2018-12-24 05:11:29 +09:00
|
|
|
# Pleroma: A lightweight social networking server
|
|
|
|
# Copyright © 2017-2018 Pleroma Authors <https://pleroma.social/>
|
|
|
|
# SPDX-License-Identifier: AGPL-3.0-only
|
|
|
|
|
2018-11-18 06:11:18 +09:00
|
|
|
defmodule Pleroma.Web.AdminAPI.AdminAPIControllerTest do
|
|
|
|
use Pleroma.Web.ConnCase
|
|
|
|
|
2019-02-11 06:57:38 +09:00
|
|
|
alias Pleroma.Repo
|
|
|
|
alias Pleroma.User
|
2018-11-18 06:11:18 +09:00
|
|
|
import Pleroma.Factory
|
|
|
|
|
|
|
|
describe "/api/pleroma/admin/user" do
|
|
|
|
test "Delete" do
|
2018-12-01 17:03:16 +09:00
|
|
|
admin = insert(:user, info: %{is_admin: true})
|
2018-11-18 06:11:18 +09:00
|
|
|
user = insert(:user)
|
|
|
|
|
|
|
|
conn =
|
|
|
|
build_conn()
|
|
|
|
|> assign(:user, admin)
|
|
|
|
|> put_req_header("accept", "application/json")
|
|
|
|
|> delete("/api/pleroma/admin/user?nickname=#{user.nickname}")
|
|
|
|
|
|
|
|
assert json_response(conn, 200) == user.nickname
|
|
|
|
end
|
|
|
|
|
|
|
|
test "Create" do
|
2018-12-01 17:03:16 +09:00
|
|
|
admin = insert(:user, info: %{is_admin: true})
|
2018-11-18 06:11:18 +09:00
|
|
|
|
|
|
|
conn =
|
|
|
|
build_conn()
|
|
|
|
|> assign(:user, admin)
|
|
|
|
|> put_req_header("accept", "application/json")
|
|
|
|
|> post("/api/pleroma/admin/user", %{
|
|
|
|
"nickname" => "lain",
|
|
|
|
"email" => "lain@example.org",
|
|
|
|
"password" => "test"
|
|
|
|
})
|
|
|
|
|
|
|
|
assert json_response(conn, 200) == "lain"
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2018-12-07 17:04:39 +09:00
|
|
|
describe "PUT /api/pleroma/admin/users/tag" do
|
2018-12-07 02:06:50 +09:00
|
|
|
setup do
|
|
|
|
admin = insert(:user, info: %{is_admin: true})
|
|
|
|
user1 = insert(:user, %{tags: ["x"]})
|
|
|
|
user2 = insert(:user, %{tags: ["y"]})
|
|
|
|
user3 = insert(:user, %{tags: ["unchanged"]})
|
|
|
|
|
|
|
|
conn =
|
|
|
|
build_conn()
|
|
|
|
|> assign(:user, admin)
|
|
|
|
|> put_req_header("accept", "application/json")
|
2018-12-07 02:13:07 +09:00
|
|
|
|> put(
|
|
|
|
"/api/pleroma/admin/users/tag?nicknames[]=#{user1.nickname}&nicknames[]=#{
|
|
|
|
user2.nickname
|
|
|
|
}&tags[]=foo&tags[]=bar"
|
|
|
|
)
|
2018-12-07 02:06:50 +09:00
|
|
|
|
|
|
|
%{conn: conn, user1: user1, user2: user2, user3: user3}
|
|
|
|
end
|
|
|
|
|
2018-12-07 02:13:07 +09:00
|
|
|
test "it appends specified tags to users with specified nicknames", %{
|
|
|
|
conn: conn,
|
|
|
|
user1: user1,
|
|
|
|
user2: user2
|
|
|
|
} do
|
2018-12-07 02:06:50 +09:00
|
|
|
assert json_response(conn, :no_content)
|
|
|
|
assert Repo.get(User, user1.id).tags == ["x", "foo", "bar"]
|
|
|
|
assert Repo.get(User, user2.id).tags == ["y", "foo", "bar"]
|
|
|
|
end
|
|
|
|
|
|
|
|
