(t *testing.T)
| 439 | } |
| 440 | |
| 441 | func TestCSRFWithSameSiteModeNone(t *testing.T) { |
| 442 | e := echo.New() |
| 443 | req := httptest.NewRequest(http.MethodGet, "/", nil) |
| 444 | rec := httptest.NewRecorder() |
| 445 | c := e.NewContext(req, rec) |
| 446 | |
| 447 | csrf, err := CSRFConfig{ |
| 448 | CookieSameSite: http.SameSiteNoneMode, |
| 449 | }.ToMiddleware() |
| 450 | assert.NoError(t, err) |
| 451 | |
| 452 | h := csrf(func(c *echo.Context) error { |
| 453 | return c.String(http.StatusOK, "test") |
| 454 | }) |
| 455 | |
| 456 | r := h(c) |
| 457 | assert.NoError(t, r) |
| 458 | assert.Regexp(t, "SameSite=None", rec.Header()["Set-Cookie"]) |
| 459 | assert.Regexp(t, "Secure", rec.Header()["Set-Cookie"]) |
| 460 | } |
| 461 | |
| 462 | func TestCSRFConfig_skipper(t *testing.T) { |
| 463 | var testCases = []struct { |
nothing calls this directly
no test coverage detected
searching dependent graphs…