ynkmr/gitea
1
0
Fork 0
mirror of https://github.com/go-gitea/gitea.git synced 2026-08-10 05:24:18 +09:00
Code Issues Projects Releases Wiki Activity

feat: admin impersonates a user (#38614)

Browse Source 
* fix #3631
* fix #21599

by the way, refactored the "profile avatar card" to simplify the code.
This commit is contained in:
wxiaoguang
2026-07-26 17:26:02 +00:00
committed by GitHub
parent 470d34b1de
commit a3caf21440
18 changed files with 278 additions and 238 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/integration/admin_user_test.go
+30
View File
@@ -102,3 +102,33 @@ func TestAdminDeleteUser(t *testing.T) {
})
}
}
func TestAdminImpersonatedUser(t *testing.T) {
defer tests.PrepareTestEnv(t)()
session := loginUser(t, "user1")
currentUsername := func(t *testing.T) string {
t.Helper()
resp := session.MakeRequest(t, NewRequest(t, "GET", "/"), http.StatusOK)
doc := NewHTMLParser(t, resp.Body)
return doc.Find("[data-signed-in-username]").AttrOr("data-signed-in-username", "")
}
// user1 is admin, can visit admin pages
assert.Equal(t, "user1", currentUsername(t))
session.MakeRequest(t, NewRequest(t, "GET", "/-/admin/users/2"), http.StatusOK)
// impersonate to user2, user2 can't visit admin pages
session.MakeRequest(t, NewRequest(t, "POST", "/-/admin/users/2/impersonate"), http.StatusOK)
assert.Equal(t, "user2", currentUsername(t))
session.MakeRequest(t, NewRequest(t, "GET", "/-/admin/users/2"), http.StatusForbidden)
// exit impersonation, current user is user1(admin) again
session.MakeRequest(t, NewRequest(t, "GET", "/user/logout"), http.StatusSeeOther)
assert.Equal(t, "user1", currentUsername(t))
session.MakeRequest(t, NewRequest(t, "GET", "/-/admin/users/2"), http.StatusOK)
// completely logout
session.MakeRequest(t, NewRequest(t, "GET", "/user/logout"), http.StatusSeeOther)
assert.Equal(t, "", currentUsername(t))
}