|
|
|
'use strict';
|
|
|
|
|
|
|
|
var assert = require('assert');
|
|
|
|
var async = require('async');
|
|
|
|
var request = require('request');
|
|
|
|
var nconf = require('nconf');
|
|
|
|
|
|
|
|
var db = require('./mocks/databasemock');
|
|
|
|
var meta = require('../src/meta');
|
|
|
|
var User = require('../src/user');
|
|
|
|
var Groups = require('../src/groups');
|
|
|
|
|
|
|
|
describe('meta', function () {
|
|
|
|
var fooUid;
|
|
|
|
var bazUid;
|
|
|
|
var herpUid;
|
|
|
|
|
|
|
|
before(function (done) {
|
|
|
|
Groups.resetCache();
|
|
|
|
// Create 3 users: 1 admin, 2 regular
|
|
|
|
async.series([
|
|
|
|
async.apply(User.create, { username: 'foo', password: 'barbar' }), // admin
|
|
|
|
async.apply(User.create, { username: 'baz', password: 'quuxquux' }), // restricted user
|
|
|
|
async.apply(User.create, { username: 'herp', password: 'derpderp' }), // regular user
|
|
|
|
], function (err, uids) {
|
|
|
|
if (err) {
|
|
|
|
return done(err);
|
|
|
|
}
|
|
|
|
|
|
|
|
fooUid = uids[0];
|
|
|
|
bazUid = uids[1];
|
|
|
|
herpUid = uids[2];
|
|
|
|
|
|
|
|
Groups.join('administrators', fooUid, done);
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
describe('settings', function () {
|
|
|
|
var socketAdmin = require('../src/socket.io/admin');
|
|
|
|
it('it should set setting', function (done) {
|
|
|
|
socketAdmin.settings.set({ uid: fooUid }, { hash: 'some:hash', values: { foo: '1', derp: 'value' } }, function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
db.getObject('settings:some:hash', function (err, data) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.equal(data.foo, '1');
|
|
|
|
assert.equal(data.derp, 'value');
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('it should get setting', function (done) {
|
|
|
|
socketAdmin.settings.get({ uid: fooUid }, { hash: 'some:hash' }, function (err, data) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.equal(data.foo, '1');
|
|
|
|
assert.equal(data.derp, 'value');
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should not set setting if not empty', function (done) {
|
|
|
|
meta.settings.setOnEmpty('some:hash', { foo: 2 }, function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
db.getObject('settings:some:hash', function (err, data) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.equal(data.foo, '1');
|
|
|
|
assert.equal(data.derp, 'value');
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should set setting if empty', function (done) {
|
|
|
|
meta.settings.setOnEmpty('some:hash', { empty: '2' }, function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
db.getObject('settings:some:hash', function (err, data) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.equal(data.foo, '1');
|
|
|
|
assert.equal(data.derp, 'value');
|
|
|
|
assert.equal(data.empty, '2');
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should set one and get one', function (done) {
|
|
|
|
meta.settings.setOne('some:hash', 'myField', 'myValue', function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
meta.settings.getOne('some:hash', 'myField', function (err, myValue) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.equal(myValue, 'myValue');
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
const someList = [
|
|
|
|
{ name: 'andrew', status: 'best' },
|
|
|
|
{ name: 'baris', status: 'wurst' },
|
|
|
|
];
|
|
|
|
const anotherList = [];
|
|
|
|
|
|
|
|
it('should set setting with sorted list', function (done) {
|
|
|
|
socketAdmin.settings.set({ uid: fooUid }, { hash: 'another:hash', values: { foo: '1', derp: 'value', someList: someList, anotherList: anotherList } }, function (err) {
|
|
|
|
if (err) {
|
|
|
|
return done(err);
|
|
|
|
}
|
|
|
|
|
|
|
|
db.getObject('settings:another:hash', function (err, data) {
|
|
|
|
if (err) {
|
|
|
|
return done(err);
|
|
|
|
}
|
|
|
|
|
|
|
|
assert.equal(data.foo, '1');
|
|
|
|
assert.equal(data.derp, 'value');
|
|
|
|
assert.equal(data.someList, undefined);
|
|
|
|
assert.equal(data.anotherList, undefined);
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should get setting with sorted list', function (done) {
|
|
|
|
socketAdmin.settings.get({ uid: fooUid }, { hash: 'another:hash' }, function (err, data) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.equal(data.foo, '1');
|
|
|
|
assert.equal(data.derp, 'value');
|
|
|
|
assert.deepEqual(data.someList, someList);
|
|
|
|
assert.deepEqual(data.anotherList, anotherList);
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should not set setting if not empty', function (done) {
|
|
|
|
meta.settings.setOnEmpty('some:hash', { foo: 2 }, function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
db.getObject('settings:some:hash', function (err, data) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.equal(data.foo, '1');
|
|
|
|
assert.equal(data.derp, 'value');
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should not set setting with sorted list if not empty', function (done) {
|
|
|
|
meta.settings.setOnEmpty('another:hash', { foo: anotherList }, function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
socketAdmin.settings.get({ uid: fooUid }, { hash: 'another:hash' }, function (err, data) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.equal(data.foo, '1');
|
|
|
|
assert.equal(data.derp, 'value');
