test correction and Proxy func addition
This commit is contained in:
parent
f72529aea5
commit
eda7c79ab6
@ -1,6 +1,7 @@
|
|||||||
package middleware
|
package middleware
|
||||||
|
|
||||||
import (
|
import (
|
||||||
|
"io"
|
||||||
"net/http"
|
"net/http"
|
||||||
"net/http/httptest"
|
"net/http/httptest"
|
||||||
"testing"
|
"testing"
|
||||||
@ -10,41 +11,42 @@ import (
|
|||||||
|
|
||||||
func TestHelmet(t *testing.T) {
|
func TestHelmet(t *testing.T) {
|
||||||
r := mux.NewRouter()
|
r := mux.NewRouter()
|
||||||
|
r.Use(Helmet(HelmetOption{}))
|
||||||
r.Get("/hello", func(writer http.ResponseWriter, request *http.Request) {
|
r.Get("/hello", func(writer http.ResponseWriter, request *http.Request) {
|
||||||
_, _ = writer.Write([]byte("hello there"))
|
_, _ = writer.Write([]byte("hello there"))
|
||||||
})
|
})
|
||||||
|
|
||||||
endpoint := httptest.NewRequest(http.MethodGet, "/hello", nil)
|
srv := httptest.NewServer(r)
|
||||||
|
defer srv.Close()
|
||||||
|
w, _ := testRequest(t, srv, "GET", "/hello", nil)
|
||||||
|
|
||||||
// test endpoint registered/reachable
|
csp := w.Header.Get("Content-Security-Policy")
|
||||||
w := httptest.NewRecorder()
|
|
||||||
r.ServeHTTP(w, endpoint)
|
|
||||||
if w.Code != http.StatusOK {
|
|
||||||
t.Error("not expecting status", w.Code)
|
|
||||||
return
|
|
||||||
}
|
|
||||||
|
|
||||||
// no header test
|
|
||||||
w = httptest.NewRecorder()
|
|
||||||
r.ServeHTTP(w, endpoint)
|
|
||||||
csp := w.Header().Get("Content-Security-Policy")
|
|
||||||
// must not have a csp header, technically no header related to helmet but lets test with one.
|
// must not have a csp header, technically no header related to helmet but lets test with one.
|
||||||
if csp != "" {
|
|
||||||
t.Error("csp header not expected")
|
|
||||||
}
|
|
||||||
|
|
||||||
// introduce helmet middleware
|
|
||||||
r.Use(Helmet(HelmetOption{}))
|
|
||||||
|
|
||||||
// header tests..
|
|
||||||
w = httptest.NewRecorder()
|
|
||||||
r.ServeHTTP(w, endpoint)
|
|
||||||
// csp and other headers are expected
|
|
||||||
csp = w.Header().Get("Content-Security-Policy")
|
|
||||||
// fmt.Printf("csp %s", csp)
|
|
||||||
if csp == "" {
|
if csp == "" {
|
||||||
t.Error("csp header missing")
|
t.Error("csp header is expected")
|
||||||
}
|
}
|
||||||
|
|
||||||
// TODO need more tests
|
}
|
||||||
|
|
||||||
|
func testRequest(t *testing.T, ts *httptest.Server, method, path string, body io.Reader) (*http.Response, string) {
|
||||||
|
req, err := http.NewRequest(method, ts.URL+path, body)
|
||||||
|
if err != nil {
|
||||||
|
t.Fatal(err)
|
||||||
|
return nil, ""
|
||||||
|
}
|
||||||
|
|
||||||
|
resp, err := http.DefaultClient.Do(req)
|
||||||
|
if err != nil {
|
||||||
|
t.Fatal(err)
|
||||||
|
return nil, ""
|
||||||
|
}
|
||||||
|
|
||||||
|
respBody, err := io.ReadAll(io.Reader(resp.Body))
|
||||||
|
if err != nil {
|
||||||
|
t.Fatal(err)
|
||||||
|
return nil, ""
|
||||||
|
}
|
||||||
|
defer resp.Body.Close()
|
||||||
|
|
||||||
|
return resp, string(respBody)
|
||||||
}
|
}
|
||||||
|
@ -141,6 +141,15 @@ func (r *Router) ServeHTTP(w http.ResponseWriter, req *http.Request) {
|
|||||||
panic("mux: method ServeHTTP called on nil")
|
panic("mux: method ServeHTTP called on nil")
|
||||||
}
|
}
|
||||||
|
|
||||||
|
r.mux.ServeHTTP(w, req)
|
||||||
|
}
|
||||||
|
|
||||||
|
// Proxy are request and
|
||||||
|
func (r *Router) Proxy(w http.ResponseWriter, req *http.Request) {
|
||||||
|
if r == nil {
|
||||||
|
panic("mux: method ServeHTTP called on nil")
|
||||||
|
}
|
||||||
|
|
||||||
h, pattern := r.mux.Handler(req)
|
h, pattern := r.mux.Handler(req)
|
||||||
if pattern == "" {
|
if pattern == "" {
|
||||||
http.Error(w, "Not Found", http.StatusNotFound)
|
http.Error(w, "Not Found", http.StatusNotFound)
|
||||||
|
Loading…
Reference in New Issue
Block a user