test "it does not modify tags of not specified users", %{conn: conn, user3: user3} do
|
|
|
|
assert json_response(conn, :no_content)
|
|
|
|
assert Repo.get(User, user3.id).tags == ["unchanged"]
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2018-12-07 17:04:39 +09:00
|
|
|
describe "DELETE /api/pleroma/admin/users/tag" do
|
2018-12-07 02:06:50 +09:00
|
|
|
setup do
|
|
|
|
admin = insert(:user, info: %{is_admin: true})
|
|
|
|
user1 = insert(:user, %{tags: ["x"]})
|
|
|
|
user2 = insert(:user, %{tags: ["y", "z"]})
|
|
|
|
user3 = insert(:user, %{tags: ["unchanged"]})
|
|
|
|
|
|
|
|
conn =
|
|
|
|
build_conn()
|
|
|
|
|> assign(:user, admin)
|
|
|
|
|> put_req_header("accept", "application/json")
|
2018-12-07 17:04:39 +09:00
|
|
|
|> delete(
|
|
|
|
"/api/pleroma/admin/users/tag?nicknames[]=#{user1.nickname}&nicknames[]=#{
|
2018-12-07 02:13:07 +09:00
|
|
|
user2.nickname
|
|
|
|
}&tags[]=x&tags[]=z"
|
|
|
|
)
|
2018-12-07 02:06:50 +09:00
|
|
|
|
|
|
|
%{conn: conn, user1: user1, user2: user2, user3: user3}
|
|
|
|
end
|
|
|
|
|
2018-12-07 02:13:07 +09:00
|
|
|
test "it removes specified tags from users with specified nicknames", %{
|
|
|
|
conn: conn,
|
|
|
|
user1: user1,
|
|
|
|
user2: user2
|
|
|
|
} do
|
2018-12-07 02:06:50 +09:00
|
|
|
assert json_response(conn, :no_content)
|
|
|
|
assert Repo.get(User, user1.id).tags == []
|
|
|
|
assert Repo.get(User, user2.id).tags == ["y"]
|
|
|
|
end
|
|
|
|
|
|
|
|
test "it does not modify tags of not specified users", %{conn: conn, user3: user3} do
|
|
|
|
assert json_response(conn, :no_content)
|
|
|
|
assert Repo.get(User, user3.id).tags == ["unchanged"]
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2018-11-18 06:11:18 +09:00
|
|
|
describe "/api/pleroma/admin/permission_group" do
|
|
|
|
test "GET is giving user_info" do
|
2018-12-01 17:03:16 +09:00
|
|
|
admin = insert(:user, info: %{is_admin: true})
|
2018-11-18 06:11:18 +09:00
|
|
|
|
|
|
|
conn =
|
|
|
|
build_conn()
|
|
|
|
|> assign(:user, admin)
|
|
|
|
|> put_req_header("accept", "application/json")
|
|
|
|
|> get("/api/pleroma/admin/permission_group/#{admin.nickname}")
|
|
|
|
|
2018-12-01 17:03:16 +09:00
|
|
|
assert json_response(conn, 200) == %{
|
|
|
|
"is_admin" => true,
|
|
|
|
"is_moderator" => false
|
|
|
|
}
|
2018-11-18 06:11:18 +09:00
|
|
|
end
|
|
|
|
|
|
|
|
test "/:right POST, can add to a permission group" do
|
2018-12-01 17:03:16 +09:00
|
|
|
admin = insert(:user, info: %{is_admin: true})
|
2018-11-18 06:11:18 +09:00
|
|
|
user = insert(:user)
|
|
|
|
|
|
|
|
conn =
|
|
|
|
build_conn()
|
|
|
|
|> assign(:user, admin)
|
|
|
|
|> put_req_header("accept", "application/json")
|
|
|
|
|> post("/api/pleroma/admin/permission_group/#{user.nickname}/admin")
|
|
|
