mirror of
				https://gitcode.com/gitea/gitea.git
				synced 2025-10-25 12:26:40 +08:00 
			
		
		
		
	 de484e86bc
			
		
	
	de484e86bc
	
	
	
		
			
			This PR adds the support for scopes of access tokens, mimicking the design of GitHub OAuth scopes. The changes of the core logic are in `models/auth` that `AccessToken` struct will have a `Scope` field. The normalized (no duplication of scope), comma-separated scope string will be stored in `access_token` table in the database. In `services/auth`, the scope will be stored in context, which will be used by `reqToken` middleware in API calls. Only OAuth2 tokens will have granular token scopes, while others like BasicAuth will default to scope `all`. A large amount of work happens in `routers/api/v1/api.go` and the corresponding `tests/integration` tests, that is adding necessary scopes to each of the API calls as they fit. - [x] Add `Scope` field to `AccessToken` - [x] Add access control to all API endpoints - [x] Update frontend & backend for when creating tokens - [x] Add a database migration for `scope` column (enable 'all' access to past tokens) I'm aiming to complete it before Gitea 1.19 release. Fixes #4300
		
			
				
	
	
		
			465 lines
		
	
	
		
			14 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			465 lines
		
	
	
		
			14 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
| // Copyright 2019 The Gitea Authors. All rights reserved.
 | |
| // SPDX-License-Identifier: MIT
 | |
| 
 | |
| package integration
 | |
| 
 | |
| import (
 | |
| 	"context"
 | |
| 	"fmt"
 | |
| 	"net/http"
 | |
| 	"net/http/httptest"
 | |
| 	"net/url"
 | |
| 	"os"
 | |
| 	"testing"
 | |
| 	"time"
 | |
| 
 | |
| 	"code.gitea.io/gitea/models/auth"
 | |
| 	"code.gitea.io/gitea/models/perm"
 | |
| 	repo_model "code.gitea.io/gitea/models/repo"
 | |
| 	"code.gitea.io/gitea/modules/json"
 | |
| 	"code.gitea.io/gitea/modules/queue"
 | |
| 	api "code.gitea.io/gitea/modules/structs"
 | |
| 	"code.gitea.io/gitea/services/forms"
 | |
| 
 | |
| 	"github.com/stretchr/testify/assert"
 | |
| )
 | |
| 
 | |
| type APITestContext struct {
 | |
| 	Reponame     string
 | |
| 	Session      *TestSession
 | |
| 	Token        string
 | |
| 	Username     string
 | |
| 	ExpectedCode int
 | |
| }
 | |
| 
 | |
| func NewAPITestContext(t *testing.T, username, reponame string, scope ...auth.AccessTokenScope) APITestContext {
 | |
| 	session := loginUser(t, username)
 | |
| 	token := getTokenForLoggedInUser(t, session, scope...)
 | |
| 	return APITestContext{
 | |
| 		Session:  session,
 | |
| 		Token:    token,
 | |
| 		Username: username,
 | |
| 		Reponame: reponame,
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func (ctx APITestContext) GitPath() string {
 | |
| 	return fmt.Sprintf("%s/%s.git", ctx.Username, ctx.Reponame)
 | |
| }
 | |
| 
 | |
| func doAPICreateRepository(ctx APITestContext, empty bool, callback ...func(*testing.T, api.Repository)) func(*testing.T) {
 | |
| 	return func(t *testing.T) {
 | |
| 		createRepoOption := &api.CreateRepoOption{
 | |
| 			AutoInit:    !empty,
 | |
| 			Description: "Temporary repo",
 | |
| 			Name:        ctx.Reponame,
 | |
| 			Private:     true,
 | |
| 			Template:    true,
 | |
| 			Gitignores:  "",
 | |
| 			License:     "WTFPL",
