Add TestTrustedSSHKeys Test via mocked repo

Author: ChristopherHX

tests/gitea-repositories-meta/user2/repo-test-trusted-ssh-keys.git/HEAD

@@ -0,0 +1 @@
+ref: refs/heads/main

tests/gitea-repositories-meta/user2/repo-test-trusted-ssh-keys.git/config

@@ -0,0 +1,6 @@
+[core]
+	repositoryformatversion = 0
+	filemode = true
+	bare = true
+	ignorecase = true
+	precomposeunicode = true

tests/gitea-repositories-meta/user2/repo-test-trusted-ssh-keys.git/description

@@ -0,0 +1 @@
+Unnamed repository; edit this file 'description' to name the repository.

tests/gitea-repositories-meta/user2/repo-test-trusted-ssh-keys.git/info/exclude

@@ -0,0 +1,6 @@
+# git ls-files --others --exclude-from=.git/info/exclude
+# Lines that start with '#' are comments.
+# For a project mostly in C, the following would be a good set of
+# exclude patterns (uncomment them if you want to use them):
+# *.[oa]
+# *~

tests/gitea-repositories-meta/user2/repo-test-trusted-ssh-keys.git/objects/9a/93ffa76e8b72bdb6431910b3a506fa2b39f42e

@@ -0,0 +1,4 @@
+x
��[o�0��ٿb�QW�����$�@��˛�`�ͥ���&�k_z���|ҙ�NZ�Ϫ
�55���
+�f�pl9L��ۤ�k��
+ۙ 	u3�H$��PVײ�VŸ�s䟼��.��<��1]B1�.0�u���t���r��*��^�`2X���
+'���S���c\L�^�n�E�2Z?���X�S��L��x�Iʭ��_�/�hxzl����1��.1'�r�'�)>M�x��&&Aw-����dL�M��b�ぅ��KC��m]��4��f��׹x��I+�g,�n��Y�Ҷ��Z8��rN�k����v�It���[�������}�0��2PxQ�|Uo�9@��E�!S�D?J��

tests/gitea-repositories-meta/user2/repo-test-trusted-ssh-keys.git/objects/b7/fca3aa0d80144f9718b0486681944f9c587e33

@@ -0,0 +1 @@
+# pack-refs with: peeled fully-peeled sorted 

tests/gitea-repositories-meta/user2/repo-test-trusted-ssh-keys.git/objects/b9/04b3dcaada8c26236f096fe337fd3c4cd8048a

@@ -0,0 +1 @@
+b7fca3aa0d80144f9718b0486681944f9c587e33

tests/gitea-repositories-meta/user2/repo-test-trusted-ssh-keys.git/packed-refs

@@ -366,3 +366,23 @@ func importTestingKey() (*openpgp.Entity, error) {
 	// There should only be one entity in this file.
 	return keyring[0], nil
 }
+
+func TestTrustedSSHKeys(t *testing.T) {
+	defer tests.PrepareTestEnv(t)()
+	defer test.MockVariableValue(&setting.Repository.Signing.TrustedSSHKeys, []string{"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH6Y4idVaW3E+bLw1uqoAfJD7o5Siu+HqS51E9oQLPE9"})()
+
+	username := "user2"
+	testCtx := NewAPITestContext(t, username, "repo-test-trusted-ssh-keys", auth_model.AccessTokenScopeWriteRepository, auth_model.AccessTokenScopeWriteUser)
+	t.Run("CheckMainBranchSignedVerified", doAPIGetBranch(testCtx, "main", func(t *testing.T, branch api.Branch) {
+		require.NotNil(t, branch.Commit, "no commit provided with branch! %v", branch)
+		require.NotNil(t, branch.Commit.Verification, "no verification provided with branch commit! %v", branch.Commit)
+		require.True(t, branch.Commit.Verification.Verified)
+	}))
+
+	setting.Repository.Signing.TrustedSSHKeys = []string{}
+	t.Run("CheckMainBranchSignedUnverified", doAPIGetBranch(testCtx, "main", func(t *testing.T, branch api.Branch) {
+		require.NotNil(t, branch.Commit, "no commit provided with branch! %v", branch)
+		require.NotNil(t, branch.Commit.Verification, "no verification provided with branch commit! %v", branch.Commit)
+		require.False(t, branch.Commit.Verification.Verified)
+	}))
+}