forgejo/tests/integration
Mathieu Fenniak a27f9a719e feat: ensure repo-specific access tokens can't perform repo admin operations (#11736)
Last known backend change for #11311, fixing up some loose ends on the repository APIs related to repo-specific access tokens.

Adds automated testing, and aligns permissions where necessary, to ensure that repo-specific access tokens can't change the administrative state of the repositories that they are limited to.

Repo-specific access tokens cannot be used to:
- convert a mirror into a normal repo,
- create a new repository from a template,
- transfer ownership of a repository
- create a new repository (already protected, but test automation added),
- delete a repository (already protected, but test automation added),
- editing a repository's settings (already protected, but test automation added).

**Breaking**: The template generation (`POST /repos/{template_owner}/{template_repo}/generate`) and repository deletion (`DELETE /repos/{username}/{reponame}`) APIs have been updated to require the same permission scope as creating a new repository. Either `write:user` or `write:organization` is required, depending on the owner of the repository being created or deleted.

## Checklist

The [contributor guide](https://forgejo.org/docs/next/contributor/) contains information that will be helpful to first time contributors. There also are a few [conditions for merging Pull Requests in Forgejo repositories](https://codeberg.org/forgejo/governance/src/branch/main/PullRequestsAgreement.md). You are also welcome to join the [Forgejo development chatroom](https://matrix.to/#/#forgejo-development:matrix.org).

### Tests for Go changes

- I added test coverage for Go changes...
  - [ ] in their respective `*_test.go` for unit tests.
  - [x] in the `tests/integration` directory if it involves interactions with a live Forgejo server.
- I ran...
  - [x] `make pr-go` before pushing

### Documentation

- [ ] I created a pull request [to the documentation](https://codeberg.org/forgejo/docs) to explain to Forgejo users how to use this change.
- [x] I did not document these changes and I do not expect someone else to do it.

### Release notes

- [x] This change will be noticed by a Forgejo user or admin (feature, bug fix, performance, etc.). I suggest to include a release note for this change.
- [ ] This change is not visible to a Forgejo user or admin (refactor, dependency upgrade, etc.). I think there is no need to add a release note for this change.

Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/11736
Reviewed-by: Andreas Ahlenstorf <aahlenst@noreply.codeberg.org>
Co-authored-by: Mathieu Fenniak <mathieu@fenniak.net>
Co-committed-by: Mathieu Fenniak <mathieu@fenniak.net>
2026-03-20 16:14:36 +01:00
..
fixtures feat: add form-based runner management (#11516) 2026-03-12 02:14:45 +01:00
migration-test fix: drop sqlite shared cache (#10812) 2026-01-13 21:04:35 +01:00
schemas verify nodeinfo response by schema (#22137) 2022-12-17 01:22:34 -05:00
actions_commit_status_test.go chore(typo): s/Copyright 20124/Copyright 2024/ 2025-11-05 23:43:13 +01:00
actions_concurrency_group_queue_test.go perf: update concurrency group query to be index-capable for status (#9943) 2025-11-03 00:01:51 +01:00
actions_fetch_task_test.go fix: allow Actions runner to recover tasks lost during fetching from intermittent errors (#11401) 2026-02-22 23:24:38 +01:00
actions_job_test.go feat: ensure repo-specific access tokens can't perform repo admin operations (#11736) 2026-03-20 16:14:36 +01:00
actions_log_test.go feat: ensure repo-specific access tokens can't perform repo admin operations (#11736) 2026-03-20 16:14:36 +01:00
actions_notifications_test.go feat: ensure repo-specific access tokens can't perform repo admin operations (#11736) 2026-03-20 16:14:36 +01:00
actions_route_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
actions_run_now_done_notification_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
actions_runner_test.go fix: allow Actions runner to recover tasks lost during fetching from intermittent errors (#11401) 2026-02-22 23:24:38 +01:00
actions_runs_list_test.go fix: add missing space before 'Commit' back (#10521) 2025-12-21 04:44:40 +01:00
actions_secrets_test.go fix: normalize secrets consistently, display accurate help (#11052) 2026-02-09 17:02:18 +01:00
actions_trigger_test.go feat: expand reusable workflow calls into their inner jobs (#10525) 2025-12-24 20:47:21 +01:00
actions_trust_test.go fix: cancel runs pending approval when a PR is closed (#11134) 2026-02-02 23:20:41 +01:00
actions_variables_test.go fix: normalize secrets consistently, display accurate help (#11052) 2026-02-09 17:02:18 +01:00
actions_view_test.go feat: link CI job to its defining workflow file (#11216) 2026-02-20 03:11:29 +01:00
activitypub_client_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
admin_auth_source_test.go fix: improve OAuth2 experience (#11715) 2026-03-17 18:44:23 +01:00
admin_config_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
admin_dashboard_test.go feat(i18n): translate system status data units in runtime (#10358) 2025-12-09 14:38:40 +01:00
admin_moderation_test.go fix: 'More actions' (⋯) dropdown from moderation reports overview page (#10339) 2025-12-10 17:09:59 +01:00
admin_repo_test.go test: fix intermittent PostgreSQL failure in TestAdminViewRepos (#10587) 2025-12-26 20:02:27 +01:00
admin_user_test.go feat(activitypub): use structure @PreferredUsername@host.tld:port for actors (#9254) 2026-01-30 23:45:11 +01:00
api_actions_artifact_test.go chore: refactor the web UI tests for the actions run 2025-08-27 08:34:19 +02:00
api_actions_artifact_v4_test.go feat: add OIDC workload identity federation support (#10481) 2026-01-15 03:39:00 +01:00
api_actions_id_token_test.go feat: add OIDC workload identity federation support (#10481) 2026-01-15 03:39:00 +01:00
api_actions_oidc_test.go feat: add OIDC workload identity federation support (#10481) 2026-01-15 03:39:00 +01:00
api_activitypub_actor_test.go fix: add stub outboxes to actors (#10120) 2025-12-01 16:51:35 +01:00
api_activitypub_person_inbox_follow_test.go fix(user): set ActivityPub users to ProhibitLogin (#10434) 2025-12-17 15:38:32 +01:00
api_activitypub_person_inbox_useractivity_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
api_activitypub_person_test.go fix: add stub outboxes to actors (#10120) 2025-12-01 16:51:35 +01:00
api_activitypub_repository_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
api_admin_actions_test.go feat: expose attempt number of ActionRunJob in HTTP API (#11687) 2026-03-17 02:58:34 +01:00
api_admin_org_test.go ui: move "New access token" to a separate UI page (#11659) 2026-03-18 22:33:14 +01:00
api_admin_test.go ui: move "New access token" to a separate UI page (#11659) 2026-03-18 22:33:14 +01:00
api_block_test.go chore: sort blocked users list for determistic results (#8320) 2025-06-27 17:37:29 +02:00
api_branch_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
api_comment_attachment_test.go fix: comment attachment API is more restrictive than the web UI (#11623) 2026-03-19 01:39:29 +01:00
api_comment_test.go feat: implement fine-grained access tokens in /repos/{owner}/{repo}/issues/{index}/timeline 2026-03-01 17:05:53 +01:00
api_federation_httpsig_test.go bug: signature: modify URL after error check (#10204) 2025-12-03 16:53:19 +01:00
api_feed_plain_text_titles_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_forgejo_root_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_forgejo_version_test.go fix: /api/forgejo/v1/version Content-Type error (#9897) 2025-11-05 17:35:50 +01:00
api_fork_test.go ui: move "New access token" to a separate UI page (#11659) 2026-03-18 22:33:14 +01:00
api_gitignore_templates_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_gpg_keys_test.go chore: fix typos throughout the codebase (#10753) 2026-01-26 22:57:33 +01:00
api_health_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_helper_for_declarative_test.go fix: make API /repos/{owner}/{repo}/compare/{basehead} work with forks (#8326) 2025-06-28 23:28:12 +02:00
api_httpsig_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
api_issue_attachment_test.go fix(api): deactivate issue api for disabled or external issue-tracker (#8829) 2025-09-03 16:13:40 +02:00