 | |
| 			Readme:      "Default",
 | |
| 		}
 | |
| 		req := NewRequestWithJSON(t, "POST", "/api/v1/user/repos?token="+ctx.Token, createRepoOption)
 | |
| 		if ctx.ExpectedCode != 0 {
 | |
| 			ctx.Session.MakeRequest(t, req, ctx.ExpectedCode)
 | |
| 			return
 | |
| 		}
 | |
| 		resp := ctx.Session.MakeRequest(t, req, http.StatusCreated)
 | |
| 
 | |
| 		var repository api.Repository
 | |
| 		DecodeJSON(t, resp, &repository)
 | |
| 		if len(callback) > 0 {
 | |
| 			callback[0](t, repository)
 | |
| 		}
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func doAPIEditRepository(ctx APITestContext, editRepoOption *api.EditRepoOption, callback ...func(*testing.T, api.Repository)) func(*testing.T) {
 | |
| 	return func(t *testing.T) {
 | |
| 		req := NewRequestWithJSON(t, "PATCH", fmt.Sprintf("/api/v1/repos/%s/%s?token=%s", url.PathEscape(ctx.Username), url.PathEscape(ctx.Reponame), ctx.Token), editRepoOption)
 | |
| 		if ctx.ExpectedCode != 0 {
 | |
| 			ctx.Session.MakeRequest(t, req, ctx.ExpectedCode)
 | |
| 			return
 | |
| 		}
 | |
| 		resp := ctx.Session.MakeRequest(t, req, http.StatusOK)
 | |
| 
 | |
| 		var repository api.Repository
 | |
| 		DecodeJSON(t, resp, &repository)
 | |
| 		if len(callback) > 0 {
 | |
| 			callback[0](t, repository)
 | |
| 		}
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func doAPIAddCollaborator(ctx APITestContext, username string, mode perm.AccessMode) func(*testing.T) {
 | |
| 	return func(t *testing.T) {
 | |
| 		permission := "read"
 | |
| 
 | |
| 		if mode == perm.AccessModeAdmin {
 | |
| 			permission = "admin"
 | |
| 		} else if mode > perm.AccessModeRead {
 | |
| 			permission = "write"
 | |
| 		}
 | |
| 		addCollaboratorOption := &api.AddCollaboratorOption{
 | |
| 			Permission: &permission,
 | |
| 		}
 | |
| 		req := NewRequestWithJSON(t, "PUT", fmt.Sprintf("/api/v1/repos/%s/%s/collaborators/%s?token=%s", ctx.Username, ctx.Reponame, username, ctx.Token), addCollaboratorOption)
 | |
| 		if ctx.ExpectedCode != 0 {
 | |
| 			ctx.Session.MakeRequest(t, req, ctx.ExpectedCode)
 | |
| 			return
 | |
| 		}
 | |
| 		ctx.Session.MakeRequest(t, req, http.StatusNoContent)
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func doAPIForkRepository(ctx APITestContext, username string, callback ...func(*testing.T, api.Repository)) func(*testing.T) {
 | |
| 	return func(t *testing.T) {
 | |
| 		createForkOption := &api.CreateForkOption{}
 | |
| 		req := NewRequestWithJSON(t, "POST", fmt.Sprintf("/api/v1/repos/%s/%s/forks?token=%s", username, ctx.Reponame, ctx.Token), createForkOption)
 | |
| 		if ctx.ExpectedCode != 0 {
 | |
| 			ctx.Session.MakeRequest(t, req, ctx.ExpectedCode)
 | |
| 			return
 | |
| 		}
 | |
| 		resp := ctx.Session.MakeRequest(t, req, http.StatusAccepted)
 | |
| 		var repository api.Repository
 | |
| 		DecodeJSON(t, resp, &repository)
 | |
| 		if len(callback) > 0 {
 | |
| 			callback[0](t, repository)
 | |
| 		}
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func doAPIGetRepository(ctx APITestContext, callback ...func(*testing.T, api.Repository)) func(*testing.T) {
 | |
| 	return func(t *testing.T) {
 | |
| 		urlStr := fmt.Sprintf("/api/v1/repos/%s/%s?token=%s", ctx.Username, ctx.Reponame, ctx.Token)
 | |
