1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
|
"""
GitLab API:
https://docs.gitlab.com/ee/api/personal_access_tokens.html
https://docs.gitlab.com/ee/api/users.html#create-a-personal-access-token
"""
import pytest
import responses
from gitlab.v4.objects import PersonalAccessToken
user_id = 1
token_id = 1
token_name = "Test Token"
token_url = "http://localhost/api/v4/personal_access_tokens"
single_token_url = f"{token_url}/{token_id}"
self_token_url = f"{token_url}/self"
user_token_url = f"http://localhost/api/v4/users/{user_id}/personal_access_tokens"
content = {
"id": token_id,
"name": token_name,
"revoked": False,
"created_at": "2020-07-23T14:31:47.729Z",
"scopes": ["api"],
"active": True,
"user_id": user_id,
"expires_at": None,
}
@pytest.fixture
def resp_create_user_personal_access_token():
with responses.RequestsMock() as rsps:
rsps.add(
method=responses.POST,
url=user_token_url,
json=content,
content_type="application/json",
status=200,
)
yield rsps
@pytest.fixture
def resp_list_personal_access_tokens():
with responses.RequestsMock() as rsps:
rsps.add(
method=responses.GET,
url=token_url,
json=[content],
content_type="application/json",
status=200,
)
yield rsps
@pytest.fixture
def resp_get_personal_access_token():
with responses.RequestsMock() as rsps:
rsps.add(
method=responses.GET,
url=single_token_url,
json=content,
content_type="application/json",
status=200,
)
yield rsps
@pytest.fixture
def resp_get_personal_access_token_self():
with responses.RequestsMock() as rsps:
rsps.add(
method=responses.GET,
url=self_token_url,
json=content,
content_type="application/json",
status=200,
)
yield rsps
@pytest.fixture
def resp_delete_personal_access_token():
with responses.RequestsMock() as rsps:
rsps.add(
method=responses.DELETE,
url=single_token_url,
status=204,
)
yield rsps
@pytest.fixture
def resp_rotate_personal_access_token(token_content):
with responses.RequestsMock() as rsps:
rsps.add(
method=responses.POST,
url="http://localhost/api/v4/personal_access_tokens/1/rotate",
json=token_content,
content_type="application/json",
status=200,
)
yield rsps
def test_create_personal_access_token(gl, resp_create_user_personal_access_token):
user = gl.users.get(1, lazy=True)
access_token = user.personal_access_tokens.create(
{"name": token_name, "scopes": "api"}
)
assert access_token.revoked is False
assert access_token.name == token_name
def test_list_personal_access_tokens(gl, resp_list_personal_access_tokens):
access_tokens = gl.personal_access_tokens.list()
assert len(access_tokens) == 1
assert access_tokens[0].revoked is False
assert access_tokens[0].name == token_name
def test_list_personal_access_tokens_filter(gl, resp_list_personal_access_tokens):
access_tokens = gl.personal_access_tokens.list(user_id=user_id)
assert len(access_tokens) == 1
assert access_tokens[0].revoked is False
assert access_tokens[0].user_id == user_id
def test_get_personal_access_token(gl, resp_get_personal_access_token):
access_token = gl.personal_access_tokens.get(token_id)
assert access_token.revoked is False
assert access_token.user_id == user_id
def test_get_personal_access_token_self(gl, resp_get_personal_access_token_self):
access_token = gl.personal_access_tokens.get("self")
assert access_token.revoked is False
assert access_token.user_id == user_id
def test_delete_personal_access_token(gl, resp_delete_personal_access_token):
access_token = gl.personal_access_tokens.get(token_id, lazy=True)
access_token.delete()
def test_revoke_personal_access_token_by_id(gl, resp_delete_personal_access_token):
gl.personal_access_tokens.delete(token_id)
def test_rotate_project_access_token(gl, resp_rotate_personal_access_token):
access_token = gl.personal_access_tokens.get(1, lazy=True)
access_token.rotate()
assert isinstance(access_token, PersonalAccessToken)
assert access_token.token == "s3cr3t"
|