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should set setting with sorted list if empty', function (done) {
|
|
|
|
meta.settings.setOnEmpty('another:hash', { empty: someList }, function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
socketAdmin.settings.get({ uid: fooUid }, { hash: 'another:hash' }, function (err, data) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.equal(data.foo, '1');
|
|
|
|
assert.equal(data.derp, 'value');
|
|
|
|
assert.deepEqual(data.empty, someList);
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should set one and get one sorted list', function (done) {
|
|
|
|
meta.settings.setOne('another:hash', 'someList', someList, function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
meta.settings.getOne('another:hash', 'someList', function (err, _someList) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.deepEqual(_someList, someList);
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
|
|
describe('config', function () {
|
|
|
|
var socketAdmin = require('../src/socket.io/admin');
|
|
|
|
before(function (done) {
|
|
|
|
db.setObject('config', { minimumTagLength: 3, maximumTagLength: 15 }, done);
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should get config fields', function (done) {
|
|
|
|
meta.configs.getFields(['minimumTagLength', 'maximumTagLength'], function (err, data) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.strictEqual(data.minimumTagLength, 3);
|
|
|
|
assert.strictEqual(data.maximumTagLength, 15);
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should get the correct type and default value', function (done) {
|
|
|
|
meta.configs.set('loginAttempts', '', function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
meta.configs.get('loginAttempts', function (err, value) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.strictEqual(value, 5);
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should get the correct type and correct value', function (done) {
|
|
|
|
meta.configs.set('loginAttempts', '0', function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
meta.configs.get('loginAttempts', function (err, value) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.strictEqual(value, 0);
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should get the correct value', function (done) {
|
|
|
|
meta.configs.set('title', 123, function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
meta.configs.get('title', function (err, value) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.strictEqual(value, '123');
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should get the correct value', function (done) {
|
|
|
|
meta.configs.set('title', 0, function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
meta.configs.get('title', function (err, value) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.strictEqual(value, '0');
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should get the correct value', function (done) {
|
|
|
|
meta.configs.set('title', '', function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
meta.configs.get('title', function (err, value) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.strictEqual(value, '');
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should use default value if value is null', function (done) {
|
|
|
|
meta.configs.set('teaserPost', null, function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
meta.configs.get('teaserPost', function (err, value) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.strictEqual(value, 'last-reply');
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should fail if field is invalid', function (done) {
|
|
|
|
meta.configs.set('', 'someValue', function (err) {
|
|
|
|
assert.equal(err.message, '[[error:invalid-data]]');
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should fail if data is invalid', function (done) {
|
|
|
|
socketAdmin.config.set({ uid: fooUid }, null, function (err) {
|
|
|
|
assert.equal(err.message, '[[error:invalid-data]]');
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should set multiple config values', function (done) {
|
|
|
|
socketAdmin.config.set({ uid: fooUid }, { key: 'someKey', value: 'someValue' }, function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
meta.configs.getFields(['someKey'], function (err, data) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.equal(data.someKey, 'someValue');
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should set config value', function (done) {
|
|
|
|
meta.configs.set('someField', 'someValue', function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
meta.configs.getFields(['someField'], function (err, data) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.strictEqual(data.someField, 'someValue');
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should get back string if field is not in defaults', function (done) {
|
|
|
|
meta.configs.set('numericField', 123, function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
meta.configs.getFields(['numericField'], function (err, data) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.strictEqual(data.numericField, 123);
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should set boolean config value', function (done) {
|
|
|
|
meta.configs.set('booleanField', true, function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
