Skip to content

Fix project_protection tests (missing auth header → 403) — unblocks CI image build #203

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
vsilent wants to merge 1 commit into
base: dev
Choose a base branch
from
Open

Fix project_protection tests (missing auth header → 403) — unblocks CI image build #203

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 16 additions & 0 deletions tests/project_protection.rs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,7 @@ async fn test_new_project_default_unprotected() {
.post(format!("{}/project", &app.address))
.header("Content-Type", "application/json")
.body(r#"{"custom":{"custom_stack_code":"default-unprot","web":[{"_id":"a1","code":"nginx","name":"Nginx","type":"web","restart":"always","dockerhub_name":"nginx","custom":true}]}}"#)
.header("Authorization", format!("Bearer {}", common::USER_A_TOKEN))
.send()
.await
.expect("request failed");
Expand All @@ -41,6 +42,7 @@ async fn test_enable_protection_via_patch() {
))
.header("Content-Type", "application/json")
.body(r#"{"is_protected": true}"#)
.header("Authorization", format!("Bearer {}", common::USER_A_TOKEN))
.send()
.await
.expect("request failed");
Expand All @@ -65,6 +67,7 @@ async fn test_delete_protected_project_returns_403() {
))
.header("Content-Type", "application/json")
.body(r#"{"is_protected": true}"#)
.header("Authorization", format!("Bearer {}", common::USER_A_TOKEN))
.send()
.await
.expect("request failed");
Expand All @@ -73,6 +76,7 @@ async fn test_delete_protected_project_returns_403() {
// Try to delete — should be blocked
let resp = client
.delete(format!("{}/project/{}", &app.address, project_id))
.header("Authorization", format!("Bearer {}", common::USER_A_TOKEN))
.send()
.await
.expect("request failed");
Expand All @@ -99,6 +103,7 @@ async fn test_delete_unprotected_project_succeeds() {

let resp = client
.delete(format!("{}/project/{}", &app.address, project_id))
.header("Authorization", format!("Bearer {}", common::USER_A_TOKEN))
.send()
.await
.expect("request failed");
Expand All @@ -125,6 +130,7 @@ async fn test_disable_protection_requires_name() {
))
.header("Content-Type", "application/json")
.body(r#"{"is_protected": true}"#)
.header("Authorization", format!("Bearer {}", common::USER_A_TOKEN))
.send()
.await
.expect("request failed");
Expand All @@ -138,6 +144,7 @@ async fn test_disable_protection_requires_name() {
))
.header("Content-Type", "application/json")
.body(r#"{"is_protected": false}"#)
.header("Authorization", format!("Bearer {}", common::USER_A_TOKEN))
.send()
.await
.expect("request failed");
Expand All @@ -164,6 +171,7 @@ async fn test_disable_protection_wrong_name_rejected() {
))
.header("Content-Type", "application/json")
.body(r#"{"is_protected": true}"#)
.header("Authorization", format!("Bearer {}", common::USER_A_TOKEN))
.send()
.await
.expect("request failed");
Expand All @@ -177,6 +185,7 @@ async fn test_disable_protection_wrong_name_rejected() {
))
.header("Content-Type", "application/json")
.body(r#"{"is_protected": false, "confirmation_name": "wrong-name"}"#)
.header("Authorization", format!("Bearer {}", common::USER_A_TOKEN))
.send()
.await
.expect("request failed");
Expand All @@ -199,6 +208,7 @@ async fn test_disable_protection_correct_name_succeeds() {
))
.header("Content-Type", "application/json")
.body(r#"{"is_protected": true}"#)
.header("Authorization", format!("Bearer {}", common::USER_A_TOKEN))
.send()
.await
.expect("request failed");
Expand All @@ -212,6 +222,7 @@ async fn test_disable_protection_correct_name_succeeds() {
))
.header("Content-Type", "application/json")
.body(r#"{"is_protected": false, "confirmation_name": "Test Project"}"#)
.header("Authorization", format!("Bearer {}", common::USER_A_TOKEN))
.send()
.await
.expect("request failed");
Expand All @@ -222,6 +233,7 @@ async fn test_disable_protection_correct_name_succeeds() {
// Now delete should succeed
let resp = client
.delete(format!("{}/project/{}", &app.address, project_id))
.header("Authorization", format!("Bearer {}", common::USER_A_TOKEN))
.send()
.await
.expect("request failed");
Expand Down Expand Up @@ -257,6 +269,7 @@ async fn test_protection_shows_deployment_and_server_counts() {
))
.header("Content-Type", "application/json")
.body(r#"{"is_protected": true}"#)
.header("Authorization", format!("Bearer {}", common::USER_A_TOKEN))
.send()
.await
.expect("request failed");
Expand All @@ -265,6 +278,7 @@ async fn test_protection_shows_deployment_and_server_counts() {
// Try to delete — should be blocked with counts
let resp = client
.delete(format!("{}/project/{}", &app.address, project_id))
.header("Authorization", format!("Bearer {}", common::USER_A_TOKEN))
.send()
.await
.expect("request failed");
Expand Down Expand Up @@ -317,6 +331,7 @@ async fn test_project_list_includes_is_protected() {
))
.header("Content-Type", "application/json")
.body(r#"{"is_protected": true}"#)
.header("Authorization", format!("Bearer {}", common::USER_A_TOKEN))
.send()
.await
.expect("request failed");
Expand All @@ -325,6 +340,7 @@ async fn test_project_list_includes_is_protected() {
// List projects — should include is_protected
let resp = client
.get(format!("{}/project", &app.address))
.header("Authorization", format!("Bearer {}", common::USER_A_TOKEN))
.send()
.await
.expect("request failed");
Expand Down
Loading