|
|
2018-12-01 17:03:16 +09:00
|
|
|
assert json_response(conn, 200) == %{
|
|
|
|
"is_admin" => true
|
|
|
|
}
|
2018-11-18 06:11:18 +09:00
|
|
|
end
|
|
|
|
|
|
|
|
test "/:right DELETE, can remove from a permission group" do
|
2018-12-01 17:03:16 +09:00
|
|
|
admin = insert(:user, info: %{is_admin: true})
|
|
|
|
user = insert(:user, info: %{is_admin: true})
|
2018-11-18 06:11:18 +09:00
|
|
|
|
|
|
|
conn =
|
|
|
|
build_conn()
|
|
|
|
|> assign(:user, admin)
|
|
|
|
|> put_req_header("accept", "application/json")
|
|
|
|
|> delete("/api/pleroma/admin/permission_group/#{user.nickname}/admin")
|
|
|
|
|
2018-12-01 17:03:16 +09:00
|
|
|
assert json_response(conn, 200) == %{
|
|
|
|
"is_admin" => false
|
|
|
|
}
|
2018-11-18 06:11:18 +09:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2018-12-14 19:52:04 +09:00
|
|
|
describe "POST /api/pleroma/admin/email_invite, with valid config" do
|
2018-12-14 00:23:05 +09:00
|
|
|
setup do
|
|
|
|
registrations_open = Pleroma.Config.get([:instance, :registrations_open])
|
|
|
|
invites_enabled = Pleroma.Config.get([:instance, :invites_enabled])
|
|
|
|
Pleroma.Config.put([:instance, :registrations_open], false)
|
|
|
|
Pleroma.Config.put([:instance, :invites_enabled], true)
|
|
|
|
|
|
|
|
on_exit(fn ->
|
|
|
|
Pleroma.Config.put([:instance, :registrations_open], registrations_open)
|
|
|
|
Pleroma.Config.put([:instance, :invites_enabled], invites_enabled)
|
|
|
|
:ok
|
|
|
|
end)
|
|
|
|
|
|
|
|
[user: insert(:user, info: %{is_admin: true})]
|
|
|
|
end
|
|
|
|
|
|
|
|
test "sends invitation and returns 204", %{conn: conn, user: user} do
|
|
|
|
recipient_email = "foo@bar.com"
|
|
|
|
recipient_name = "J. D."
|
|
|
|
|
|
|
|
conn =
|
|
|
|
conn
|
|
|
|
|> assign(:user, user)
|
|
|
|
|> post("/api/pleroma/admin/email_invite?email=#{recipient_email}&name=#{recipient_name}")
|
|
|
|
|
|
|
|
assert json_response(conn, :no_content)
|
|
|
|
|
2018-12-14 19:52:04 +09:00
|
|
|
token_record = List.last(Pleroma.Repo.all(Pleroma.UserInviteToken))
|
|
|
|
assert token_record
|
|
|
|
refute token_record.used
|
|
|
|
|
|
|
|
Swoosh.TestAssertions.assert_email_sent(
|
|
|
|
Pleroma.UserEmail.user_invitation_email(
|
|
|
|
user,
|
|
|
|
token_record,
|
|
|
|
recipient_email,
|
|
|
|
recipient_name
|
|
|
|
)
|
|
|
|
)
|
|
|
|
end
|
|
|
|
|
|
|
|
test "it returns 403 if requested by a non-admin", %{conn: conn} do
|
|
|
|
non_admin_user = insert(:user)
|
|
|
|
|
|
|
|
conn =
|
|
|
|
conn
|
|
|
|
|> assign(:user, non_admin_user)
|
|
|
|
|> post("/api/pleroma/admin/email_invite?email=foo@bar.com&name=JD")
|
|
|
|
|
|
|
|
assert json_response(conn, :forbidden)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
describe "POST /api/pleroma/admin/email_invite, with invalid config" do
