Add private Docker UI relay for Nginx Proxy Manager

cmd/ui-proxy/main_test.go

@@ -0,0 +1,58 @@
+package main
+
+import (
+	"bufio"
+	"context"
+	"net/http"
+	"net/http/httptest"
+	"net/url"
+	"testing"
+	"time"
+)
+
+func TestRejectWrites(t *testing.T) {
+	for _, method := range []string{"POST", "PUT", "DELETE"} {
+		w := httptest.NewRecorder()
+		target, _ := url.Parse("http://127.0.0.1:18080")
+		handler(target).ServeHTTP(w, httptest.NewRequest(method, "http://shop.my-mm.ir/api/snapshot", nil))
+		if w.Code != http.StatusMethodNotAllowed {
+			t.Fatal("write method forwarded")
+		}
+	}
+}
+
+func TestForwardPublicHostOriginAndStream(t *testing.T) {
+	release := make(chan struct{})
+	upstream := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if r.Host == "shop.my-mm.ir" || r.Header.Get("Origin") != "" {
+			t.Error("public host/origin leaked into local guard")
+		}
+		w.Header().Set("Content-Type", "text/event-stream")
+		w.Write([]byte("data: test\n\n"))
+		w.(http.Flusher).Flush()
+		select {
+		case <-release:
+		case <-r.Context().Done():
+		}
+	}))
+	defer upstream.Close()
+	target, _ := url.Parse(upstream.URL)
+	relay := httptest.NewServer(handler(target))
+	defer relay.Close()
+	ctx, cancel := context.WithTimeout(context.Background(), 2*time.Second)
+	defer cancel()
+	req, _ := http.NewRequestWithContext(ctx, "GET", relay.URL+"/api/events", nil)
+	req.Host = "shop.my-mm.ir"
+	req.Header.Set("Origin", "https://shop.my-mm.ir")
+	response, err := http.DefaultClient.Do(req)
+	if err != nil {
+		close(release)
+		t.Fatal(err)
+	}
+	defer response.Body.Close()
+	line, err := bufio.NewReader(response.Body).ReadString('\n')
+	close(release)
+	if err != nil || line != "data: test\n" {
+		t.Fatal("stream buffered or missing")
+	}
+}