You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@allura.apache.org by br...@apache.org on 2015/07/21 19:44:50 UTC
[2/4] allura git commit: [#7927] ticket:821 Add tests for
CORSMiddleware
[#7927] ticket:821 Add tests for CORSMiddleware
Project: http://git-wip-us.apache.org/repos/asf/allura/repo
Commit: http://git-wip-us.apache.org/repos/asf/allura/commit/6625703b
Tree: http://git-wip-us.apache.org/repos/asf/allura/tree/6625703b
Diff: http://git-wip-us.apache.org/repos/asf/allura/diff/6625703b
Branch: refs/heads/master
Commit: 6625703b123d070d813f6ddf0dce05de729e15b2
Parents: 0c71798
Author: Igor Bondarenko <je...@gmail.com>
Authored: Thu Jul 16 18:01:13 2015 +0300
Committer: Igor Bondarenko <je...@gmail.com>
Committed: Thu Jul 16 18:01:13 2015 +0300
----------------------------------------------------------------------
Allura/allura/tests/test_middlewares.py | 106 +++++++++++++++++++++++++++
1 file changed, 106 insertions(+)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/allura/blob/6625703b/Allura/allura/tests/test_middlewares.py
----------------------------------------------------------------------
diff --git a/Allura/allura/tests/test_middlewares.py b/Allura/allura/tests/test_middlewares.py
new file mode 100644
index 0000000..1ca6d8a
--- /dev/null
+++ b/Allura/allura/tests/test_middlewares.py
@@ -0,0 +1,106 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied. See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+from mock import MagicMock, patch
+from datadiff.tools import assert_equal
+from nose.tools import assert_not_equal
+from allura.lib.custom_middleware import CORSMiddleware
+
+
+class TestCORSMiddleware(object):
+
+ def setUp(self):
+ self.app = MagicMock()
+ self.allowed_methods = ['GET', 'POST', 'DELETE']
+ self.allowed_headers = ['Authorization', 'Accept']
+ self.cors = CORSMiddleware(
+ self.app,
+ self.allowed_methods,
+ self.allowed_headers)
+
+ def test_init(self):
+ cors = CORSMiddleware(self.app, ['get', 'post'], ['Some-Header'])
+ assert_equal(cors.app, self.app)
+ assert_equal(cors.allowed_methods, ['GET', 'POST'])
+ assert_equal(cors.allowed_headers, set(['some-header']))
+
+ def test_call_not_api_request(self):
+ callback = MagicMock()
+ env = {'PATH_INFO': '/p/test/'}
+ self.cors(env, callback)
+ self.app.assert_called_once_with(env, callback)
+
+ def test_call_invalid_cors(self):
+ callback = MagicMock()
+ env = {'PATH_INFO': '/rest/p/test/'}
+ self.cors(env, callback)
+ self.app.assert_called_once_with(env, callback)
+
+ def test_handle_call_simple_request(self):
+ callback = MagicMock()
+ env = {'PATH_INFO': '/rest/p/test/',
+ 'HTTP_ORIGIN': 'my.site.com',
+ 'REQUEST_METHOD': 'GET'}
+ self.cors(env, callback)
+ assert_equal(self.app.call_count, 1)
+ assert_equal(self.app.call_args_list[0][0][0], env)
+ assert_not_equal(self.app.call_args_list[0][0][1], callback)
+
+ @patch('allura.lib.custom_middleware.exc', autospec=True)
+ def test_handle_call_preflight_request(self, exc):
+ callback = MagicMock()
+ env = {'PATH_INFO': '/rest/p/test/',
+ 'HTTP_ORIGIN': 'my.site.com',
+ 'REQUEST_METHOD': 'OPTIONS',
+ 'HTTP_ACCESS_CONTROL_REQUEST_METHOD': 'POST'}
+ self.cors(env, callback)
+ assert_equal(self.app.call_count, 0)
+ exc.HTTPOk.assert_called_once_with(headers=[
+ ('Access-Control-Allow-Origin', '*'),
+ ('Access-Control-Allow-Methods', 'GET, POST, DELETE'),
+ ('Access-Control-Allow-Headers', 'accept, authorization')
+ ])
+ exc.HTTPOk.return_value.assert_called_once_with(env, callback)
+
+ def test_get_response_headers_simple(self):
+ assert_equal(self.cors.get_response_headers(),
+ [('Access-Control-Allow-Origin', '*')])
+ assert_equal(self.cors.get_response_headers(preflight=False),
+ [('Access-Control-Allow-Origin', '*')])
+
+ def test_get_response_headers_preflight(self):
+ assert_equal(
+ self.cors.get_response_headers(preflight=True),
+ [('Access-Control-Allow-Origin', '*'),
+ ('Access-Control-Allow-Methods', 'GET, POST, DELETE'),
+ ('Access-Control-Allow-Headers', 'accept, authorization')])
+
+ def test_get_response_headers_preflight_with_cache(self):
+ cors = CORSMiddleware(self.app, ['GET', 'PUT'], ['Accept'], 86400)
+ assert_equal(cors.get_response_headers(preflight=True),
+ [('Access-Control-Allow-Origin', '*'),
+ ('Access-Control-Allow-Methods', 'GET, PUT'),
+ ('Access-Control-Allow-Headers', 'accept'),
+ ('Access-Control-Max-Age', 86400)])
+
+ def test_get_access_control_request_headers(self):
+ key = 'HTTP_ACCESS_CONTROL_REQUEST_HEADERS'
+ f = self.cors.get_access_control_request_headers
+ assert_equal(f({}), set())
+ assert_equal(f({key: ''}), set())
+ assert_equal(f({key: 'Authorization, Accept'}),
+ set(['authorization', 'accept']))