api_issue_config_test.go feat: search in the docs directory for issue and pull request templates (#8863) 2025-08-26 22:08:10 +02:00
api_issue_label_test.go chore: unify the usage of CryptoRandomString (#10110) 2025-11-15 13:24:53 +01:00
api_issue_milestone_test.go Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367) 2025-03-28 22:22:21 +00:00
api_issue_pin_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_issue_reaction_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_issue_stopwatch_test.go Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367) 2025-03-28 22:22:21 +00:00
api_issue_subscription_test.go Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367) 2025-03-28 22:22:21 +00:00
api_issue_templates_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
api_issue_test.go feat(api): more verbose error messages and swagger comments for posting issue comments (#11368) 2026-03-07 23:16:20 +01:00
api_issue_tracked_time_test.go feat: remove admin-level permissions from repo-specific & public-only access tokens (#11468) 2026-03-04 16:17:41 +01:00
api_keys_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_label_templates_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_license_templates_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_misc_test.go feat(sec): Add SSH signing support for instances (#6897) 2025-04-11 13:25:35 +00:00
api_nodeinfo_test.go chore: update gof3/v3 v3.11.15 (#10673) 2026-01-13 16:59:56 +01:00
api_notification_test.go chore: fix typos throughout the codebase (#10753) 2026-01-26 22:57:33 +01:00
api_oauth2_apps_test.go Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367) 2025-03-28 22:22:21 +00:00
api_org_actions_test.go feat: expose attempt number of ActionRunJob in HTTP API (#11687) 2026-03-17 02:58:34 +01:00
api_org_avatar_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_org_secrets_test.go fix: normalize secrets consistently, display accurate help (#11052) 2026-02-09 17:02:18 +01:00
api_org_test.go Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367) 2025-03-28 22:22:21 +00:00
api_org_variables_test.go fix: normalize secrets consistently, display accurate help (#11052) 2026-02-09 17:02:18 +01:00
api_packages_alpine_test.go fix: return bad request on malformed packages upload input (#10954) 2026-02-13 18:04:19 +01:00
api_packages_alt_test.go fix: return bad request on malformed packages upload input (#10954) 2026-02-13 18:04:19 +01:00
api_packages_arch_test.go fix: return bad request on malformed packages upload input (#10954) 2026-02-13 18:04:19 +01:00
api_packages_cargo_test.go chore(test): cleanup NewRequest which no longer supply CSRF values (#10119) 2025-11-14 23:21:10 +01:00
api_packages_chef_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_packages_composer_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_packages_conan_test.go fix: return bad request on malformed packages upload input (#10954) 2026-02-13 18:04:19 +01:00
api_packages_conda_test.go fix: return bad request on malformed packages upload input (#10954) 2026-02-13 18:04:19 +01:00
api_packages_container_cleanup_sha256_test.go fix: add challenge for HTTP Basic Authentication to container registry (#11678) 2026-03-15 15:18:48 +01:00
api_packages_container_cleanup_test.go fix: reduce runtime of container cleanup by relying on mass digest cleanup (#10297) 2025-12-05 15:45:47 +01:00
api_packages_container_test.go fix: prevent container registry headers from leaking into other registries (#11733) 2026-03-18 20:17:50 +01:00
api_packages_cran_test.go fix: return bad request on malformed packages upload input (#10954) 2026-02-13 18:04:19 +01:00
api_packages_debian_test.go feat: Add HEAD support for debian repo files (#11489) 2026-03-07 18:59:47 +01:00
api_packages_generic_test.go fix: return bad request on malformed packages upload input (#10954) 2026-02-13 18:04:19 +01:00
api_packages_goproxy_test.go fix: return bad request on malformed packages upload input (#10954) 2026-02-13 18:04:19 +01:00
api_packages_helm_test.go fix: return bad request on malformed packages upload input (#10954) 2026-02-13 18:04:19 +01:00
api_packages_maven_test.go fix: prevent container registry headers from leaking into other registries (#11733) 2026-03-18 20:17:50 +01:00
api_packages_npm_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_packages_nuget_test.go fix: return bad request on malformed packages upload input (#10954) 2026-02-13 18:04:19 +01:00
api_packages_pub_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_packages_pypi_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_packages_rpm_test.go fix: return bad request on malformed packages upload input (#10954) 2026-02-13 18:04:19 +01:00
api_packages_rubygems_test.go fix: return bad request on malformed packages upload input (#10954) 2026-02-13 18:04:19 +01:00
api_packages_swift_test.go fix linting 2025-04-28 16:41:33 +02:00
api_packages_test.go chore: fix typos throughout the codebase (#10753) 2026-01-26 22:57:33 +01:00
api_packages_vagrant_test.go fix: return bad request on malformed packages upload input (#10954) 2026-02-13 18:04:19 +01:00
api_private_serv_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
api_pull_commits_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_pull_review_test.go feat: implement fine-grained access tokens in /repos/{owner}/{repo}/pulls/{index}/requested_reviewers 2026-03-01 17:05:53 +01:00
api_pull_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
api_push_mirror_test.go chore: fix typos throughout the codebase (#10753) 2026-01-26 22:57:33 +01:00
api_quota_management_test.go Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367) 2025-03-28 22:22:21 +00:00
api_quota_use_test.go fix: enforce package quota against package owner, not uploader (#11442) 2026-03-09 17:14:50 +01:00