| 
 | |
| 		req := NewRequest(t, "GET", urlStr)
 | |
| 		if ctx.ExpectedCode != 0 {
 | |
| 			ctx.Session.MakeRequest(t, req, ctx.ExpectedCode)
 | |
| 			return
 | |
| 		}
 | |
| 		resp := ctx.Session.MakeRequest(t, req, http.StatusOK)
 | |
| 
 | |
| 		var repository api.Repository
 | |
| 		DecodeJSON(t, resp, &repository)
 | |
| 		if len(callback) > 0 {
 | |
| 			callback[0](t, repository)
 | |
| 		}
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func doAPIDeleteRepository(ctx APITestContext) func(*testing.T) {
 | |
| 	return func(t *testing.T) {
 | |
| 		urlStr := fmt.Sprintf("/api/v1/repos/%s/%s?token=%s", ctx.Username, ctx.Reponame, ctx.Token)
 | |
| 
 | |
| 		req := NewRequest(t, "DELETE", urlStr)
 | |
| 		if ctx.ExpectedCode != 0 {
 | |
| 			ctx.Session.MakeRequest(t, req, ctx.ExpectedCode)
 | |
| 			return
 | |
| 		}
 | |
| 		ctx.Session.MakeRequest(t, req, http.StatusNoContent)
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func doAPICreateUserKey(ctx APITestContext, keyname, keyFile string, callback ...func(*testing.T, api.PublicKey)) func(*testing.T) {
 | |
| 	return func(t *testing.T) {
 | |
| 		urlStr := fmt.Sprintf("/api/v1/user/keys?token=%s", ctx.Token)
 | |
| 
 | |
| 		dataPubKey, err := os.ReadFile(keyFile + ".pub")
 | |
| 		assert.NoError(t, err)
 | |
| 		req := NewRequestWithJSON(t, "POST", urlStr, &api.CreateKeyOption{
 | |
| 			Title: keyname,
 | |
| 			Key:   string(dataPubKey),
 | |
| 		})
 | |
| 		if ctx.ExpectedCode != 0 {
 | |
| 			ctx.Session.MakeRequest(t, req, ctx.ExpectedCode)
 | |
| 			return
 | |
| 		}
 | |
| 		resp := ctx.Session.MakeRequest(t, req, http.StatusCreated)
 | |
| 		var publicKey api.PublicKey
 | |
| 		DecodeJSON(t, resp, &publicKey)
 | |
| 		if len(callback) > 0 {
 | |
| 			callback[0](t, publicKey)
 | |
| 		}
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func doAPIDeleteUserKey(ctx APITestContext, keyID int64) func(*testing.T) {
 | |
| 	return func(t *testing.T) {
 | |
| 		urlStr := fmt.Sprintf("/api/v1/user/keys/%d?token=%s", keyID, ctx.Token)
 | |
| 
 | |
| 		req := NewRequest(t, "DELETE", urlStr)
 | |
| 		if ctx.ExpectedCode != 0 {
 | |
| 			ctx.Session.MakeRequest(t, req, ctx.ExpectedCode)
 | |
| 			return
 | |
| 		}
 | |
| 		ctx.Session.MakeRequest(t, req, http.StatusNoContent)
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func doAPICreateDeployKey(ctx APITestContext, keyname, keyFile string, readOnly bool) func(*testing.T) {
 | |
| 	return func(t *testing.T) {
 | |
| 		urlStr := fmt.Sprintf("/api/v1/repos/%s/%s/keys?token=%s", ctx.Username, ctx.Reponame, ctx.Token)
 | |
| 
 | |
| 		dataPubKey, err := os.ReadFile(keyFile + ".pub")
 | |
| 		assert.NoError(t, err)
 | |
| 		req := NewRequestWithJSON(t, "POST", urlStr, api.CreateKeyOption{
 | |
| 			Title:    keyname,
 | |
| 			Key:      string(dataPubKey),
 | |
| 			ReadOnly: readOnly,
 | |
| 		})
 | |
| 
 | |
| 		if ctx.ExpectedCode != 0 {
 | |
| 			ctx.Session.MakeRequest(t, req, ctx.ExpectedCode)
 | |
| 			return
 | |
| 		}
 | |
| 		ctx.Session.MakeRequest(t, req, http.StatusCreated)
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func doAPICreatePullRequest(ctx APITestContext, owner, repo, baseBranch, headBranch string) func(*testing.T) (api.PullRequest, error) {
