mirror of
https://github.com/haiwen/seahub.git
synced 2025-07-01 17:32:21 +00:00
101 lines
3.4 KiB
Python
101 lines
3.4 KiB
Python
|
# -*- coding: utf-8 -*-
|
||
|
|
import json
|
||
|
|
from mock import patch
|
||
|
|
|
||
|
|
from django.core.urlresolvers import reverse
|
||
|
|
from seahub.test_utils import BaseTestCase
|
||
|
|
from seahub.share.models import UploadLinkShare
|
||
|
|
from seahub.api2.endpoints.upload_links import UploadLinks, UploadLink
|
||
|
|
|
||
|
|
class UploadLinksTest(BaseTestCase):
|
||
|
|
|
||
|
|
def setUp(self):
|
||
|
|
self.repo_id = self.repo.id
|
||
|
|
self.folder_path= self.folder
|
||
|
|
self.url = reverse('api-v2.1-upload-links')
|
||
|
|
|
||
|
|
def tearDown(self):
|
||
|
|
self.remove_repo()
|
||
|
|
|
||
|
|
def _add_upload_link(self):
|
||
|
|
upload_link = UploadLinkShare.objects.create_upload_link_share(self.user.username,
|
||
|
|
self.repo.id, self.folder, None, None)
|
||
|
|
|
||
|
|
return upload_link.token
|
||
|
|
|
||
|
|
def _remove_upload_link(self, token):
|
||
|
|
link = UploadLinkShare.objects.get(token=token)
|
||
|
|
link.delete()
|
||
|
|
|
||
|
|
def test_get_upload_link(self):
|
||
|
|
self.login_as(self.user)
|
||
|
|
token = self._add_upload_link()
|
||
|
|
|
||
|
|
resp = self.client.get(self.url + '?path=' + self.folder_path + '&repo_id=' + self.repo_id)
|
||
|
|
self.assertEqual(200, resp.status_code)
|
||
|
|
|
||
|
|
json_resp = json.loads(resp.content)
|
||
|
|
|
||
|
|
assert json_resp['link'] is not None
|
||
|
|
assert json_resp['token'] is not None
|
||
|
|
|
||
|
|
assert token in json_resp['link']
|
||
|
|
assert 'u/d' in json_resp['link']
|
||
|
|
|
||
|
|
assert token == json_resp['token']
|
||
|
|
|
||
|
|
self._remove_upload_link(token)
|
||
|
|
|
||
|
|
def test_create_upload_link(self):
|
||
|
|
self.login_as(self.user)
|
||
|
|
|
||
|
|
resp = self.client.post(self.url, {'path': self.folder_path, 'repo_id': self.repo_id})
|
||
|
|
self.assertEqual(200, resp.status_code)
|
||
|
|
|
||
|
|
json_resp = json.loads(resp.content)
|
||
|
|
assert json_resp['link'] is not None
|
||
|
|
assert json_resp['token'] is not None
|
||
|
|
|
||
|
|
assert json_resp['token'] in json_resp['link']
|
||
|
|
assert 'u/d' in json_resp['link']
|
||
|
|
|
||
|
|
self._remove_upload_link(json_resp['token'])
|
||
|
|
|
||
|
|
def test_delete_upload_link(self):
|
||
|
|
self.login_as(self.user)
|
||
|
|
token = self._add_upload_link()
|
||
|
|
|
||
|
|
url = reverse('api-v2.1-upload-link', args=[token])
|
||
|
|
resp = self.client.delete(url, {}, 'application/x-www-form-urlencoded')
|
||
|
|
self.assertEqual(200, resp.status_code)
|
||
|
|
|
||
|
|
json_resp = json.loads(resp.content)
|
||
|
|
assert json_resp['success'] is True
|
||
|
|
|
||
|
|
# test permission
|
||
|
|
def test_can_not_delete_link_if_not_owner(self):
|
||
|
|
self.login_as(self.admin)
|
||
|
|
token = self._add_upload_link()
|
||
|
|
|
||
|
|
url = reverse('api-v2.1-upload-link', args=[token])
|
||
|
|
resp = self.client.delete(url, {}, 'application/x-www-form-urlencoded')
|
||
|
|
self.assertEqual(403, resp.status_code)
|
||
|
|
|
||
|
|
@patch.object(UploadLinks, '_can_generate_shared_link')
|
||
|
|
def test_can_not_get_and_create_link_with_invalid_permission(self, mock_can_generate_shared_link):
|
||
|
|
self.login_as(self.user)
|
||
|
|
mock_can_generate_shared_link.return_value = False
|
||
|
|
|
||
|
|
resp = self.client.get(self.url)
|
||
|
|
self.assertEqual(403, resp.status_code)
|
||
|
|
|
||
|
|
resp = self.client.post(self.url)
|
||
|
|
self.assertEqual(403, resp.status_code)
|
||
|
|
|
||
|
|
@patch.object(UploadLink, '_can_generate_shared_link')
|
||
|
|
def test_can_not_delete_link_with_invalid_permission(self, mock_can_generate_shared_link):
|
||
|
|
token = self._add_upload_link()
|
||
|
|
url = reverse('api-v2.1-upload-link', args=[token])
|
||
|
|
resp = self.client.delete(url, {}, 'application/x-www-form-urlencoded')
|
||
|
|
self.assertEqual(403, resp.status_code)
|