多租户更改
This commit is contained in:
richjohnrambo
@@ -0,0 +1,221 @@
|
||||
package media
|
||||
|
||||
import (
|
||||
"strings"
|
||||
"testing"
|
||||
)
|
||||
|
||||
func TestMatchCORSOrigin(t *testing.T) {
|
||||
cases := []struct {
|
||||
allowed []string
|
||||
origin string
|
||||
expected string
|
||||
expectError bool
|
||||
errorMessage string
|
||||
}{
|
||||
{
|
||||
allowed: []string{"https://example.com"},
|
||||
origin: "https://example.com",
|
||||
expected: "https://example.com",
|
||||
},
|
||||
{
|
||||
allowed: []string{"https://example2.com", "https://example.com"},
|
||||
origin: "https://example.com",
|
||||
expected: "https://example.com",
|
||||
},
|
||||
{
|
||||
allowed: []string{"*"},
|
||||
origin: "https://example.com",
|
||||
expected: "https://example.com",
|
||||
},
|
||||
{
|
||||
allowed: []string{""},
|
||||
origin: "https://example.com",
|
||||
expected: "",
|
||||
},
|
||||
{
|
||||
allowed: []string{},
|
||||
origin: "",
|
||||
expected: "",
|
||||
},
|
||||
{
|
||||
allowed: []string{"https://example.com"},
|
||||
origin: "",
|
||||
expected: "",
|
||||
},
|
||||
{
|
||||
allowed: []string{},
|
||||
origin: "https://example.com",
|
||||
expected: "",
|
||||
},
|
||||
{
|
||||
allowed: []string{"http://example.com"},
|
||||
origin: "https://example.com",
|
||||
expected: "",
|
||||
},
|
||||
{
|
||||
allowed: []string{"https://example.com"},
|
||||
origin: "http://example.com",
|
||||
expected: "",
|
||||
},
|
||||
{
|
||||
allowed: []string{"http://example.com:8000"},
|
||||
origin: "http://example.com:8000",
|
||||
expected: "http://example.com:8000",
|
||||
},
|
||||
{
|
||||
allowed: []string{"http://localhost:8090"},
|
||||
origin: "http://localhost:8090",
|
||||
expected: "http://localhost:8090",
|
||||
},
|
||||
{
|
||||
allowed: []string{"http://localhost:8090"},
|
||||
origin: "http://localhost:8080",
|
||||
expected: "",
|
||||
},
|
||||
{
|
||||
allowed: []string{"https://example.com"},
|
||||
origin: "https://sub.example.com",
|
||||
expected: "",
|
||||
},
|
||||
{
|
||||
allowed: []string{"https://*.example.com"},
|
||||
origin: "https://sub.example.com",
|
||||
expected: "https://sub.example.com",
|
||||
},
|
||||
{
|
||||
allowed: []string{"https://*.example.com"},
|
||||
origin: "https://pre.sub.example.com",
|
||||
expected: "",
|
||||
},
|
||||
{
|
||||
allowed: []string{"https://*.example.com", "https://*.sub.example.com"},
|
||||
origin: "https://pre.sub.example.com",
|
||||
expected: "https://pre.sub.example.com",
|
||||
},
|
||||
{
|
||||
allowed: []string{"https://*.*.example.com"},
|
||||
origin: "https://pre.sub.example.com",
|
||||
expected: "https://pre.sub.example.com",
|
||||
},
|
||||
{
|
||||
allowed: []string{"https://*.sub.example.com"},
|
||||
origin: "https://pre.asd.example.com",
|
||||
expected: "",
|
||||
},
|
||||
{
|
||||
allowed: []string{"https://pre.*.example.com"},
|
||||
origin: "https://pre.sub.example.com",
|
||||
expected: "https://pre.sub.example.com",
|
||||
},
|
||||
{
|
||||
allowed: []string{"https://*.*.*.example.com"},
|
||||
origin: "https://www.pre.sub.example.com",
|
||||
expected: "https://www.pre.sub.example.com",
|
||||
},
|
||||
{
|
||||
allowed: []string{"*"},
|
||||
origin: "",
|
||||
expected: "*", // Should allow any origin, including empty
|
||||
},
|
||||
// Error cases - these should fail during ParseCORSAllow
|
||||
{
|
||||
allowed: []string{"*", "https://example.com"},
|
||||
origin: "https://example.com",