api_releases_test.go fix(api): default new release 'title' field to label name, if not provided (#10925) 2026-01-20 18:24:46 +01:00
api_repo_actions_test.go feat: expose attempt number of ActionRunJob in HTTP API (#11687) 2026-03-17 02:58:34 +01:00
api_repo_activities_test.go chore: fix typos throughout the codebase (#10753) 2026-01-26 22:57:33 +01:00
api_repo_archive_test.go test: compare file list instead of byte length in gzipped repo archive test (#10161) 2025-11-19 16:14:44 +01:00
api_repo_avatar_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_repo_branch_test.go feat: implement repo-specific access tokens broadly for universal API permission checks (#11437) 2026-02-28 19:47:06 +01:00
api_repo_collaborator_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
api_repo_compare_test.go feat: implement fine-grained access tokens in /repos/{owner}/{repo}/pulls & /repos/{owner}/{repo}/compare/{basehead} APIs 2026-03-01 17:05:53 +01:00
api_repo_convert_test.go feat: ensure repo-specific access tokens can't perform repo admin operations (#11736) 2026-03-20 16:14:36 +01:00
api_repo_edit_test.go feat: ensure repo-specific access tokens can't perform repo admin operations (#11736) 2026-03-20 16:14:36 +01:00
api_repo_file_create_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
api_repo_file_delete_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
api_repo_file_get_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
api_repo_file_helpers.go API: enforce sha requirement on POST /repos/{owner}/{repo}/contents (#8139) 2025-06-12 00:13:39 +02:00
api_repo_file_update_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
api_repo_files_change_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
api_repo_get_contents_list_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
api_repo_get_contents_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
api_repo_git_blobs_test.go ui: move "New access token" to a separate UI page (#11659) 2026-03-18 22:33:14 +01:00
api_repo_git_commits_test.go fix: correctly get stats for API commits (#8756) 2025-08-02 13:06:04 +02:00
api_repo_git_hook_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_repo_git_notes_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
api_repo_git_ref_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_repo_git_tags_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_repo_git_trees_test.go ui: move "New access token" to a separate UI page (#11659) 2026-03-18 22:33:14 +01:00
api_repo_hook_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_repo_languages_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
api_repo_lfs_locks_test.go Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367) 2025-03-28 22:22:21 +00:00
api_repo_lfs_migrate_test.go Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367) 2025-03-28 22:22:21 +00:00
api_repo_lfs_test.go fix: make API /repos/{owner}/{repo}/compare/{basehead} work with forks (#8326) 2025-06-28 23:28:12 +02:00
api_repo_pulls_test.go chore: use correct import (#7371) 2025-03-28 12:06:07 +00:00
api_repo_raw_test.go Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367) 2025-03-28 22:22:21 +00:00
api_repo_secrets_test.go fix: normalize secrets consistently, display accurate help (#11052) 2026-02-09 17:02:18 +01:00
api_repo_tags_test.go chore: fix typos throughout the codebase (#10753) 2026-01-26 22:57:33 +01:00
api_repo_teams_test.go Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367) 2025-03-28 22:22:21 +00:00
api_repo_test.go feat: ensure repo-specific access tokens can't perform repo admin operations (#11736) 2026-03-20 16:14:36 +01:00
api_repo_topic_test.go Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367) 2025-03-28 22:22:21 +00:00
api_repo_variables_test.go fix: normalize secrets consistently, display accurate help (#11052) 2026-02-09 17:02:18 +01:00
api_settings_test.go Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367) 2025-03-28 22:22:21 +00:00
api_team_test.go feat: implement fine-grained access tokens in /teams/{id}/repos 2026-03-01 10:54:43 -07:00
api_team_user_test.go Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367) 2025-03-28 22:22:21 +00:00
api_token_test.go feat: ensure repo-specific access tokens can't perform repo admin operations (#11736) 2026-03-20 16:14:36 +01:00
api_twofa_test.go feat: Global 2FA enforcement (#8753) 2025-08-15 10:56:45 +02:00
api_user_actions_test.go feat: expose attempt number of ActionRunJob in HTTP API (#11687) 2026-03-17 02:58:34 +01:00
api_user_avatar_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_user_email_test.go feat: Add admin individual user email management endpoints (#9594) 2025-10-28 15:52:37 +01:00
api_user_follow_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_user_heatmap_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_user_info_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_user_org_perm_test.go chore: fix typos throughout the codebase (#10753) 2026-01-26 22:57:33 +01:00
api_user_orgs_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
api_user_search_test.go feat: add sort parameter for users/search api endpoint (#8594) 2025-07-24 22:40:27 +02:00
api_user_secrets_test.go fix: normalize secrets consistently, display accurate help (#11052) 2026-02-09 17:02:18 +01:00
api_user_star_test.go feat: implement fine-grained access tokens in /user/starred & /users/{username}/starred 2026-03-01 17:05:53 +01:00
api_user_variables_test.go fix: normalize secrets consistently, display accurate help (#11052) 2026-02-09 17:02:18 +01:00
api_user_watch_test.go feat: implement fine-grained access tokens in /user/subscriptions & /users/{username}/subscriptions 2026-03-01 17:05:53 +01:00
