Function TestCORSHeaderRegex

router/router_test.go:242–269

(t *testing.T)

}

func TestCORSHeaderRegex(t *testing.T) {
	mode.Set(mode.Prod)
	db := testdb.NewDBWithDefaultUser(t)
	defer db.Close()

	config := config.Configuration{PassStrength: 5}
	config.Server.Cors.AllowOrigins = []string{"---", "^http://test\\d{3}.com$"}

	g, closable := Create(db.GormDatabase,
		&model.VersionInfo{Version: "1.0.0", BuildDate: "2018-02-20-17:30:47", Commit: "asdasds"},
		&config,
	)
	server := httptest.NewServer(g)

	defer func() {
		closable()
		server.Close()
	}()

	req, err := http.NewRequest("GET", fmt.Sprintf("%s/%s", server.URL, "version"), nil)
	req.Header.Add("Content-Type", "application/json")
	req.Header.Add("Origin", "http://test123.com")
	assert.Nil(t, err)

	res, err := client.Do(req)
	assert.Nil(t, err)
	assert.Equal(t, "http://test123.com", res.Header.Get("Access-Control-Allow-Origin"))
}

// We want headers in cors config to override the responseheaders config.
func TestCORSConfigOverride(t *testing.T) {