 | |
| 	return func(t *testing.T) (api.PullRequest, error) {
 | |
| 		urlStr := fmt.Sprintf("/api/v1/repos/%s/%s/pulls?token=%s",
 | |
| 			owner, repo, ctx.Token)
 | |
| 		req := NewRequestWithJSON(t, http.MethodPost, urlStr, &api.CreatePullRequestOption{
 | |
| 			Head:  headBranch,
 | |
| 			Base:  baseBranch,
 | |
| 			Title: fmt.Sprintf("create a pr from %s to %s", headBranch, baseBranch),
 | |
| 		})
 | |
| 
 | |
| 		expected := http.StatusCreated
 | |
| 		if ctx.ExpectedCode != 0 {
 | |
| 			expected = ctx.ExpectedCode
 | |
| 		}
 | |
| 		resp := ctx.Session.MakeRequest(t, req, expected)
 | |
| 
 | |
| 		decoder := json.NewDecoder(resp.Body)
 | |
| 		pr := api.PullRequest{}
 | |
| 		err := decoder.Decode(&pr)
 | |
| 		return pr, err
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func doAPIGetPullRequest(ctx APITestContext, owner, repo string, index int64) func(*testing.T) (api.PullRequest, error) {
 | |
| 	return func(t *testing.T) (api.PullRequest, error) {
 | |
| 		urlStr := fmt.Sprintf("/api/v1/repos/%s/%s/pulls/%d?token=%s",
 | |
| 			owner, repo, index, ctx.Token)
 | |
| 		req := NewRequest(t, http.MethodGet, urlStr)
 | |
| 
 | |
| 		expected := http.StatusOK
 | |
| 		if ctx.ExpectedCode != 0 {
 | |
| 			expected = ctx.ExpectedCode
 | |
| 		}
 | |
| 		resp := ctx.Session.MakeRequest(t, req, expected)
 | |
| 
 | |
| 		decoder := json.NewDecoder(resp.Body)
 | |
| 		pr := api.PullRequest{}
 | |
| 		err := decoder.Decode(&pr)
 | |
| 		return pr, err
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func doAPIMergePullRequest(ctx APITestContext, owner, repo string, index int64) func(*testing.T) {
 | |
| 	return func(t *testing.T) {
 | |
| 		urlStr := fmt.Sprintf("/api/v1/repos/%s/%s/pulls/%d/merge?token=%s",
 | |
| 			owner, repo, index, ctx.Token)
 | |
| 
 | |
| 		var req *http.Request
 | |
| 		var resp *httptest.ResponseRecorder
 | |
| 
 | |
| 		for i := 0; i < 6; i++ {
 | |
| 			req = NewRequestWithJSON(t, http.MethodPost, urlStr, &forms.MergePullRequestForm{
 | |
| 				MergeMessageField: "doAPIMergePullRequest Merge",
 | |
| 				Do:                string(repo_model.MergeStyleMerge),
 | |
| 			})
 | |
| 
 | |
| 			resp = ctx.Session.MakeRequest(t, req, NoExpectedStatus)
 | |
| 
 | |
| 			if resp.Code != http.StatusMethodNotAllowed {
 | |
| 				break
 | |
| 			}
 | |
| 			err := api.APIError{}
 | |
| 			DecodeJSON(t, resp, &err)
 | |
| 			assert.EqualValues(t, "Please try again later", err.Message)
 | |
| 			queue.GetManager().FlushAll(context.Background(), 5*time.Second)
 | |
| 			<-time.After(1 * time.Second)
 | |
| 		}
 | |
| 
 | |
| 		expected := ctx.ExpectedCode
 | |
| 		if expected == 0 {
 | |
| 			expected = http.StatusOK
 | |
| 		}
 | |
| 
 | |
| 		if !assert.EqualValues(t, expected, resp.Code,
 | |
| 			"Request: %s %s", req.Method, req.URL.String()) {
 | |
| 			logUnexpectedResponse(t, resp)
 | |
| 		}
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func doAPIManuallyMergePullRequest(ctx APITestContext, owner, repo, commitID string, index int64) func(*testing.T) {
 | |
| 	return func(t *testing.T) {
 | |
| 		urlStr := fmt.Sprintf("/api/v1/repos/%s/%s/pulls/%d/merge?token=%s",
 | |
| 			owner, repo, index, ctx.Token)
 | |