api_wiki_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
appearance_settings_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
archived_labels_display_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
attachment_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
auth_ldap_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
auth_token_test.go chore: fix typos throughout the codebase (#10753) 2026-01-26 22:57:33 +01:00
avatar.png Add API for changing Avatars (#25369) 2023-06-29 23:22:55 +00:00
benchmarks_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
block_test.go chore: ensure consistent import aliasing for services and models (#10253) 2025-11-30 17:00:57 +01:00
branches_test.go chore(test): cleanup NewRequest which no longer supply CSRF values (#10119) 2025-11-14 23:21:10 +01:00
change_default_branch_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
cmd_admin_test.go test: introduce TruncateBeansCascade test helper to support data cleanup of foreign-key referenced tables (#9684) 2025-10-15 20:26:41 +02:00
cmd_forgejo_actions_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
cmd_forgejo_f3_test.go chore: update gof3/v3 v3.11.15 (#10673) 2026-01-13 16:59:56 +01:00
cmd_keys_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
codeowner_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
comment_roles_system_test.go chore: merge tests.AddFixtures and unittest.OverrideFixtures (#7648) 2025-04-25 09:14:33 +00:00
comment_roles_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
commit_status_test.go Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367) 2025-03-28 22:22:21 +00:00
common_navigation_test.go feat(ui): JS-less dropdowns in navbar (#10025) 2025-11-16 14:56:42 +01:00
compare_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
cors_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
create_no_session_test.go chore: update ingration test 2026-03-20 07:00:48 +01:00
csrf_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
db_collation_test.go chore: use eventually for mysql collation test (#8301) 2025-06-27 11:44:59 +02:00
delete_user_test.go chore(test): cleanup NewRequest which no longer supply CSRF values (#10119) 2025-11-14 23:21:10 +01:00
disable_forgotten_password_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
doctor_packages_nuget_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
download_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
dummy_lang_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
dump_restore_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
easymde_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
editor_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
email_block_allowlist_test.go chore: add email blocklist unit test 2025-08-30 09:45:19 +02:00
empty_repo_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
ephemeral_actions_runner_deletion_test.go feat: implement ephemeral runners (#9962) 2026-02-16 18:56:56 +01:00
error_pages_test.go chore(ui): change /devtest to /-/demo (#11019) 2026-01-26 13:12:25 +01:00
eventsource_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
explore_code_test.go feat: add support to opt-in for fuzzy search (#10378) 2025-12-17 13:51:48 +01:00
explore_org_test.go feat(ui): allow dropdown to contain not just items (#9951) 2025-11-05 05:00:15 +01:00
explore_repos_test.go fix(ui): use octicon-repo-forked in repo list (#10227) 2025-11-26 11:21:20 +01:00
explore_user_test.go feat(ui): allow dropdown to contain not just items (#9951) 2025-11-05 05:00:15 +01:00
feed_repo_test.go Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367) 2025-03-28 22:22:21 +00:00
feed_user_test.go fix: use an absolute URL for compare links in atom feed (#10933) 2026-02-01 10:00:21 +01:00
footer_test.go chore(ui): add integration tests for footer tmpl logic (#11197) 2026-02-08 23:55:30 +01:00
forgejo_confirmation_repo_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
forgejo_git_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
git_helper_for_declarative_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
git_push_test.go feat: detailed permission denied message on push (#10941) 2026-01-29 01:48:46 +01:00
git_smart_http_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
git_test.go feat: implement repo-specific access tokens in git operations (#11452) 2026-02-28 18:00:23 +01:00
goget_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
html_helper.go fix: allow Actions trust management on conflicted PRs (#10594) 2025-12-27 15:57:25 +01:00
incoming_email_test.go Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367) 2025-03-28 22:22:21 +00:00
integration_test.go ui: move "New access token" to a separate UI page (#11659) 2026-03-18 22:33:14 +01:00
issue_comment_test.go fix: construct project links in timeline better (#9872) 2025-10-29 17:46:13 +01:00
issue_list_filters_test.go fix(i18n): unhardcode label exclusion tooltips (#11333) 2026-02-17 04:28:27 +01:00
issue_subscribe_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
issue_test.go fix: always search for issue posters by user and full name (#10394) 2025-12-22 12:59:37 +01:00
issue_tracked_time_test.go chore: ensure consistent import aliasing for services and models (#10253) 2025-11-30 17:00:57 +01:00
last_updated_time_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
lfs_getobject_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
lfs_local_endpoint_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
lfs_view_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
linguist_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
links_test.go chore: skip sha256 repo for older git versions (#11542) 2026-03-07 15:58:31 +01:00
markup_external_test.go feat: match on compound filename extensions (#11439) 2026-03-19 01:25:51 +01:00
