mirror of
https://github.com/gotify/server.git
synced 2026-09-06 07:50:35 +08:00
c5fc8b7f8c
This will make testing easier, as it's more similar to the actual prod deployment. We don't have to rewrite anything in vite, as the host and origin is the same.
53 lines
1.6 KiB
Go
53 lines
1.6 KiB
Go
package auth
|
|
|
|
import (
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/gin-contrib/cors"
|
|
"github.com/gotify/server/v2/config"
|
|
"github.com/gotify/server/v2/mode"
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
func TestCorsConfig(t *testing.T) {
|
|
mode.Set(mode.Prod)
|
|
serverConf := config.Configuration{}
|
|
serverConf.Server.Cors.AllowOrigins = []string{"http://test.com"}
|
|
serverConf.Server.Cors.AllowHeaders = []string{"content-type"}
|
|
serverConf.Server.Cors.AllowMethods = []string{"GET"}
|
|
|
|
actual := CorsConfig(&serverConf)
|
|
allowF := actual.AllowOriginFunc
|
|
actual.AllowOriginFunc = nil // func cannot be checked with equal
|
|
|
|
assert.Equal(t, cors.Config{
|
|
AllowAllOrigins: false,
|
|
AllowHeaders: []string{"content-type"},
|
|
AllowMethods: []string{"GET"},
|
|
MaxAge: 12 * time.Hour,
|
|
AllowBrowserExtensions: true,
|
|
}, actual)
|
|
assert.NotNil(t, allowF)
|
|
assert.True(t, allowF("http://test.com"))
|
|
assert.False(t, allowF("https://test.com"))
|
|
assert.False(t, allowF("https://other.com"))
|
|
}
|
|
|
|
func TestEmptyCorsConfigWithResponseHeaders(t *testing.T) {
|
|
mode.Set(mode.Prod)
|
|
serverConf := config.Configuration{}
|
|
serverConf.Server.ResponseHeaders = map[string]string{"Access-control-allow-origin": "https://example.com"}
|
|
|
|
actual := CorsConfig(&serverConf)
|
|
assert.NotNil(t, actual.AllowOriginFunc)
|
|
actual.AllowOriginFunc = nil // func cannot be checked with equal
|
|
|
|
assert.Equal(t, cors.Config{
|
|
AllowAllOrigins: false,
|
|
AllowOrigins: []string{"https://example.com"},
|
|
MaxAge: 12 * time.Hour,
|
|
AllowBrowserExtensions: true,
|
|
}, actual)
|
|
}
|