|
|
|
|
setup do
|
|
|
|
[user: insert(:user, info: %{is_admin: true})]
|
|
|
|
end
|
|
|
|
|
|
|
|
test "it returns 500 if `invites_enabled` is not enabled", %{conn: conn, user: user} do
|
|
|
|
registrations_open = Pleroma.Config.get([:instance, :registrations_open])
|
|
|
|
invites_enabled = Pleroma.Config.get([:instance, :invites_enabled])
|
|
|
|
Pleroma.Config.put([:instance, :registrations_open], false)
|
|
|
|
Pleroma.Config.put([:instance, :invites_enabled], false)
|
|
|
|
|
|
|
|
on_exit(fn ->
|
|
|
|
Pleroma.Config.put([:instance, :registrations_open], registrations_open)
|
|
|
|
Pleroma.Config.put([:instance, :invites_enabled], invites_enabled)
|
|
|
|
:ok
|
|
|
|
end)
|
|
|
|
|
|
|
|
conn =
|
|
|
|
conn
|
|
|
|
|> assign(:user, user)
|
|
|
|
|> post("/api/pleroma/admin/email_invite?email=foo@bar.com&name=JD")
|
|
|
|
|
|
|
|
assert json_response(conn, :internal_server_error)
|
|
|
|
end
|
|
|
|
|
|
|
|
test "it returns 500 if `registrations_open` is enabled", %{conn: conn, user: user} do
|
|
|
|
registrations_open = Pleroma.Config.get([:instance, :registrations_open])
|
|
|
|
invites_enabled = Pleroma.Config.get([:instance, :invites_enabled])
|
|
|
|
Pleroma.Config.put([:instance, :registrations_open], true)
|
|
|
|
Pleroma.Config.put([:instance, :invites_enabled], true)
|
|
|
|
|
|
|
|
on_exit(fn ->
|
|
|
|
Pleroma.Config.put([:instance, :registrations_open], registrations_open)
|
|
|
|
Pleroma.Config.put([:instance, :invites_enabled], invites_enabled)
|
|
|
|
:ok
|
|
|
|
end)
|
|
|
|
|
|
|
|
conn =
|
|
|
|
conn
|
|
|
|
|> assign(:user, user)
|
|
|
|
|> post("/api/pleroma/admin/email_invite?email=foo@bar.com&name=JD")
|
|
|
|
|
|
|
|
assert json_response(conn, :internal_server_error)
|
2018-12-14 00:23:05 +09:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2018-11-18 06:11:18 +09:00
|
|
|
test "/api/pleroma/admin/invite_token" do
|
2018-12-01 17:03:16 +09:00
|
|
|
admin = insert(:user, info: %{is_admin: true})
|
2018-11-18 06:11:18 +09:00
|
|
|
|
|
|
|
conn =
|
|
|
|
build_conn()
|
|
|
|
|> assign(:user, admin)
|
|
|
|
|> put_req_header("accept", "application/json")
|
|
|
|
|> get("/api/pleroma/admin/invite_token")
|
|
|
|
|
|
|
|
assert conn.status == 200
|
|
|
|
end
|
|
|
|
|
|
|
|
test "/api/pleroma/admin/password_reset" do
|
2018-12-01 17:03:16 +09:00
|
|
|
admin = insert(:user, info: %{is_admin: true})
|
|
|
|
user = insert(:user)
|
2018-11-18 06:11:18 +09:00
|
|
|
|
|
|
|
conn =
|
|
|
|
build_conn()
|
|
|
|
|> assign(:user, admin)
|
|
|
|
|> put_req_header("accept", "application/json")
|
|
|
|
|> get("/api/pleroma/admin/password_reset?nickname=#{user.nickname}")
|
|
|
|
|
|
|
|
assert conn.status == 200
|
|
|
|
end
|
|
|
|
end
|