|
||||
expectError: true,
|
||||
errorMessage: "wildcard origin '*' must be the only entry",
|
||||
},
|
||||
{
|
||||
allowed: []string{"not-a-valid-url"},
|
||||
origin: "https://example.com",
|
||||
expectError: true,
|
||||
errorMessage: "invalid URI for request",
|
||||
},
|
||||
{
|
||||
allowed: []string{"://invalid-url"},
|
||||
origin: "https://example.com",
|
||||
expectError: true,
|
||||
errorMessage: "missing protocol scheme",
|
||||
},
|
||||
{
|
||||
allowed: []string{"https://", "example.com"},
|
||||
origin: "https://example.com",
|
||||
expectError: true,
|
||||
errorMessage: "invalid URI for request",
|
||||
},
|
||||
// Valid cases that should not error
|
||||
{
|
||||
allowed: []string{"", "https://example.com"},
|
||||
origin: "https://example.com",
|
||||
expectError: true,
|
||||
errorMessage: "empty allowed origin '' must be the only entry", // Empty string should make all origins disallowed
|
||||
},
|
||||
{
|
||||
allowed: []string{"https://Example.com"},
|
||||
origin: "https://example.com",
|
||||
expected: "", // Should not match due to case sensitivity
|
||||
},
|
||||
{
|
||||
allowed: []string{"https://example.com/"},
|
||||
origin: "https://example.com",
|
||||
expected: "", // Should not match due to trailing slash
|
||||
},
|
||||
{
|
||||
allowed: []string{"https://example.com"},
|
||||
origin: "not-a-valid-url",
|
||||
expected: "", // Should handle malformed origin gracefully
|
||||
},
|
||||
{
|
||||
allowed: []string{"https://example.*.com"},
|
||||
origin: "https://example.sub.com",
|
||||
expected: "https://example.sub.com",
|
||||
},
|
||||
{
|
||||
allowed: []string{"https://*.com"},
|
||||
origin: "https://example.com",
|
||||
expected: "https://example.com",
|
||||
},
|
||||
{
|
||||
allowed: []string{"http://*.example.com"},
|
||||
origin: "https://sub.example.com",
|
||||
expected: "", // Should not match due to protocol difference
|
||||
},
|
||||
{
|
||||
allowed: []string{"https://example.com", "https://example.com"},
|
||||
origin: "https://example.com",
|
||||
expected: "https://example.com", // Should still work with duplicates
|
||||
},
|
||||
}
|
||||
|
||||
for i, tc := range cases {
|
||||
allowedOrigins, err := ParseCORSAllow(tc.allowed)
|
||||
|
||||
if tc.expectError {
|
||||
if err == nil {
|
||||
t.Errorf("Test case %d: Expected error but got none. Allowed: %v", i, tc.allowed)
|
||||
continue
|
||||
}
|
||||
if tc.errorMessage != "" && !containsSubstring(err.Error(), tc.errorMessage) {
|
||||
t.Errorf("Test case %d: Expected error containing '%s', got '%s'", i, tc.errorMessage, err.Error())
|
||||
}
|
||||
// For error cases, we don't test the matching logic
|
||||
continue
|
||||
}
|
||||
|
||||
if err != nil {
|
||||
t.Errorf("Test case %d: Unexpected error parsing allowed origins: %v. Allowed: %v", i, err, tc.allowed)
|
||||
continue
|
||||
}
|
||||
|
||||
result := matchCORSOrigin(allowedOrigins, tc.origin)
|
||||
if result != tc.expected {
|
||||
t.Errorf("Test case %d: Match CORS origin got wrong result. Expected '%s', got '%s'. Allowed: %v, Origin: '%s'",
|
||||
i, tc.expected, result, tc.allowed, tc.origin)
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// Helper function to check if a string contains a substring (case-insensitive)
|
||||
func containsSubstring(str, substr string) bool {
|
||||
return strings.Contains(strings.ToLower(str), strings.ToLower(substr))
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user