| 		req := NewRequestWithJSON(t, http.MethodPost, urlStr, &forms.MergePullRequestForm{
 | |
| 			Do:            string(repo_model.MergeStyleManuallyMerged),
 | |
| 			MergeCommitID: commitID,
 | |
| 		})
 | |
| 
 | |
| 		if ctx.ExpectedCode != 0 {
 | |
| 			ctx.Session.MakeRequest(t, req, ctx.ExpectedCode)
 | |
| 			return
 | |
| 		}
 | |
| 		ctx.Session.MakeRequest(t, req, http.StatusOK)
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func doAPIAutoMergePullRequest(ctx APITestContext, owner, repo string, index int64) func(*testing.T) {
 | |
| 	return func(t *testing.T) {
 | |
| 		urlStr := fmt.Sprintf("/api/v1/repos/%s/%s/pulls/%d/merge?token=%s",
 | |
| 			owner, repo, index, ctx.Token)
 | |
| 		req := NewRequestWithJSON(t, http.MethodPost, urlStr, &forms.MergePullRequestForm{
 | |
| 			MergeMessageField:      "doAPIMergePullRequest Merge",
 | |
| 			Do:                     string(repo_model.MergeStyleMerge),
 | |
| 			MergeWhenChecksSucceed: true,
 | |
| 		})
 | |
| 
 | |
| 		if ctx.ExpectedCode != 0 {
 | |
| 			ctx.Session.MakeRequest(t, req, ctx.ExpectedCode)
 | |
| 			return
 | |
| 		}
 | |
| 		ctx.Session.MakeRequest(t, req, 200)
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func doAPICancelAutoMergePullRequest(ctx APITestContext, owner, repo string, index int64) func(*testing.T) {
 | |
| 	return func(t *testing.T) {
 | |
| 		urlStr := fmt.Sprintf("/api/v1/repos/%s/%s/pulls/%d/merge?token=%s",
 | |
| 			owner, repo, index, ctx.Token)
 | |
| 		req := NewRequest(t, http.MethodDelete, urlStr)
 | |
| 		if ctx.ExpectedCode != 0 {
 | |
| 			ctx.Session.MakeRequest(t, req, ctx.ExpectedCode)
 | |
| 			return
 | |
| 		}
 | |
| 		ctx.Session.MakeRequest(t, req, 204)
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func doAPIGetBranch(ctx APITestContext, branch string, callback ...func(*testing.T, api.Branch)) func(*testing.T) {
 | |
| 	return func(t *testing.T) {
 | |
| 		req := NewRequestf(t, "GET", "/api/v1/repos/%s/%s/branches/%s?token=%s", ctx.Username, ctx.Reponame, branch, ctx.Token)
 | |
| 		if ctx.ExpectedCode != 0 {
 | |
| 			ctx.Session.MakeRequest(t, req, ctx.ExpectedCode)
 | |
| 			return
 | |
| 		}
 | |
| 		resp := ctx.Session.MakeRequest(t, req, http.StatusOK)
 | |
| 
 | |
| 		var branch api.Branch
 | |
| 		DecodeJSON(t, resp, &branch)
 | |
| 		if len(callback) > 0 {
 | |
| 			callback[0](t, branch)
 | |
| 		}
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func doAPICreateFile(ctx APITestContext, treepath string, options *api.CreateFileOptions, callback ...func(*testing.T, api.FileResponse)) func(*testing.T) {
 | |
| 	return func(t *testing.T) {
 | |
| 		url := fmt.Sprintf("/api/v1/repos/%s/%s/contents/%s?token=%s", ctx.Username, ctx.Reponame, treepath, ctx.Token)
 | |
| 		req := NewRequestWithJSON(t, "POST", url, &options)
 | |
| 		if ctx.ExpectedCode != 0 {
 | |
| 			ctx.Session.MakeRequest(t, req, ctx.ExpectedCode)
 | |
| 			return
 | |
| 		}
 | |
| 		resp := ctx.Session.MakeRequest(t, req, http.StatusCreated)
 | |
| 
 | |
| 		var contents api.FileResponse
 | |
| 		DecodeJSON(t, resp, &contents)
 | |
| 		if len(callback) > 0 {
 | |
| 			callback[0](t, contents)
 | |
| 		}
