->seconds();
|
|
|
|
$this->get('/register')
|
|
->assertOk()
|
|
->assertSee('docker restart coolify')
|
|
->assertDontSee('Create account');
|
|
});
|
|
|
|
it('does not open the setup window when a user exists', function () {
|
|
User::factory()->create(['id' => 0]);
|
|
|
|
RootSetupWindow::openIfNoUserExists();
|
|
|
|
expect(RootSetupWindow::isOpen())->toBeFalse();
|
|
});
|