// Copyright 2021 The Gitea Authors. All rights reserved. // SPDX-License-Identifier: MIT package integration import ( "bytes" "fmt" "image" "image/png" "io" "mime/multipart" "net/http" "net/url" "testing" "forgejo.org/models/db" "forgejo.org/models/unittest" user_model "forgejo.org/models/user" "forgejo.org/modules/avatar" "forgejo.org/modules/setting" "forgejo.org/modules/test" "forgejo.org/tests" "github.com/stretchr/testify/assert" "github.com/stretchr/testify/require" ) func TestUserAvatar(t *testing.T) { defer tests.PrepareTestEnv(t)() defer test.MockVariableValue(&setting.Avatar.Storage.Type, setting.LocalStorageType)() // make the maximum uncached image size small, so that our test image is bigger than that defer test.MockVariableValue(&setting.Avatar.MaxOriginSize, 3)() user2 := unittest.AssertExistsAndLoadBean(t, &user_model.User{ID: 2}) // owner of the repo3, is an org seed := user2.Email if len(seed) == 0 { seed = user2.Name } img, err := avatar.RandomImage([]byte(seed)) if err != nil { require.NoError(t, err) return } session := loginUser(t, "user2") imgData := &bytes.Buffer{} body := &bytes.Buffer{} // Setup multi-part writer := multipart.NewWriter(body) writer.WriteField("source", "local") part, err := writer.CreateFormFile("avatar", "avatar-for-testuseravatar.png") if err != nil { require.NoError(t, err) return } if err := png.Encode(imgData, img); err != nil { require.NoError(t, err) return } if _, err := io.Copy(part, imgData); err != nil { require.NoError(t, err) return } if err := writer.Close(); err != nil { require.NoError(t, err) return } req := NewRequestWithBody(t, "POST", "/user/settings/avatar", body) req.Header.Add("Content-Type", writer.FormDataContentType()) session.MakeRequest(t, req, http.StatusSeeOther) user2 = unittest.AssertExistsAndLoadBean(t, &user_model.User{ID: 2}) // owner of the repo3, is an org req = NewRequest(t, "GET", user2.AvatarLinkWithSize(db.DefaultContext, 0)) _ = session.MakeRequest(t, req, http.StatusOK) req = NewRequestf(t, "GET", "/%s.png", user2.Name) resp := MakeRequest(t, req, http.StatusSeeOther) assert.Equal(t, fmt.Sprintf("/avatars/%s", user2.Avatar), resp.Header().Get("location")) req = NewRequest(t, "GET", resp.Header().Get("location")) resp = MakeRequest(t, req, http.StatusOK) // check that it's a valid image with the expected dimensions respImg, _, err := image.Decode(resp.Body) require.NoError(t, err) assert.Equal(t, 512, respImg.Bounds().Dx()) assert.Equal(t, 512, respImg.Bounds().Dy()) // request an avatar that doesn't exist req = NewRequest(t, "GET", "/avatars/not_found") MakeRequest(t, req, http.StatusNotFound) // request an avatar that exists, but with an invalid size req = NewRequest(t, "GET", user2.AvatarLinkWithSize(db.DefaultContext, 0)+"?size=123456") MakeRequest(t, req, http.StatusNotFound) // request an avatar with a correct size req = NewRequest(t, "GET", user2.AvatarLinkWithSize(db.DefaultContext, 64)) resp = MakeRequest(t, req, http.StatusOK) respImg, _, err = image.Decode(resp.Body) require.NoError(t, err) assert.Equal(t, 64, respImg.Bounds().Dx()) assert.Equal(t, 64, respImg.Bounds().Dy()) // request a resized avatar using its internal storage path: not found req = NewRequest(t, "GET", fmt.Sprintf("/avatars/resized/64/%s", user2.Avatar)) MakeRequest(t, req, http.StatusNotFound) } func TestAvatarAnchorDestination(t *testing.T) { defer tests.PrepareTestEnv(t)() // If the user is logged in, and looking at their own profile, // the avatar becomes a link towards the user settings page. // Test that the link does not show up when not viewing one's own profile, // and that, if the link does show up, there is a corresponding element // on the user settings page matching the fragment of the anchor. t.Run("viewing other's profile", func(t *testing.T) { defer tests.PrintCurrentTest(t)() profilePage := NewHTMLParser(t, MakeRequest(t, NewRequest(t, "GET", "/user2"), http.StatusOK).Body) profilePage.AssertElement(t, "#profile-avatar", true) // When viewing another user's profile, there shouldn't be a link to user settings profilePage.AssertElement(t, "#profile-avatar a", false) }) t.Run("viewing own profile", func(t *testing.T) { defer tests.PrintCurrentTest(t)() session := loginUser(t, "user2") profilePage := NewHTMLParser(t, session.MakeRequest(t, NewRequest(t, "GET", "/user2"), http.StatusOK).Body) profilePage.AssertElement(t, "#profile-avatar a", true) href, has := profilePage.Find("#profile-avatar a").Attr("href") assert.True(t, has) settingsURL, err := url.Parse(href) require.NoError(t, err, "Change avatar link can't be parsed to URL") settingsPage := NewHTMLParser(t, session.MakeRequest(t, NewRequest(t, "GET", href), http.StatusOK).Body) settingsPage.AssertElement(t, fmt.Sprintf("#%s", settingsURL.Fragment), true) }) }