1 files changed, 81 insertions, 0 deletions
diff --git a/spec/lib/gitlab/beyond_identity/client_spec.rb b/spec/lib/gitlab/beyond_identity/client_spec.rb
new file mode 100644
index 00000000000..250db1bbb23
--- /dev/null
+++ b/spec/lib/gitlab/beyond_identity/client_spec.rb
@@ -0,0 +1,81 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe ::Gitlab::BeyondIdentity::Client, feature_category: :source_code_management do
+  let_it_be_with_reload(:integration) { create(:beyond_identity_integration) }
+
+  let(:stubbed_response) do
+    { 'authorized' => true }.to_json
+  end
+
+  let(:params) { { key_id: 'key-id', committer_email: 'email@example.com' } }
+  let(:status) { 200 }
+
+  let!(:request) do
+    stub_request(:get, ::Gitlab::BeyondIdentity::Client::API_URL).with(
+      query: params,
+      headers: { 'Content-Type' => 'application/json', Authorization: "Bearer #{integration.token}" }
+    ).to_return(
+      status: status,
+      body: stubbed_response
+    )
+  end
+
+  subject(:client) { described_class.new(integration) }
+
+  context 'when integration is not activated' do
+    it 'raises a config error' do
+      integration.active = false
+
+      expect do
+        client.execute(params)
+      end.to raise_error(::Gitlab::BeyondIdentity::Client::Error).with_message(
+        'integration is not activated'
+      )
+
+      expect(request).not_to have_been_requested
+    end
+  end
+
+  it 'executes successfully' do
+    expect(client.execute(params)).to eq({ 'authorized' => true })
+    expect(request).to have_been_requested
+  end
+
+  context 'with invalid response' do
+    let(:stubbed_response) { 'invalid' }
+
+    it 'executes successfully' do
+      expect { client.execute(params) }.to raise_error(
+        ::Gitlab::BeyondIdentity::Client::Error
+      ).with_message('invalid response format')
+    end
+  end
+
+  context 'with an error response' do
+    let(:stubbed_response) do
+      { 'error' => { 'message' => 'gpg_key is invalid' } }.to_json
+    end
+
+    let(:status) { 400 }
+
+    it 'returns an error' do
+      expect { client.execute(params) }.to raise_error(
+        ::Gitlab::BeyondIdentity::Client::Error
+      ).with_message('gpg_key is invalid')
+    end
+  end
+
+  context 'when key is unauthorized' do
+    let(:stubbed_response) do
+      { 'unauthorized' => false, 'message' => 'key is unauthorized' }.to_json
+    end
+
+    it 'returns an error' do
+      expect { client.execute(params) }.to raise_error(
+        ::Gitlab::BeyondIdentity::Client::Error
+      ).with_message('authorization denied: key is unauthorized')
+    end
+  end
+end