markup_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
mention_test.go feat(ui): highlight user mention in comments and commit messages 2024-11-14 14:08:12 +01:00
migrate_test.go fix: reduce deadlocks merging PRs by using caching for repo issue count stats (#9922) 2025-10-31 23:50:05 +01:00
milestone_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
mirror_pull_test.go chore: ensure consistent import aliasing for services and models (#10253) 2025-11-30 17:00:57 +01:00
mirror_push_test.go ui: move "New access token" to a separate UI page (#11659) 2026-03-18 22:33:14 +01:00
navbar_test.go chore(ui): change /devtest to /-/demo (#11019) 2026-01-26 13:12:25 +01:00
new_org_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
nonascii_branches_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
notification_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
oauth_test.go fix: improve OAuth2 experience (#11715) 2026-03-17 18:44:23 +01:00
opengraph_test.go feat(ui): add repository description to og:image:alt (#8325) 2025-06-29 05:54:07 +02:00
org_count_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
org_members_test.go feat(ui): convert org members list to grid (#11127) 2026-02-10 12:50:55 +01:00
org_nav_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
org_profile_test.go feat(ui): JS-less dropdowns in navbar (#10025) 2025-11-16 14:56:42 +01:00
org_project_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
org_settings_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
org_team_invite_test.go chore(test): cleanup NewRequest which no longer supply CSRF values (#10119) 2025-11-14 23:21:10 +01:00
org_test.go chore(test): cleanup NewRequest which no longer supply CSRF values (#10119) 2025-11-14 23:21:10 +01:00
patch_status_test.go chore: fix typos throughout the codebase (#10753) 2026-01-26 22:57:33 +01:00
pathutils_test.go feat: Drag and drop nested directories (#6687) 2025-10-03 00:16:40 +02:00
private-testing.key Kd/ci playwright go test (#20123) 2022-09-02 15:18:23 -04:00
private_project_test.go chore: merge tests.AddFixtures and unittest.OverrideFixtures (#7648) 2025-04-25 09:14:33 +00:00
privateactivity_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
project_test.go chore: add integration testing 2026-03-06 11:21:07 -07:00
protected_branch_test.go chore: fix typos throughout the codebase (#10753) 2026-01-26 22:57:33 +01:00
pull_auto_merge_test.go chore: add integration testing 2026-03-06 11:21:07 -07:00
pull_commit_test.go fix: Allow SHA-256 in PR commit URLs (#10309) 2025-12-16 00:45:00 +01:00
pull_compare_test.go Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367) 2025-03-28 22:22:21 +00:00
pull_create_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
pull_diff_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
pull_editable_test.go feat: display the PR editable status in the right-hand side menu (#9392) 2025-09-27 13:08:38 +02:00
pull_files_test.go Implement single-commit PR review flow (#7155) 2025-06-17 09:31:50 +02:00
pull_icon_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
pull_merge_instruction_test.go feat: Retrieve default merge commit message for pull requests (#10022) 2026-01-01 11:45:43 +01:00
pull_merge_test.go chore: fix typos throughout the codebase (#10753) 2026-01-26 22:57:33 +01:00
pull_reopen_test.go chore(test): cleanup NewRequest which no longer supply CSRF values (#10119) 2025-11-14 23:21:10 +01:00
pull_request_task_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
pull_review_test.go fix: don't display pending reviews as participants (#10528) 2026-01-06 10:47:21 +01:00
pull_status_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
pull_summary_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
pull_test.go fix: issues and pulls route permitted extra characters (#10185) 2025-12-10 01:21:38 +01:00
pull_update_test.go 2025-11-21 combined security patches (#10037) 2025-11-21 05:23:43 +01:00
pull_wip_convert_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
quota_use_test.go chore: ensure consistent import aliasing for services and models (#10253) 2025-11-30 17:00:57 +01:00
README.md chore(docs): add instructions to run S3 tests locally (#8895) 2025-08-15 08:54:09 +02:00
release_feed_test.go fix: correct release link in feed (#8802) 2025-08-06 17:51:36 +02:00
release_test.go feat(ui): responsive releases list (#11080) 2026-02-07 19:15:14 +01:00
remote_test.go Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367) 2025-03-28 22:22:21 +00:00
rename_branch_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
repo_activity_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
repo_archive_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
repo_archive_text_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
repo_avatar_test.go fix: skip repo avatar upload when no file is selected (#11335) 2026-03-07 20:53:23 +01:00
repo_badges_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
repo_branch_test.go fix(ui): show switch default branch button in branch list only for repo admins (#10814) 2026-01-14 08:15:39 +01:00
repo_citation_test.go feat(ui): add switch between formats when previewing CITATION.{cff,bib} files (#9103) 2025-11-14 14:39:20 +01:00
repo_collaborator_test.go chore: fix typos throughout the codebase (#10753) 2026-01-26 22:57:33 +01:00
repo_commit_test.go fix: make lastcommit available for non-signed-in users (#10815) 2026-01-13 21:30:59 +01:00
repo_commits_search_test.go Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367) 2025-03-28 22:22:21 +00:00
repo_commits_tags_test.go chore: fix typos throughout the codebase (#10753) 2026-01-26 22:57:33 +01:00
repo_commits_template_test.go feat: add tag label to commit list view (#8759) 2025-08-06 14:47:51 +02:00
