59 lines
1.6 KiB
Go
59 lines
1.6 KiB
Go
package main
|
|
|
|
import (
|
|
"bufio"
|
|
"context"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"net/url"
|
|
"testing"
|
|
"time"
|
|
)
|
|
|
|
func TestRejectWrites(t *testing.T) {
|
|
for _, method := range []string{"POST", "PUT", "DELETE"} {
|
|
w := httptest.NewRecorder()
|
|
target, _ := url.Parse("http://127.0.0.1:18080")
|
|
handler(target).ServeHTTP(w, httptest.NewRequest(method, "http://shop.my-mm.ir/api/snapshot", nil))
|
|
if w.Code != http.StatusMethodNotAllowed {
|
|
t.Fatal("write method forwarded")
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestForwardPublicHostOriginAndStream(t *testing.T) {
|
|
release := make(chan struct{})
|
|
upstream := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
if r.Host == "shop.my-mm.ir" || r.Header.Get("Origin") != "" {
|
|
t.Error("public host/origin leaked into local guard")
|
|
}
|
|
w.Header().Set("Content-Type", "text/event-stream")
|
|
w.Write([]byte("data: test\n\n"))
|
|
w.(http.Flusher).Flush()
|
|
select {
|
|
case <-release:
|
|
case <-r.Context().Done():
|
|
}
|
|
}))
|
|
defer upstream.Close()
|
|
target, _ := url.Parse(upstream.URL)
|
|
relay := httptest.NewServer(handler(target))
|
|
defer relay.Close()
|
|
ctx, cancel := context.WithTimeout(context.Background(), 2*time.Second)
|
|
defer cancel()
|
|
req, _ := http.NewRequestWithContext(ctx, "GET", relay.URL+"/api/events", nil)
|
|
req.Host = "shop.my-mm.ir"
|
|
req.Header.Set("Origin", "https://shop.my-mm.ir")
|
|
response, err := http.DefaultClient.Do(req)
|
|
if err != nil {
|
|
close(release)
|
|
t.Fatal(err)
|
|
}
|
|
defer response.Body.Close()
|
|
line, err := bufio.NewReader(response.Body).ReadString('\n')
|
|
close(release)
|
|
if err != nil || line != "data: test\n" {
|
|
t.Fatal("stream buffered or missing")
|
|
}
|
|
}
|