mirror of
https://github.com/pomerium/pomerium.git
synced 2025-04-29 18:36:30 +02:00
31205c0c29
Validate signature middleware must be applied for the callback sub-router, not the whole dashboard router. Fixes #1297
105 lines
2.7 KiB
Go
105 lines
2.7 KiB
Go
package main
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"net/http"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
func TestDashboard(t *testing.T) {
|
|
ctx := mainCtx
|
|
ctx, clearTimeout := context.WithTimeout(ctx, time.Second*30)
|
|
defer clearTimeout()
|
|
|
|
t.Run("user dashboard", func(t *testing.T) {
|
|
client := testcluster.NewHTTPClient()
|
|
|
|
req, err := http.NewRequestWithContext(ctx, "GET", "https://httpdetails.localhost.pomerium.io/.pomerium", nil)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
res, err := client.Do(req)
|
|
if !assert.NoError(t, err, "unexpected http error") {
|
|
return
|
|
}
|
|
defer res.Body.Close()
|
|
|
|
assert.Equal(t, http.StatusFound, res.StatusCode, "unexpected status code")
|
|
})
|
|
t.Run("image asset", func(t *testing.T) {
|
|
client := testcluster.NewHTTPClient()
|
|
|
|
req, err := http.NewRequestWithContext(ctx, "GET", "https://httpdetails.localhost.pomerium.io/.pomerium/assets/img/pomerium.svg", nil)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
res, err := client.Do(req)
|
|
if !assert.NoError(t, err, "unexpected http error") {
|
|
return
|
|
}
|
|
defer res.Body.Close()
|
|
|
|
assert.Equal(t, http.StatusOK, res.StatusCode, "unexpected status code")
|
|
assert.Equal(t, "image/svg+xml", res.Header.Get("Content-Type"))
|
|
})
|
|
t.Run("forward auth image asset", func(t *testing.T) {
|
|
client := testcluster.NewHTTPClient()
|
|
|
|
req, err := http.NewRequestWithContext(ctx, "GET", "https://fa-httpdetails.localhost.pomerium.io/.pomerium/assets/img/pomerium.svg", nil)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
res, err := client.Do(req)
|
|
if !assert.NoError(t, err, "unexpected http error") {
|
|
return
|
|
}
|
|
defer res.Body.Close()
|
|
|
|
assert.Equal(t, http.StatusOK, res.StatusCode, "unexpected status code")
|
|
assert.Equal(t, "image/svg+xml", res.Header.Get("Content-Type"))
|
|
})
|
|
}
|
|
|
|
func TestHealth(t *testing.T) {
|
|
ctx := mainCtx
|
|
ctx, clearTimeout := context.WithTimeout(ctx, time.Second*30)
|
|
defer clearTimeout()
|
|
pomeriumRoutes := []string{
|
|
"https://authenticate.localhost.pomerium.io",
|
|
"https://forward-authenticate.localhost.pomerium.io",
|
|
"https://httpdetails.localhost.pomerium.io",
|
|
"https://restricted-httpdetails.localhost.pomerium.io",
|
|
}
|
|
endpoints := []string{"healthz", "ping"}
|
|
|
|
for _, route := range pomeriumRoutes {
|
|
route := route
|
|
for _, endpoint := range endpoints {
|
|
endpoint := endpoint
|
|
routeToCheck := fmt.Sprintf("%s/%s", route, endpoint)
|
|
t.Run(routeToCheck, func(t *testing.T) {
|
|
client := testcluster.NewHTTPClient()
|
|
req, err := http.NewRequestWithContext(ctx, "GET", routeToCheck, nil)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
res, err := client.Do(req)
|
|
if !assert.NoError(t, err, "unexpected http error") {
|
|
return
|
|
}
|
|
defer res.Body.Close()
|
|
|
|
assert.Equal(t, http.StatusOK, res.StatusCode, "unexpected status code")
|
|
})
|
|
}
|
|
}
|
|
|
|
}
|