repo_commits_test.go Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367) 2025-03-28 22:22:21 +00:00
repo_delete_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
repo_flags_test.go chore(test): cleanup NewRequest which no longer supply CSRF values (#10119) 2025-11-14 23:21:10 +01:00
repo_fork_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
repo_generate_test.go fix: remove template file from generated repo (#11691) 2026-03-17 23:39:10 +01:00
repo_git_note_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
repo_issue_title_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
repo_mergecommit_revert_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
repo_migrate_credentials_test.go chore(test): cleanup NewRequest which no longer supply CSRF values (#10119) 2025-11-14 23:21:10 +01:00
repo_migrate_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
repo_migration_ui_test.go chore(i18n): migrate migration descriptions to json (#9041) 2025-08-31 08:19:19 +02:00
repo_pagination_test.go chore(test): cleanup NewRequest which no longer supply CSRF values (#10119) 2025-11-14 23:21:10 +01:00
repo_search_test.go fix(ui): add missing translation for code search when keyword is empty string (#10964) 2026-01-21 16:42:18 +01:00
repo_settings_hook_test.go chore: QoL improvements to tests (#7917) 2025-05-21 15:45:56 +02:00
repo_settings_test.go chore: do not leak global repository unit defaults (#11470) 2026-03-07 02:03:22 +01:00
repo_signed_tag_test.go fix(ui): improve signature box responsiveness (#8984) 2025-09-11 16:20:36 +02:00
repo_star_federation_test.go chore(test): cleanup NewRequest which no longer supply CSRF values (#10119) 2025-11-14 23:21:10 +01:00
repo_starwatch_test.go chore(test): cleanup NewRequest which no longer supply CSRF values (#10119) 2025-11-14 23:21:10 +01:00
repo_sync_fork_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
repo_tag_test.go ui: move "New access token" to a separate UI page (#11659) 2026-03-18 22:33:14 +01:00
repo_test.go fix(i18n): unhardcode label exclusion tooltips (#11333) 2026-02-17 04:28:27 +01:00
repo_topic_test.go Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367) 2025-03-28 22:22:21 +00:00
repo_view_test.go feat(ui): dedicated icon for CITATION file (#10873) 2026-01-17 10:10:56 +01:00
repo_watch_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
repo_webhook_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
repo_wiki_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
repofiles_change_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
runner_test.go feat: add form-based runner management (#11516) 2026-03-12 02:14:45 +01:00
session_test.go Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367) 2025-03-28 22:22:21 +00:00
setting_test.go chore(test): cleanup NewRequest which no longer supply CSRF values (#10119) 2025-11-14 23:21:10 +01:00
signin_test.go chore(ui): change /devtest to /-/demo (#11019) 2026-01-26 13:12:25 +01:00
signing_git_test.go ui: move "New access token" to a separate UI page (#11659) 2026-03-18 22:33:14 +01:00
signout_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
signup_test.go chore: QoL improvements to tests (#7917) 2025-05-21 15:45:56 +02:00
ssh-signing-key feat(sec): Add SSH signing support for instances (#6897) 2025-04-11 13:25:35 +00:00
ssh-signing-key.pub feat(sec): Add SSH signing support for instances (#6897) 2025-04-11 13:25:35 +00:00
ssh_key_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
swagger_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
timetracking_test.go chore(test): cleanup NewRequest which no longer supply CSRF values (#10119) 2025-11-14 23:21:10 +01:00
translations_test.go chore(test): separate and move around i18n testing (#10539) 2025-12-23 04:39:26 +01:00
user_avatar_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
user_count_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
user_dashboard_test.go chore: ensure consistent import aliasing for services and models (#10253) 2025-11-30 17:00:57 +01:00
user_federationhost_xorm_test.go feat(activitiypub): enable HTTP signatures on all ActivityPub endpoints (#7035) 2025-04-03 15:24:15 +00:00
user_keys_test.go fix(ui): document token validity in key verification view (#9002) 2025-11-14 23:40:03 +01:00
user_profile_actions_test.go feat(ui): allow dropdown to contain not just items (#9951) 2025-11-05 05:00:15 +01:00
user_profile_attributes_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
user_profile_follows_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
user_profile_test.go fix: ignore private .profile repo on user profile page (#10486) 2025-12-20 06:08:49 +01:00
user_recovery_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
user_redirect_test.go chore: ensure consistent import aliasing for services and models (#10253) 2025-11-30 17:00:57 +01:00
user_settings_test.go fix: reflect allowed username change in profile setting (#11171) 2026-02-06 17:47:30 +01:00
user_test.go ui: move "New access token" to a separate UI page (#11659) 2026-03-18 22:33:14 +01:00
version_test.go chore: branding import path (#7337) 2025-03-27 19:40:14 +00:00
view_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
web_misc_test.go Move web app manifest to a own cache-able route and add a setting to set "display": "standalone"; Closes #2638 (#5384) 2026-01-09 17:49:29 +01:00
webfinger_test.go fix: trim trailing slash in WebFinger OIDC issuer link (#8794) 2025-08-06 14:50:51 +02:00
webhook_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00
wiki_test.go chore: remove branding from application run helper (#9640) 2025-10-11 12:14:13 +02:00
window_config_test.go chore: add integration test 2025-08-10 23:11:41 +02:00
xss_test.go feat: replace cross origin protection (#9830) 2025-10-29 22:43:22 +01:00

