Function TestServerCmd_AllowedOrigins

cmd/server/server_test.go:708–801

(t *testing.T)

}

func TestServerCmd_AllowedOrigins(t *testing.T) {
	tests := []struct {
		name        string
		env         map[string]string
		args        []string
		expectedErr string
		expected    []string // only checked if expectedErr is empty
	}{
		// Environment variable scenarios (space-separated format)
		{
			name:     "env: single valid origin",
			env:      map[string]string{"AGENTAPI_ALLOWED_ORIGINS": "https://example.com"},
			args:     []string{},
			expected: []string{"https://example.com"},
		},
		{
			name:     "env: multiple valid origins space-separated",
			env:      map[string]string{"AGENTAPI_ALLOWED_ORIGINS": "https://example.com http://localhost:3000 https://app.example.com"},
			args:     []string{},
			expected: []string{"https://example.com", "http://localhost:3000", "https://app.example.com"},
		},
		{
			name:     "env: wildcard origin",
			env:      map[string]string{"AGENTAPI_ALLOWED_ORIGINS": "*"},
			args:     []string{},
			expected: []string{"*"},
		},
		{
			name:     "env: origin with tab",
			env:      map[string]string{"AGENTAPI_ALLOWED_ORIGINS": "https://example.com\thttp://localhost:3000"},
			args:     []string{},
			expected: []string{"https://example.com", "http://localhost:3000"},
		},

		// CLI flag scenarios (comma-separated format)
		{
			name:     "flag: single valid origin",
			args:     []string{"--allowed-origins", "https://example.com"},
			expected: []string{"https://example.com"},
		},
		{
			name:     "flag: multiple valid origins comma-separated",
			args:     []string{"--allowed-origins", "https://example.com,http://localhost:3000,https://app.example.com"},
			expected: []string{"https://example.com", "http://localhost:3000", "https://app.example.com"},
		},
		{
			name:     "flag: multiple valid origins with multiple flags",
			args:     []string{"--allowed-origins", "https://example.com", "--allowed-origins", "http://localhost:3000"},
			expected: []string{"https://example.com", "http://localhost:3000"},
		},
		{
			name:     "flag: wildcard origin",
			args:     []string{"--allowed-origins", "*"},
			expected: []string{"*"},
		},
		{
			name:     "flag: origin with newline",
			args:     []string{"--allowed-origins", "https://example.com\n"},