meta.configs.getFields(['booleanField'], function (err, data) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.strictEqual(data.booleanField, true);
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should set boolean config value', function (done) {
|
|
|
|
meta.configs.set('booleanField', 'false', function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
meta.configs.getFields(['booleanField'], function (err, data) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.strictEqual(data.booleanField, false);
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should set string config value', function (done) {
|
|
|
|
meta.configs.set('stringField', '123', function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
meta.configs.getFields(['stringField'], function (err, data) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.strictEqual(data.stringField, 123);
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should fail if data is invalid', function (done) {
|
|
|
|
socketAdmin.config.setMultiple({ uid: fooUid }, null, function (err) {
|
|
|
|
assert.equal(err.message, '[[error:invalid-data]]');
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should set multiple values', function (done) {
|
|
|
|
socketAdmin.config.setMultiple({ uid: fooUid }, {
|
|
|
|
someField1: 'someValue1',
|
|
|
|
someField2: 'someValue2',
|
|
|
|
customCSS: '.derp{color:#00ff00;}',
|
|
|
|
}, function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
meta.configs.getFields(['someField1', 'someField2'], function (err, data) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.equal(data.someField1, 'someValue1');
|
|
|
|
assert.equal(data.someField2, 'someValue2');
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should not set config if not empty', function (done) {
|
|
|
|
meta.configs.setOnEmpty({ someField1: 'foo' }, function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
meta.configs.get('someField1', function (err, value) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.equal(value, 'someValue1');
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should remove config field', function (done) {
|
|
|
|
socketAdmin.config.remove({ uid: fooUid }, 'someField1', function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
db.isObjectField('config', 'someField1', function (err, isObjectField) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert(!isObjectField);
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
|
|
describe('session TTL', function () {
|
|
|
|
it('should return 14 days in seconds', function (done) {
|
|
|
|
assert(meta.getSessionTTLSeconds(), 1209600);
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should return 7 days in seconds', function (done) {
|
|
|
|
meta.config.loginDays = 7;
|
|
|
|
assert(meta.getSessionTTLSeconds(), 604800);
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should return 2 days in seconds', function (done) {
|
|
|
|
meta.config.loginSeconds = 172800;
|
|
|
|
assert(meta.getSessionTTLSeconds(), 172800);
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
describe('dependencies', function () {
|
|
|
|
it('should return ENOENT if module is not found', function (done) {
|
|
|
|
meta.dependencies.checkModule('some-module-that-does-not-exist', function (err) {
|
|
|
|
assert.equal(err.code, 'ENOENT');
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should not error if module is a nodebb-plugin-*', function (done) {
|
|
|
|
meta.dependencies.checkModule('nodebb-plugin-somePlugin', function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should not error if module is nodebb-theme-*', function (done) {
|
|
|
|
meta.dependencies.checkModule('nodebb-theme-someTheme', function (err) {
|
|
|
|
assert.ifError(err);
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should parse json package data', function (done) {
|
|
|
|
var pkgData = meta.dependencies.parseModuleData('nodebb-plugin-test', '{"a": 1}');
|
|
|
|
assert.equal(pkgData.a, 1);
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should return null data with invalid json', function (done) {
|
|
|
|
var pkgData = meta.dependencies.parseModuleData('nodebb-plugin-test', 'asdasd');
|
|
|
|
assert.strictEqual(pkgData, null);
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should return false if moduleData is falsy', function (done) {
|
|
|
|
assert(!meta.dependencies.doesSatisfy(null, '1.0.0'));
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should return false if moduleData doesnt not satisfy package.json', function (done) {
|
|
|
|
assert(!meta.dependencies.doesSatisfy({ name: 'nodebb-plugin-test', version: '0.9.0' }, '1.0.0'));
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should return true if _resolved is from github', function (done) {
|
|
|
|
assert(meta.dependencies.doesSatisfy({ name: 'nodebb-plugin-test', _resolved: 'https://github.com/some/repo', version: '0.9.0' }, '1.0.0'));
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
|
|
describe('sounds', function () {
|
|
|
|
var socketModules = require('../src/socket.io/modules');
|
|
|
|
|
|
|
|
it('should getUserMap', function (done) {
|
|
|
|
socketModules.sounds.getUserSoundMap({ uid: 1 }, null, function (err, data) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert(data.hasOwnProperty('chat-incoming'));
|
|
|
|