Integration tests

Thank you for your effort to provide good software tests for Forgejo. Please also read the general testing instructions in the Forgejo contributor documentation.

This file is meant to provide specific information for the integration tests as well as some tips and tricks you should know.

Feel free to extend this file with more instructions if you feel like you have something to share!

How to run the tests?

Before running any tests, please ensure you perform a clean build:

make clean build

Integration tests can be run with make commands for the appropriate backends, namely:

make test-sqlite
make test-pgsql
make test-mysql

Run tests via local forgejo runner

If you have a forgejo runner, you can use it to run the test jobs:

Run all jobs

forgejo-runner exec -W .forgejo/workflows/testing.yml --event=pull_request

Warning: This file defines many jobs, so it will be resource-intensive and therefore not recommended.

Run single job

forgejo-runner exec -W .forgejo/workflows/testing.yml --event=pull_request -j <job_name>

You can list all job names via:

forgejo-runner exec -W .forgejo/workflows/testing.yml --event=pull_request -l

Run sqlite integration tests

Start tests

make test-sqlite

Run MySQL integration tests

Setup a MySQL database inside docker

docker run -e MYSQL_DATABASE=test -e MYSQL_ALLOW_EMPTY_PASSWORD=yes -p 3306:3306 --rm --name mysql mysql:latest #(Ctrl-c to stop the database)

Start tests based on the database container

TEST_MYSQL_HOST=localhost:3306 TEST_MYSQL_DBNAME=test?multiStatements=true TEST_MYSQL_USERNAME=root TEST_MYSQL_PASSWORD='' make test-mysql

Run pgsql integration tests

Setup a pgsql database inside docker

docker run -e "POSTGRES_DB=test" -e POSTGRES_PASSWORD=postgres -e POSTGRESQL_FSYNC=off -e POSTGRESQL_EXTRA_FLAGS="-c full_page_writes=off" -p 5432:5432 --rm --name pgsql data.forgejo.org/oci/bitnami/postgresql:16 #(Ctrl-c to stop)

Setup a S3 server inside docker

docker run -e MINIO_ROOT_USER=123456 -e MINIO_ROOT_PASSWORD=12345678 -p 9000:9000 --rm --name minio data.forgejo.org/oci/bitnami/minio:2024.8.17 #(Ctrl-c to stop)

Start tests based on the database container

TEST_PGSQL_HOST=localhost:5432 TEST_PGSQL_DBNAME=test TEST_PGSQL_USERNAME=postgres TEST_PGSQL_PASSWORD=postgres TEST_S3_HOST=localhost:9000 make 'test-pgsql#Test'

Running individual tests

Example command to run GPG test:

For SQLite:

make test-sqlite#GPG

For other databases (replace mysql to pgsql):

TEST_MYSQL_HOST=localhost:1433 TEST_MYSQL_DBNAME=test TEST_MYSQL_USERNAME=sa TEST_MYSQL_PASSWORD=MwantsaSecurePassword1 make test-mysql#GPG

Setting timeouts for declaring long-tests and long-flushes

We appreciate that some testing machines may not be very powerful and the default timeouts for declaring a slow test or a slow clean-up flush may not be appropriate.

You can either:

  • Within the test ini file set the following section:
[integration-tests]
SLOW_TEST = 10s ; 10s is the default value
SLOW_FLUSH = 5S ; 5s is the default value
  • Set the following environment variables:
GITEA_SLOW_TEST_TIME="10s" GITEA_SLOW_FLUSH_TIME="5s" make test-sqlite

Tips and tricks

If you know noteworthy tests that can act as an inspiration for new tests, please add some details here.