1 files changed, 87 insertions, 0 deletions
diff --git a/spec/lib/gitlab/web_ide/default_oauth_application_spec.rb b/spec/lib/gitlab/web_ide/default_oauth_application_spec.rb
new file mode 100644
index 00000000000..9bfdc799aec
--- /dev/null
+++ b/spec/lib/gitlab/web_ide/default_oauth_application_spec.rb
@@ -0,0 +1,87 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe Gitlab::WebIde::DefaultOauthApplication, feature_category: :web_ide do
+  let_it_be(:current_user) { create(:user) }
+  let_it_be(:oauth_application) { create(:oauth_application, owner: nil) }
+
+  describe '#feature_enabled?' do
+    where(:vscode_web_ide, :web_ide_oauth, :expectation) do
+      [
+        [ref(:current_user), false, false],
+        [false, ref(:current_user), false],
+        [ref(:current_user), ref(:current_user), true]
+      ]
+    end
+
+    with_them do
+      it 'returns the expected value' do
+        stub_feature_flags(vscode_web_ide: vscode_web_ide, web_ide_oauth: web_ide_oauth)
+
+        expect(described_class.feature_enabled?(current_user)).to be(expectation)
+      end
+    end
+  end
+
+  describe '#oauth_application' do
+    it 'returns web_ide_oauth_application from application_settings' do
+      expect(described_class.oauth_application).to be_nil
+
+      stub_application_setting({ web_ide_oauth_application: oauth_application })
+
+      expect(described_class.oauth_application).to be(oauth_application)
+    end
+  end
+
+  describe '#oauth_callback_url' do
+    it 'returns route URL for oauth callback' do
+      expect(described_class.oauth_callback_url).to eq(Gitlab::Routing.url_helpers.ide_oauth_redirect_url)
+    end
+  end
+
+  describe '#ensure_oauth_application!' do
+    it 'if web_ide_oauth_application already exists, does nothing' do
+      expect(application_settings).not_to receive(:lock!)
+      expect(::Doorkeeper::Application).not_to receive(:new)
+
+      stub_application_setting({ web_ide_oauth_application: oauth_application })
+
+      described_class.ensure_oauth_application!
+    end
+
+    it 'if web_ide_oauth_application created while locked, does nothing' do
+      expect(application_settings).to receive(:lock!) do
+        stub_application_setting({ web_ide_oauth_application: oauth_application })
+      end
+      expect(::Doorkeeper::Application).not_to receive(:new)
+      expect(::Gitlab::CurrentSettings).not_to receive(:expire_current_application_settings)
+
+      described_class.ensure_oauth_application!
+    end
+
+    it 'creates web_ide_oauth_application' do
+      expect(application_settings).to receive(:transaction).and_call_original
+      expect(::Doorkeeper::Application).to receive(:new).and_call_original
+      expect(::Gitlab::CurrentSettings).to receive(:expire_current_application_settings).and_call_original
+
+      expect(application_settings.web_ide_oauth_application).to be_nil
+
+      described_class.ensure_oauth_application!
+
+      result = application_settings.web_ide_oauth_application
+      expect(result).not_to be_nil
+      expect(result).to have_attributes(
+        name: 'GitLab Web IDE',
+        redirect_uri: described_class.oauth_callback_url,
+        scopes: ['api'],
+        trusted: true,
+        confidential: false
+      )
+    end
+  end
+
+  def application_settings
+    ::Gitlab::CurrentSettings.current_application_settings
+  end
+end