assert(data.hasOwnProperty('chat-outgoing'));
|
|
|
|
assert(data.hasOwnProperty('notification'));
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
describe('debugFork', function () {
|
|
|
|
var oldArgv;
|
|
|
|
before(function () {
|
|
|
|
oldArgv = process.execArgv;
|
|
|
|
process.execArgv = ['--debug=5858', '--foo=1'];
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should detect debugging', function (done) {
|
|
|
|
var debugFork = require('../src/meta/debugFork');
|
|
|
|
assert(!debugFork.debugging);
|
|
|
|
|
|
|
|
var debugForkPath = require.resolve('../src/meta/debugFork');
|
|
|
|
delete require.cache[debugForkPath];
|
|
|
|
|
|
|
|
debugFork = require('../src/meta/debugFork');
|
|
|
|
assert(debugFork.debugging);
|
|
|
|
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
|
|
|
|
after(function () {
|
|
|
|
process.execArgv = oldArgv;
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
describe('Access-Control-Allow-Origin', function () {
|
|
|
|
it('Access-Control-Allow-Origin header should be empty', function (done) {
|
|
|
|
var jar = request.jar();
|
|
|
|
request.get(nconf.get('url') + '/api/search?term=bug', {
|
|
|
|
form: {},
|
|
|
|
json: true,
|
|
|
|
jar: jar,
|
|
|
|
}, function (err, response, body) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.equal(response.headers['access-control-allow-origin'], undefined);
|
|
|
|
done();
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should set proper Access-Control-Allow-Origin header', function (done) {
|
|
|
|
var jar = request.jar();
|
|
|
|
var oldValue = meta.config['access-control-allow-origin'];
|
|
|
|
meta.config['access-control-allow-origin'] = 'test.com, mydomain.com';
|
|
|
|
request.get(nconf.get('url') + '/api/search?term=bug', {
|
|
|
|
form: {
|
|
|
|
},
|
|
|
|
json: true,
|
|
|
|
jar: jar,
|
|
|
|
headers: {
|
|
|
|
origin: 'mydomain.com',
|
|
|
|
},
|
|
|
|
}, function (err, response, body) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.equal(response.headers['access-control-allow-origin'], 'mydomain.com');
|
|
|
|
meta.config['access-control-allow-origin'] = oldValue;
|
|
|
|
done(err);
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('Access-Control-Allow-Origin header should be empty if origin does not match', function (done) {
|
|
|
|
var jar = request.jar();
|
|
|
|
var oldValue = meta.config['access-control-allow-origin'];
|
|
|
|
meta.config['access-control-allow-origin'] = 'test.com, mydomain.com';
|
|
|
|
request.get(nconf.get('url') + '/api/search?term=bug', {
|
|
|
|
form: {
|
|
|
|
},
|
|
|
|
json: true,
|
|
|
|
jar: jar,
|
|
|
|
headers: {
|
|
|
|
origin: 'notallowed.com',
|
|
|
|
},
|
|
|
|
}, function (err, response, body) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.equal(response.headers['access-control-allow-origin'], undefined);
|
|
|
|
meta.config['access-control-allow-origin'] = oldValue;
|
|
|
|
done(err);
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should set proper Access-Control-Allow-Origin header', function (done) {
|
|
|
|
var jar = request.jar();
|
|
|
|
var oldValue = meta.config['access-control-allow-origin-regex'];
|
|
|
|
meta.config['access-control-allow-origin-regex'] = 'match\\.this\\..+\\.domain.com, mydomain\\.com';
|
|
|
|
request.get(nconf.get('url') + '/api/search?term=bug', {
|
|
|
|
form: {
|
|
|
|
},
|
|
|
|
json: true,
|
|
|
|
jar: jar,
|
|
|
|
headers: {
|
|
|
|
origin: 'match.this.anything123.domain.com',
|
|
|
|
},
|
|
|
|
}, function (err, response, body) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.equal(response.headers['access-control-allow-origin'], 'match.this.anything123.domain.com');
|
|
|
|
meta.config['access-control-allow-origin-regex'] = oldValue;
|
|
|
|
done(err);
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('Access-Control-Allow-Origin header should be empty if origin does not match', function (done) {
|
|
|
|
var jar = request.jar();
|
|
|
|
var oldValue = meta.config['access-control-allow-origin-regex'];
|
|
|
|
meta.config['access-control-allow-origin-regex'] = 'match\\.this\\..+\\.domain.com, mydomain\\.com';
|
|
|
|
request.get(nconf.get('url') + '/api/search?term=bug', {
|
|
|
|
form: {
|
|
|
|
},
|
|
|
|
json: true,
|
|
|
|
jar: jar,
|
|
|
|
headers: {
|
|
|
|
origin: 'notallowed.com',
|
|
|
|
},
|
|
|
|
}, function (err, response, body) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.equal(response.headers['access-control-allow-origin'], undefined);
|
|
|
|
meta.config['access-control-allow-origin-regex'] = oldValue;
|
|
|
|
done(err);
|
|
|
|
});
|
|
|
|
});
|
|
|
|
|
|
|
|
it('should not error with invalid regexp', function (done) {
|
|
|
|
var jar = request.jar();
|
|
|
|
var oldValue = meta.config['access-control-allow-origin-regex'];
|
|
|
|
meta.config['access-control-allow-origin-regex'] = '[match\\.this\\..+\\.domain.com, mydomain\\.com';
|
|
|
|
request.get(nconf.get('url') + '/api/search?term=bug', {
|
|
|
|
form: {
|
|
|
|
},
|
|
|
|
json: true,
|
|
|
|
jar: jar,
|
|
|
|
headers: {
|
|
|
|
origin: 'mydomain.com',
|
|
|
|
},
|
|
|
|
}, function (err, response, body) {
|
|
|
|
assert.ifError(err);
|
|
|
|
assert.equal(response.headers['access-control-allow-origin'], 'mydomain.com');
|
|
|
|
meta.config['access-control-allow-origin-regex'] = oldValue;
|
|
|
|
done(err);
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|
|
|
|
});
|