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func doAPICreateOrganization(ctx APITestContext, options *api.CreateOrgOption, callback ...func(*testing.T, api.Organization)) func(t *testing.T) {
 | |
| 	return func(t *testing.T) {
 | |
| 		url := fmt.Sprintf("/api/v1/orgs?token=%s", ctx.Token)
 | |
| 
 | |
| 		req := NewRequestWithJSON(t, "POST", url, &options)
 | |
| 		if ctx.ExpectedCode != 0 {
 | |
| 			ctx.Session.MakeRequest(t, req, ctx.ExpectedCode)
 | |
| 			return
 | |
| 		}
 | |
| 		resp := ctx.Session.MakeRequest(t, req, http.StatusCreated)
 | |
| 
 | |
| 		var contents api.Organization
 | |
| 		DecodeJSON(t, resp, &contents)
 | |
| 		if len(callback) > 0 {
 | |
| 			callback[0](t, contents)
 | |
| 		}
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func doAPICreateOrganizationRepository(ctx APITestContext, orgName string, options *api.CreateRepoOption, callback ...func(*testing.T, api.Repository)) func(t *testing.T) {
 | |
| 	return func(t *testing.T) {
 | |
| 		url := fmt.Sprintf("/api/v1/orgs/%s/repos?token=%s", orgName, ctx.Token)
 | |
| 
 | |
| 		req := NewRequestWithJSON(t, "POST", url, &options)
 | |
| 		if ctx.ExpectedCode != 0 {
 | |
| 			ctx.Session.MakeRequest(t, req, ctx.ExpectedCode)
 | |
| 			return
 | |
| 		}
 | |
| 		resp := ctx.Session.MakeRequest(t, req, http.StatusCreated)
 | |
| 
 | |
| 		var contents api.Repository
 | |
| 		DecodeJSON(t, resp, &contents)
 | |
| 		if len(callback) > 0 {
 | |
| 			callback[0](t, contents)
 | |
| 		}
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func doAPICreateOrganizationTeam(ctx APITestContext, orgName string, options *api.CreateTeamOption, callback ...func(*testing.T, api.Team)) func(t *testing.T) {
 | |
| 	return func(t *testing.T) {
 | |
| 		url := fmt.Sprintf("/api/v1/orgs/%s/teams?token=%s", orgName, ctx.Token)
 | |
| 
 | |
| 		req := NewRequestWithJSON(t, "POST", url, &options)
 | |
| 		if ctx.ExpectedCode != 0 {
 | |
| 			ctx.Session.MakeRequest(t, req, ctx.ExpectedCode)
 | |
| 			return
 | |
| 		}
 | |
| 		resp := ctx.Session.MakeRequest(t, req, http.StatusCreated)
 | |
| 
 | |
| 		var contents api.Team
 | |
| 		DecodeJSON(t, resp, &contents)
 | |
| 		if len(callback) > 0 {
 | |
| 			callback[0](t, contents)
 | |
| 		}
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func doAPIAddUserToOrganizationTeam(ctx APITestContext, teamID int64, username string) func(t *testing.T) {
 | |
| 	return func(t *testing.T) {
 | |
| 		url := fmt.Sprintf("/api/v1/teams/%d/members/%s?token=%s", teamID, username, ctx.Token)
 | |
| 
 | |
| 		req := NewRequest(t, "PUT", url)
 | |
| 		if ctx.ExpectedCode != 0 {
 | |
| 			ctx.Session.MakeRequest(t, req, ctx.ExpectedCode)
 | |
| 			return
 | |
| 		}
 | |
| 		ctx.Session.MakeRequest(t, req, http.StatusNoContent)
 | |
| 	}
 | |
| }
 | |
| 
 | |
| func doAPIAddRepoToOrganizationTeam(ctx APITestContext, teamID int64, orgName, repoName string) func(t *testing.T) {
 | |
| 	return func(t *testing.T) {
 | |
| 		url := fmt.Sprintf("/api/v1/teams/%d/repos/%s/%s?token=%s", teamID, orgName, repoName, ctx.Token)
 | |
| 
 | |
| 		req := NewRequest(t, "PUT", url)
 | |
| 		if ctx.ExpectedCode != 0 {
 | |
| 			ctx.Session.MakeRequest(t, req, ctx.ExpectedCode)
 | |
| 			return
 | |
| 		}
 | |
| 		ctx.Session.MakeRequest(t, req, http.StatusNoContent)
 | |
| 	}
 | |
| }
 |