mirror of
https://github.com/pomerium/pomerium.git
synced 2025-05-04 04:46:01 +02:00
7558d5b0de
- authorize: build whitelist from policy's URLs instead of strings. - internal/httputil: merged httputil and https package. - internal/config: merged config and policy packages. - internal/metrics: removed unused measure struct. - proxy/clients: refactor Addr fields to be urls. - proxy: remove unused extend deadline function. - proxy: use handler middleware for reverse proxy leg. - proxy: change the way websocket requests are made (route based). General improvements - omitted value from range in several cases where for loop could be simplified. - added error checking to many tests. - standardize url parsing. - remove unnecessary return statements. - proxy: add self-signed certificate support. #179 - proxy: add skip tls certificate verification. #179 - proxy: Refactor websocket support to be route based. #204
43 lines
1.4 KiB
Go
43 lines
1.4 KiB
Go
package config // import "github.com/pomerium/pomerium/internal/config"
|
|
|
|
import (
|
|
"testing"
|
|
)
|
|
|
|
func Test_Validate(t *testing.T) {
|
|
t.Parallel()
|
|
basePolicy := Policy{From: "https://httpbin.corp.example", To: "https://httpbin.corp.notatld"}
|
|
|
|
corsPolicy := basePolicy
|
|
corsPolicy.CORSAllowPreflight = true
|
|
|
|
publicPolicy := basePolicy
|
|
publicPolicy.AllowPublicUnauthenticatedAccess = true
|
|
|
|
publicAndWhitelistPolicy := publicPolicy
|
|
publicAndWhitelistPolicy.AllowedEmails = []string{"test@gmail.com"}
|
|
|
|
tests := []struct {
|
|
name string
|
|
policy Policy
|
|
wantErr bool
|
|
}{
|
|
{"good", basePolicy, false},
|
|
{"empty to host", Policy{From: "https://httpbin.corp.example", To: "https://"}, true},
|
|
{"empty from host", Policy{From: "https://", To: "https://httpbin.corp.example"}, true},
|
|
{"empty from scheme", Policy{From: "httpbin.corp.example", To: "https://httpbin.corp.example"}, true},
|
|
{"empty to scheme", Policy{From: "https://httpbin.corp.example", To: "//httpbin.corp.example"}, true},
|
|
{"cors policy", corsPolicy, false},
|
|
{"public policy", publicPolicy, false},
|
|
{"public and whitelist", publicAndWhitelistPolicy, true},
|
|
{"route must have", publicAndWhitelistPolicy, true},
|
|
}
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
err := tt.policy.Validate()
|
|
if (err != nil) != tt.wantErr {
|
|
t.Errorf("Validate() error = %v, want %v", err, tt.wantErr)
|
|
}
|
|
})
|
|
}
|
|
}
|