coolify/tests/Feature/GithubRunnerWebhookTest.php

<?php

use App\Models\GithubApp;
use Illuminate\Foundation\Testing\RefreshDatabase;

uses(RefreshDatabase::class);

it('returns pong for ping events on the webhook endpoint', function () {
    $response = $this->postJson('/source/github/events', [], [
        'X-GitHub-Event' => 'ping',
    ]);

    $response->assertOk();
    $response->assertSee('pong');
});

it('returns nothing to do when no github app found for workflow_job event', function () {
    $payload = [
        'action' => 'queued',
        'workflow_job' => [
            'id' => 12345,
            'labels' => ['self-hosted'],
        ],
        'organization' => [
            'login' => 'test-org',
        ],
    ];

    $secret = 'test-secret';
    $body = json_encode($payload);
    $signature = hash_hmac('sha256', $body, $secret);

    $response = $this->postJson('/source/github/events', $payload, [
        'X-GitHub-Event' => 'workflow_job',
        'X-GitHub-Hook-Installation-Target-Id' => '999999',
        'X-Hub-Signature-256' => 'sha256='.$signature,
    ]);

    $response->assertOk();
    $response->assertSee('Nothing to do. No GitHub App found.');
});

it('dispatches provisioning job for queued workflow_job event', function () {
    $team = \App\Models\Team::factory()->create();
    $privateKey = \App\Models\PrivateKey::create([
        'name' => 'test-key',
        'private_key' => 'test',
        'team_id' => $team->id,
    ]);

    $githubApp = GithubApp::create([
        'name' => 'test-app',
        'app_id' => 123456,
        'installation_id' => 789,
        'client_id' => 'Iv1.abc123',
        'client_secret' => 'secret',
        'webhook_secret' => 'test-webhook-secret',
        'private_key_id' => $privateKey->id,
        'team_id' => $team->id,
        'api_url' => 'https://api.github.com',
        'html_url' => 'https://github.com',
        'organization' => 'test-org',
    ]);

    \Illuminate\Support\Facades\Queue::fake();

    $payload = [
        'action' => 'queued',
        'workflow_job' => [
            'id' => 12345,
            'labels' => ['self-hosted', 'coolify'],
            'workflow_name' => 'CI',
        ],
        'organization' => [
            'login' => 'test-org',
        ],
        'repository' => [
            'id' => 123456789,
        ],
    ];

    $body = json_encode($payload);
    $signature = hash_hmac('sha256', $body, 'test-webhook-secret');

    $response = $this->postJson('/source/github/events', $payload, [
        'X-GitHub-Event' => 'workflow_job',
        'X-GitHub-Hook-Installation-Target-Id' => '123456',
        'X-Hub-Signature-256' => 'sha256='.$signature,
        'Content-Type' => 'application/json',
    ]);

    $response->assertOk();
    $response->assertSee('Runner provisioning queued.');

    \Illuminate\Support\Facades\Queue::assertPushed(\App\Jobs\ProvisionGithubRunnerJob::class, function ($job) {
        return $job->repositoryId === 123456789;
    });
});

it('dispatches cleanup job for completed workflow_job event', function () {
    $team = \App\Models\Team::factory()->create();
    $privateKey = \App\Models\PrivateKey::create([
        'name' => 'test-key',
        'private_key' => 'test',
        'team_id' => $team->id,
    ]);

    $githubApp = GithubApp::create([
        'name' => 'test-app',
        'app_id' => 654321,
        'installation_id' => 789,
        'client_id' => 'Iv1.abc123',
        'client_secret' => 'secret',
        'webhook_secret' => 'cleanup-secret',
        'private_key_id' => $privateKey->id,
        'team_id' => $team->id,
        'api_url' => 'https://api.github.com',
        'html_url' => 'https://github.com',
        'organization' => 'test-org',
    ]);

    \Illuminate\Support\Facades\Queue::fake();

    $payload = [
        'action' => 'completed',
        'workflow_job' => [
            'id' => 67890,
            'conclusion' => 'success',
        ],
        'organization' => [
            'login' => 'test-org',
        ],
    ];

    $body = json_encode($payload);
    $signature = hash_hmac('sha256', $body, 'cleanup-secret');

    $response = $this->postJson('/source/github/events', $payload, [
        'X-GitHub-Event' => 'workflow_job',
        'X-GitHub-Hook-Installation-Target-Id' => '654321',
        'X-Hub-Signature-256' => 'sha256='.$signature,
        'Content-Type' => 'application/json',
    ]);

    $response->assertOk();
    $response->assertSee('Runner cleanup queued.');

    \Illuminate\Support\Facades\Queue::assertPushed(\App\Jobs\CleanupGithubRunnerJob::class);
});