46 lines
1.5 KiB
Go
46 lines
1.5 KiB
Go
package middleware
|
|
|
|
import (
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"testing"
|
|
|
|
"kra/internal/conf"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
func runCORSTest(t *testing.T, admin *conf.AdminBackend, method, origin string) *httptest.ResponseRecorder {
|
|
t.Helper()
|
|
engine := gin.New()
|
|
engine.Use(CORS(conf.NewRuntime(nil, admin)))
|
|
engine.Any("/test", func(c *gin.Context) { c.Status(http.StatusOK) })
|
|
request := httptest.NewRequest(method, "/test", nil)
|
|
if origin != "" {
|
|
request.Header.Set("Origin", origin)
|
|
}
|
|
response := httptest.NewRecorder()
|
|
engine.ServeHTTP(response, request)
|
|
return response
|
|
}
|
|
|
|
func TestCORSDoesNotConsumeUnmatchedWhitelistPreflight(t *testing.T) {
|
|
response := runCORSTest(t, &conf.AdminBackend{Cors: &conf.AdminBackend_CORS{Mode: "whitelist"}}, http.MethodOptions, "https://unknown.example")
|
|
if response.Code != http.StatusOK {
|
|
t.Fatalf("unmatched whitelist preflight status = %d, want %d", response.Code, http.StatusOK)
|
|
}
|
|
}
|
|
|
|
func TestCORSConsumesMatchedWhitelistPreflight(t *testing.T) {
|
|
response := runCORSTest(t, &conf.AdminBackend{Cors: &conf.AdminBackend_CORS{Mode: "whitelist", Whitelist: []*conf.AdminBackend_CORSRule{{AllowOrigin: "https://admin.example"}}}}, http.MethodOptions, "https://admin.example")
|
|
if response.Code != http.StatusNoContent {
|
|
t.Fatalf("matched whitelist preflight status = %d, want %d", response.Code, http.StatusNoContent)
|
|
}
|
|
}
|
|
|
|
func TestCORSStrictWhitelistAllowsPrefixedHealth(t *testing.T) {
|
|
if !isHealthPath("/admin/health") {
|
|
t.Fatal("prefixed health endpoint was not recognized by strict whitelist")
|
|
}
|
|
}
|